Privacy Policy

1. Information We Collect

When you create a ClinPep account, we collect:

• Full name and email address
• Organization or practice name (optional)
• Age verification confirmation
• Billing information (processed securely via Stripe)
• Usage data and platform interaction patterns

We do not collect patient data, protected health information (PHI), or any information subject to HIPAA regulations. ClinPep is a reference tool, not a clinical records system.

2. How We Use Your Information

• To provide and maintain your account and subscription
• To process payments through our billing partner, Stripe
• To communicate important service updates
• To improve the Platform based on aggregate usage patterns
• To enforce our Terms of Service

3. Data Storage and Security

Your data is stored securely using Supabase, which provides enterprise-grade security including encryption at rest and in transit, row-level security policies, and regular security audits. Payment information is never stored on our servers — it is handled entirely by Stripe’s PCI-compliant infrastructure.

4. Data Sharing

We do not sell, rent, or share your personal information with third parties except as necessary to:

• Process payments (Stripe)
• Host and deliver the Platform (Vercel, Supabase)
• Comply with legal obligations

5. Your Rights

You have the right to:

• Access and export your account data
• Request correction of inaccurate information
• Request deletion of your account and associated data
• Opt out of non-essential communications

6. Cookies

ClinPep uses essential cookies for authentication and session management. We do not use tracking cookies or third-party advertising cookies.

7. Contact

For privacy-related inquiries, please contact us at privacy@clinpep.com.