← Back to Spirecut Forum

Privacy Policy

Last updated: September 9, 2026

Spirecut Forum ("Spirecut," "we," "us") operates the Spirecut Forum web and mobile applications (together, the "Service"), an invite-only community and education platform for verified surgeons and distributor partners. This policy explains what information we collect, how we use it, and the choices you have.

Spirecut Forum is operated by Spirecut SA, a Swiss corporation (Aktiengesellschaft) registered in the Swiss commercial register under UID CHE-209.831.310, with its registered office at Hofackerstrasse 40b, 4132 Muttenz, Switzerland. Spirecut SA is the data controller responsible for your personal information under this policy.

1. Information We Collect

Account information. When you redeem an invite to join, we collect your username, email address, password, and, for surgeon accounts, your professional specialty. Distributor accounts also record the countries they operate in. Your password is stored as a salted hash — we never store or have access to it in plain text. Your username, specialty, and role are visible to other members; your email address is used only for account recovery and verification, and is never shown to other members.

Content you create. Posts, comments, links, photos and videos you upload, event listings and RSVPs (distributor accounts), and votes you cast are stored so the community can function, and are visible to other signed-in members.

Communications. We send transactional email — email verification codes and password-reset links — to the address on your account. We do not send marketing email.

Automatically collected information. We do not use third-party analytics, advertising trackers, or cookies to profile you across other sites. We keep minimal technical logs as part of operating and securing the Service.

2. Clinical Photos, Videos, and Patient Information

Spirecut Forum allows members to share clinical photos, videos, and case discussions as part of posts and comments. We do not independently review this content for patient-identifiable information before it is posted. Sharing any content that could identify a patient — including images, case details, or other health information — is done voluntarily by the posting member and is that member's sole responsibility. By posting such content, you confirm you have the right and any necessary consent to share it, and that doing so complies with the professional and legal obligations that apply to you. If you believe content on the Service improperly identifies a patient, contact us below and we will review it for removal.

3. How We Use Information

4. How We Share Information

We do not sell your personal information, and we do not share it with advertisers. We share information only with service providers who help us run the Service, under obligations to protect it:

We may also disclose information if we believe in good faith it is required by law — for example, in response to a subpoena, court order, or other valid legal process. Where legally permitted, we will make reasonable efforts to notify affected members before disclosing their information in response to this kind of request.

5. Where Your Information Is Stored and International Transfers

Spirecut SA is established in Switzerland, which the European Commission recognizes as providing an adequate level of data protection — so transfers of personal information between the EU/EEA and Switzerland do not require additional safeguards. Our database and file storage are currently hosted in the United States, which is not automatically recognized as providing an adequate level of data protection. Our members and the professionals who invite them are located in multiple countries, which may mean your information is processed somewhere other than where you live. Where we transfer personal information to a country not recognized as offering adequate protection, we will rely on a recognized legal transfer mechanism, such as the European Commission's Standard Contractual Clauses. Contact us below with any questions about international transfers.

6. Data Retention, Deletion, and Business Transfers

We keep your account information for as long as your account is active.

Deleting your own account.Signed-in members can delete their own account at any time from Account Settings ("Delete account"), after confirming with their password. This signs you out immediately. If you log back in with the same username or email and password within 30 days, your account is automatically restored. If you do not log back in within 30 days, your account is permanently anonymized: your username, email address, and password are erased and cannot be recovered. To preserve the integrity of discussion threads other members have replied to, your past posts and comments remain visible either way, but are no longer linked to your identity once your account is anonymized.

If you cannot sign in to delete your own account, contact us at the email below and we can remove it on your behalf — the same handling of your past posts and comments applies.

If Spirecut is ever involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify members through the Service if this happens and your information becomes subject to a different privacy policy.

7. Your Privacy Rights

Depending on where you live, you may have specific legal rights over your personal information. To exercise any of these, contact us at the email below — we may need to verify your identity before acting on a request.

If you are in the EU, UK, or Switzerland. We process your personal information on the following legal bases: performance of a contract (to provide the Service you signed up for), legitimate interests (to secure and operate the Service), and legal obligation, where applicable. You have the right to access, correct, or delete your personal information; to restrict or object to certain processing; to receive a copy of your information in a portable format; and to withdraw consent where processing relies on it. You also have the right to lodge a complaint with your local data protection supervisory authority.

If you are a California resident. California law gives you the right to know what personal information we collect and why, to request deletion or correction of it, and to be free from discrimination for exercising these rights. We do not sell or share personal information for cross-context behavioral advertising, so there is nothing to opt out of. Some content on the Service — such as clinical case details a member chooses to include in a post — could be considered sensitive personal information under California law; we do not use it for anything beyond operating the Service as described in this policy.

Everyone else. Regardless of where you live, you can contact us at any time to ask what information we hold about you, to correct it, or to have your account deleted.

8. Security and Data Breach Notification

Passwords are stored as salted hashes, never in plain text. Password-reset and email-verification codes are single-use, time-limited, and stored as hashes. Uploaded media is served through short-lived signed links rather than being publicly accessible. No method of storage or transmission is 100% secure, but we work to protect your information using industry-standard practices. If we become aware of a security incident that compromises your personal information, we will notify affected members, and any legally required authorities, without undue delay.

9. Do Not Track, Push Notifications, and Automated Decisions

We do not use third-party tracking technologies, so Spirecut Forum does not respond differently to browser "Do Not Track" signals — there is no cross-site tracking to disable. The mobile app can send push notifications for activity such as replies, mentions, and posts from members or content you follow; you can turn these off at any time in your device's notification settings. We do not use your information for automated decision-making or profiling that produces legal or similarly significant effects.

10. Children's Privacy

The Service is a professional platform for verified surgeons and distributor partners. Unlike an open social platform, Spirecut Forum has no public sign-up: every account is created by redeeming an invite issued by Spirecut or an existing distributor partner to a specific professional, rather than by a self-reported age check. The Service is not directed at children, and we do not knowingly collect information from anyone under 18. If we learn an account belongs to someone under 18, we will close it.

11. Changes to This Policy

We may update this policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, notify members through the Service.

12. Contact Us

Questions about this policy or your information can be sent to info@spirecut.com, or by post to Spirecut SA, Hofackerstrasse 40b, 4132 Muttenz, Switzerland.

See also our Terms of Service.