Privacy Notice

This notice is from Clarus Medical Intelligence LLC ("we"). It covers CLARUS Prime, the Windows edition of Clarus LIS, the services around it, and this website. It says the same as the data and privacy notice the installer shows.

Effective date: 23 September 2026.

1.Your laboratory's data stays on your computer

Patient records, results, reports, invoices and everything else your laboratory enters are stored in a database on your own computer. We hold no copy of it and have no way to reach it.

Under Law 151 of 2020 on the Protection of Personal Data, the laboratory is the controller of that data. We keep none of it in a readable form: what passes through our servers, such as a report a patient opens from the laboratory's website or a manager's phone reaching the laboratory through our intermediary server with Clarus Link, passes end-to-end encrypted with a key we do not hold, and the intermediary server keeps only a descriptive log for 30 days: the laboratory, the time and the size, with the address masked.

2.What the program sends on its own

Three kinds of message, and none of them carries patient data:

• Activation, which you start: your serial number, a one-way fingerprint of the computer (we receive the hash, not the identifiers), the installation code, and what you type on the activation screen: the laboratory's name, your name, country, telephone and, optionally, email.
• The update check, every six hours when the computer has internet: the installation code, the fingerprint, the version, the licence record (its state, what you bought, the serial, its dates and events), a description of the computer (Windows version, processors, memory, and the language, country and time zone set in the program, and the installation date), and whether the last update succeeded.
• With the update check, the operating counts: how many patients, orders, samples, verified results and reports, in total and in the last thirty days; how many tests and users are active; how many analyzers are registered and connected; hours of operation; the days of the first and the latest order; and whether a history was imported from a previous program. Numbers and two dates only, never a name, a code, a telephone number or a result.
• Analyzer link profiles: the make, model, connection and test codes of an analyzer your laboratory links, so that we can review it for other laboratories. No patient, no result, no network address.

3.You stay in control

You can switch off being told about new versions in the program's settings; the licence's own call continues, with the operating counts, because it is part of the licence. If you would rather the computer never spoke to us, disconnect it: the program works the same without internet, and activation can be completed from a telephone.

4.What leaves only if you switch it on

Nothing below is configured when the program is installed. Each needs your own account with the service concerned, and sends data to that service:

• Sending results to patients by SMS, WhatsApp or email, through a gateway you connect.
• Submitting claims or records to an insurer or a health authority.
• AI assistance, with an API key you supply.
• Your laboratory's public website: what you enter on the website screen (name, logo, address, hours, contact details and tests) comes to us so that we can publish it.
• The result code: each report is encrypted on your computer, with a key printed on the patient's paper and never sent to us, before a sealed copy reaches us. We cannot read it, for support or at anyone's request.

5.What we keep about you

Against your serial: the details you typed at activation, the activation date, your purchases and invoices, and the events of the licence. We keep them so that support and the licence can reach you, and for as long as tax and warranty law require.

When you write to us on WhatsApp, by email or in the chat window on this website, we keep the conversation to answer you and follow up. A distributor application sends the details on its form to our distributors mailbox, where we keep them to answer it.

6.What this website collects

This website uses no advertising and no analytics cookies. It records:

• Our web server's standard logs (the address that connected, the page and the time), kept for 14 days for security and troubleshooting.
• Your address is also read, the moment you visit, to show the price for your country; it is not stored for that purpose.
• A few cookies, listed in our Cookie Policy: your language, your cookie choice, and the security cookies that forms need.
• If you allow functional cookies, the chat window, which runs on our own server.

7.Where the data is kept

What reaches our servers from a laboratory is described above. The laboratory's own records stay on its computers: we never keep them or read them, and whatever of them passes through Clarus Link passes encrypted end to end.

8.Your rights

You can ask us what we hold about you, ask us to correct it, and ask us to delete it, except what the law requires us to keep. Write to info@claruslis.com or to us on WhatsApp.

Your patients' rights over their data are answered by your laboratory, which holds it. The program helps: the complete change history of a record can be searched, exported and printed. The law also requires medical records to be kept, and a released result cannot be quietly destroyed.

9.Security

Inside the program's database, a patient's national ID number, address and emergency contact are encrypted with a key kept on the laboratory's computer; the rest of the records are stored as ordinary data. The backup file is not encrypted, deliberately, so that it can still be restored when the original computer is gone. Anyone holding the file can read what it holds, so keep backup drives as you keep paper records, and consider a drive with its own password or Windows BitLocker. The security of the computer itself, who can sign in and who can reach it, remains the laboratory's.

10.Changes to this notice

When the software starts to send something new, this notice and the one in the installer change first. The date at the top shows the version in force.