Privacy Policy

Last updated: January 15, 2026

1. Introduction

Hapchot Medical ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you use our contact form.

2. Information We Collect

When you submit our contact form, we collect:

  • Name: To address you personally in our response
  • Email address: To respond to your inquiry
  • Organization: (Optional) To understand your professional context
  • Message: The content of your inquiry
  • Technical data: IP address (for rate limiting and security purposes only)

3. Legal Basis for Processing (GDPR)

We process your personal data based on consent (Article 6(1)(a) GDPR). By checking the consent box and submitting the form, you explicitly agree to the processing of your data for the purpose of responding to your inquiry.

4. How We Use Your Information

We use your information solely to:

  • Respond to your inquiries and requests
  • Provide information about AI4Deep and our services
  • Schedule demos or consultations if requested

We do NOT: Use your data for marketing without separate consent, sell your data, or share it with third parties except as described in Section 5.

5. Third-Party Services

We use the following service to process your contact form:

Resend (email delivery service)
Purpose: To send your message to our team
Data shared: Name, email, organization, message
Location: United States (GDPR-compliant with Standard Contractual Clauses)
Privacy Policy: resend.com/legal/privacy-policy

6. Data Storage and Retention

Storage: We do NOT store your data in any database. Your message is sent directly via email to our team inbox.

Retention: Emails are retained in our email inbox for up to 12 months from the date of your last communication with us, after which they are permanently deleted. If you request deletion earlier (see Section 8), we will delete your email immediately.

Security: Your data is transmitted securely using HTTPS encryption. Our email service provider uses industry-standard security measures.

7. Cookies and Tracking

Cookies: Our website does NOT use any cookies. We do not store any tracking cookies or marketing cookies on your device.

Analytics: We use Vercel Analytics to understand how visitors interact with our website. This is a privacy-first, cookie-less service that does not collect any personally identifiable information (PII). It helps us improve our website by providing aggregate data on page views and general visitor trends.

8. Your Rights Under GDPR

You have the following rights regarding your personal data:

  • Right to Access: Request a copy of the data we hold about you
  • Right to Rectification: Request correction of inaccurate data
  • Right to Erasure ("Right to be Forgotten"): Request deletion of your data
  • Right to Restrict Processing: Request limitation of how we use your data
  • Right to Data Portability: Receive your data in a structured format
  • Right to Withdraw Consent: Withdraw your consent at any time
  • Right to Object: Object to processing of your data

To exercise any of these rights, please contact us at:
privacy@hapchotmed.com

We will respond to your request within 30 days as required by GDPR.

9. California Consumer Privacy Act (CCPA) Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). This section supplements the information in this Privacy Policy.

Categories of Personal Information We Collect

  • Identifiers: Name, email address
  • Commercial information: Organization affiliation (optional)
  • Internet activity: IP address (for security and rate limiting only)
  • Professional information: Organization name and inquiry context

Your CCPA Rights

California residents have the right to:

  • Right to Know: Request disclosure of the personal information we collect, use, disclose, and sell (if applicable)
  • Right to Delete: Request deletion of your personal information, subject to certain exceptions
  • Right to Opt-Out of Sale: We do NOT sell your personal information
  • Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights
  • Right to Correct: Request correction of inaccurate personal information
  • Right to Limit Use of Sensitive Personal Information: Not applicable (we do not collect sensitive personal information)

Important CCPA Disclosures

  • Do Not Sell: We do NOT sell, rent, or share your personal information for monetary or other valuable consideration
  • Do Not Share: We do NOT share your personal information for cross-context behavioral advertising
  • Business Purpose Disclosure: We share your information only with Resend (our email service provider) for the sole purpose of delivering your inquiry to our team
  • Retention: We retain your information for 12 months or until you request deletion

How to Exercise Your CCPA Rights

To exercise any of your CCPA rights, please contact us at:

Email: privacy@hapchotmed.com

Subject line: "CCPA Request - [Type of Request]"

Response Time: We will respond to your request within 45 days. If we need additional time (up to 45 more days), we will notify you of the extension and the reason.

Verification: To protect your privacy, we may need to verify your identity before processing your request. We will only use the information you provide for verification purposes.

Authorized Agents: You may designate an authorized agent to make a request on your behalf. The agent must provide proof of authorization.

CCPA Metrics

As required by CCPA, we will publish annual metrics about CCPA requests received. For the current reporting period, please contact us at privacy@hapchotmed.com.

10. International Data Transfers

Your data may be transferred to and processed in the United States (via Resend). We ensure adequate protection through Standard Contractual Clauses (SCCs) approved by the European Commission.

11. Children's Privacy

Our services are not directed to individuals under 16. We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top indicates when changes were last made. Continued use of our contact form after changes constitutes acceptance of the updated policy.

13. Supervisory Authority

If you believe we have not handled your data appropriately, you have the right to lodge a complaint with your local data protection authority. For EU residents, you can find your local authority at: edpb.europa.eu

14. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact:

Hapchot Medical
Data Protection Contact
Email: privacy@hapchotmed.com