Privacy policy
This policy explains what information AuditRx (“we”, “us”) collects when you use our protocol audit service, how we use it, and the choices you have. AuditRx is operated by [CONFIRM: legal entity name and address].
Information we collect
- Account information. Your full name, email address and a password. We store passwords in hashed form [CONFIRM: your backend hashes passwords].
- Protocols and reports. The files you upload (PDF or Word) and the audit reports we generate from them.
- Technical information. Your IP address, browser type, and request logs that our hosting providers record when you use the service.
- Session data. A sign-in token stored in your browser so you stay signed in. It is removed when you log out, and you are signed out automatically after 15 minutes of inactivity.
Please do not upload documents that contain identifiable patient information, such as names, dates of birth or medical record numbers. AuditRx is built to review protocol design, and it does not need that data.
How we use it
- To create and secure your account.
- To analyze your protocol and produce your report.
- To operate, maintain, troubleshoot and secure the service.
- To contact you about your account, support requests and important changes to the service or these policies.
We do not sell your personal information, and we do not use your protocols for advertising.
How AI is used on your protocol
To produce a report, the text of your protocol is processed by an AI model provided by [CONFIRM: name of the AI/LLM provider(s) used for audits]. [CONFIRM: whether your provider retains prompts, and whether your protocols are used to train any model. State this plainly, for example “We do not use your protocols to train models, and our provider is contractually prohibited from doing so.” only if it is true.]
Who we share information with
We share information only with service providers that help us run AuditRx, and only as needed:
- Hosting and networking: Cloudflare and Railway, which host the website, the application, the API and the database.
- AI processing: the provider named above.
- Email: [CONFIRM: any email provider, or delete this line]
We may also disclose information if the law requires it, to protect our rights or the safety of others, or as part of a merger or sale of the business. In that case we will tell you if your information becomes subject to a different privacy policy.
How long we keep it
We keep your account information while your account is active. We keep uploaded protocols and generated reports for [CONFIRM: retention period]. You can ask us to delete your account, uploads and reports at any time by emailing support@ctiauditrx.com. We will act on the request within [CONFIRM: e.g. 30 days], except for information we must keep for legal reasons. Backups may take additional time to expire.
Security
Traffic between your browser and AuditRx is encrypted with HTTPS. Access to your reports requires you to be signed in. [CONFIRM: describe storage encryption and access controls only if verified] No system is completely secure, so we cannot guarantee absolute security. Use a strong, unique password, and tell us right away if you suspect unauthorized access.
Your choices and rights
Depending on where you live, you may have the right to access, correct, export or delete your personal information, to object to or restrict certain processing, and to withdraw consent. To use any of these rights, email support@ctiauditrx.com. We may need to verify your identity first. If you are unhappy with our response, you may contact your local data protection authority.
International transfers
Our providers may process data in the United States and other countries. Where required, we rely on appropriate safeguards for these transfers.
Children
AuditRx is for professional use and is not directed to anyone under 18. We do not knowingly collect information from children.
Changes to this policy
If we make material changes, we will update the date above and, where appropriate, notify you by email or in the app.
Contact
Questions about this policy: support@ctiauditrx.com.