Privacy Policy

This Privacy Policy explains how Asclevor ("we," "us") collects, uses, discloses, and protects personal data when you visit www.asclevor.com or use the Asclevor Service (the clinical knowledge base, API, and related tools). It also describes the rights you have over your data.

1. Data We Collect

1.1. Information you provide. When you contact us (for example through the contact form or by email), we receive the information you send: your name, work email address, and the content of your message. When you create an account or purchase a plan, we process account details (such as email address) and payment is handled by our payment provider; we do not store full payment card details on our servers.

1.2. Usage and technical data. When you use the Service, we process request metadata necessary to operate the API: request timestamps, endpoints called, request volumes, rate-limit state, and API key identifiers, as well as server log data (including IP address) collected for security and abuse prevention.

1.3. Query content. The content of API queries (Inputs) and the outputs returned are processed to provide the Service. We do not use query content to train machine-learning models unless you have explicitly opted in.

1.4. No marketing cookies. The website sets no advertising or tracking cookies. Please note that loading web fonts from Google Fonts involves a technical request to Google's servers, which receives your IP address (see Section 5).

2. How We Use Data

We use personal data to: provide, operate, and secure the Service; enforce plan limits and prevent abuse; respond to inquiries and provide support; process payments and administer subscriptions; comply with legal obligations; and improve the Service on an aggregated basis. We do not sell personal data, and we do not use personal data for third-party advertising.

3. Legal Bases

Where the GDPR applies, we process personal data on the following bases: performance of a contract (Art. 6(1)(b)) — providing the Service and handling your account; legitimate interests (Art. 6(1)(f)) — securing and improving the Service, and defending legal claims; consent (Art. 6(1)(a)) — where you have given it, for example for optional communications; and legal obligations (Art. 6(1)(c)) — for example commercial record-keeping.

4. Retention

We keep personal data only as long as necessary for the purposes described above: contact inquiries for as long as needed to handle them and any follow-up; account and billing records for the duration of the subscription and as long as required by commercial and tax law; server logs for a short period consistent with security needs, typically 30 days or less unless needed for a specific investigation.

5. Service Providers and Transfers

We share personal data with a limited set of processors that help us operate the Service, such as hosting and infrastructure providers, payment processors, and email delivery. We select these providers carefully and bind them by contract to process data only on our instructions. Where our website loads web fonts from Google Fonts, a technical connection to Google servers is established and your IP address is transmitted; we are evaluating self-hosting these fonts. Where data is transferred outside the EEA, we rely on appropriate safeguards such as the European Commission's standard contractual clauses.

6. Security

We protect personal data with technical and organizational measures appropriate to the risk, including encryption in transit (HTTPS/TLS) for the Service and API, access controls, and least-privilege practices. No system is perfectly secure; if a data breach affects your rights and freedoms, we will notify you and the competent authority as required by law.

7. Your Rights

Subject to applicable law, you have the right to: access your personal data and receive a copy (Art. 15 GDPR); rectify inaccurate data (Art. 16); erase data (Art. 17); restrict processing (Art. 18); receive your data in a portable format (Art. 20); object to processing based on legitimate interests (Art. 21); and withdraw consent at any time where processing is based on consent. You also have the right to lodge a complaint with a data protection supervisory authority.

To exercise any of these rights, contact contact@asclevor.com. We will respond within the timeframes required by law.

8. Children

The Service is intended for professionals and organizations. We do not knowingly collect personal data from children under the age applicable in your jurisdiction.

9. Changes to This Policy

We may update this Privacy Policy as the Service or applicable law evolves. Material changes will be announced on this page (and, where appropriate, by notice through the Service) before they take effect.

10. Contact

Questions about this Privacy Policy or our data practices can be sent to contact@asclevor.com. Our legal entity details are listed in the Imprint.