Our commitment: PharmaDocs AI processes pharmaceutical documents that may contain sensitive commercial data. We treat your data with the highest confidentiality standards and never sell or share it with advertisers or unrelated third parties.
The data controller for PharmaDocs AI is Ashab Group, a pharmaceutical company registered in India. For privacy enquiries, contact us at info@ashabpharma.com.
| Purpose | Legal Basis | Retention |
|---|---|---|
| Deliver the Service (AI extraction, document generation) | Contract performance | Duration of account |
| Authentication and session management | Contract performance | Session expiry (1 hour / 30 days) |
| Billing and subscription management | Contract performance / Legal obligation | 7 years (tax records) |
| Customer support | Legitimate interest | 3 years after ticket closure |
| Security monitoring and fraud prevention | Legitimate interest | 90 days |
| Platform analytics and improvement | Legitimate interest | Aggregated, no individual link |
We use the following third-party services to operate the Platform:
Each third-party processor is bound by appropriate data processing agreements and complies with applicable privacy regulations.
We use strictly necessary HttpOnly cookies to manage your authenticated session:
We do not use advertising cookies, tracking pixels, or analytics cookies that identify individual users.
Depending on your jurisdiction, you may have the following rights:
To exercise any right, email us at info@ashabpharma.com. We respond within 30 days.
We implement multiple layers of security:
When you delete your account, all personal data, uploaded files, and generated documents are permanently deleted within 30 days. Billing transaction records are retained for 7 years as required by tax law. Anonymised aggregated usage statistics may be retained indefinitely.
Your data may be processed in countries outside your own, including India, the United States, and the European Union, by our third-party processors listed above. All transfers are protected by appropriate safeguards (Standard Contractual Clauses, Privacy Shield equivalents, or adequacy decisions).
The Platform is intended for professional use by adults aged 18 and over. We do not knowingly collect data from minors. If you become aware of a minor using the Service, please contact us immediately.
We may update this Privacy Policy. Material changes will be communicated by email at least 14 days in advance. The "Last Updated" date at the top of this page will reflect the most recent revision.
For privacy questions or complaints:
If you are in the EU/EEA and are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.