Legal

Privacy notice

How Auxtechna Ltd. (trading as MediCase) handles personal data under UK GDPR. Last reviewed: .

Who we are

Auxtechna Ltd. is the data controller for personal data processed through auxtechna.co.uk and our tenant subdomains (students.auxtechna.co.uk, university tenants such as <school>.auxtechna.co.uk, and the platform admin host admin.auxtechna.co.uk). Contact us at info@auxtechna.co.uk.

What we collect

  • Account data — your name, email, role (student / educator / admin) and the tenant you signed up on.
  • Educational activity — case sessions you run, answers you submit, scores, portfolio entries and reflections. On a university tenant, your educators see cohort-level analytics; on the direct-students tenant, this stays private to you.
  • Billing data — if you subscribe directly, Stripe processes your card details. We never see or store the card number. We do store your subscription status and Stripe customer ID so we can keep your access in sync.
  • Technical data — IP address, user agent and request logs for security and abuse-prevention.
  • Demo-request leads — name, work email, institution, role and any message you submit through the "Book a demo" form on this site.

Why we process it

  • Provide the service — authentication, case delivery, scoring, portfolio and educator features.
  • Billing — process subscriptions, send invoices to universities, comply with VAT rules.
  • Support and improvement — respond to your messages, investigate bugs, improve the product.
  • Security — detect abuse, rate-limit brute-force attempts, protect other users.
  • Sales — respond to demo requests from university buyers.

Lawful basis

We rely on contract (delivering the service you signed up for), legitimate interest (security, product improvement, founder-led sales follow-up) and consent where you give it (e.g. marketing emails you opt in to).

Cookies and analytics

  • Auth cookies — set after you log in to keep your session alive. First-party, essential.
  • Visit analytics on this marketing page — run on our own servers, no third parties. Cookieless, no cross-site tracking, and we don't store your IP address: visits are counted using an anonymous code that changes every day. We record the page, which button was clicked, the referring website and device type. Used to measure marketing performance only.
  • Stripe billing — if you subscribe, Stripe sets cookies on the checkout page under its own privacy notice.

Where data lives

The application and database run on Railway in EU/UK regions. Email is sent via Resend (US-based, with appropriate international transfer safeguards). Card payments are handled by Stripe. We don't sell or share your data with advertisers.

How long we keep it

Active accounts: as long as you're using the service. Suspended or access-removed accounts: 12 months after suspension, then hard-deleted by an automated retention job. Demo-request leads: kept until the lead is closed (won, lost or stale > 12 months), then deleted. Aggregated and anonymised analytics: indefinitely.

Your rights under UK GDPR

You can ask us to:

  • Confirm what we hold about you (subject access request).
  • Correct anything that's wrong.
  • Delete your account and associated personal data.
  • Export your data in a portable format.
  • Object to processing for marketing.
  • Withdraw consent at any time.

Email info@auxtechna.co.uk and we'll respond within 30 days. You can also complain to the UK Information Commissioner's Office at ico.org.uk.

Children

MediCase is intended for university-age learners (typically 18+) and qualified educators. We do not knowingly collect data from anyone under 13.

Changes

We'll update this notice as the product evolves. Material changes (new data flows, new processors, new lawful bases) will be announced in-app and by email to active users.

Auxtechna Ltd., registered in England & Wales. Contact info@auxtechna.co.uk.