Legal

Privacy notice

How Scality Limited handles personal information on the Neogenic website and in the Neogenic app. Last updated 30 September 2026.

Privacy at a glance

01

Who is responsible

Scality Limited (company HE459172) operates the Neogenic website and app. Its registered office is Attikis 3, City Residences 1, 6045 Larnaca, Cyprus. For privacy questions or requests, email privacy@neogenic.ai.
02

Information we process

When you visit the website, our hosting provider may process technical information needed to deliver and protect it, including your IP address, request date and time, requested URL, browser and device information, and diagnostic or security logs. If you send an enquiry, we receive your name, work email and any clinic, programme, improvement or current-tools information you include. If you book a call, we receive the contact and scheduling information you provide through Calendly. With your consent, Meta Pixel and Google Analytics 4 may process the technical and usage information described in our Cookie Notice.
03

Email enquiries

The contact form keeps the details you type in your browser and uses them only to prepare an email in your own mail app. Nothing is submitted to Neogenic until you choose to send that email. Emails sent to info@neogenic.ai are received and stored through Google Workspace.
04

Booking a demo or call

Book a demo and the other scheduling buttons open Calendly. Calendly collects the contact and scheduling details you provide and makes them available to Scality Limited so we can arrange and manage the call. Calendly also processes this information under its own privacy notice.
05

Why we use information and our legal bases

We use technical hosting and security information for our legitimate interests in delivering, maintaining and protecting the website. We use enquiry and booking information to respond and take steps you request before a possible contract where you are the prospective customer. Where you contact us for an organisation, we rely on our legitimate interests in responding to business representatives and managing prospective business relationships. Optional website and advertising-performance measurement is used only with your consent, which you may withdraw at any time.
06

Clinic data in the Neogenic app

When a clinic uses Neogenic, the clinic decides how the contacts, enquiries and other records it stores are used. For that information the clinic is the controller and Scality processes it on the clinic’s behalf under our Data Processing Agreement. If you are a clinic’s contact or client, please send questions or requests about your information to that clinic; if you contact us, we pass your request to them.
07

Neogenic app accounts

For people who use the Neogenic app for their clinic, Scality is the controller of account information: name, work email, role, sign-in and security logs (including IP address and device information), and records of support requests. When a clinic’s authorized person accepts our Terms and Data Processing Agreement, we record their name, role, the clinic details they enter, the time and the document versions, and, where available, their IP address and browser information, as proof of that agreement.
08

Signing in with Google

If you choose to sign in with Google, Google shares your name, email address and profile picture with Neogenic. We use them only to sign you in and show who you are in the app.
09

Connecting your Gmail, Google Calendar or Outlook

You can connect your own work Gmail, Google Calendar or Microsoft Outlook account to Neogenic. For email, Neogenic asks permission to read and send mail; for calendar, to read and manage your events; and, for Outlook, to read your calendar category colours. Neogenic only imports emails exchanged with your clinic’s contacts from the last 30 days, when you refresh your mailbox, and skips drafts, junk and deleted mail. For each imported or sent email we store the subject, a short preview, the message text (including its formatted version), the sender and recipient addresses and the date. We do not store attachments. For emails you send from Neogenic we store a blind-copy (BCC) address only when it is the contact themselves; for imported emails we do not store BCC recipients. Your calendar is read when you use it and your events are not copied into Neogenic, apart from reference numbers for events you create through it. If you choose to share your calendar for booking, colleagues only see when you are busy or free, never event details.
10

Who can see connected email

Emails you import or send to a contact become part of your clinic’s records, so colleagues who are allowed to see that contact can see them, and Neo can use them when working for those colleagues. Before you connect a mailbox, Neogenic tells you this and asks you to confirm. If you leave the clinic, the emails stay with the clinic’s records; the clinic’s owner or administrators can view them, and each view is recorded.
11

