Privacy policy

Data controller

The controller for personal data processed through this website and your Raisonance account is ASTRONE, 1 RUE DUVIARD 69004 LYON, France. For any privacy request, contact benoitdelemps@protonmail.com.

Patient health data stays on your device

Patient information you enter into the Raisonance desktop application — including notes, audiograms, identifiers, and reports — is stored locally on your workstation. It is not transmitted to our servers.

Raisonance includes optional encrypted synchronisation to storage that you select and control. It is disabled by default. ASTRONE does not receive the synchronised data or hold the encryption keys.

ASTRONE does not receive or process synchronized patient data. The clinic or practitioner remains the controller of patient records and is responsible for its selected storage provider, hosting location, and data-processing terms.

Data we do process

• Website visitors: server logs (IP address, request metadata) kept for security and troubleshooting, and a strictly necessary session cookie when you sign in.
• Account holders: name, email address, authentication credentials, and license/activation data.
• Buyers: billing and payment data, handled by our payment processor (Stripe). We do not store full card numbers.
• Support: the content of messages you send to our Proton Mail mailbox. Do not send patient information or files.

Cookies

This website uses only a strictly necessary session cookie required to keep you signed in. We use no analytics, advertising, or third-party tracking cookies, so no cookie consent banner is required.

Purposes and legal bases

Providing your account and license

Performance of the contract (Art. 6(1)(b))

Billing and invoicing

Legal obligation (Art. 6(1)(c))

Security logs and fraud prevention

Legitimate interest (Art. 6(1)(f))

Responding to support requests

Performance of the contract / legitimate interest

Legitimate interests

Where we rely on legitimate interests, those interests are protecting website and account security, preventing fraud, maintaining service integrity, and responding to enquiries that are not required to perform a contract.

Recipients and service providers

We share account, billing, and infrastructure data only with the service providers needed to operate Raisonance:

• Cloudflare — website, account, authentication, licensing, update, and download infrastructure.
• Backblaze — disaster-recovery storage for account, authentication, licence, and release data.
• Stripe — payment processing and subscription management.
• Proton — support email hosting.
• Hugging Face — model downloads.
• US National Library of Medicine (NLM/NCBI) — PubMed evidence searches using generalised clinical terms.

These providers receive only the service data needed for their stated role under their applicable contractual and data-protection terms. They do not receive patient health data.

International transfers

Some providers may process data outside the EEA. PubMed evidence searches contact NLM/NCBI in the United States and disclose the generalised search terms and ordinary network metadata. Other transfers rely on the applicable provider mechanism and safeguards.

Transfer safeguards

You may contact benoitdelemps@protonmail.com for information about, or a copy of, the safeguards applicable to an international transfer of your personal data.

Retention

Account data

Until the user deletes the account

License and activation data

Until expiry or user deletion

Support messages

Until no longer needed to resolve the request or related claims

Billing records

As required by law (typically 10 years in France)

Website security logs

7 days

Disaster-recovery copies of account, authentication, and licence data

Up to 90 days

Local app data

Controlled by you on your device

Clinical records

You configure the clinic-wide retention period. Raisonance does not determine your legal retention obligations; expiry archives records reversibly and never deletes them.

Artificial intelligence

Raisonance runs its AI model locally on your workstation. Prompts and patient data are not sent to a remote model provider, and your data is not used to train any model.

Security

We apply appropriate technical and organisational measures to protect personal data (Art. 32 GDPR), including encryption, access controls, and signed software updates. See the Security page for more.

Required data and automated decisions

An email address and password are contractually required to create and secure an account. Without them, we cannot provide an account or license.

ASTRONE does not use personal data to make solely automated decisions that produce legal or similarly significant effects.

Your rights

You have the right to access, rectify, erase, restrict, and port your data, and to object to certain processing. To exercise these rights, contact benoitdelemps@protonmail.com.

You may also lodge a complaint with the French data protection authority (CNIL, www.cnil.fr).