Privacy Policy

This Privacy Notice for Mortigen Inc. (doing business asConsultologist.AI) ("we", "us", or "our") describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you:

• Visit our website at consultologist.ai, or any website of ours that links to this Privacy Notice
• Use Consultologist, our application atapp.consultologist.ai — a platform that helps specialist physicians create consultation notes
• Engage with us in other related ways, including marketing or events

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have questions or concerns, contact us attauheed[dot]elahee[at]consultologist[dot]ai.

Summary of key points

• What personal information do we process? Contact and account information you provide, and limited technical information collected automatically. See Section 1.
• Do we process sensitive information? The application processes clinical referral content submitted by physician users, which may contain patient health information. We treat this with specific safeguards — see Section 4.
• Do we collect information from third parties? No. We do not purchase or collect information about you from data brokers, public databases, or social media platforms.
• How do we process your information? To provide and improve the Services, communicate with you, keep the Services secure, and comply with law. See Section 2.
• When and with whom do we share information? With the service providers that run our infrastructure — principally Microsoft Azure. We do not sell personal information or share it with advertisers. SeeSection 5.
• What are your rights? Depending on where you live, you may have rights to access, correct, or delete your personal information. SeeSection 12.
• How do you exercise your rights? The easiest way is viaconsultologist.ai/contact or by emailing us.

Table of contents

1. What information do we collect?
2. How do we process your information?
3. What legal bases do we rely on to process your information?
4. Patient information in referral content
5. When and with whom do we share your personal information?
6. Do we use cookies and other tracking technologies?
7. Do we offer artificial intelligence-based products?
8. How do we handle your logins?
9. How long do we keep your information?
10. How do we keep your information safe?
11. Do we collect information from minors?
12. What are your privacy rights?
13. Controls for Do-Not-Track features
14. Do we make updates to this notice?
15. How can you contact us about this notice?
16. How can you review, update, or delete your data?

1. What information do we collect?

Personal information you disclose to us

In short: we collect personal information that you provide to us.

We collect personal information that you voluntarily provide when you register for the application, join the waitlist or contact us through our website, or otherwise communicate with us. Depending on how you interact with the Services, this may include:

• names
• email addresses
• job titles and medical specialty
• institution or clinic name
• authentication data from your sign-in provider
• contact preferences
• anything you choose to write in the contact form's comments field

Payments. We do not currently sell paid subscriptions or process payments, and we do not collect payment card information. If this changes, we will update this notice first.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to it.

Information automatically collected

In short: some technical information — such as your IP address and browser characteristics — is collected automatically when you use the Services.

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity but may include device and usage information such as IP address, browser and device characteristics, operating system, referring URLs, and information about how and when you use the Services. It is primarily needed to keep the Services secure and operating, and for internal analytics. This includes:

• Log and usage data. Service-related, diagnostic, usage, and performance information our servers collect automatically, such as request logs, error reports, and feature usage.
• Device data. Information about the computer or device you use to access the Services, such as IP address, browser type, operating system, and system configuration.

We do not collect precise geolocation, and we do not obtain information about you from data brokers, public databases, marketing partners, or social media platforms.

2. How do we process your information?

In short: we process your information to provide, improve, and administer the Services, communicate with you, keep the Services secure, and comply with law.

• To facilitate account creation and authentication and otherwise manage user accounts, including enabling accounts as we admit beta testers.
• To deliver the Services — most importantly, to generate consultation note drafts from the referral content you submit.
• To respond to inquiries and offer support.
• To send administrative information such as changes to our terms and policies.
• To contact you about availability and updates if you joined the waitlist or asked to be contacted — you can opt out at any time.
• To request feedback about your use of the Services, particularly during the beta.
• To post reviews or testimonials on our website, only with the reviewer's consent.
• To protect the Services, including spam prevention, fraud monitoring, and abuse prevention.
• To evaluate and improve the Services, including identifying usage trends and fixing defects.

3. What legal bases do we rely on to process your information?

In short: we only process your personal information when we have a valid legal reason to do so — such as your consent, compliance with laws, providing you with services, protecting your rights, or our legitimate business interests.

We may process your information if you have given us specific permission (express consent) to use it for a specific purpose, or in situations where your permission can be inferred (implied consent). You canwithdraw your consent at any time.

