Privacy & Data-Handling Policy
Effective for all use of this service. This is a closed system for authorized laboratories only.
1. Scope & eligibility
This service is provided exclusively to laboratory accounts explicitly authorized and created by the administrator. There is no public sign-up. Any access without administrator-issued credentials is prohibited.
2. Data we process — and why (data minimization)
| Data | Purpose | Retention |
|---|---|---|
| Username & password hash | Authentication (passwords stored only as Argon2 hashes — never in plain text) | Until the account is deleted |
| Lab note (optional) | Account identification by the administrator | Until the account is deleted |
| Uploaded file | Performing the requested conversion | Deleted immediately after processing — never stored |
| Generated PDF/PNG | Your download | Auto-deleted within ~30 minutes |
| Conversion metadata (lot, checksum, timestamp) | Enforcing your weekly limit and audit integrity | Retained for accounting/audit |
| IP address & login events | Security: rate-limiting and abuse/brute-force prevention | Short-term security log |
3. What we never do
- We never store your uploaded files after the conversion completes.
- We never sell, rent, or share any data with third parties.
- We use no advertising, no third-party analytics, and no cross-site trackers.
- The conversion algorithm runs entirely server-side and is never exposed to the client.
4. Security measures
- All traffic is served over HTTPS/TLS; session cookies are encrypted, HTTP-only and same-site.
- Passwords are hashed with Argon2; the administrator additionally requires a key-file factor.
- Per-account weekly limits and per-IP rate limits guard against abuse.
- Uploads are validated by type and content and are never executed.
5. Your responsibilities
Accounts are personal to the authorized laboratory. Keep your credentials confidential. The service re-encodes the genuine calibration data contained in the card you upload; it is your responsibility to use outputs in accordance with your laboratory's quality procedures and applicable regulations.
6. Contact & changes
The administrator may update this policy. Material changes will be reflected on this page.
← Back