Policies & Notices
PathAI Privacy Notice
Effective: 13 February 2025
PathAI, Inc., PathAI Diagnostics, and our affiliates (collectively “PathAI,” “we,” “us”) take your privacy seriously and we want you to be familiar with how we collect, use, share, or otherwise process, your personal information. This Privacy Notice is meant to help you understand what personal information we collect, store, and use, and our privacy practices, including your rights related to that information, when you visit and interact with us online, such as through our websites, e-mail, and platforms, or have other business interactions with us where we reference this Privacy Notice, collectively referred to as “Platforms.”
Changes to Privacy Notice
Our Platforms may change from time to time. As a result, we may publish changes to this Privacy Notice, as applicable. If we do make such changes, we will post an updated version on this page, unless another type of notice is required by the applicable law. Additionally, when required under applicable law, we will request additional consent to collect and process your personal information. We encourage you to visit this page periodically and to review our most current Privacy Notice and applicable effective date.
Information We Collect
While using our Platforms, we may ask you to provide us with personally identifiable information (“Personal Information”). Personal Information is information that identifies, relates to, describes, can reasonably be associated with, or can reasonably be linked to a particular individual or household. Categories of Personal Information we collect include:
- Personal or professional contact information, such as your first and last name, address, telephone number, email address, and other contact information you choose to provide to us
- Demographic information, including your gender, age or date of birth
- Professional details such as affiliations, specialty, NPI, education details or other information found on a resume
- Information collected through tracking technologies: IP address or other online identifiers
- Recordings: for data requests or for customer service purposes
- Inferences drawn from other Personal Data such as social media profiles or other public records or websites
We may use this information to:
- Recruit for employment purposes, employee onboarding or other administration of PathAI personnel
- Address questions related to our Platforms
- Develop new Platforms
- Conduct surveys, or polls and/or obtain testimonials
- Operate, evaluate, secure, and improve our Platforms, to analyze use of our Platforms, or to enhance or develop new features for our Platforms
- To solicit information from you, manage your account and process payment transactions
- Staff, facilitate, and manage market research and related activities
- Create aggregated analytics for research purposes
- Fulfill our obligations to you under an applicable contract or to conduct business with you
- Provide support-related activities, such as customer service
- Comply with regulatory monitoring and reporting obligations, such as those related to adverse events, product complaints, spend transparency, and patient safety
- Protect against, identify, investigate, and respond to fraudulent, harmful, unauthorized, unethical or illegal activity
- Conduct other legitimate business activities, as allowed by applicable law
Sensitive Personal Information
In the course of offering our Platforms we may also collect and process Personal Information that is of a sensitive nature. Examples of Sensitive Information include:
- Username and password that you may select in connection with establishing an account on our Platforms
- Precise geolocation
- Disciplinary actions and/or criminal proceedings and/or sanctions
- Identification information, such as identity cards, passport, visa, social security number or other taxpayer/government identification number like driving license details
- Financial information, such as your banking details
- Other protected characteristics, such as your race or ethnicity, should you choose to share this information with us
- Facilitate recruitment, evaluate candidates for employment purposes and conduct employee-related activities, such as payroll and benefits
- Deliver the services you have requested
- Process payments
- Process and manage safety and quality concerns
- Conduct other legitimate business activities, as allowed by applicable law.
Use of Cookies and Similar Technologies
We use cookies and similar technologies (such as web beacons, tags, scripts and device identifiers) to collect and store analytics and other information when you use our Services. The cookies we use include both first party and third-party cookies.
Cookies, or similar technologies, may provide us the following information:
- The type of web browser software you use
- The name of the domain from which you access the Internet (including client and server IP addresses, usernames, ports, queries, or other status-related information)
- The Internet address of the website from which you linked directly to our Platforms
- The date and time you access our Platforms
- Which pages you have visited on our Platforms
Please refer to our Cookie Notice for further details as to the cookies we use and for what purposes. Access our Cookie Preference Center to manage your cookie consent preferences by clicking on the icon found in the lower left corner of our website.
Sources of Personal Information
We collect information from you both when you provide it voluntarily and also automatically when you access our Platforms. We also may collect Personal Information from other sources, as described below.
