Privacy Policy

We collect the following categories of information:

• Account information: email address, name, and authentication metadata from your sign-in provider.
• Uploaded documents: medical record PDFs you upload to generate a chronology, along with the chronologies and supporting outputs we produce from them. These records may contain personal health information about you or others. You are responsible for ensuring you have the legal right to upload and process these records.
• Run metadata: project name, file count, page count, events extracted, status, and timestamps for each chronology run.
• Usage data: dashboard actions, page visits, and session identifiers used to operate the product.
• Support communications: messages you send to our support team.
• Billing data: transaction records and payment status. Payment card details are handled entirely by our payment processor — we do not store full card numbers.

• Process your uploaded medical records to generate clinical chronologies.
• Display run status, page counts, events extracted, and download links in your dashboard.
• Process billing for pages processed and manage your account.
• Send service emails related to your account, billing, and product updates.
• Respond to support requests.
• Investigate incidents, prevent abuse, and improve reliability.
• Improve and develop our products and services, including the accuracy and performance of our chronology generation systems.

We share data with third-party service providers that help us operate the product, including cloud infrastructure providers (such as AWS, Azure, or Google Cloud), AI model providers (such as OpenAI, Anthropic, and Google), payment processors, email delivery services, and error monitoring tools. These providers process data on our behalf and are bound by appropriate data protection agreements. We may change providers from time to time without notice.

We do not sell your personal information. We do not share your uploaded records or generated chronologies with third parties for advertising purposes.

We may disclose information when required by law, to enforce these terms, or to protect the rights, property, or safety of ClinicalChronology, our users, or others.

The standard pay-as-you-go ClinicalChronology service is not a HIPAA-covered service, and we do not enter into Business Associate Agreements (BAAs) for it. Do not upload protected health information through the standard service unless you have determined that processing it through ClinicalChronology in this manner is permissible under applicable law.

For customers that require a HIPAA-aligned environment, ClinicalChronology offers a Private Deployment option. Under Private Deployment, the ClinicalChronology software runs inside the customer's own cloud environment, and the customer is responsible for entering into Business Associate Agreements directly with the cloud infrastructure providers and AI model providers they choose to use. To discuss Private Deployment, contact support@clinicalchronology.com.

We retain account, billing, and run data while your account is active. You can delete projects, runs, and uploaded records from your dashboard at any time.

If you delete your account, we apply a 30-day soft-delete period before permanent deletion of your uploaded records, runs, and generated chronologies, unless longer retention is required by law or for legitimate security or accounting needs. You may export your chronologies at any time before deletion.

We use technical and organizational safeguards designed to protect your data, including:

• Files are stored in encrypted object storage accessible only via authenticated requests.
• Uploads and downloads happen over encrypted (TLS) connections.
• Access to production systems is limited to authorized personnel.
• Payment processing is handled by our payment processor. We do not store card numbers.

No method of storage or transmission is perfectly secure. Absolute security is not guaranteed.

• Access and update your account information in your account settings.
• Delete projects, runs, and uploaded records from your dashboard at any time.
• Delete your account at any time from your account settings.
• Export your chronologies before deleting your account.
• Unsubscribe from non-essential marketing emails using the unsubscribe link in any such email.

To make a privacy request, contact support@clinicalchronology.com from the email associated with your account.

If you are a resident of a US state with applicable privacy legislation (such as California, Colorado, Connecticut, Virginia, or similar), you may have additional rights including the right to access, correct, or delete your personal information, and the right to opt out of certain data sharing.

We do not sell personal information. We do not use personal information for targeted advertising.

To exercise your rights, contact support@clinicalchronology.com. We will respond within the timeframes required by applicable law.

ClinicalChronology and its service providers may process data in countries outside your residence. We use contractual and operational safeguards designed to protect transferred personal data.

ClinicalChronology is not intended for individuals under 18, and we do not knowingly collect data from children. If you believe a child has provided us personal information, contact support@clinicalchronology.com.

We may update this Privacy Policy. The effective date above indicates the current version. Continued use of the service after updates means the updated policy applies. We will notify users of material changes by email or in-product notice.

All inquiries: support@clinicalchronology.com