Privacy

We do not collect patient data

Do not enter patient information. Saved views use predefined education categories. Teaching markers have no notes or finding classifications and stay only in the open viewer; they are not saved or exported.

What we do store

• Your work email, language preference and identifiers needed for sign-in. New accounts do not retain a display name or avatar. Older accounts may still contain previously supplied profile data.
• An organisation record created for your account, and your plan and subscription status.
• Education views: a predefined category and the 3D view settings. Waitlist registration collects email, role and the displayed site variant. It does not collect research notes or country.
• An append-only record of account, billing, saved-scene and model-access events, for security and support. Model-access records link account identifiers, model version, time and a random session code shown in the viewer watermark. They do not detect screenshots or prove copying.

Who else processes it

Payment processing is handled by Stripe, which receives your billing details directly — we never see or store card numbers. Email delivery for sign-in links is handled by our email provider. Hosting is provided by our infrastructure provider.

Your control over it

Account settings let you export profile, subscription and saved-view data and close your account. Closing removes access and clears profile identity fields. Some records remain in storage; automatic permanent deletion and retention periods are not yet implemented. Contact us about access, correction or deletion requests.

Security

Access requires a sign-in link sent to your work email or a Google sign-in. Traffic is encrypted in transit. Sign-in endpoints are rate limited.