Privacy notice

Draft for legal review: this text has not been approved by counsel and may change before launch.

What we keep

• Your account: email, name, time zone, password hash (never the password), two-step sign-in secret and plan.
• What you create: watchlists, alert rules, notes, saved news, forum posts, CatalystSpace notes and Triage conversations.
• Notifications, the browsers and phones you turn push notifications on for, and messages you send through Contact.
• For AlphaDoc physicians: NPI, licence documents (encrypted), exclusion screening results and engagement records.
• Security records: sign-in attempts and an audit log of staff actions.

What we do not do

We do not sell personal data. Page views counted for editors carry no reader id. Payments are handled by Stripe; we never see your card number.

Who processes it

Stripe (payments), our email provider (account and alert emails), OpenAI (Triage questions, without your name or email) and the browsers' push services (encrypted notifications).

Your choices

Download or delete your data from Account. Turn alerts, emails and push notifications off at any time. Notifications are removed after 12 months.

Contact

Privacy questions go to Contact with the topic "Account and privacy".