Privacy & Cookies Policy

1. Who we are

MedReader is a Brazilian artificial intelligence platform dedicated to the automated processing of medical prescriptions, serving PBMs, pharmacy chains, health plans and hospitals.

This website (www.medreader.com.br) is our corporate channel for product presentation and commercial contact. All data collected here is processed in accordance with Brazil's General Data Protection Law (LGPD — Law 13,709/2018).

2. Data we collect

2.1 Contact form

When you fill in the contact form, we collect:

• Full name
• Company name
• Work email address
• WhatsApp number (optional)
• Segment
• Message (optional)

2.2 Data collected automatically

When you browse this site, some data is collected automatically by third-party services (detailed in the Cookies section):

• IP address and approximate location
• Device type, browser and operating system
• Pages visited and time spent
• Traffic source (organic search, direct, social etc.)

3. How we use your data

We do not use your data for unsolicited marketing, sale to third parties, or advertising profile creation.

4. Legal basis (LGPD)

5. Cookies and similar technologies

This site uses cookies — small text files stored in your browser. Each category is detailed below:

5.1 Strictly necessary cookies

Essential for the secure operation of the site. They do not require consent.

5.2 Analytics cookies (require consent)

5.3 Manage your preferences

You can revoke your consent to analytics cookies at any time by clicking the button below. The cookie banner will be shown again so you can make a new choice.

Review my cookie preferences

6. Data sharing

Your data may be processed by the following providers, strictly for the purposes described:

We do not sell, rent or share personal data with third parties for commercial purposes.

7. Retention and deletion

• Contact form data: kept for the time needed to handle your request and up to 2 years after the last contact, unless otherwise required by law.
• Analytics data: retained per Google Analytics configuration (default: 14 months).
• Email logs (SES): up to 90 days.

To request early deletion of your data, contact the email address listed in section 10.

8. Your rights as a data subject

Under Art. 18 of the LGPD, you have the right to:

• Confirmation that your data is being processed
• Access to the data we hold about you
• Correction of incomplete, inaccurate or outdated data
• Anonymization, blocking or deletion of unnecessary data or data processed in breach of the law
• Portability of your data to another provider
• Withdrawal of consent at any time
• Objection to processing based on legitimate interest

To exercise any of these rights, send a request to contato@medreader.com.br. We will respond within 15 business days.

9. Security

We adopt technical and organizational measures to protect your data, including:

• Encrypted transmission via HTTPS/TLS
• Origin validation with Google reCAPTCHA v3
• Infrastructure hosted on AWS with access controls
• Access to contact form data restricted to MedReader's commercial team

10. Contact and Data Protection Officer (DPO)

For questions, requests or complaints about personal data processing:

• Email: contato@medreader.com.br
• Site: www.medreader.com.br

You can also file complaints with the Brazilian National Data Protection Authority (ANPD): www.gov.br/anpd.

11. Updates to this policy

This policy may be updated periodically. Material changes will be communicated via notice on this site. The last update date is always shown below.