We collect Personal Information from you and any devices (including mobile devices) you use when you: use our Platforms, contact PathAI via email or other means, connect with PathAI’s social media pages, or respond to PathAI’s communications to you such as surveys or requests for feedback.
In addition, we also collect Personal Information about you from third parties in connection with our Platforms, including from the following sources:
- Email, chat, survey, feedback, and other communications service providers
- Customer service providers
- Other service providers (including data analytics and hosting providers)
- Advertising providers
- Social media platforms
- Promotional partners. If we combine or associate information from other sources with Personal Information that we collect through the Platform, we will treat the combined information as Personal Information in accordance with this Privacy Notice.
Protected Health Information
In certain cases, your access and use of our Platforms may result in your providing access to Protected Health Information (“PHI”) as defined by the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”). Certain of our affiliated entities are required to comply with applicable federal and state health care privacy and security rules, including HIPAA, and similar rules in other countries, when receiving and processing PHI. In those cases, our processing of PHI is governed by Customer Agreements, Terms of Use, and Business Associate Agreements, as applicable. PHI should only be submitted through the Platform as permitted or required for use of the Platform.
Interactions with Third-Party Sites
The Platforms may include functionality that allows certain kinds of interactions between the Platforms and your account on a third-party web site or application. The use of this functionality may involve the third-party operator providing certain information, including Personal Information, to us. For example, you may have an option to use your Facebook, Google or other account provided by a third-party site or application to facilitate the registration and log-in or transaction process on our Platforms. If we offer and you choose to use this functionality to access the Platform, the third-party site or application may send Personal Information about you to the Platform. If so, we will then treat it as Personal Information under this Privacy Notice. PathAI is not responsible for practices of these third parties, and we encourage you to review the applicable third-party privacy notices before using such third-party tools on our Platforms.
Some social networking services may facilitate registration or enhance or personalize your experience on our Services. This includes if you “follow,” “like,” or link your social networking account to our website. Your decision to use a social networking service in connection with our Services is voluntary. You should make sure you are comfortable with the information your third-party social networking services may make available by reviewing the privacy notice of those providers and/or modifying your privacy settings directly with those networking services.
Children
PathAI does not offer products or services to children, and we do not knowingly collect any Personal Information from individuals younger than the age of eighteen (18). We will delete any Personal Information collected that we later determine to be from an individual younger than18. If you believe that we may have inadvertently collected Personal Information from or about an individual under the age of 18, please send us an email at [email protected] or call us at (617) 500-8457.
Sharing of Personal Information with Third Parties
We may share Personal Information with third parties under various circumstances, including:
Customers and Third Parties Who Perform Services on Our Behalf: We may share Personal Information with our service providers or contract partners in connection with the products or services we provide or when you have agreed to provide services to us. We also may share Personal Information with third parties who are part of a network of providers or who perform services on our behalf. This includes, without limitation, third parties that:
- provide direct services to you
- host our Platforms
- operate certain functions or features of our Platforms
- archive data
- send communications
- analyze data
- provide other services or functions on our behalf, including payment processing, business analytics, credential verification services, customer service, marketing, employment or hiring-related activities, data security functions, and fraud prevention.
Administrative and Legal Reasons: We also may disclose and transfer Personal Information to third parties if we have a good-faith belief that access, use, preservation or disclosure of the information is reasonably necessary to:
- Meet any applicable law, regulation, legal process or enforceable governmental request;
- Enforce Terms of Use, including investigation of potential violations;
- Detect, prevent, or otherwise address fraud, security or technical issues; and/or
- Protect against harm to the rights, property or safety of PathAI, our employees, Users or the public as required or permitted by law.
Sharing of Non-Personal Information
We also may share information that is not Personal Information, such as aggregated user statistics and de-identified information derived from Personal Information, with third parties for any purpose.
Your Access to and Control over Your Personal Information
You are responsible for maintaining the accuracy of the information you submit to us, such as your contact information provided as part of your registration. The Platforms may allow you to review, modify, correct or update Personal Information you have provided through the Platforms settings interface or otherwise, and you may provide registration updates and changes by contacting us at the email address or phone number below. Also, you may contact us at the email address or phone number below at any time to exercise your rights to request access to, modification, export or deletion of, your Personal Information under applicable law.
