Privacy Policy

1. Who we are

RxClarity Ltd. ("RxClarity", "we", "us") operates the RxClarity platform at rxclarity.io. We are the data controller for the personal data described in this policy. For enquiries, contact us at info@rxclarity.io.

2. Data we collect

We collect the following categories of personal data:

• Account data — name, email address, and authentication credentials managed by our identity provider (Clerk).
• Usage analytics — page views, feature usage, and session data collected via PostHog and Microsoft Application Insights. These are only collected with your consent.
• Feedback data — screenshots, annotations, and comments submitted through the Userback feedback widget. Only active with your consent.
• AI chat conversations — messages you send to the RxClarity AI assistant are stored server-side to provide chat history and continuity.

3. How we use your data

• Providing the service — authenticating your account, displaying your dashboard, and maintaining your AI chat history.
• Improving the platform — analytics help us understand feature usage and identify issues (only with your consent).
• User support — feedback submissions help us triage bugs and feature requests (only with your consent).

4. Legal basis for processing

• Contract performance (Art. 6(1)(b) GDPR) — account data, AI chat storage, and core platform functionality.
• Consent (Art. 6(1)(a) GDPR) — analytics cookies (PostHog, Application Insights) and the feedback widget (Userback). You can withdraw consent at any time via the cookie preferences in the page footer.

5. Cookies and tracking

We use cookies in three categories:

You can manage your cookie preferences at any time.

6. AI chat data

When you use the RxClarity AI assistant, your messages and the assistant's responses are stored in our database to provide chat history. This data is:

• Linked to your authenticated account and not shared with other users.
• Processed by third-party AI model providers (such as Anthropic or OpenAI) to generate responses. These providers act as data processors and do not retain your data for their own purposes.
• Deletable at any time — you can delete individual conversations from the chat interface.

7. Data sharing and processors

We share personal data only with the following categories of service providers:

• Clerk — identity and authentication management.
• Microsoft Azure — cloud hosting, database, and Application Insights.
• PostHog — product analytics (EU-hosted).
• Userback — user feedback collection.
• AI model providers — for processing chat conversations.

We do not sell your personal data to third parties.

8. Data retention

• Account data — retained while your account is active.
• AI chat data — retained until you delete the conversation or your account is closed.
• Analytics data — retained according to the respective provider's retention policies.
• Cookie consent — your preference is stored for 1 year.

9. Your rights

Under GDPR, you have the right to:

• Access your personal data.
• Rectify inaccurate data.
• Erase your data ("right to be forgotten").
• Restrict processing.
• Data portability — receive your data in a structured format.
• Withdraw consent at any time for analytics and functional cookies.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at info@rxclarity.io.

10. Security

We implement appropriate technical and organisational measures to protect your data, including encrypted connections (TLS), access controls, and regular security reviews.

11. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via the platform. The "last updated" date at the top reflects the most recent revision.