1. Scope of this policy
This Privacy Policy describes how Bayes Pharma.ai ("Bayes Pharma.ai," "we," "us," or "our") handles personal information collected through our marketing websites (including BayesPharma Innovator, Bayes Pharma Generics.ai, and Bayes Pharma Clinical.ai) and through the workspaces, forms, and demo requests available on those sites (together, the "Sites").
This policy covers information about visitors, prospects, and named users of our Sites. It does not govern the scientific, clinical, or operational content that our customers upload into a licensed Bayes Pharma.ai workspace ("Customer Content") — that is addressed in Section 5 and, where applicable, in a separate data processing agreement between Bayes Pharma.ai and the customer organization.
2. Information we collect
Information you provide directly
- Demo and contact requests: name, work email, company or team name, the workflow or workspace you are interested in, and any message you choose to include.
- Account and workspace access (where applicable): name, email, role, organization, and authentication details for a licensed workspace.
- Support and correspondence: anything you send us by email or through in-product feedback tools.
Information collected automatically
- Usage data: pages viewed, workspace and module names accessed, search queries within the workspace directory, feature interactions, and timestamps.
- Device and technical data: IP address, approximate location derived from IP, browser type and version, operating system, device identifiers, and referring URLs.
- Cookies and local storage: including a locally stored theme preference (light/dark mode) and, where enabled, analytics identifiers. See Section 6.
We do not require you to create an account or submit personal information simply to browse the public marketing pages, read this policy, or explore the public product-preview sections of our Sites.
3. How we use information
- Respond to demo requests, pilot inquiries, and support questions.
- Operate, secure, and improve the Sites and workspace directory, including understanding which workspaces and workflows are most useful.
- Personalize your experience, such as remembering your color-theme preference.
- Send product, security, or account-related communications, and — where you have opted in or as permitted by law — marketing communications you can unsubscribe from at any time.
- Detect, investigate, and prevent fraud, abuse, and security incidents.
- Comply with legal obligations and enforce our Terms of Service.
4. Legal bases for processing
Where the EU/UK GDPR or a similar framework applies, we rely on one or more of the following legal bases:
- Consent — for optional analytics, marketing communications, or similar processing you can withdraw at any time.
- Contract — to provide the Sites and workspace access you request or that your organization has licensed.
- Legitimate interests — to secure our Sites, understand usage patterns, and improve our products, balanced against your rights and expectations.
- Legal obligation — where processing is required to comply with applicable law.
5. Customer content vs. site data
Licensed Bayes Pharma.ai workspaces are built to hold scientific and development evidence — models, assumptions, documents, endpoint data, and reviewer commentary — supplied by the customer organization ("Customer Content"). Customer Content is processed by Bayes Pharma.ai on behalf of the customer under the applicable order form, master subscription agreement, or data processing agreement, not under this public-facing Privacy Policy. If you are an end user of a customer's Bayes Pharma.ai workspace, your organization's own privacy notice and internal policies govern how your inputs into that workspace are handled, and Bayes Pharma.ai acts as a service provider/processor for that organization.
Where a customer chooses to bring real-world data, health-economic data, or other externally sourced data into the Evidence Hub or related workspaces, the customer is responsible for ensuring it has the rights and, where applicable, the de-identification or consent basis needed to do so. See our Medical & Regulatory Disclaimer for more on data brought into the product by customers.
8. Data retention
We retain personal information for as long as needed to fulfil the purposes described in this policy, including maintaining business records, responding to inquiries, meeting legal and audit obligations, and resolving disputes. Demo and contact-form submissions are generally retained for a limited period tied to the sales or support relationship and then deleted or anonymized unless a longer retention period is required by law or an active agreement.
9. Security
We apply administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, or destruction. Details of our broader security practices, including for licensed workspace deployments, are described in our Security & Data Compliance page. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. International transfers
Bayes Pharma.ai and its service providers may process information in countries other than the one in which you reside. Where required, we use appropriate safeguards for international transfers, such as standard contractual clauses or equivalent mechanisms recognized under applicable data-protection law.
11. Your privacy rights
Depending on your location, you may have the right to:
- Access, correct, or delete personal information we hold about you.
- Object to or restrict certain processing, including profiling used for marketing.
- Request a portable copy of information you provided to us.
- Withdraw consent at any time where processing is based on consent.
- Opt out of the sale or "sharing" of personal information, where applicable under laws such as the California Consumer Privacy Act (CCPA); to be clear, Bayes Pharma.ai does not sell personal information.
- Lodge a complaint with your local data-protection authority.
To exercise these rights, contact us using the details in Section 15. We may need to verify your identity before acting on a request.
12. Health & sensitive data
The public marketing Sites and demo/contact forms are not designed or intended to collect protected health information (PHI), patient-identifiable data, or other special-category health data about you. Please do not include such information when contacting us or requesting a demo.
Within licensed Bayes Pharma.ai workspaces, customers may process de-identified, aggregated, or otherwise permissioned real-world evidence, health-economic, or outcomes data as part of their own regulated activities. That processing is governed by the applicable customer agreement and data processing terms, and by the customer's own obligations under health-privacy laws (such as HIPAA in the United States or equivalent regimes elsewhere) — not by this public Privacy Policy.
13. Children's privacy
The Sites are intended for business and professional use by adults working in pharmaceutical and life-sciences development. We do not knowingly collect personal information from children, and the Sites are not directed to children under the age of 16.
14. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will revise the "last updated" date above and, where changes are material, provide additional notice as appropriate.
15. Contact us
If you have questions about this Privacy Policy or want to exercise a privacy right, contact us at: