Privacy Policy

2.1 Account Information

When you create a PSPS account, we collect:

• Full name
• Work email address
• Company or institution name
• Job title or role (e.g., Formulation Scientist, Regulatory Affairs, R&D Director)
• Contact phone number
• Billing address and payment information

2.2 Formulation Data (Temporary Processing Only)

When you use PSPS to generate stability predictions, we temporarily process the following during your active session only:

• API Parameters: Active pharmaceutical ingredient names, molecular weights, degradation data, and stability parameters submitted for prediction
• Formulation Details: Excipient compositions, dosage form information, packaging specifications, and FDC component data
• Prediction Inputs: Storage conditions, ICH climate zone selections, and target shelf-life requirements
• Generated Reports: ICH-aligned stability reports, shelf-life projections, confidence scores, and kinetic modelling outputs

2.3 Technical Information

We automatically collect the following technical data to ensure platform performance and security:

• IP address and approximate geolocation
• Browser type and version
• Operating system information
• Device identifiers
• Session duration and feature usage patterns
• System performance metrics during prediction processing

2.4 Usage Analytics

To improve PSPS, we collect aggregated, non-identifiable usage data including:

• Feature usage patterns (e.g., engine selection, report downloads)
• Prediction completion rates and session durations
• Error logs and diagnostic information
• User interface interaction patterns
• Platform performance and reliability metrics

3.1 Service Provision

We use your information to:

• Process your formulation data through PSPS's 14 computation engines and generate stability predictions
• Produce ICH-aligned stability reports, shelf-life projections, and confidence scores
• Enable FDC multi-API interaction assessments (E14 engine)
• Deliver prediction results and downloadable reports
• Maintain your account and platform preferences

3.2 Platform Improvement

Aggregated, non-identifiable usage data helps us:

• Improve computation engine accuracy and reliability
• Optimise prediction processing speed
• Develop new engines and platform capabilities
• Improve user interface and report readability
• Conduct quality assurance and system monitoring

3.3 Communication

We may use your contact information to:

• Send service-related notifications and platform updates (e.g., new engine versions)
• Provide technical support and respond to your enquiries
• Share important security or policy updates
• Deliver maintenance announcements and release notes

3.4 Legal and Compliance

We process information as necessary to:

• Comply with applicable Indian and international laws and regulations
• Respond to valid legal requests and court orders
• Protect our rights, intellectual property, and platform integrity
• Investigate potential violations of our Terms of Service
• Ensure platform security and prevent fraudulent use

4.1 Comprehensive Formulation Data Protection

4.2 What Zero-Retention Covers

Our Zero-Retention Policy applies to all of the following without exception:

• All API names, molecular parameters, and stability data submitted for prediction
• Excipient compositions, formulation ratios, and FDC component data
• Kinetic modelling inputs and computation results generated during processing
• Any temporary data created during the 4-phase prediction pipeline
• All session interactions and prediction history related to your formulations

4.3 Enterprise-Grade Privacy Protection

• We maintain enterprise agreements with our AI technology partners specifically to enforce zero data retention
• These agreements go beyond standard privacy policies to ensure maximum protection for proprietary pharmaceutical data
• Our partners are prohibited from storing, learning from, or using your formulation data in any way
• All prediction processing occurs in secure, temporary environments that are completely cleared after each session

4.4 Processing Environment Security

• Formulation data is processed in secure, isolated computation environments with enterprise-grade encryption
• Processing occurs in temporary memory that is completely wiped after each prediction session
• No formulation content is accessible to our team, technology partners, or any third parties during or after processing
• All processing records and associated metadata are automatically deleted upon session completion
• Security monitoring occurs without storing or accessing your actual formulation data

4.5 Legal and Compliance Protections

Our zero-retention commitments include:

• Legal protections preventing any formulation data storage beyond the active processing session
• Compliance with applicable Indian privacy laws, GDPR, and international data protection standards
• Contractual obligations with technology partners that exceed standard privacy requirements
• Regular audits to verify compliance with Zero-Retention commitments

5.1 AI Technology and Zero-Retention Integration

• PSPS uses enterprise-grade AI technology in Phase 1 (Literature Research) under contractual zero data retention agreements
• AI processing occurs within secure environments that automatically delete all formulation content upon completion
• Formulation data is processed only to generate your requested stability prediction, then immediately and permanently deleted
• Neither we nor our technology partners store, learn from, or use your formulation data for any purpose beyond your active session
• All parties involved in processing are legally bound to zero-retention obligations that exceed standard privacy protections

5.2 Proprietary Computation Engines

PSPS's Phases 2–4 operate entirely on proprietary deterministic computation engines — not third-party generative AI. These include:

• 14 proprietary engines covering Arrhenius kinetics, ASAP moisture correction, QSPR structure estimation, packaging impact, excipient compatibility, and shelf-life projection
• All computation engines run locally within the PSPS secure processing environment
• Engine algorithms, methodologies, and report templates are proprietary intellectual property of Noxie Innovation (OPC) Private Limited

