1. Scope
This policy applies to personal data HÉDÉONIX processes for the Cloqi Doss public site and service, including accounts, work activity, subscriptions, support, and security. The DPA also applies where HÉDÉONIX processes personal data included in customer materials on the customer's instructions.
2. Data categories
- Service-user data: name, work email, organization, role, authentication status, assignments, authorship, review, approval, comments, support, and access records
- Customer-provided personal data: information about customer staff, researchers, or business contacts processed on customer instructions
- Customer data: product facts, versions, regulatory, quality, clinical, scheduling, evidence, documents, and claims
- Restricted data: patient or study-subject health information requires a separate lawful basis and written authorization
3. Purposes and legal basis
- Account, invitation, membership, and access management
- Collaboration, authorship, review, approvals, and notifications
- Security, session, MFA, error, access-denial, device, and IP logging
- Subscription, transaction, tax, and support administration
4. Retention
Data is retained only for periods required by contract, law, dispute handling, integrity, security, and disclosed operational needs. Exact periods for account closure, transactions, audit information, security logs, and backup expiry will appear in the effective version.
5. Processors and international transfers
Actual providers, work performed, countries, fields, timing, transfer methods, and retention will be published after contracts and regions are confirmed. A feature will not be enabled for customer data before its processing boundary is approved.
6. Rights and safeguards
Individuals may request access, correction, deletion, or restriction as applicable. HÉDÉONIX handles data it controls and supports the relevant customer for customer-controlled data.
- MFA and current-session re-verification
- Organization-scoped access controls
- Private storage and time-limited downloads
- Access, export, and support logs
- Incident response and restore testing
7. Contact and status
Privacy contact: info@hedeonix.com
This is not yet an effective policy. Operator address, phone, exact providers, regions, and retention periods remain to be confirmed before launch.