Privacy Policy

Last updated: 22 October 2026
CliniPaper ("we", "us") is a writing and review assistant for clinical researchers, operated by GoldenRoz, LLC. This policy explains what we collect, why, and the choices you have. Contact: papers@clinipaper.com.

1. What we collect

•
Account data: name, email address, field of research, institution (optional), language preference. If you sign in with Google we receive your name, email address and profile picture — nothing else from your Google account.
•
Content you give us: messages, drafts, tables, figures and other files you send through the app or by email to papers@clinipaper.com, and the answers we produce.
•
Billing data: plan, credit balance and payment status. Card details are handled by Stripe; we never see or store full card numbers.
•
Technical data: log records needed to run and secure the service (time of requests, errors). We do not use advertising trackers.

2. Patient data

CliniPaper does not need identifiable patient data and you must not upload it. Work from drafts and summary or de-identified tables. If a file appears to contain identifiers, the assistant stops and asks you to remove them.

3. How we use data

•
To provide the service: run your requests, verify references, produce drafts and deliver answers in the app or by email.
•
To manage your account, credits, subscriptions and support.
•
To send service emails (sign-in codes, receipts, results, important notices). Product tips can be switched off at any time.
•
To keep the service secure and prevent abuse.
We do not sell your data, and your files and content are never used to train AI models — ours or our providers'.

4. Service providers (sub-processors)

Provider
Purpose
Location
Supabase
Database, file storage, authentication
EU (Frankfurt)
Anthropic (Claude API)
Processing your requests with AI
US
Resend
Sending and receiving email
EU (Ireland)
Stripe
Payments and invoices
US / EU
Expo (EAS Hosting)
Hosting the web app
Global CDN
Google
Optional sign-in with Google
Global
Providers process data only on our instructions. Anthropic does not train on API data. Transfers outside the EU rely on standard contractual clauses.

5. Retention and deletion

Your content stays in your account until you delete it. You can delete a paper (with its messages and files) or your whole account at any time, or ask us at papers@clinipaper.com. Copies of files sent to our AI provider expire automatically within 90 days. Billing records are kept as required by tax law.

6. Your rights

Depending on where you live (including under the GDPR and the Israeli Privacy Protection Law) you may access, correct, export or delete your data, object to or restrict processing, and withdraw consent. Write to papers@clinipaper.com; we reply within 30 days. You may also complain to your data protection authority.

7. Security

Data is encrypted in transit and at rest, access is restricted per account (row-level security), and staff access is limited and logged.

8. Cookies and local storage

We use only what is needed to keep you signed in and remember your settings (language, theme). No advertising cookies.

9. Children

CliniPaper is a professional tool and not intended for anyone under 18.

10. Changes

We will post updates here and notify you by email of material changes.
© 2026 GoldenRoz, LLC · CliniPaper