5.3 Prediction Accuracy and Limitations

• PSPS predictions are based on established kinetic science and peer-reviewed pharmaceutical literature
• Prediction outputs require review and validation by qualified pharmaceutical professionals before regulatory use
• System outputs are predictive recommendations — not substitutes for ICH-mandated real-time stability studies
• Prediction reliability is reflected in the confidence score provided with each report

6.1 Limited Account Information Sharing

We may share limited account information (never formulation data) with trusted service providers:

6.2 Legal Requirements

We may disclose information when required by law:

• In response to valid legal process or court orders from competent Indian or international authorities
• To comply with applicable regulations and government requests
• To protect our rights, intellectual property, or platform safety
• To investigate potential legal violations of our Terms of Service
• In connection with business transfers or acquisitions (see Section 14)

6.3 No Data Sales or Marketing

We do not:

• Sell your personal information or formulation data to any third party
• Share your data for marketing, advertising, or promotional activities
• Provide your data to data brokers or commercial aggregators
• Use your formulation data to train or improve external AI systems

7.1 Technical Safeguards

We implement comprehensive security measures across the PSPS platform:

• End-to-End Encryption: All formulation data is encrypted during transmission and processing using enterprise-grade protocols
• Isolated Processing: Each prediction session runs in an independent, sandboxed computation environment
• Multi-Factor Authentication: Enhanced account security for user access
• Regular Security Audits: Ongoing vulnerability assessments and penetration testing
• Intrusion Detection: Real-time monitoring for unauthorized access attempts

7.2 Administrative Controls

• Strict employee access controls — no personnel can access submitted formulation data
• Comprehensive security training for all team members
• Regular security policy reviews and compliance checks
• Incident response procedures for potential security events
• Continuous monitoring of system access and activity logs

7.3 Physical and Infrastructure Security

• Secure data centre facilities with restricted physical access controls
• Environmental monitoring and redundant power systems
• Disaster recovery capabilities and business continuity planning
• Secure hardware disposal and verified data destruction procedures

8.1 Breach Response Commitment

In the event of a confirmed data breach affecting personal account information:

• We will notify affected users within 72 hours of breach verification
• Notifications will detail the nature and scope of the incident
• We will communicate the steps taken to contain and address the breach
• Guidance will be provided on protective measures users can take

8.2 Limited Breach Impact Due to Zero-Retention

8.3 Incident Investigation

• Thorough investigation of all suspected security incidents
• Cooperation with law enforcement and regulatory authorities as required under Indian law
• Implementation of additional security measures to prevent recurrence
• Transparent communication about improvements made following any incident

9.1 Data Processing Location

• Primary data processing occurs within secure facilities in India
• Some account and technical data processing may occur in other jurisdictions for platform operations
• All international transfers comply with applicable data protection laws
• Appropriate contractual safeguards are implemented for any cross-border data transfers

9.2 Compliance with International Standards

We ensure compliance with:

• General Data Protection Regulation (GDPR) for users in the European Union
• California Consumer Privacy Act (CCPA) for California residents
• Digital Personal Data Protection Act, 2023 (India)
• Other applicable regional privacy laws in jurisdictions where we operate

10.4 Exercising Your Rights

To exercise any of the rights above, email us at privacy@pspsai.com with your account details and specific request. We will respond within 30 days. Some requests may require identity verification for security purposes.

12.1 Essential Cookies

We use necessary cookies to enable core platform functionality:

• User authentication and session management
• Security features and CSRF protection
• Basic platform navigation and functionality
• System performance and error handling

12.2 Analytics Cookies

With your consent, we use analytics cookies to understand platform usage and improve the PSPS experience. These collect only anonymised, aggregated data — never formulation content.

12.3 Cookie Management

You can control cookie preferences through your browser settings, opt out of non-essential cookies through our cookie consent interface, or contact us for assistance with cookie-related questions.

15.1 Policy Modifications

We may update this Privacy Policy to reflect changes in our practices, platform capabilities, or legal requirements. Material changes will be communicated via email or platform notification with an updated effective date. Continued use of PSPS after changes constitutes acceptance of the updated policy.

15.2 Change Notification Timeline

• Major changes: 30 days advance notice
• Minor updates: Notice at time of change
• Legal or regulatory requirement changes: As soon as reasonably possible

16.1 Indian Privacy Laws

We comply with all applicable Indian data protection legislation, including:

• Information Technology Act, 2000 and associated rules
• Digital Personal Data Protection Act, 2023 (DPDPA)
• Other applicable Indian privacy and data protection regulations

16.2 International Compliance

For users in other jurisdictions, we comply with:

• GDPR (European Union)
• CCPA (California, USA)
• PIPEDA (Canada)
• Other applicable regional privacy laws

16.3 Pharmaceutical Regulatory Alignment

In addition to privacy law compliance, PSPS is designed to support users' obligations under pharmaceutical regulations. Our Zero-Retention Policy and data security architecture are consistent with ICH guidelines on data integrity and the confidentiality requirements expected in pharmaceutical development environments.