Data controller: Radai Labs LTDA — Tax ID 63.762.346/0001-47, headquartered in Araguaína/TO, Brazil.

Data Protection Officer: Dr. Nailson Costa. Contact: contato@radailabs.com.br.

1. Data we collect

• Account data (name, email, phone, medical specialty when applicable).
• Product usage data (access logs, usage events, configuration preferences).
• Clinical content authored by the professional inside the platform (e.g., reports, templates), under the user's control and responsibility.
• Billing data for paid contracts (processed by payment operators).

2. Legal bases (LGPD, art. 7)

• Contract performance and pre-contractual steps.
• Compliance with legal or regulatory obligation.
• Legitimate interest, balanced against data-subject rights.
• Consent, when applicable (e.g., marketing communications).

3. Purposes

• Authentication, operation and support of Radai Labs SaaS products.
• Personalization of educational content and supervised clinical assistance.
• Security, fraud prevention and auditing.
• Fulfillment of tax, accounting and regulatory obligations.

4. Sharing

Radai Labs does not sell personal data. We share data only with operators strictly required (cloud hosting, transactional email, payments, AI providers) under contract and equivalent data-protection duties.

5. Retention

Data is retained for as long as necessary for the purposes above and legal obligations. After that, it is anonymized or securely deleted.

6. Data-subject rights

You may confirm processing, access, correct, port, anonymize, block or delete unnecessary data, withdraw consent and request information on sharing. To exercise your rights, email the DPO: contato@radailabs.com.br.

7. Security

We apply per-tenant isolation, encryption in transit, role-based access control, audit logs and vendor review. See the Security page for details.

8. Changes

This policy may be updated. The current version is always published at this URL.