Privacy & GDPR
You remain the data controller for patient information. AINuma acts as a processor where applicable. This page is a summary—see our Privacy Policy for full legal terms.
Your responsibilities as controller
You are responsible for lawful basis, consent where required (including session recording), privacy notices, and informing patients how data is used, stored, and retained.
Our role as processor
We process personal data only to provide the service, under your instructions and applicable data processing terms.
Data subject rights
Where GDPR applies, you handle patient requests to access, correct, or delete data. We support your obligations through product features and contractual support channels.
International transfers
If data is processed outside your jurisdiction, we use appropriate safeguards as described in our Privacy Policy and DPA where offered.