Privacy Policy

Information We Collect

Account information: name, email, institutional affiliation, and authentication identifiers.

Application data: research protocols, investigator details, uploaded documents, and review history.

Usage data: audit logs, support tickets, and system interactions for security and service improvement.

How We Use Information

To process IRB applications, conduct AI-assisted pre-screening, and facilitate committee review.

To issue and verify IRB certificates and maintain regulatory audit trails.

AI assistance sends relevant request content to the model provider configured by the operator. Protocol text and chat may contain confidential information; use de-identified examples and review what you share.

Browser analytics is disabled by default. If the operator enables first-party public page counts, only approved public path names are recorded; application and verification routes are excluded. Third-party analytics scripts are not loaded in the workspace.

Your Rights

Under PDPL, you may request access, correction, or deletion of personal data subject to legal and research retention requirements.

Use the Support page for privacy requests. Account deletion may preserve decision and audit records where retention is required. Do not assume that deleting an account removes every historical research record.

Before accepting sensitive production data, the operator must publish the legal controller identity and contact details, processing purposes and lawful bases, provider/subprocessor list and locations, transfer safeguards, and the approved retention schedule. These operational facts cannot be established by this software alone.