Privacy notice

Account and clinic access

Account creation asks for a work email, password, and, where applicable, clinic name. Supabase supports authentication. Clinic membership, invitations, and roles determine access to clinic workflows. The service uses account and clinic information to provide that access and manage the account.

Contact inquiries

The contact form collects your name, email, optional clinic name, and message. The configured Resend email service delivers the inquiry to Orvexa AI and sends a confirmation to you. Please do not include patient information, passwords, or other credentials.

Clinic workflows and patient information

Clinic workflows can process patient information from connected systems, uploaded documents, and report inputs. Your clinic determines which systems to connect and which records to use. Contact the clinic responsible for your care with requests about your clinical records.

Handle uploaded and downloaded documents according to your clinic's procedures. The security overview and security and privacy guide describe the product's controls and handling guidance. This notice does not establish a new retention period or replace a clinic data-processing agreement.

Browser storage and optional analytics

Browser storage supports sign-in, navigation, and your privacy choices. When configured, optional Plausible analytics can measure public website page views and a limited set of demo and signup actions only after you allow analytics. Rejecting optional analytics does not prevent use of the website or clinic service. See the cookie policy for the storage inventory and how to change your choice.

Privacy questions and requests

Contact Orvexa AI through the contact form about account information or this notice. Do not send clinical records through that form. Explain the type of request without including sensitive information so an appropriate next step can be arranged.

Before final publication, Orvexa AI and its legal advisers must confirm the responsible legal entity, contact details, processing roles and legal grounds, service-provider and international-transfer disclosures, retention schedules, and applicable individual rights and complaint routes.