Privacy Policy

Konrad AI – Privacy Policy

Last Updated: October 31, 2025

Welcome to Konrad AI. We provide software and tools to support healthcare services providers, specifically regulated entities under the US Health Insurance Portability and Accountability Act ("HIPAA").

We know that trust is paramount when handling sensitive legal documents. This Privacy Policy is written in plain language to clearly explain what data we collect, why we collect it, and how we handle it.

1. Application of this Privacy Policy

This Privacy Policy applies to all users of the Konrad AI BAA review and risk assessment platform (the "Service") and to anyone who visits our website at www.konradai.com and its child pages (the "Site"). It includes the privacy practices for the Service and the Site and it applies to our customers and their employees (referred to as "you" or "users") who register for an account and use the Konrad AI Service.

2. Personal Information we may collect

We collect the following categories of personal information for the purposes described below:

  • Contact information, e.g., your email address, first name, last name, address, city, state, and ZIP code: To communicate with you and provide access to the Service.
  • Customer Support information, e.g., data you share when you contact us for help: To resolve issues and improve the Service and Site.
  • Social Media Information, e.g., interactions on LinkedIn, X, or YouTube: To engage with users and promote the Service.
  • Payment and Transaction Data, e.g., credit card information: If you sign up and pay for the Service online, we will collect payment and transaction data. Konrad AI's payment processor for the Services is Stripe. See Stripe Privacy Policy.
  • Usage Information, e.g., IP address, browser type: We use third-party web analytics services to collect and analyze information about how you interact with the Service and Site. Our service providers may use cookies or similar technologies to collect this information. You can prevent analytics tracking on return visits by disabling cookies in your browser or by using opt-out mechanisms provided by these services, which we can direct you to upon request. We have configured our analytics implementation to anonymize IP addresses and comply with applicable privacy laws.
  • Business Visitors, e.g., IP address, pages visited: We also use B2B visitor identification services to identify companies that visit our Site to help us understand which organizations are interested in the Service. This information is used to identify the company or organization you are associated with.

3. We Do Not Collect PHI

The Service is designed for business users to review and analyze legal contracts, specifically those related to the US healthcare vertical and to security, privacy and compliance requirements under HIPAA.

  • B2B Only: We only offer our services to businesses, most commonly companies, not to individuals for personal use.
  • No PHI Collection: The Service is not intended to process Protected Health Information (PHI) as defined under HIPAA. We rely on our users to ensure that any uploaded documents are either contract templates or drafts that do not contain PHI.

4. How We Use Your Contract Data and AI Training

This section addresses one of the most important question for a Generative AI platform:

  • Service Provision: We use your Customer Input Data (contracts) strictly to perform the service you requested (e.g., review, analyze, compare).
  • AI Model Improvement: We understand the need for trust. We may use portions of your Customer Input Data (contracts) to improve our underlying proprietary Generative AI models, but only after that data has been fully anonymized and aggregated with data from other customers. This ensures that your specific, identifiable contract information is never used for training.
  • Further Details: For more specific contractual terms about data ownership, use, and security, please refer to our Terms of Service for the Konrad AI platform.

5. With Whom we Share Data

We only share your data as needed to run our business or as required by law.

  • Service Providers (Sub-processors): We share data with trusted third-party vendors who provide essential services for us, such as our cloud hosting provider AWS and for customer support. These vendors are legally obligated to protect your data and only use it for the purposes we define.
  • Legal Compliance: We will disclose your data if we are required to do so by law, court order, or governmental request.
  • Business Transfers: If Konrad AI is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

6. Your Choices

You have a number of choices when it comes to the personal information you provide to us:

  • Access or update your information. If you have registered for an account with us, you may review and update your account information at any time by logging into the account, or by email request to info@konradai.com.
  • Opt-out of marketing communications. You may opt-out of marketing-related emails by following the opt-out or unsubscribe instructions at the bottom of the email. Even if you choose to opt-out of marketing-related emails, you may continue to receive necessary Service-related and other non-marketing emails.
  • Declining to provide information. We need to collect certain personal information to provide the Services. If you choose not to provide the information we identify as required or mandatory, we may not be able to provide you those Services.

7. Security

We take reasonable and appropriate technical and organizational security measures to protect your data from unauthorized access, disclosure, alteration, or destruction. However, no internet transmission or electronic storage is 100% secure, so we cannot guarantee absolute security.

8. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last Updated" date.

9. Contact Us

If you have any questions, comments, or requests regarding this Privacy Policy or your data, please contact us at info@konradai.com.