Privacy Policy

This policy covers the ZAMAPHARMA AG website (zamapharma.com) and the MediGraph MD platform, both operated by ZAMAPHARMA AG. MediGraph MD is intended exclusively for licensed physicians.

Consultation content — the text you submit and any files you attach to MediGraph MD. This is transmitted to our current AI provider to generate a response.

Technical data — your IP address, the approximate location derived from it (city, country, network operator), and your browser's user agent.

Identifiers — a random identifier stored in the medigraph_user cookie for one year, and a conversation identifier generated per page load.

Usage records — timestamps, the number of files attached and the length of a message.

We do not record the content of your messages or the names of your files. Our logs retain only the counts above.

Your preferences — theme, language, panel width, and acknowledgement of the entry disclaimer — are stored in your browser and are never transmitted to us.

MediGraph MD is not intended to receive data that identifies a patient. You must de-identify clinical information before submitting it. If you submit identifiable patient data in breach of these terms, you remain responsible for that data under the law applicable to you.

Where the EU/UK GDPR applies, we rely on our legitimate interests in operating, securing and improving a professional decision-support service (Art. 6(1)(f)), and on your consent for any non-essential cookie. Where the Swiss FADP applies, processing is carried out on the equivalent bases.

We hold no conversation on our servers. A consultation exists only in your browser and is lost when you reload the page, unless you save it to a file yourself. Operational logs, which contain the identifiers and counts described above, are kept only for as long as they are needed to run and secure the service.

You may request access, rectification, erasure, restriction, objection and portability by contacting ZAMAPHARMA AG. You may also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner, or with your local supervisory authority in the EEA or the UK.

The ZAMAPHARMA AG website and MediGraph MD are served over TLS. MediGraph MD has no user accounts or stored credentials. No internet service can be guaranteed secure, and MediGraph MD is under development.

We will post any material change to this policy on this page and update the date above.