Privacy Policy

1. Who We Are

The CAR-T Care Platform is operated by Cellogen Therapeutics. We are committed to protecting your personal information and being transparent about how we use it. This policy follows the principles of the Digital Personal Data Protection Act, 2023 (India) and broadly comparable international frameworks.

2. Information We Collect

When you create an account or use the Platform, we collect:

• Account data: name, email address, password (stored as a salted hash).
• Consultation data: appointment requests, notes you write to oncologists, scheduled times.
• AI chat data: messages you send to the AI assistant; we use these to provide and improve responses.
• Technical data: IP address, browser type, timestamps, and basic interaction logs for security and abuse prevention.

We do not ask for sensitive medical records, insurance, or payment information through standard signup. Any clinical information shared during a consultation is between you and your oncologist.

3. How We Use Your Information

• To provide the AI assistant and scheduling features.
• To deliver email notifications for invitations, appointment confirmations, and reminders.
• To improve the accuracy and safety of our AI responses.
• To detect and prevent abuse, fraud, and unauthorized access.
• To comply with applicable legal obligations.

4. Third-Party Processors

We rely on a small set of trusted vendors to operate the Platform. They process data on our behalf under appropriate agreements:

• Render — application hosting (United States).
• Vercel — frontend hosting (United States).
• Brevo — transactional email delivery (European Union).
• Google — Sign-in, Calendar invites, and Meet video links (as applicable).
• AI providers — large language model inference for the AI assistant.

5. Data Retention

We keep account and consultation data while your account is active. If you delete your account, we remove personal identifiers and chat history within 30 days, except where retention is required by law (e.g., billing records).

6. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate information.
• Request deletion of your account and data.
• Withdraw consent for non-essential processing.
• Lodge a complaint with the relevant data protection authority.

To exercise any of these rights, email support@cellogentherapeutics.com.

7. Security

We use encryption in transit (HTTPS), salted password hashing, JWT-based authentication, and rate-limited login endpoints. While no system is perfectly secure, we follow industry best practices and review our setup regularly.

8. Children

The Platform is not directed to children under 18. We do not knowingly collect data from children. If you believe a child has provided us information, please contact us so we can remove it.

9. International Transfers

Some of our processors are located outside India. Where data is transferred internationally, we rely on standard contractual safeguards and on the processors' own compliance certifications.

10. Changes to This Policy

We may update this Policy from time to time. We will notify you of material changes by email or via a notice on the Platform.

11. Contact

Questions about privacy? Reach us at support@cellogentherapeutics.com.