Privacy Policy

Controller

aidX AG, Bachtelstrasse 57, 8330 Pfäffikon ZH, Switzerland. Email: privacy@aidx.ch

What We Store

• Account data: email address
• Usage data: session logs, feature usage (anonymized)
• Content data: chat inputs, uploaded documents and audio. Text and uploaded content are encrypted client-side before transmission and stored only in encrypted form; our servers decrypt them only transiently, for processing. Live meeting audio (e.g. from a connected Zoom meeting) is relayed only transiently in memory for transcription and is never stored as raw audio — only the resulting transcript is stored, encrypted.
• Technical data: IP address, browser type, device identifiers

How We Use Your Data

• To provide and improve the Service
• To manage subscriptions and billing (via Stripe)
• To send transactional emails (account, billing notifications)
• To ensure security and prevent abuse

Encryption and Pseudonymisation

Before any clinical content is transmitted, a pseudonymisation process runs automatically in your browser: names, locations, dates and other personal identifiers are detected and replaced with neutral placeholders before the content reaches our servers or the AI. All clinical content is then encrypted client-side with keys protected by your devices and stored only in encrypted form. For processing, it is decrypted only transiently in our controlled processing environment; each server-side decryption runs through a dedicated key service and is logged.

Billing — Stripe

Payments are processed by Stripe, Inc. (stripe.com), a PCI DSS Level 1 certified payment service provider. When you subscribe, Stripe collects and processes your payment information under their own Privacy Policy (stripe.com/privacy). We receive only subscription status from Stripe — no full payment details are stored on our servers. aidX AG acts as the contracting party for your subscription.

AI Inference

AI processing runs on our own infrastructure in Switzerland and on a small number of vetted sub-processors bound by data-processing agreements: speech recognition runs only in your browser, and clinical text analysis runs on Google Cloud Vertex AI within the European Union, with Infomaniak in Switzerland as fallback. Because clinical content is pseudonymised in your browser before it leaves your device (see Encryption and Pseudonymisation), these providers process it with direct identifiers replaced by placeholders. Your content is not used to train third-party AI models.

Infrastructure & Hosting

Core infrastructure, databases and stored transcripts are hosted by Infomaniak Network SA in Switzerland. Some clinical text analysis is processed transiently on Google Cloud Vertex AI within the European Union (EU data region); no clinical data is stored outside Switzerland.

Zoom Integration

If you connect a Zoom account, we access only what is needed to record and transcribe meetings you host. During a live session we receive the meeting audio via Zoom Real-Time Media Streams (RTMS), after the host has started the session and Zoom has shown its data-sharing notice to participants; this audio is relayed only in memory to your browser, converted to text there, and never stored as raw audio — only the encrypted transcript is retained. Meeting metadata (such as the meeting identifier and join URL) is used solely to set up and join the session. Your Zoom OAuth tokens are stored encrypted, are never exposed to your browser, and are revoked and deleted immediately when you disconnect Zoom. We only ever act on meetings created, started or hosted by your own account. Zoom's own processing of your data is governed by Zoom's privacy policy.

Essential Sub-processors

We rely on a small number of vetted sub-processors, each bound by a data-processing agreement, and only where they actually receive personal data:

• Infomaniak Network SA (Switzerland) — hosting, storage and fallback analysis of pseudonymised clinical text
• Google Cloud / Vertex AI (EU region) — analysis of pseudonymised clinical text
• Zoom Video Communications, Inc. — meeting data for the optional Zoom integration
• Stripe, Inc. — payment processing

Data Retention

• Account data: retained for the duration of the subscription plus 12 months after cancellation
• Content data: retained per your subscription tier's history limit. Users may delete content manually at any time.
• Billing records: retained as required by Swiss law (10 years)

Your Rights (GDPR / nDSG)

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and data
• Data portability
• Object to processing
• Lodge a complaint with a supervisory authority

To exercise your rights: privacy@aidx.ch

Cookies

We use only technically necessary cookies for session management. No tracking or advertising cookies.

Security

We implement ISO 27001-aligned security practices including client-side encryption, encryption in transit and at rest, access controls, and regular security reviews.

Changes

We will notify you of material changes via email or in-app notice.