ZoctorAI privacy
Privacy Policy
Last updated: August 1, 2026
This policy explains what ZoctorAI collects, why it is used, who may process it, and the choices available to you. It applies to the ZoctorAI website, account, report, chatbot, and care-planning services.
1. Information we collect
We collect account and contact information you provide, profile details, uploaded medical reports, extracted report content, saved report history, chatbot messages you choose to submit, and medical-tourism planning details. We also collect limited technical information needed to secure and operate the service, such as IP address, browser type, device information, authentication events, and service logs.
Payment card details are not currently collected by ZoctorAI. If payment processing is introduced, payment credentials will be handled by the disclosed payment provider rather than stored directly by ZoctorAI.
2. Why we use information
We use information to authenticate users, provide report analysis and saved-report features, respond to support requests, maintain security and audit records, improve service reliability, and meet legal obligations. Health information is processed only for the user-requested health-report, chatbot, or care-planning purpose and related service operations.
Where consent is the applicable legal basis, you may withdraw it for future processing. Other processing may be necessary to perform the service you request, protect the platform, or comply with law.
3. Analytics and advertising choices
Optional public-site analytics and advertising measurement remain off until you make a choice. ZoctorAI does not send uploaded report text, filenames, chatbot content, biomarkers, diagnosis details, account identifiers, contact-form values, or authenticated health-workflow URLs to these services.
You can change optional analytics choices using the public-site privacy control. Browser privacy signals supported by the site also disable optional measurement.
4. Sharing and service providers
We share information only with providers needed to operate the service, such as cloud hosting, storage, authentication, email, security, and AI-processing providers, subject to appropriate contracts and access restrictions. Medical-tourism information is not sent to a hospital or clinician merely because you use the chatbot; a separate user-led workflow and notice applies before submission.
We may disclose information where legally required, to protect users or the service, or as part of a corporate transaction subject to applicable safeguards. We do not sell health information.
5. International processing
Service providers may process information outside your country. Where data-protection law requires it, ZoctorAI uses an approved transfer mechanism and contractual or organizational safeguards. You may contact us for more information about safeguards relevant to your data.
6. Retention and deletion
We retain account, report, and service data only for as long as needed to provide the service, maintain security and audit evidence, resolve disputes, and meet legal requirements. Retention depends on the record type and account status. When deletion is requested, information is removed or de-identified unless a legal, security, backup, or dispute-preservation requirement applies.
7. Security
ZoctorAI uses access controls, authenticated user boundaries, encryption in transit, cloud storage protections, audit logging, and operational security measures appropriate to the service. No internet service can guarantee absolute security. Please protect your credentials and contact us promptly if you suspect unauthorized access.
8. Your privacy rights
Depending on your location, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal data, withdraw consent, and complain to a supervisory authority. We may need to verify your identity before completing a request. Mandatory legal rights are not limited by this policy.
Send a privacy request to contact@zoctorai.com. We will respond within the period required by applicable law and explain any lawful limitation that applies.
9. Children and medical emergencies
ZoctorAI is not directed to children who cannot legally consent to data processing in their jurisdiction. A parent or authorized guardian must manage any permitted dependent profile. ZoctorAI is an informational service and is not an emergency service; seek immediate local care for urgent symptoms.
10. Changes and contact
We may update this policy as the service, providers, or legal requirements change. Material changes will be highlighted on the website or through an appropriate account notice.
ZoctorAI is the data controller for its direct user service where that term applies. Privacy and data-protection enquiries can be sent to contact@zoctorai.com.