Privacy Policy — Atlas

Last updated: [DATE]

1. Who we are

Atlas is operated by [LEGAL ENTITY NAME] (“we”, “us”, “our”). This policy explains what personal data we process when you use Atlas at [URL], and your rights under India's Digital Personal Data Protection Act, 2023 (the “DPDP Act”).

2. What Atlas does

Atlas extracts a defined set of markers from a blood-test report you upload and generates an automated, non-clinical lifestyle plan. Atlas reviews 17 specific markers and does not read your whole report. It is not medical advice and is not a substitute for a qualified doctor.

3. What we collect — and what we do not

Your uploaded report is processed in memory and is NOT stored. We do not retain the source PDF or image after extraction, and we do not capture identifiers printed on it — your name, UHID, date of birth, address, or lab name.

We store only:

• Account details — your email and authentication information.
• Marker values — the structured readings extracted from your report (marker name, value, unit, date), linked to your account so you can view your history.
• Clinician-review requests — if you submit one, the contact detail you provide and a reference to the relevant plan.

4. Third-party processing

To read the marker values from your uploaded report, the document is sent to our AI provider, Anthropic, for processing, after which it is discarded. Anthropic processes it to return the structured values. [Confirm against your data-processing terms with Anthropic — including that report contents are not used for model training — and state it here.]

5. Purpose and legal basis

We process your data to: extract your marker values and generate your plan; maintain your account and history; and respond to any clinician-review request you submit. We do this on the basis of your consent, which you provide before uploading a report. You may withdraw consent at any time (see Section 8).

6. Retention

• Source file: not stored — discarded immediately after extraction.
• Marker values and account data: retained until you delete them or close your account.
• Clinician-review requests: retained until the request is resolved [+ specify any period].

7. Security

Your data is protected by access controls so that it is accessible only to you when authenticated. [Briefly describe your measures — e.g., row-level access controls, encryption in transit.]

8. Your rights under the DPDP Act

You have the right to access, correct, and erase your personal data, to withdraw consent, and to nominate another person to exercise your rights in the event of death or incapacity. To exercise any of these, contact us at primelongevitylabs@gmail.com.

9. Grievance redressal

If you have a concern about how we handle your personal data, contact our Grievance Officer at primelongevitylabs@gmail.com. We will respond within the timelines required under the DPDP Act.

10. Children

Atlas is not intended for, and should not be used by, anyone under 18.

11. Changes to this policy

We may update this policy from time to time. The “last updated” date above reflects the current version.

12. Contact

Mumbai, India — primelongevitylabs@gmail.com.

This is a starting draft. Because Atlas handles sensitive health data, review it against the DPDP Act's specific requirements — notice, consent mechanics, data-principal rights, and grievance redressal — and confirm every clause matches your actual data flows before you publish it.