Privacy policy
This document describes what we collect, why, what happens to the files you upload, and what rights you have. It describes what the current version actually does, not what we intend to do. If anything here does not match your experience, that is a fault and we want to hear about it.
Who we are and who to contact
HealthyGrid operates this site and controls the information collected through it.
- For any privacy matter — access, correction, deletion or a complaint: [email protected]
- We answer privacy enquiries within a reasonable time, and in any case as the law requires.
What we collect
Three kinds, and nothing beyond them.
- Registration details for the analysis tool: full name, email, phone and company name.
- Images you upload for analysis, together with the technical data the camera stored inside them.
- A hashed technical identifier derived from your IP address. We do not keep the address itself.
Why we collect it, and whether you must provide it
You are under no legal obligation to give us anything. Without the registration details the analysis tool simply cannot be used.
- Registration details: to give you access to the tool, to contact you about your use of it, and to prevent abuse.
- The image: to perform the analysis you asked for, and nothing else.
- The hashed identifier: rate limiting and protection against malicious load.
- Marketing consent is entirely separate, optional, and never a condition of using the tool.
What happens to an image you upload
This is the part we most want to be exact about, and it depends on a choice you make.
- The image is sent to our server so the analysis can run.
- Next to the upload there is a checkbox, ticked by default, allowing us to keep the image to improve the detection model.
- If it is ticked: the image is kept for 24 months and used only to improve detection accuracy.
- If you untick it: the image is processed in memory, never written to disk, and gone when the request ends.
- Unticking it does not affect the analysis. The service is not conditioned on retention.
- Only radiometric images are ever kept. A file carrying no measurement data is not retained at all.
- Retained images are not given to any third party and are not used for any other purpose.
Who else sees it
We do not sell, rent or pass personal information to third parties for marketing.
- Registration details are held only in our own database.
- The site is delivered through a network service (Cloudflare) that provides protection and traffic handling. It sees technical traffic data as part of that service.
- The network map, which is behind a sign-in, draws its background from Google Maps. Google therefore sees the address you connect from and which geographic areas you bring into view. The positions of individual structures are drawn by your own browser out of our data and are never sent to Google.
- No other page on this site contacts Google. We deliberately block the font service that the mapping component tries to load, so that looking at a map does not also announce you to a second Google service.
- We would disclose information to an authority only where the law compels us to.
How long we keep it
Only as long as there is a reason to.
- Registration details: while the account is active, and until you ask for their deletion.
- Images you agreed to keep: 24 months from upload, after which they are deleted. Images you did not agree to are not retained at all.
- Consent records: kept even after deletion, so we can show what was agreed and when — which the law itself requires.
Your rights
These are rights the law gives you, and we are obliged to honour them.
- To see the information held about you.
- To have incorrect or outdated information corrected.
- To ask for your information to be deleted, including any images we kept.
- To withdraw marketing consent at any time, without affecting your use of the tool.
- To complain to the Privacy Protection Authority if you believe we have acted unlawfully.
Cookies and usage measurement
We distinguish what is necessary from what requires your consent.
- Essential cookies: your site language and your registration for the tool. The site cannot work without them, so they do not require consent.
- Network-provider traffic measurement: performed at the network level, sets no cookie and does not identify you personally. It precedes page load, so it is not controlled by the banner.
- We use no advertising cookies and do no cross-site tracking.
- The network map page loads the mapping service directly. We measured what it leaves behind: in the configuration we use — with Street View and clickable places switched off — it sets no cookie and writes nothing to your browser’s storage. What it does see is the connection itself, described in the section above. That page is behind a sign-in and no other page on the site loads it.
Security
Protecting information is a matter of implementation, not of assertion.
- Traffic to the site is encrypted.
- Access tokens are stored only as hashes — someone reading the database cannot impersonate you.
- The account the site uses to reach the database holds the minimum permissions required, and has no delete permission at all.
- Raw IP addresses are not stored.
Changes to this policy
When we change this policy we update the date at the top of the page.
- The version of the consent you accepted is stored with your record, so what exactly you agreed to can always be established.
- A material change that requires fresh consent will be asked for, not assumed.
Note: the current tool is a trial environment. Its results do not replace the judgement of a qualified professional.