Privacy Policy

Effective date: 2026-03-29 · Last updated: 2026-03-29
FxMEDUS LLC · Boston, MA · Patent Pending: US Provisional Application 64/018,624

DrugSynthAI is a computational research platform. We do not collect, store, or process patient health data or personal health information (PHI). All compound outputs are in silico predictions.

1. Who We Are

DrugSynthAI is operated by FxMEDUS LLC, a biotechnology AI company based in Boston, Massachusetts. The platform is developed and maintained by Dr. Julian Borges, MD (ORCID: 0009-0001-9929-3135).

Contact: support@fxmedus.com · jyborges@bu.edu

2. Data We Collect

Data Type	What We Collect	Purpose	Storage
Usage Analytics	Page views, feature interactions, session duration (anonymized)	Platform improvement	PostHog (90-day retention)
Chat Messages	AI chat history per campaign (text only)	Campaign continuity	Local SQLite per campaign
API Usage	Request counts, tier, monthly usage	Quota management	Local SQLite
Error Logs	Stack traces, error context (no PII)	Debugging	Sentry (30-day retention)
Campaign Data	Compound scores, pipeline stage results	Research continuity	Local SQLite + your exports

3. Data We Do NOT Collect

Patient health information or personal health data (PHI)
Compound SMILES strings are not stored externally — they remain in your local session
Credit card or payment information (handled by third-party payment processor)
Government ID or biometric data
Data from third-party services beyond what you explicitly provide

4. Cookies and Tracking

We use two categories of cookies:

Essential cookies: Required for platform functionality (session state, authentication). These cannot be disabled.
Analytics cookies (PostHog): Optional. Used to understand feature usage and improve the platform. Requires your explicit consent via the cookie consent banner.

You can withdraw analytics consent at any time by clicking "Essential Only" in the cookie banner or clearing your browser's local storage.

5. Third-Party Services

Service	Purpose	Data Shared	Privacy Policy
Anthropic Claude API	AI chat and analysis	Chat message text (anonymized)	anthropic.com/privacy
PostHog	Usage analytics	Anonymized interaction events	posthog.com/privacy
Sentry	Error tracking	Error logs (no PII)	sentry.io/privacy
ChEMBL / PubChem	Compound database lookup	Compound identifiers only	ebi.ac.uk/privacy / pubchem.ncbi.nlm.nih.gov

6. Data Retention

Chat history: Retained until you delete the campaign or request deletion
Analytics data: Anonymized and aggregated after 90 days (PostHog)
Error logs: Automatically deleted after 30 days (Sentry)
Campaign data: Retained indefinitely on your local deployment; deleted on request for hosted accounts

7. Your Rights (GDPR / CCPA)

Depending on your jurisdiction, you may have the following rights:

Right to access (GDPR Art. 15): Request a copy of data we hold about you
Right to rectification (GDPR Art. 16): Correct inaccurate data
Right to erasure (GDPR Art. 17): Request deletion of your data ("right to be forgotten")
Right to data portability (GDPR Art. 20): Export your campaign data in machine-readable format via the platform API
Right to opt out of sale (CCPA): We do not sell personal data to third parties
Right to non-discrimination: We will not discriminate against you for exercising these rights

To exercise any of these rights, contact support@fxmedus.com with the subject line "Privacy Request".

8. Data Security

We implement the following security measures:

HTTPS/TLS encryption for all data in transit
Campaign data stored locally on your server/deployment
No compound structures transmitted to external services without your action
API keys stored as environment variables, never in code
Error monitoring via Sentry with PII scrubbing enabled

9. International Transfers

If you access DrugSynthAI from outside the United States, your usage analytics may be processed by PostHog servers in the EU or US. PostHog is certified under the EU-US Data Privacy Framework. Chat processing via the Anthropic Claude API is subject to Anthropic's data processing agreement.

10. Children's Privacy

DrugSynthAI is a professional research platform not intended for use by individuals under 18 years of age. We do not knowingly collect data from minors.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via the platform dashboard. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the platform after changes constitutes acceptance of the revised policy.

12. Contact

FxMEDUS LLC
Boston, Massachusetts, USA
Email: support@fxmedus.com
PI: Dr. Julian Borges, MD — jyborges@bu.edu
ORCID: 0009-0001-9929-3135