Consent to the Processing of Personal Data

1. Operator and contact

The operator carrying out the processing of personal data is Individual Entrepreneur Ivan Vasilyevich Bormotkin, INN 673203821665, OGRNIP 324670000039018, address: 214018, Россия, Смоленская обл., г. Смоленск, пр-кт Гагарина, д. 72 (hereinafter the "Operator"). For any matters relating to this consent and the processing of personal data, including the withdrawal of consent, you may contact the email address info@labreadai.com.

2. List of personal data

I give my consent to the Operator's processing of the following personal data:

• The content of medical documents I upload to the Service (images and PDF files of laboratory test and medical examination results).
• Text data extracted from the uploaded documents (names and values of test indicators, reference ranges, examination descriptions).
• Patient information voluntarily provided by me (sex, age, height, weight, complaints, chronic conditions, medications taken).
• The email address provided when paying for the service, used to send the receipt and the link to the result.
• IP address and technical session identifier, used to ensure the security and operability of the Service.

3. Purposes of processing

Personal data is processed for the following purposes:

• Providing the service of automatically decoding the medical documents I upload using artificial intelligence algorithms.
• Fulfilling the Operator's obligations to me under the concluded agreement (the Public Offer), including providing access to the decoding result.
• Processing payment for the service, issuing the receipt, and processing refunds.
• Protecting the Service from abuse, bots, and automated attacks, and ensuring its technical operability.

4. Consent to the processing of special categories of personal data

I confirm that the information I provide (the content of medical documents, test indicators, patient information) belongs to the special categories of personal data concerning health and is provided by me voluntarily and knowingly. In accordance with Clause 1, Part 2, Article 10 of Law No. 152-FZ, I give the Operator my consent to process such health data exclusively for the purposes of providing the automatic decoding service set out in Section 3 of this consent. I understand that the provision of health data is not mandatory and is carried out at my own discretion.

5. List of actions with personal data

I give my consent to the Operator's performance of the following actions (operations) with personal data:

• Collection and recording of personal data received from me.
• Organization, accumulation, and storage for a period not exceeding 1 year from the moment the document is uploaded and the result is generated.
• Use of personal data to achieve the purposes set out in Section 3.
• Anonymization, i.e. removal of identifying features before transferring the text of the indicators to AI providers.
• Deletion and destruction of personal data upon achievement of the purposes of processing or upon expiry of the storage period.

Personal data is processed both with the use of automation tools and without the use of such tools.

6. Transfer of personal data to processors

I give my consent to the Operator's entrusting the processing of my personal data to the following persons acting on the Operator's instructions in accordance with Part 3, Article 6 of Law No. 152-FZ, in the minimum necessary scope:

• JSC "Tinkoff Bank" (Tinkoff Kassa) for accepting payment. The following are transferred: amount, currency, order identifier, and email address (if available). Bank card details are not transferred to or stored on the Operator's servers.
• Cloud AI model providers (OpenRouter and similar text-processing providers) for generating the decoding. Anonymized text of the indicators is transferred without user identifiers; files and personally identifying information are not transferred.
• LLC "Yandex" (Yandex.Metrica) for anonymized web analytics, only where I have given separate consent to the use of cookies.

7. Term of the consent and withdrawal procedure

This consent is effective from the moment it is given and until the purposes of processing are achieved or until I withdraw it. I have the right to withdraw this consent at any time by sending a written withdrawal request to the Operator's email address info@labreadai.com. In the event of withdrawal of consent, the Operator shall cease processing the personal data and destroy it within a period not exceeding 30 days from the receipt of the withdrawal, except in cases where further processing is provided for by the legislation of the Russian Federation. The withdrawal of consent does not extend to payment transaction data, the storage of which is required by accounting legislation.

8. Confirmation

I confirm that I have reached the age of 18, that I give this consent voluntarily, of my own will, and in my own interest, that I have read the Operator's Privacy Policy and Terms of Use, and that I understand the content, purposes, and consequences of giving this consent, including consent to the processing of data concerning my health.

Full information on the purposes, legal grounds, retention periods, and conditions of personal data processing is provided in the Privacy Policy.