Privacy Policy

1.1 Information You Provide

• Account Information: Name, email address, company name, job title, phone number
• Profile Information: Professional credentials, certifications, service offerings, company descriptions
• Communication Data: Messages, documents, and files shared through the platform
• Transaction Data: Payment information, billing addresses, contract details
• Support Data: Information provided when contacting customer support

1.2 Information Collected Automatically

• Usage Data: Pages visited, features used, time spent on platform, click patterns
• Device Information: IP address, browser type, operating system, device identifiers
• Log Data: Access times, error logs, referring URLs
• Cookies and Tracking: See our Cookie Policy

1.3 Information from Third Parties

• Single sign-on providers (Google, Microsoft, etc.)
• Payment processors
• Business verification services
• Public databases and registries

• Provide Services: Operate the platform, process transactions, facilitate connections
• Improve Platform: Analyze usage patterns, develop new features, fix bugs
• Communications: Send service updates, respond to inquiries, provide support
• Security: Detect fraud, prevent abuse, protect users and platform integrity
• Legal Compliance: Comply with applicable laws, regulations, and legal processes
• Marketing: Send promotional communications (with your consent)
• AI Features: Process queries through AI services to provide assistance (see AI Disclaimer)

We may share your information with:

Service Providers

• Cloud hosting providers (AWS, Google Cloud)
• Payment processors (Stripe, escrow services)
• AI service providers (OpenAI) - see AI Disclaimer
• Analytics providers
• Email service providers
• Customer support tools

Legal Requirements

We may disclose information when required by law, court order, or government request, or to protect our rights, property, or safety, or that of our users or the public.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

We implement industry-standard security measures including:

• Encryption in transit (TLS 1.3) and at rest (AES-256)
• Regular security audits and penetration testing
• Access controls and authentication mechanisms
• Employee security training
• Incident response procedures

We retain your information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Maintain audit trails for regulatory compliance

After account deletion, we may retain certain information for up to 7 years for legal and compliance purposes, after which it will be securely deleted or anonymized.

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data (subject to legal retention requirements)
• Portability: Request your data in a portable format
• Objection: Object to certain processing activities
• Restriction: Request restriction of processing
• Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, contact us at privacy@clinstudy.com. We will respond within 30 days.

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have different data protection laws.

We use appropriate safeguards for international transfers, including Standard Contractual Clauses approved by the European Commission and other legally recognized transfer mechanisms.

For users in the European Economic Area:

• Legal Basis: We process data based on contract performance, legitimate interests, consent, or legal obligations
• Data Controller: ClinStudy Inc. is the data controller
• DPO: Contact our Data Protection Officer at privacy@clinstudy.com
• Supervisory Authority: You have the right to lodge a complaint with your local data protection authority

California residents have additional rights under the CCPA:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information
• Right to non-discrimination for exercising CCPA rights

We do not sell personal information. To exercise your CCPA rights, contact privacy@clinstudy.com.

ClinStudy is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of material changes via email or platform notification. Your continued use of ClinStudy after changes become effective constitutes acceptance of the updated policy.