Stamatis.AI Logo

STAMATIS.AI

Legal

Clinical Data
Privacy Policy

Stamatis.AI is committed to protecting the privacy of healthcare professionals, hospital partners, and any clinical data shared with our platform.

EFFECTIVE DATE:April 22, 2026·Cornerstone Eagle LLC · Texas LLC
01

Who We Are

Stamatis.AI is a product of Cornerstone Eagle LLC, a Texas limited liability company. We develop patent-pending multi-organ diagnostic AI systems for clinical deployment. Our platform is covered under US Patent Pending 19/200,539.

For privacy inquiries, contact us at: privacy@stamatis.ai

02

Information We Collect

We collect two categories of information through our platform and demo request form:

Provider & Institutional Contact Data

  • Name and professional title
  • Professional email address
  • Hospital or health system affiliation
  • Department of interest (e.g., Radiology & Imaging)
  • Diagnostic requirements or use-case descriptions submitted via message field

Clinical & Technical Data

  • De-identified or anonymized imaging data shared for technical evaluation
  • Diagnostic workflow information provided for integration scoping
  • System configuration or EHR integration requirements

Important: Stamatis.AI does not accept, store, or process individually identifiable patient health information (PHI) through this form or demo portal. All clinical data submitted must be de-identified in accordance with HIPAA Safe Harbor or Expert Determination standards prior to submission.

03

How We Use This Information

  • To respond to technical demo requests and schedule evaluations
  • To assess integration fit with your hospital system or radiology department
  • To improve our diagnostic AI models using de-identified imaging data (with explicit written agreement only)
  • To communicate updates about Stamatis.AI products relevant to your stated department of interest
  • To comply with legal and regulatory obligations
04

HIPAA Compliance

Stamatis.AI operates as a Business Associate under HIPAA where applicable. Any arrangement involving Protected Health Information (PHI) will be governed by a signed Business Associate Agreement (BAA) prior to any data exchange.

We implement the following safeguards:

1Encryption of data in transit (TLS 1.2+) and at rest (AES-256)
2Access controls limited to authorized personnel only
3Audit logging for all data access events
4Incident response procedures aligned with HIPAA Breach Notification Rule
05

Data Sharing & Disclosure

We do not sell, rent, or trade your information. We may share data only in the following limited circumstances:

  • With service providers (e.g., cloud infrastructure, AWS) under strict confidentiality agreements
  • With academic or research partners under IRB-approved protocols, using only de-identified data
  • As required by law, court order, or to protect the safety of individuals
  • In connection with a merger or acquisition, with prior notice to affected parties
06

Data Retention

Contact & Demo Request Data

Retained for up to 24 months from the date of submission, or until a formal business relationship is established or declined.

De-identified Clinical Data

Retained only for the duration of the evaluation unless otherwise agreed in writing.

07

Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your data
  • Withdraw consent for non-essential communications at any time
  • Lodge a complaint with a relevant supervisory authority

To exercise any of these rights, contact privacy@stamatis.ai

08

Cookies & Analytics

Our website may use essential cookies for functionality and anonymized analytics to improve user experience. We do not use advertising trackers or third-party behavioral profiling tools.

09

Children's Privacy

Our platform is intended solely for healthcare professionals and institutional users. We do not knowingly collect information from individuals under the age of 18.

10

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Material changes will be communicated via email to registered contacts or posted prominently on our website. Continued use of our platform after such changes constitutes acceptance of the updated policy.