In some exceptional cases, we may be legally permitted under applicable law to process your information without your consent — for example: if collection is clearly in the interests of an individual and consent cannot be obtained in a timely way; for investigations and fraud detection and prevention; for business transactions provided certain conditions are met; if disclosure is required to comply with a subpoena, warrant, court order, or rules of the court; if the information was produced by an individual in the course of their employment, business, or profession and the collection is consistent with the purposes for which it was produced; or if the information is publicly available and specified by regulations.

4. Patient information in referral content

In short: the application processes clinical text submitted by physician users, which may contain patient health information. We process it solely to provide the service, and we do not use it to train AI models.

Consultologist's core function is turning a referral package — text a physician pastes into the application — into a draft consultation note. That text may contain personal health information about patients. In respect of that information:

• Physician users remain the health information custodians of their patients' information under applicable health privacy law (such as Ontario's PHIPA). We process referral content as a service provider on the physician's behalf, solely to provide the Services.
• Referral content and generated notes are processed and stored on Microsoft Azure infrastructure. Consult generation uses Microsoft Azure AI services (see Section 7); the content is not used to train AI models.
• We do not sell, share for marketing, or otherwise use referral content for any purpose beyond providing and securing the Services.
• The application keeps a history of consult generation jobs for the physician's own record and review; physicians can request deletion of their account and its data (see Section 16).
• During early access, deployments are set up with each clinic so that data handling meets the clinic's privacy and security requirements. Ask us about the specifics for your site.

5. When and with whom do we share your personal information?

In short: we share information only with the service providers that run our infrastructure, and in limited legal situations. We do not sell personal information, and we do not share it with advertising networks.

We may share your data with third-party vendors, service providers, or agents ("third parties") who perform services for us or on our behalf and require access to such information to do that work. The third parties we use are:

• Cloud hosting and infrastructure: Microsoft Azure (website and application hosting, storage, backups, and monitoring via Azure Application Insights)
• AI services: Microsoft Azure AI (consult draft generation — see Section 7)
• Authentication: Microsoft Entra ID (Microsoft accounts) and LinkedIn OAuth, when you use them to sign in to the application
• Email delivery: Azure Communication Services (contact-form and service emails)
• Security and spam prevention: Cloudflare Turnstile, which verifies that contact-form submissions come from humans
• Web analytics: Microsoft Clarity, which we may use to understand how visitors use our website (seeSection 6)

We may also need to share personal information in the following situations:

• Business transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

6. Do we use cookies and other tracking technologies?

In short: we use a small number of strictly functional technologies today, and no advertising cookies at all.

• Preferences: the website stores your light/dark theme choice in your browser's local storage. It never leaves your device.
• Security: Cloudflare Turnstile runs on our contact form to block automated spam, and may set technical cookies for that purpose.
• Sessions: the application stores authentication tokens in your browser so you stay signed in.
• Analytics: we may use Microsoft Clarity on the website to understand how pages are used (for example, which sections visitors read). Clarity sets analytics cookies and may record anonymized interaction data; form fields are masked. We will keep this section current with the tools we actually run.

We do not use advertising, retargeting, or cross-site tracking technologies. Most web browsers accept cookies by default; you can usually set your browser to remove or reject them, though some features of the Services may not work without the functional ones.

7. Do we offer artificial intelligence-based products?

In short: yes — AI-assisted consult drafting is the product. It runs on Microsoft Azure AI services.

Consultologist provides features powered by artificial intelligence ("AI Products"): generating draft consultation note sections from referral content, text analysis, and related natural-language processing. We provide these through Microsoft Azure AI services ("AI Service Provider"). Your input and output are processed by the AI Service Provider within our Azure environment to provide the Services, under agreements that do not permit its use to train their models. The AI models we run may include open-weight models from third-party developers (such as DeepSeek), hosted entirely within our Microsoft Azure environment — no data is sent to, or shared with, the developers of those models.

Every AI-generated draft is presented to the physician for review, editing, and sign-off; nothing enters a clinical record without the physician's approval. You must not use the AI Products in any way that violates the terms or policies of the AI Service Provider.

