Privacy Policy

Medlyze

Last updated: March 1, 2026

1. Introduction

Medlyze (“Medlyze,” “we,” “us,” or “our”) operates Medlyze websites, applications, and related services (the “Service”). This Privacy Policy describes how we collect, use, disclose, and protect information when you use the Service or visit our websites.

By using the Service, you agree to this Privacy Policy. If you do not agree, do not use the Service.

2. Information We Collect

2.1 Information you provide

Account and identity: Name, email address, organization name, and role when you register or sign in (for example via our authentication providers).
Organization and billing: Company domain, subscription plan, seat counts, billing address, and payment-related information processed by our payment provider (we do not store full credit card numbers).
Customer content: Documents, data, extracted text, metadata, feedback, and other materials you upload or enter into the Service.

2.2 Information collected automatically

Usage and device: IP address, browser type, device identifiers, approximate location derived from IP, pages viewed, and actions taken in the Service.
Logs and diagnostics: Server logs, error reports, and performance data to operate and secure the Service.

2.3 Cookies and similar technologies

We use cookies and similar technologies for authentication, preferences, analytics, and security. You can control cookies through your browser settings.

3. How We Use Information

We use information to:

Provide, operate, and improve the Service (including AI features where offered).
Authenticate users, enforce organization boundaries, and manage subscriptions.
Communicate with you about the Service, security, and billing.
Send transactional emails (for example invites, invoices, verification) and, where permitted, product updates.
Detect, prevent, and respond to fraud, abuse, and security incidents.
Comply with applicable law and enforce our agreements.

We do not sell your personal information for monetary consideration as defined under applicable U.S. state privacy laws (where applicable).

4. AI and Automated Processing

We may use artificial intelligence and machine learning to process Customer Content (for example extraction, summarization, search, or chat). Processing may involve automated decision-making that produces suggestions or classifications; you remain responsible for reviewing outputs. See our Terms of Service for disclaimers regarding AI-generated content.

5. How We Share Information

We may share information:

With service providers who assist us (for example cloud hosting, databases, email delivery, payment processing, analytics) under contracts that require appropriate safeguards.
With payment processors (for example Stripe) to complete transactions.
For legal reasons if required by law, subpoena, or valid legal process, or to protect rights, safety, and security.
In connection with a business transaction such as a merger, acquisition, or asset sale, subject to confidentiality obligations.
With your direction or with your organization’s administrators when you use the Service as part of an organization.

We do not sell your personal information to third parties for their independent marketing purposes.

6. Data Storage and Security

We use industry-standard administrative, technical, and organizational measures designed to protect information. No system is completely secure. We retain information as long as needed to provide the Service, comply with law, resolve disputes, and enforce agreements. Retention periods may vary by data type and subscription status.

When you delete content or close your account, we may retain certain data for backup, legal, or operational purposes as described in our internal retention schedule or as required by law.

7. International Transfers

If you access the Service from outside the United States, your information may be processed in the United States or other countries where we or our providers operate. We take steps designed to ensure appropriate safeguards where required by law.

8. Your Rights and Choices

Depending on your location, you may have rights to:

Access, correct, or delete certain personal information.
Object to or restrict certain processing.
Port data where technically feasible.
Withdraw consent where processing is consent-based.
Opt out of certain “sales” or “sharing” as defined under U.S. state laws (we do not sell personal information as described in Section 3).

To exercise rights, contact tech@medlyze.com. We may verify your request before responding. You may appeal a denial where applicable.

9. California Residents (CCPA/CPRA)

If you are a California resident, you may have additional rights under the California Consumer Privacy Act, including the right to know, delete, and correct personal information, and to opt out of certain sharing. We do not use sensitive personal information for purposes that require a “limit use” opt-out under CPRA in a way that conflicts with this Policy. For requests, contact tech@medlyze.com.

10. European Users (GDPR)

If we process personal data subject to the GDPR, our legal bases may include contract performance, legitimate interests (operating and improving the Service), consent where required, and legal obligation. You may lodge a complaint with your local supervisory authority.

11. Children’s Privacy

The Service is not directed to children under 16. We do not knowingly collect personal information from children. If you believe we have, contact us and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised version and update the “Last updated” date. Material changes may be communicated by email or in-app notice. Your continued use after the effective date constitutes acceptance unless we require separate consent.

13. Contact Us

Medlyze
Email: tech@medlyze.com
Website: www.medlyze.com

For data protection inquiries, contact tech@medlyze.com.

14. Agreement with Terms of Service

Our Terms of Service govern your use of the Service and include important disclaimers regarding AI outputs, security, and limitations of liability.