Privacy Policy

Who We Are

Research Lambda is a product of Health Innovations LLC ("Research Lambda," "we," "us," or "our"), a Virginia-based company providing evidence-grounded clinical AI for pharma sponsors and CROs. This Privacy Policy explains how we handle personal information collected through our website, SaaS platform, APIs, and related services. For any privacy-related inquiries, please contact us at operations@healthinnovations.biz.

Data Collected

We may collect the following categories of personal information:

• Technical data: IP address, browser type and version, device identifiers, operating system, referring URLs, pages visited, and timestamps
• Contact information: name, email address, company, job title, and phone number when you submit a form, request a demo, or contact us
• Account data: login credentials, authentication tokens, and activity logs for users of the SaaS platform
• Communications: content of emails or messages you send us, and any feedback you provide
• Cookies & similar technologies: data from cookies, pixels, and analytics tools used to operate and improve the services

Purpose of Processing

We process personal information to:

• Provide, maintain, and improve the Research Lambda platform and related services
• Respond to inquiries, demo requests, and support tickets
• Authenticate users, secure accounts, and prevent fraud or abuse
• Analyze usage patterns to enhance functionality, performance, and user experience
• Send service-related communications and, where permitted, marketing messages
• Comply with legal, regulatory, and contractual obligations

Legal Basis

Where applicable law requires a legal basis for processing (for example, under the EU/UK GDPR), we rely on the following:

• Contract: to provide the services you or your organization have requested
• Legitimate interest: to operate, secure, and improve our services, and to communicate with prospective customers
• Legal obligation: to comply with applicable laws, regulations, or lawful requests
• Consent: where required, for example for certain cookies or marketing communications

Data Sharing

We share personal information only as needed to operate the services and as described below:

• Service providers: trusted vendors who host, process, or analyze data on our behalf under contractual confidentiality and security obligations (e.g., cloud infrastructure, analytics, customer support, email delivery)
• Legal compliance: to comply with applicable law, valid legal process, or lawful government requests, or to protect the rights, property, or safety of Research Lambda, our users, or others
• Corporate transactions: in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality protections

Data Retention

We retain personal information for as long as needed to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Retention periods vary based on the type of data, the nature of the relationship, and applicable legal or regulatory obligations. When information is no longer needed, we securely delete or anonymize it.

User Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your personal information ("right to be forgotten")
• Object to or restrict certain processing
• Request portability of your data in a machine-readable format
• Withdraw consent where processing is based on consent
• Lodge a complaint with a supervisory authority

To exercise any of these rights, please contact us at operations@healthinnovations.biz. We will respond in accordance with applicable law.

International Transfers

Research Lambda is based in the United States, and your information may be transferred to, stored in, and processed in the United States or other countries where we or our service providers operate. These countries may have data-protection laws different from those in your jurisdiction. Where required, we implement appropriate safeguards (such as Standard Contractual Clauses) to protect personal information in connection with such transfers.

Security Measures

We implement administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, alteration, or disclosure. These measures include encryption in transit and at rest, access controls, network segmentation, monitoring and logging, vulnerability management, and regular security reviews. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Contact Us

If you have questions or concerns about this Privacy Policy or our privacy practices, please contact us at operations@healthinnovations.biz.