Policies and legal information for Injectly.
Everything in one place, with quick access to the document you need.
How we handle information
Injectly is being designed with data minimization, operational clarity, and patient trust in mind. We only intend to collect information necessary to provide the service, improve the product, communicate with clinics, and maintain security. We do not use patient or clinic information in ways that conflict with the purpose of the platform.
When the product is fully launched, this policy will describe what information is collected, why it is collected, how long it is retained, and what controls customers have. We will also explain how clinics can request access, correction, or deletion of their information where applicable.
How the service is intended to be used
Injectly is intended for professional clinic use. Access to the platform, product materials, and pre-launch information is provided for evaluation, onboarding, and future service delivery. Use of the service must always comply with applicable laws, regulatory responsibilities, and clinic-level duties around patient communication and record handling.
As the product moves from pre-launch into active use, this section will be expanded with billing terms, account responsibilities, acceptable use rules, service limitations, and customer obligations around lawful handling of data.
How site-level cookies and tracking may work
The current site experience is intentionally light. Any cookies or similar browser technologies used in the future will be limited to what is necessary for site performance, analytics, user preferences, and security. We do not want the website experience to rely on unnecessary tracking or noisy data collection.
When the public product and website stack are finalized, this section will clearly describe which cookies are essential, which are optional, what they do, and how visitors can manage them.
How GDPR readiness is being approached
Injectly is being built with GDPR principles in mind from the start, including data minimization, purpose limitation, controlled access, and secure handling of customer information. We want clinics to be able to understand what data exists in the system and how it is being used, without ambiguity.
As the platform reaches launch, this section will be expanded with more specific information around controller and processor roles, lawful basis, retention logic, access management, export and deletion workflows, and supporting documentation relevant to GDPR compliance.