Privacy Policy

This Privacy Policy explains how AIXIS collects, uses, stores, and protects information when organizations and authorized users access our cloud-based products, including the Radiyx platform. We design our systems for healthcare environments where confidentiality, integrity, and availability are essential.

If your organization uses AIXIS to process patient records, clinical images, or other regulated healthcare data, your organization remains responsible for determining lawful use of that data. AIXIS processes data according to customer instructions, applicable law, and contractual terms such as a Business Associate Agreement (BAA) or Data Processing Agreement (DPA).

1. Information We Collect

Depending on how the platform is used, AIXIS may collect and process:

• Account and organization details such as names, emails, billing contacts, and role assignments.
• Operational metadata such as login records, audit trails, and feature usage.
• Technical data such as browser type, device identifiers, and IP addresses.
• Customer-provided healthcare content, including imaging studies, reports, and patient records where enabled by the customer.
• Support and communication records submitted through forms, email, or service tickets.

2. How We Use Information

AIXIS uses information to:

• Provide, secure, and maintain the platform and related services.
• Authenticate users, enforce permissions, and monitor system health.
• Deliver customer support, onboarding, and service communications.
• Meet legal, regulatory, and contractual obligations.
• Improve performance, reliability, and product quality.

3. Legal Basis and Healthcare Data Processing

For personal data subject to GDPR or similar frameworks, AIXIS relies on appropriate legal bases, including contract performance, legitimate interests, and legal obligations. Where AIXIS processes protected health information on behalf of covered entities or business customers, processing is governed by applicable healthcare privacy laws and executed contractual safeguards.

4. Data Sharing and Disclosure

AIXIS does not sell personal information. We may disclose data only:

• To vetted subprocessors required to operate the service under strict controls.
• To comply with law, regulation, legal process, or enforceable governmental request.
• To protect rights, safety, and security of customers, patients, and the platform.
• As part of a corporate transaction, where confidentiality and lawful transfer requirements are maintained.

5. Data Retention and Deletion

We retain information only for as long as needed to deliver services, meet contractual commitments, and satisfy legal requirements. Upon contract termination, customers can export applicable data during the retention window defined in their agreement, after which secure deletion workflows are applied.

6. Security Safeguards

AIXIS applies layered safeguards, including:

• Encryption in transit (TLS) and at rest (AES-256 or equivalent).
• Role-based access control and least-privilege principles.
• Audit logging, anomaly monitoring, and security alerting.
• Network segmentation and tenant isolation controls.
• Secure development, patching, and vulnerability management practices.

7. International Data Transfers

If data is transferred across borders, AIXIS uses contractual and technical controls designed to protect data in accordance with applicable transfer requirements.

8. Your Rights and Choices

Depending on applicable law, individuals may have rights to access, correct, delete, restrict, or object to certain processing. Requests should generally be submitted through the organization that controls the underlying data. AIXIS supports customers in handling validated requests.

9. Cookies and Analytics

Our website may use cookies and analytics tools to understand traffic and improve user experience. You can manage browser cookie settings directly in your browser. For contractual product environments, telemetry settings may differ from marketing website settings.

10. Policy Updates

We may update this Privacy Policy to reflect legal, regulatory, or product changes. Material updates will be communicated through appropriate channels and reflected by the "Last Updated" date on this page.

Questions about privacy or data protection can be sent to legal@aixis.com or through our contact page.