Data Controller Information

1. Introduction

VELANTEC PTE. LTD. ("we", "us", "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the MR Assistant AI platform ("Service").

This Privacy Policy complies with the Singapore Personal Data Protection Act 2012 ("PDPA") and other applicable data protection laws.

2. Scope and Consent

By using the Service, you consent to the collection, use, and disclosure of your personal data as described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Service.

This Privacy Policy applies only to information collected through the Service and does not apply to information collected offline or through other means.

3. Information We Collect

3.1 Information You Provide Directly

Account Registration Information:

• Full name
• Email address
• Professional credentials (medical license number, specialty, etc.)
• Institution or practice name
• Country and region
• Professional contact information
• Password (encrypted)

Profile Information:

• Professional bio
• Areas of medical interest
• Preferred language
• Communication preferences

Payment Information:

• Billing name and address
• Payment card details (processed by third-party payment processors)
• Transaction history

Communications:

• Messages sent through the Service
• Support inquiries and correspondence
• Feedback and survey responses

3.2 Information Collected Automatically

Usage Data:

• Pages and features accessed
• Time spent on the Service
• Queries submitted to the AI system
• Actions taken within the Service
• Search terms and filters used

Device and Technical Information:

• IP address
• Browser type and version
• Operating system
• Device identifiers
• Screen resolution
• Time zone and language settings

Cookies and Similar Technologies:

• Session cookies
• Preference cookies
• Analytics cookies
• Security cookies

3.3 Information We DO NOT Collect

We DO NOT collect or process:

• Patient health information or medical records
• Protected health information (PHI)
• Personally identifiable patient data
• Sensitive personal data of patients

If you input such information into the Service, you are violating our Terms and Conditions and applicable privacy laws.

4. How We Use Your Information

4.1 Service Provision and Operation

• Create and manage your account
• Provide access to AI-powered features
• Process and respond to your queries
• Customize your experience based on preferences
• Provide customer support
• Send service-related communications

4.2 Service Improvement and Development

• Analyze usage patterns to improve the Service
• Train and improve our AI models
• Develop new features and functionality
• Conduct research and analytics
• Test and optimize Service performance

4.3 Security and Fraud Prevention

• Verify user identity and credentials
• Detect and prevent fraud or abuse
• Protect against security threats
• Enforce our Terms and Conditions
• Comply with legal obligations

4.4 Business Operations

• Process payments and manage subscriptions
• Send billing information and receipts
• Manage business relationships
• Conduct internal audits and quality assurance

4.5 Marketing and Communications (with consent)

• Send newsletters and product updates
• Inform you about new features or services
• Conduct surveys and request feedback
• Send promotional offers (you can opt out anytime)

5. Legal Basis for Processing (for GDPR Compliance)

We process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to provide the Service you requested
• Consent: Where you have given explicit consent
• Legitimate Interests: For service improvement, security, and business operations
• Legal Obligation: To comply with applicable laws and regulations

6. How We Share Your Information

6.1 Service Providers and Partners

We may share your information with trusted third parties who assist us in operating the Service:

• Cloud hosting providers: For data storage and infrastructure
• Payment processors: For handling subscription payments
• Analytics services: For usage analysis and Service improvement
• Customer support tools: For providing user assistance
• Email service providers: For sending communications

All third parties are contractually required to protect your data and use it only for the purposes we specify.

6.2 Business Transfers

If VELANTEC PTE. LTD. is involved in a merger, acquisition, or asset sale, your personal data may be transferred. We will provide notice before your personal data is transferred and becomes subject to a different privacy policy.

6.3 Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Valid legal processes (subpoenas, court orders)
• Requests from government or regulatory authorities
• Protection of our rights, property, or safety
• Protection of users or the public
• Prevention or investigation of potential crimes

6.4 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified data that cannot be used to identify you for research, analytics, or business purposes.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Retention Periods:

• Active account data: Retained while your account is active
• Closed account data: Deleted within 90 days of account closure (unless legal retention applies)
• Usage logs: Retained for 12 months for security and analytics
• Financial records: Retained for 7 years as required by Singapore law
• Support communications: Retained for 3 years for quality assurance

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:

8.1 Technical Measures

• Encryption of data in transit (TLS/SSL)
• Encryption of data at rest
• Secure authentication mechanisms
• Regular security testing and vulnerability assessments
• Intrusion detection and prevention systems
• Secure backup and disaster recovery procedures

8.2 Organizational Measures

• Access controls and authorization protocols
• Employee training on data protection
• Confidentiality agreements with staff and contractors
• Regular security audits and compliance reviews
• Incident response and breach notification procedures

8.3 Limitations

While we implement industry-standard security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

9. Your Rights and Choices

9.1 Access and Data Portability

You have the right to:

• Request access to your personal data
• Obtain a copy of your data in a structured, commonly used format
• Transfer your data to another service provider

9.2 Correction and Updating

You can update your account information at any time through your account settings. For other corrections, contact us at privacy@mrassistant.ai.

9.3 Deletion and Erasure

You have the right to request deletion of your personal data, subject to certain legal exceptions. You can:

• Delete your account through account settings
• Request deletion by contacting us

Note that some data may be retained for legal or legitimate business purposes even after account deletion.

9.4 Objection and Restriction

You have the right to:

• Object to processing based on legitimate interests
• Request restriction of processing in certain circumstances
• Opt out of marketing communications

9.5 Withdrawal of Consent

Where processing is based on consent, you may withdraw your consent at any time. This will not affect the lawfulness of processing based on consent before withdrawal.

9.6 Cookie Preferences

You can control cookie settings through your browser preferences. Note that disabling cookies may affect Service functionality.

10. International Data Transfers

Your information may be transferred to and processed in countries other than Singapore. We ensure that such transfers comply with applicable data protection laws through:

• Use of standard contractual clauses
• Selection of service providers with adequate data protection practices
• Implementation of appropriate safeguards

11. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will take steps to delete such information.

12. Third-Party Links and Services

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of material changes by:

• Posting the updated policy on our website
• Sending an email notification to your registered email address
• Displaying a prominent notice within the Service

Your continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.

14. Your Regulatory Rights

14.1 Singapore PDPA Rights

Under the Singapore Personal Data Protection Act, you have the right to:

• Access your personal data
• Correct inaccurate personal data
• Withdraw consent for processing
• Request restriction of data use for marketing purposes

14.2 GDPR Rights (for EU users)

If you are in the European Union, you have additional rights under GDPR:

• Right to erasure ("right to be forgotten")
• Right to data portability
• Right to object to processing
• Right to lodge a complaint with a supervisory authority

14.3 Complaints

If you believe we have violated your privacy rights, you may file a complaint with:

• Singapore: Personal Data Protection Commission (PDPC)
• EU: Your local data protection authority

You may also contact us directly to resolve any concerns.

15. Contact Information

16. Acknowledgment

BY USING THE SERVICE, YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTOOD, AND AGREE TO THIS PRIVACY POLICY.