Privacy Policy
How Consenta collects, uses and protects personal data.
Last updated: 1 July 2026
1. Who we are
Manorath, LLC, doing business as Consenta (“Consenta”, “we”, “us”) operates the Consenta federated data platform. This policy explains how we handle personal data for everyone who interacts with the platform — patients and users, client organisations, and data buyers.
2. Our core privacy principle
Raw, identifiable patient data never enters Consenta. Anonymisation and pseudonymisation happen inside the client organisation’s own environment. Only anonymised datasets and non-identifying integrity proofs are published to the platform. This design keeps identifiable data under the control of the organisation that holds it.
3. What we collect
- Account details — such as your name, email address and role, used to create and secure your account.
- Consent records — for patients, the cohorts you have consented to and the status of each consent.
- Usage and audit data — records of key actions (such as consent changes, approvals and purchases) for security and compliance.
- Payment and payout information — the amounts distributed to patients, organisations and the platform.
4. How we use personal data
- To provide and secure the platform and your account.
- To record and honour consent decisions and withdrawals.
- To calculate and distribute revenue shares.
- To maintain tamper-evident audit trails and meet legal and regulatory obligations.
5. Legal bases
We process personal data on the bases permitted by applicable law, including your consent, the performance of our contract with you, our legitimate interests in operating a secure platform, and compliance with legal obligations. Where we rely on consent, you can withdraw it at any time.
6. Your rights
Depending on where you live, you may have rights to access, correct, delete or restrict the use of your personal data, to object to processing, and to data portability. Patients can withdraw consent at any time from the My Consents page. To exercise other rights, contact us using the details below.
7. Data retention & security
We keep personal data only for as long as necessary for the purposes described here or as required by law. We use appropriate technical and organisational measures — including access controls, encryption in transit, and audit logging — to protect personal data.
8. Contact us
If you have questions about this policy or how we handle your data, please contact our privacy team through the platform’s support channel.