Disconnecting and deletion

You can disconnect at any time. When you disconnect, leave the clinic or the clinic stops using Neogenic, we delete the stored sign-in tokens for that connection. For Google we also withdraw Neogenic’s access; for Microsoft you can remove Neogenic under My Apps in your Microsoft account. When disconnecting you can choose to also delete the emails imported from that mailbox; otherwise they stay as clinic records until the clinic deletes them or stops using Neogenic, when they are deleted after the 30-day exit period. Sign-in tokens are stored encrypted.
12

Google user data

Neogenic uses information received from Google APIs only to provide the email, calendar and sign-in features you use. We do not sell it, use it for advertising or use it to train AI models, and people at Neogenic do not read it except with your permission, for security reasons or where the law requires. When you ask Neo to work with your email or calendar, the relevant content is sent to the AI providers on our subprocessor list (OpenRouter, which routes it to Anthropic Claude models on Amazon Bedrock or Google Cloud Vertex AI with zero data retention) only to answer that request. Neogenic’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
13

Why we use app account information and our legal bases

We use account information to provide the service to the clinic under its contract with us, and for our legitimate interests in keeping the service secure, supporting users and proving the agreements clinics accept. We do not use it for advertising.
14

Neo, the AI assistant

Neo is an AI assistant in the Neogenic app. It works on the records the signed-in user is allowed to see, using the AI providers listed on our subprocessor list, which may not use the information to train their models. Neo does not make decisions about individuals that have legal or similarly significant effects. To report a concern about how Neo behaved, email privacy@neogenic.ai.
15

Service providers

We use Vercel to host and deliver the website, Google Workspace to receive and manage email, Calendly to schedule calls, Google Analytics 4 for website measurement, and Meta Pixel for advertising-performance measurement. These providers process information for the relevant service under their applicable terms and privacy notices. For Meta Pixel, Scality Limited and Meta Platforms Ireland Limited are joint controllers for collecting the information on our website and sending it to Meta, under Meta’s Controller Addendum; Meta is solely responsible for what it does with the information afterwards, as described in Meta’s privacy policy. For the Neogenic app, we use the providers listed at neogenic.ai/subprocessors, including hosting, database, email delivery and AI providers.
16

International transfers

Some of our providers are based in, or may access information from, countries outside the European Economic Area, including the United States: Vercel, Google (Workspace and Analytics), Meta, Calendly and, for the Neogenic app, the providers on our subprocessor list such as Supabase, Railway, OpenRouter, Amazon Web Services, Google Cloud, Twilio SendGrid and Cloudflare. Where a provider is certified under the EU–US Data Privacy Framework we rely on that certification; otherwise we rely on the European Commission’s Standard Contractual Clauses in the provider’s data processing terms. You can ask for a copy of the relevant safeguards at privacy@neogenic.ai.
17

How long we keep information

We may keep enquiry emails and Calendly booking records for up to 24 months after the most recent enquiry, meeting or substantive contact. If a business relationship begins, relevant correspondence may be kept for the relationship and for any additional legal, accounting or dispute period that applies. The cookie choice stored by this website expires after 6 months.
18

How long we keep app account information

We keep account information while you have access to a clinic in Neogenic. When you no longer have access to any clinic, you can ask us at privacy@neogenic.ai to delete your account and we will delete or anonymize it, keeping only what we need for the records below. Records of accepted terms are kept for 6 years after the clinic stops using Neogenic, to establish or defend legal claims. Security and sign-in logs are kept only as long as needed to protect accounts and investigate incidents.
19

Your choices and rights

Subject to the conditions in data-protection law, you may request access, correction, deletion, restriction or portability of your personal information, or object to processing. Where processing relies on consent, you may withdraw it at any time without affecting processing already carried out. Contact privacy@neogenic.ai to exercise these rights. You may also complain to the Office of the Commissioner for Personal Data Protection in Cyprus or to the supervisory authority where you live or work.
20

Providing information and automated decisions

Providing enquiry or booking information is voluntary. Without enough contact information, we may be unable to respond or arrange a call. We do not use website enquiry, booking or measurement information to make decisions based solely on automated processing that produce legal or similarly significant effects.