Privacy Policy

1. What We Collect

• Account information: Full name, email address, clinic or hospital name, password (encrypted).
• Clinical data: Chest X-ray images uploaded for analysis, patient name, age, gender, and any clinical notes you provide.
• Usage data: Number of scans performed, login timestamps, API usage logs.
• Payment data: Billing is processed by Stripe. We do not store card numbers on our servers.

2. How We Use Your Data

• X-ray images are processed by our AI inference system solely to generate clinical screening reports.
• We do not use patient images to retrain or improve our AI models without explicit written consent.
• Account data is used to manage your subscription, deliver reports by email, and provide support.

3. Data Storage & Security

Images and reports are stored on Cloudinary (encrypted at rest and in transit). Account data is stored in a PostgreSQL database with encrypted connections. API keys are stored as hashed values. We apply industry-standard security measures including HTTPS, rate limiting, and access controls.

4. Data Sharing

We do not sell your data. We do not share patient data with third parties except as required by Nigerian law or as necessary to provide the service (e.g. cloud storage providers operating under data processing agreements).

5. Your Rights

• Request a copy of all data we hold about you.
• Request deletion of your account and all associated data.
• Withdraw consent for data processing at any time.
• File a complaint with the Nigeria Data Protection Commission (NDPC).

Exercise any of these rights by emailing: customer@pluto-technology.com

6. Data Retention

We retain your data for as long as your account is active. Upon account deletion, all personal data and uploaded images are permanently removed within 30 days, except where retention is required by Nigerian law.

7. Contact

Data Controller: Pluto Technology Solutions Limited · customer@pluto-technology.com · 32A, Ija Road, Egan, Igando, Lagos State, Nigeria. RC: 9553697.