Legal
Privacy policy
This policy explains what personal data the melav.care website collects, why, and how long we keep it. It also summarizes how patient data is protected in the Melav application.
Last updated :
Who is responsible
The data collected on this website is processed by the Melav team. Contact: through the contact form at melav.care/#contact.
What we collect on this website
- Contact and demo requests: your name, organization, email, and optionally your phone number, role, specialty, monthly volume of operations and message.
- Anti-spam protection: when you start filling in the contact form, Google reCAPTCHA v3 analyses technical signals (IP address, browser data) to tell humans from bots.
- Hosting logs: our host Netlify keeps standard technical logs (IP address, pages requested) for security purposes.
- No analytics or advertising cookies are set by this website.
Why we use it
- To answer your request, organize a demo and follow up on it (legal basis: steps taken at your request before a contract, and our legitimate interest in answering professionals interested in Melav).
- To protect the site and the form against abuse (legal basis: legitimate interest).
How long we keep it
Contact requests are kept for up to 3 years after our last exchange, then deleted. Hosting logs are kept for the duration set by our host for security purposes.
Who receives it
Only the Melav team. Our technical providers process data on our behalf: Netlify, Inc. (website hosting and form collection, United States) and Google (reCAPTCHA). Transfers outside the European Union are governed by the European Commission's standard contractual clauses or an adequacy decision. We never sell your data.
Your rights
You can access, correct or delete your data, object to its processing, restrict it or ask for a copy at any time through the contact form at melav.care/#contact, mentioning "personal data". You can also lodge a complaint with the CNIL (France, cnil.fr) or the Privacy Protection Authority (Israel, gov.il/privacy).
Patient data in the Melav application
- In the application, the surgeon or the facility decides on the follow-up and is responsible for patient data; Melav processes it on their behalf.
- Since October 2026, the database and all server processing run in the European Union (Google Cloud, Belgium and the Netherlands).
- Patient identities are never sent to AI models. Each surgeon only sees their own patients; a facility only sees aggregated activity.
- Each patient can see everything Melav keeps about them on their "My data" page and stop SMS messages there. The list of our subprocessors is available on request.