In some cases, we may need to collect additional Personal Information from you in order to verify your identity before providing you access to or deleting your Personal Information, such as a government-issued identification. PathAI will not discriminate against you for exercising your rights, but we may not be able to provide you with Platforms that you have requested if we are not able to use your Personal Information.
If you have provided permission (consent) to PathAI to process your Personal Information, you have the right to withdraw your consent for such processing at any time by contacting us at [email protected]. You can opt-out of sharing your Personal Information with any cookie provider that may use your Personal Information for their own purposes via our Cookie Preference Center by opting-out of Statistics and Marketing cookies. Please note that you can always unsubscribe from receiving emails by using the “Unsubscribe” link provided in the emails you receive from us.
It is not always possible to completely remove or delete all of your information from our databases, and residual data may remain on backup media, or we may retain it for other reasons as permitted by law. When you edit your Personal Information, information that you remove may persist internally for our administrative purposes. Note that if you request us to delete or remove any data, you may be unable to use certain features offered through our Platforms or to communicate with us via our Platforms. Further, we may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect or if we cannot confirm the identity of the person making a request. We also may retain, and not delete, information for internal reasons such as to provide a service, perform obligations under, or receive the benefit of, a contract, for evidentiary purposes, to protect against fraud or improper attack, or if we need the information for internal purposes such as keeping records of any medical services or devices.
Retention of Personal Information
PathAI aims to ensure that Personal Information obtained by PathAI is adequate, relevant and not excessive in relation to the purposes described in this Privacy Notice. The Personal Information is processed for purposes specified herein and will only be processed consistent with these purposes described herein. PathAI will request only the minimum amount of information required to perform the applicable services and will retain such information only for as long as necessary to provide the services or for compatible purposes, such as to provide additional services, to comply with legal requirements, or to preserve or defend PathAI’s legal rights.
Security
PathAI implements commercially reasonable safeguards to help protect and secure your Personal Information. All communications between our servers are encrypted in transit, and we take measures to protect the integrity of our servers and the data they collect, including but not limited to firewalls, access control lists, logging and monitoring, network isolation, and a variety of host-hardening techniques.
The privacy and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Platforms, you are responsible for choosing a secure password and keeping this password confidential.
Security of data transmission over the Internet, mobile networks, wireless transmission, or electronic storage of information cannot be guaranteed. Please consider this prior to submitting Personal Information to us via the Platform.
International Transfers of Personal Information
Your Personal Information may be stored and processed in any country where we have facilities or in which we engage service providers. We will only transfer your Personal Information where we have established a legal basis and have put in place adequate measures to protect your Personal Information as may be required by local law, but you should not use Platforms or Services if you do not want your Personal Information potentially transferred to, or otherwise processed, in countries outside of your country of residence, which may have data protection laws that are different from those of your country. In certain circumstances, courts, law enforcement agencies, regulatory agencies or security authorities in those other countries may be entitled to access your Personal Information.
If you are located in the EEA your Personal Information may be transferred to PathAI, a data controller, or to service providers in non-EEA countries. For transfers from the EEA to countries not considered by the European Commission to have adequate protections we have implemented measures to protect your Personal Information, such as through use of standard contractual clauses, approved by the European Commission.
Our Platforms are operated and hosted from the United States. If you are located outside of the United States, please be aware that information we collect, including Personal Information, will be transferred to, processed, stored and used in the United States. The data protection laws in the United States may differ from those of the country in which you are located, and your Personal Information may be subject to access requests from governments, courts, or law enforcement in the United States or elsewhere according to local laws. By using the Platforms, or providing us with any information, you consent to the transfer to, and processing, usage, sharing and storage of your information, including Personal Information, in the United States as set forth in this Privacy Notice.
Contact Us
If you have questions about our Privacy Notice or data practices, or wish to make a request regarding your data, you may contact us at:
PathAI, Inc.
Attn: Privacy Officer
1325 Boylston St., Suite 10000
Boston, MA 02215
[email protected]
(617) 500-8457
Identification of Data Protection Representative (EU)
PathAI takes the protection of personal data seriously and has appointed DataRep as their Data Protection Representative in the European Union so that you can contact them directly in your home country. DataRep has locations in each of the 27 EU countries, the UK, and Norway & Iceland in the European Economic Area (EEA), so that PathAI’s customers can always raise the questions they want with them. DataRep has locations in Dublin, Ireland and London, UK.
