Privacy Policy

Last updated: February 2026

1. Introduction

MedGemma IATRIKI TECHNOLOGIA & KAINOTOMIA P.C. (GEMI No.: 191929003000), hereinafter "MEDGemma", "we", "us", "our", is committed to protecting your privacy and personal data. This policy explains how we collect, use, store, and protect your data when you use our platform and website.

2. Data We Collect

We may collect the following categories of data:

  • Contact details: Name, email, phone number, organization
  • Usage data: Platform interaction, logs, analytics
  • Technical data: Browser type, IP address, device information

3. Zero Data Retention

MEDGemma operates on a zero data retention principle. Data processed through our platform (voice recordings, reports, documents) is not stored on our servers after processing is complete.

4. Purpose of Processing

We use your data to:

  • Provide and improve our services
  • Communicate about your account
  • Comply with legal obligations
  • Analyze usage to improve the platform

5. Data Security

We implement AES-256 encryption for data at rest and TLS 1.3 for data in transit. Data access is controlled through role-based access control (RBAC) and JWT authentication.

6. Recipients and Data Processors

We work with the following providers, who act as data processors, to operate this website and to communicate with you:

  • Cloudflare, Inc.: Website hosting, content delivery network and protection against malicious traffic.
  • Amazon Web Services (AWS): Delivery of contact form messages via Amazon SES. Processing takes place in the Stockholm region (eu-north-1) — your data remains within the European Union.
  • Google Ireland Ltd.: Corporate email (Google Workspace), where your messages are received, and the appointment booking page used for platform demos.

Messages sent through the contact form are not stored on the website. They are delivered directly to our corporate mailbox and retained for 24 months, so that we can respond to your enquiry and any follow-up.

7. Your Rights

Under the GDPR, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Erase your data
  • Restrict processing
  • Data portability
  • Object to processing

8. Contact

For privacy-related questions, contact us at info@med-gemma.com. Postal address: Vasileiou Voulgaroktonou 16, 12462 Haidari, Greece.