Privacy Policy

Public website and waiting lists

This section was updated on September 22, 2026.

When you submit a waiting-list form, you provide your email to Medsys AI through HubSpot, our forms and contact-management provider. We will use it to contact you about the list you selected: the tool for patients and families or the future private beta for healthcare professionals. These forms do not request medical information; do not include symptoms, diagnoses or patient data.

The website uses Google Analytics 4 to measure pages and topics viewed, the interest option selected, navigation and confirmed form submissions. This measurement may be associated with pseudonymous browser identifiers. Events from this flow do not include your email or form fields. Selecting an option expresses an interest; it does not verify your profession or establish a diagnosis or health condition.

Your choice is remembered in this browser for 90 days after your latest selection or submission. The originating page and topic are remembered for 30 minutes within the browser session to connect your visit with the form. You can clear this information by deleting the website's data in your browser. These periods apply to the flow's local storage, not to data retention by HubSpot or Google.

See the HubSpot Privacy Policy and the Google Privacy Policy. To ask about your contact details, request their deletion or stop receiving waiting-list updates, email info@medsys.ai.

Information about the application

Last Updated: November 5th, 2024

1. Introduction

Welcome to Medsys AI S.L. ("we," "us," or "our"). We are committed to protecting the privacy and security of your personal data. This Privacy Policy outlines how we collect, use, and safeguard information when you use our web application ("App") designed to assist physicians in patient consultations.

2. Compliance with EU and US Legislation

We comply with the General Data Protection Regulation (GDPR) in the European Union and the Health Insurance Portability and Accountability Act (HIPAA) in the United States, along with other applicable data protection laws.

3. Data Controller

For the purposes of GDPR, Medsys AI S.L. is the data controller of your personal information.

4. Information We Collect

5. How We Use Your Information

We use the collected data to:

6. Legal Basis for Processing

7. Data Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal data or patient data to outside parties unless required by law.

8. Data Retention

We retain personal and patient data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy. Data will be deleted upon the physician's request.

9. Data Security

We implement robust security measures, including encryption and secure storage, to protect your data against unauthorized access, alteration, disclosure, or destruction.

10. International Data Transfers

Your data may be transferred to and processed in countries other than the country in which you are resident. These countries may have data protection laws different from your country.

11. Your Rights Under GDPR

12. HIPAA Compliance

We are committed to complying with HIPAA regulations regarding the protection of patient health information. All patient data is encrypted and securely stored.

13. Additional Considerations

14. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

15. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Email: info@medsys.ai
Address: C/Fernández de los Ríos 51, 28015 Madrid, Spain