Privacy Policy

Last Updated: March 31, 2026

1. Introduction

Samodrei (“we,” “us,” or “our”) provides AI-augmented platforms and services designed to enable data analysis, content traceability, and insight generation.
This Privacy Policy explains how we collect, use, disclose, and protect personal information in compliance with applicable laws including GDPR, CCPA/CPRA, and HIPAA (where applicable).

2. Scope

This policy applies to all Samodrei products, services, websites, and platforms, including PRISM™ and any integrations.
It applies to customers, users, and visitors interacting with our systems.

3. Information We Collect

Information You Provide: name, email, organization, account credentials, uploaded files, datasets, and communications.
Automatically Collected Data: IP address, browser/device info, usage logs, session data, and analytics.

Sensitive Data: may include healthcare or clinical data (including PHI) where uploaded by users.

We do not intentionally collect sensitive personal data unless provided by users.

4. How We Use Information

5. AI Data Processing

6. HIPAA & Healthcare Data
7. Legal Basis for Processing (GDPR)

For EEA users, we process data under:

8. Data Sharing and Disclosure
We do not sell personal data.
We may share data with trusted service providers (cloud hosting, analytics, infrastructure).
We may disclose data where required by law or to protect rights and safety.
All third parties are contractually bound to confidentiality and data protection obligations.
9. Data Retention
We retain data only as long as necessary for service delivery, legal compliance, and operational purposes.

Retention periods depend on account status, contractual requirements, and applicable laws.

10. Data Security

We implement industry-standard safeguards including:

Despite safeguards, no system is completely secure.

11. Your Rights (GDPR)

Users have rights to access, correct, delete, restrict, port, and object to processing of personal data.

12. California Privacy Rights (CCPA/CPRA)
California residents have rights to know, access, delete, correct, and opt-out of data sharing.
They also have the right to limit use of sensitive personal information and to non-discrimination.
Categories collected include identifiers, usage data, professional information, and sensitive data (if provided).

Samodrei does not sell personal data.

13. International Data Transfers
Data may be transferred outside your jurisdiction, including to the United States.
We use safeguards such as Standard Contractual Clauses (SCCs).

14. Cookies and Tracking

We use cookies for functionality, analytics, and improving user experience.
Users may control cookies through browser settings.

15. AI Responsible Use

Use of Samodrei services is subject to our AI Responsible Use Policy.

Users must validate outputs and use AI responsibly, especially in regulated environments.

16. Updates

We may update this policy periodically. Updates will be reflected with a revised effective date.

17. Contact

Samodrei, LLC
8000 Towers Crescent Dr
Vienna, Va, 20182