Research Data Use Agreement

Overview

This agreement describes how SynapseData uses de-identified QEEG data uploaded to the platform for research and platform improvement purposes. By default, de-identified data from sessions you upload contributes to population-level statistical models that benefit the broader clinical community.

You may opt out at any time — see Opting Out below. Data already incorporated into aggregate analyses cannot be retroactively removed, but opting out stops all future contributions immediately.

What Data Is Used

De-identified QEEG metrics from sessions you upload are included in aggregated research analysis unless you have opted out. This includes:

• Frequency band z-scores (delta, theta, alpha, beta, high beta)
• Coherence, connectivity, and phase measures
• Symptom category records and severity ratings
• Protocol region targets and session outcome data

What Data Is Never Used

The following information is never collected, stored, or used by SynapseData:

• Patient names, dates of birth, or contact information
• Geographic identifiers below the state level
• Any of the 18 patient identifiers specified under HIPAA Safe Harbor (45 CFR §164.514(b))

Your account information (name, email, organization) is never linked to or included in any research output. All research analyses operate on fully de-identified, aggregated data only.

De-identification Standard

SynapseData de-identifies patient data consistent with the HIPAA Safe Harbor method (45 CFR §164.514(b)). Patient records are stored under clinician-assigned identifiers only. Real patient names, dates of birth, and other direct identifiers are never entered into or stored by the platform.

Patient age (as an integer) is stored in place of date of birth. No geographic identifiers below the state level are collected.

Your Obligation as a Clinician

By creating a SynapseData account and uploading QEEG data, you represent that:

• You have obtained, or will obtain, appropriate consent from your patients for the use of their de-identified health data in research, consistent with your professional obligations and applicable law.
• You are authorized to upload the QEEG data to SynapseData for use on the terms described here.

SynapseData processes the data you upload in good faith reliance on these representations. You are responsible for maintaining the appropriate patient consents required by your jurisdiction and professional standards.

How Data Is Used

De-identified data may be used for:

• Improving SynapseData's statistical models and clinical analysis tools
• Population-level analyses (symptom correlations, protocol effectiveness, similar patient matching)
• Peer-reviewed academic publication, under full de-identification standards. SynapseData will obtain appropriate ethics review before any external academic publication of this data.

Research use is limited to these purposes. Data is not sold or used for advertising.

Third-Party Sharing

De-identified, aggregated data may be shared with academic collaborators or included in peer-reviewed publications. Individual records are never shared. Any third-party collaboration is subject to data use agreements that restrict use to the research purpose described above.

Data Retention

De-identified data included in the population research database is retained for up to 10 years from the date of contribution. At that point, SynapseData will review whether continued retention is necessary for the stated research purposes and either delete the data or document a specific justification for extended retention.

Opting out stops future contributions but cannot remove data already incorporated into aggregate analyses, as individual records cannot be distinguished from aggregated results.

Opting Out

Research data contribution is enabled by default. To opt out, click the population sharing toggle (Globe icon) on the QEEG Sessions tab for any patient — no account changes or contact required. Opting out takes effect immediately for future uploads; past contributions to aggregate analyses cannot be reversed.

If you have trouble with the in-app toggle, contact info@synapsedata.org and we will opt you out manually.

Governing Law

This agreement is governed by the laws of the State of Delaware, United States. Clinicians outside the United States should ensure their use complies with applicable local law.

EU/EEA practitioners: SynapseData processes de-identified data for research purposes on the basis of legitimate interests (GDPR Article 6(1)(f)). Our legitimate interest is building population-level statistical models that directly improve the clinical tools you use. The data is de-identified, the processing carries low privacy risk to individuals, and you benefit directly from the aggregate models.

Under GDPR Article 21, you have the right to object to this processing at any time. Exercising that right is what the opt-out toggle does — clicking it stops all future research processing of your data immediately, with no justification required.

You also have the following additional rights regarding personal data SynapseData holds about you (your account information):

• Access — request a copy of your personal data
• Rectification — request correction of inaccurate data
• Erasure — request deletion (subject to the research data exception above)
• Portability — request your data in a machine-readable format
• Restriction — request that we limit processing in certain circumstances

To exercise any of these rights, contact info@synapsedata.org. You may also lodge a complaint with your local data protection authority.

Questions

For questions about this agreement or to exercise any rights described above, contact info@synapsedata.org.

This agreement is separate from our Terms of Service and Privacy Policy, which govern your use of the platform generally.