29 Sept 2025

29 Sept 2025

29 Sept 2025

Terms of Service

Welcome to Descrai. These Terms of Service (“Terms”) govern your use of our products and services, including our AI Copilot, Smart Safety Glasses, companion apps, integrations with ELNs, and cloud-based documentation systems (“Services”).

By using our Services, you agree to these Terms and our Privacy Policy.

1. Compliance Frameworks

  • GDPR: If you are based in the European Economic Area (EEA), United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) applies. We act as a data processor for your research data, and you (or your institution) remain the data controller.

  • HIPAA: If you are a covered entity or business associate under HIPAA, and research data may include Protected Health Information (PHI), Descrai will sign a Business Associate Agreement (BAA) before Services are provided.

2. Data Ownership

You retain full ownership of your data, including experimental recordings, research content, and PHI (if applicable). Descrai processes data only to deliver the Services and does not claim rights to your intellectual property.

3. International Data Transfers

If you are outside the United States, your data may be transferred to our secure servers in the U.S. or other jurisdictions. Such transfers are made under GDPR-approved safeguards, including Standard Contractual Clauses (SCCs).

4. Security

We implement ISO 27001–aligned controls, encryption in transit and at rest, and strict access policies. If handling PHI, we follow HIPAA Security Rule requirements, including:

  • Role-based access controls

  • Audit logs of all data access

  • Encryption of PHI at all times

  • Breach notification in compliance with HIPAA timelines

5. Data Subject Rights (GDPR)

If GDPR applies, you may request to:

  • Access your personal data

  • Correct inaccuracies

  • Delete data (“Right to be Forgotten”)

  • Restrict or object to processing

  • Receive your data in a portable format

Requests can be sent to [Insert Contact Email].

6. HIPAA Safeguards

When PHI is processed:

  • Descrai will use PHI only as permitted under the BAA.

  • PHI will never be sold, shared with advertisers, or used for product development without anonymization.

  • You are responsible for ensuring that your use of the Services complies with Institutional Review Board (IRB), institutional, or regulatory requirements.

7. Limitation of Liability

Descrai is not liable for indirect or consequential damages, including lost experiments, delayed drug discovery, or regulatory outcomes. Liability is limited to amounts paid in the past 12 months.