Privacy policy
Version 1.0 · October 7, 2026 · Draft for qualified legal review
Who operates this service
Elliott AI Foundry LLC, Maryland, United States, operates Irkutsk Illness Watch. Contact [email protected] for privacy questions, corrections, deletion requests or withdrawal from email updates. This policy describes the current illness-watch service only.
Information you provide
Registration records include your name, email address, organization, stated purpose, AI-use acknowledgment, exact acknowledgment wording and version, acceptance time, registration time and optional email-update preference. Do not enter patient records, personal medical details, children’s information, passwords or other confidential material.
How we use registration information
We store registration information to administer interest in the service, maintain acknowledgment records, respond to requests and manage optional updates. The current registration flow records a profile; authenticated sign-in is not yet available. Registration details are stored separately from public report analysis and are not displayed through public registration pages or APIs.
Public reports and contributions
Public reports may include original source URLs, limited excerpts, machine translations, dates, source classifications and AI analysis. Information entered into report or note forms can appear on the shared dashboard. Do not submit confidential information. Public availability of an original source does not remove privacy considerations.
Hosting, maps and AI processing
Vercel hosts this interface. The existing illness-watch backend uses Sites and Cloudflare D1 for records. Hosting providers may process IP addresses, request metadata and security logs. Esri receives requests when its map tiles load, including normal connection metadata. External sources and linked websites operate under their own policies. AI services process reporting material for translation and analysis. The current registration endpoint stores registration fields and does not send them to an AI model.
Email updates
Email-update consent is optional and separate from the required AI-use acknowledgment. Email delivery remains pending a confirmed provider connection. Resend is the intended email provider, not a currently verified active delivery integration. Before delivery begins, provider details and an operational unsubscribe method must be confirmed. You can withdraw your preference by contacting the address above.
Advertising and tracking
The application currently has no advertising pixels or advertising-cookie code. Hosting and external map services may use their own technical mechanisms. This statement does not certify the absence of every provider cookie or log. We do not operate a sale or targeted-advertising workflow for registration records.
Retention and deletion
Registration and consent records persist in the database until the operator removes them; automatic expiry is not configured. A fixed retention schedule remains subject to owner and legal review. Request deletion or correction through the contact above. Some records may need to remain for security, legal obligations or acknowledgment history, subject to applicable law. Public report revisions remain in the reporting history and may require correction rather than silent deletion.
Your choices and applicable rights
You may request access, correction, deletion or withdrawal from updates. Depending on applicable law, you may also have rights to object, restrict processing, obtain portability or complain to a regulator. We may need to verify a request before releasing personal information. Requests do not require submitting medical records. Applicable legal bases, international-transfer safeguards and jurisdiction-specific notices require legal review before targeted international registration activity.
Security and geographic processing
Data may be processed in the United States and other locations used by service providers. Registration records have no public listing endpoint. No service can promise complete security. Provider contracts, retention settings and international-transfer arrangements require review; this policy does not claim GDPR, HIPAA or other certification.
Children and changes
The service is intended for adults conducting research. Do not register a child or submit identifying health information about a child. Material changes will receive a revised policy date and version. This draft describes the present implementation and is awaiting legal review.