Privacy Policy
Last Updated:
1. Introduction
X-ray AI Analyzer ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and process your personal data and medical imagery.
2. Data We Collect
We collect and process the following types of data:
- Medical Imagery: X-rays, MRI scans, CT scans, and other DICOM data uploaded by you.
- Metadata: Non-identifiable patient information such as age, gender, and species (for veterinary analysis).
- Usage Data: Information on how you interact with our service.
Note on Anonymity: We strongly recommend anonymizing all medical images (removing names, DOs, and patient IDs) before uploading. While our system processes images, minimizing personal data ensures higher privacy security.
3. How We Use Your Data & AI Processing
Your data is used solely to provide the radiology interpretation service. Our entire infrastructure is built on Google Cloud, ensuring enterprise-grade security for your data. To perform this analysis, we utilize Google Gemini API (provided by Google Cloud) as a third-party data processor.
- AI Analysis: Uploaded images and metadata are transmitted securely (encrypted in transit) to Google's servers to generate the analysis report.
- Data Security: Our infrastructure leverages Google's advanced security technologies, ensuring that data is processed in accordance with strict security standards.
- No Training on User Data: By default, data sent to the Gemini API via our paid enterprise integration is not used to train Google's foundation models. Your private medical data remains your property.
4. Data Retention
- Uploaded images: The image you upload is stored in Google Cloud Storage so you can view it with your report. Uploaded images are deleted 30 days after upload. Deleted files may remain in a recoverable backup for up to 7 more days. This applies to every account and to analyses made without an account.
- DICOM files, additional images and attachments: DICOM files are converted to images in your browser, where you also choose the images for an analysis (up to 10); the original DICOM files are not uploaded. The selected images, the details you enter (such as age and notes) and any optional attachment are sent through our server to Google Gemini to check the images and produce the analysis. We store only one image per analysis (see above); the other images and attachments are not stored by us.
- Reports and chat: The text of your analysis report and your conversation with the report assistant are kept in your account so you can return to them, until you delete the analysis or your account.
5. Data Transfers
As we utilize Google Cloud services, your data may be processed on servers located in various regions. We rely on Google's robust security infrastructure to ensure that appropriate safeguards are in place for all data transfers, guaranteeing your data receives a high level of protection.
6. Contact Us
If you have any questions about this Privacy Policy, please contact us at:
info@x-rayaianalyzer.com