If you want to raise a question to PathAI, or otherwise exercise your rights in respect of your Personal Data, you may do so by contacting our Data Protection Officer listed above or by:
- Sending an email to DataRep at [email protected];
- Contacting DataRep on its online webform at https://www.datarep.com/data-request/; or,
- Mailing your inquiry to DataRep at the most convenient of the addresses set forth below. PLEASE NOTE: when mailing inquiries, it is ESSENTIAL that you mark your letters for ‘DataRep’ and not ‘PathAI’, or your inquiry may not reach us. Please refer clearly to PathAI in your correspondence. On receiving your correspondence, PathAI is likely to request evidence of your identity, to ensure your personal data and information connected with it is not provided to anyone other than you:
Belgium: DataRep, Place de L’Université 16, Louvain-La-Neuve, Waals Brabant, 1348, Belgium
Bulgaria: DataRep, 132 Mimi Balkanska Str., Sofia, 1540, Bulgaria
Croatia: DataRep, Ground & 9th Floor, Hoto Tower, Savska cesta 32, Zagreb, 10000, Croatia
Cyprus: DataRep, Victory House, 205 Archbishop Makarios Avenue, Limassol, 3030, Cyprus
Czech Republic: DataRep, IQ Ostrava Ground floor, 28. rijna 3346/91, Ostrava-mesto, Moravska, Ostrava, Czech Republic
Denmark: DataRep, Lautruphøj 1-3, Ballerup, 2750, Denmark
Estonia: DataRep, 2nd Floor, Tornimae 5, Tallinn, 10145, Estonia
Finland: DataRep, Luna House, 5.krs, Mannerheimintie 12 B, Helsinki, 00100, Finland
France: DataRep, 72 rue de Lessard, Rouen, 76100, France
Germany: DataRep, 3rd and 4th floor, Altmarkt 10 B/D, Dresden, 01067, Germany
Greece: DataRep, 24 Lagoumitzi str, Athens, 17671, Greece
Hungary: DataRep, President Centre, Kálmán Imre utca 1, Budapest, 1054, Hungary
Iceland: DataRep, Kalkofnsvegur 2, 101 Reykjavík, Iceland
Ireland: DataRep, The Cube, Monahan Road, Cork, T12 H1XY, Republic of Ireland
Italy: DataRep, Viale Giorgio Ribotta 11, Piano 1, Rome, Lazio, 00144, Italy
Latvia: DataRep, 4th & 5th floors, 14 Terbatas Street, Riga, LV-1011, Latvia
Liechtenstein: DataRep, City Tower, Brückenkopfgasse 1/6. Stock, Graz, 8020, Austria
Lithuania: DataRep, 44A Gedimino Avenue, 01110 Vilnius, Lithuania
Luxembourg: DataRep, BPM 335368, Banzelt 4 A, 6921, Roodt-sur-Syre, Luxembourg
Malta: DataRep, Tower Business Centre, 2nd floor, Tower Street, Swatar, BKR4013, Malta
Netherlands: DataRep, Cuserstraat 93, Floor 2 and 3, Amsterdam, 1081 CN, Netherlands
Norway: DataRep, C.J. Hambros Plass 2c, Oslo, 0164, Norway
Poland: DataRep, Budynek Fronton ul Kamienna 21, Krakow, 31-403, Poland
Portugal: DataRep, Torre de Monsanto, Rua Afonso Praça 30, 7th floor, Algès, Lisbon, 1495-061, Portugal
Romania: DataRep, 15 Piaţa Charles de Gaulle, nr. 1-T, Bucureşti, Sectorul 1, 011857, Romania
Slovakia: DataRep, Apollo Business Centre II, Block E / 9th floor, 4D Prievozska, Bratislava, 821 09, Slovakia
Slovenia: DataRep, Trg. Republike 3, Floor 3, Ljubljana, 1000, Slovenia
Spain: DataRep, Calle de Manzanares 4, Madrid, 28005, Spain
Sweden: DataRep, S:t Johannesgatan 2, 4th floor, Malmo, SE – 211 46, Sweden
United Kingdom: DataRep, 107-111 Fleet Street, London, EC4A 2AB, United Kingdom
© 2025 PathAI, Inc. All rights reserved.