8. How do we handle your logins?

In short: if you sign in with a Microsoft or LinkedIn account, we receive certain profile information from that provider.

The application offers registration and sign-in using third-party identity providers (such as a Microsoft account via Microsoft Entra ID, or LinkedIn). Where you choose this, we receive certain profile information from the provider — typically your name and email address. We use this information only for the purposes described in this notice. We do not control, and are not responsible for, the provider's own use of your information; review their privacy notices to understand their practices.

9. How long do we keep your information?

In short: for as long as necessary to provide the Services, unless a longer period is required by law.

We keep your personal information only as long as necessary for the purposes set out in this notice, unless a longer retention period is required or permitted by law. No purpose in this notice requires keeping your personal information longer than the period in which you have an account with us. When we have no ongoing legitimate business need to process your personal information, we will delete or anonymize it — or, if that is not possible (for example, because it is held in backup archives), we will securely store it, isolated from further processing, until deletion is possible.

10. How do we keep your information safe?

In short: through organisational and technical security measures — though no system can be guaranteed 100% secure.

We have implemented appropriate and reasonable technical and organisational security measures designed to protect the personal information we process. However, no electronic transmission over the Internet or information storage technology can be guaranteed to be completely secure, so we cannot promise that unauthorised third parties will never defeat our security. Transmission of personal information to and from our Services is at your own risk; access the Services only within a secure environment.

11. Do we collect information from minors?

In short: we do not knowingly collect data from or market to anyone under 18 years of age.

We do not knowingly collect, solicit data from, or market to children under 18 years of age (or the equivalent age specified by law in your jurisdiction). By using the Services, you represent that you are at least 18. If we learn that personal information from users under 18 has been collected, we will deactivate the account and take reasonable measures to delete the data promptly. If you become aware of any data we may have collected from children, contact us attauheed[dot]elahee[at]consultologist[dot]ai. (This age restriction applies to users of the Services; it does not restrict the ages of patients whose information appears in referral content submitted by physicians.)

12. What are your privacy rights?

In short: in some regions, such as Canada, you have rights that allow you greater access to and control over your personal information.

Depending on applicable law, you may have the right to request access to and obtain a copy of your personal information, request correction or erasure, restrict its processing, and, if applicable, request data portability. In certain circumstances you may also have the right to object to the processing of your personal information. You can make such a request by contacting us using the details in Section 15. We will consider and act upon any request in accordance with applicable data protection laws.

Withdrawing your consent: if we rely on your consent — express or implied — you can withdraw it at any time by contacting us. This will not affect the lawfulness of processing before the withdrawal.

Opting out of marketing: you can unsubscribe from marketing communications at any time by using the unsubscribe link in our emails or by contacting us. We may still send you service-related messages necessary for the administration of your account.

Account information: you can review or change your account information by logging in to your account settings, or request termination of your account by contacting us. On termination we will deactivate or delete your account and information from our active databases, though we may retain some information to prevent fraud, troubleshoot problems, assist with investigations, enforce our legal terms, and/or comply with legal requirements.

13. Controls for Do-Not-Track features

Most web browsers include a Do-Not-Track ("DNT") setting to signal your preference not to have your online browsing monitored. No uniform technology standard for recognising DNT signals has been finalised, and we do not currently respond to them. If a standard is adopted that we must follow, we will inform you in a revised version of this notice.

14. Do we make updates to this notice?

In short: yes, as necessary to stay compliant with relevant laws.

We may update this Privacy Notice from time to time. The updated version will be indicated by the "Last updated" date at the top. If we make material changes, we may notify you by prominently posting a notice or by contacting you directly. We encourage you to review this notice frequently.

15. How can you contact us about this notice?

If you have questions or comments about this notice, you may contact our Data Protection Officer by email attauheed[dot]elahee[at]consultologist[dot]ai.

16. How can you review, update, or delete your data?

You have the right to request access to the personal information we collect from you, details about how we have processed it, correction of inaccuracies, or deletion of your personal information. You may also have the right to withdraw your consent to our processing. These rights may be limited in some circumstances by applicable law. To make a request, visitconsultologist.ai/contact or email us.

This Privacy Policy was created usingTermly's Privacy Policy Generator and adapted to describe our Services.