Privacy Notice

• Account data — name, email address, and login credentials, used to create and secure your account.
• Usage and telemetry data — feature usage, audit counts, device identifiers, and IP address, used for security, fraud prevention, and product improvement.
• Support communications — messages you send us, used to provide customer support.
• Marketing data — your contact details and preferences where you have consented to marketing.

Payment data (card details, billing address) is collected and processed directly by our Merchant of Record, Paddle — we never see or store your card details.

We process personal data on the following bases: performance of our contract with you (account creation, providing the Service); our legitimate interests (security, fraud prevention, product improvement); your consent (marketing, non-essential cookies); and compliance with legal obligations (tax and accounting records).

• Service providers / subprocessors — hosting, analytics, and support tooling providers acting under contract.
• Paddle (Merchant of Record) — for the sale of the product, subscription management, payments, tax compliance, and invoicing.
• Professional advisers — legal and accounting advisers where necessary.
• Authorities — where required by law.

We retain personal data only for as long as needed for the purposes described above — for the life of your account plus any period required for legal, tax, or accounting obligations. Data is deleted or anonymised when no longer needed.

We apply appropriate technical and organisational measures, including encryption in transit and at rest, access controls, and row-level security on stored data. Because document analysis runs locally in your browser, your clinical documents are never transmitted to or stored on our servers.

Depending on your jurisdiction, you may have the right to access, rectify, erase, restrict, or port your personal data, to object to processing, and to withdraw consent at any time. If you are in the UK/EEA, you also have the right to lodge a complaint with your supervisory authority. We respond to rights requests within one month. To exercise any right, contact us via the options on ClinOpsWord.com.

If personal data is transferred outside the UK/EEA, we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses.

We use essential cookies required to operate the Service (authentication, security) and, with your consent, analytics cookies to understand product usage. You can manage cookie preferences through your browser settings.

We may update this Privacy Notice from time to time. Material changes will be announced on the Service. The "last updated" date above shows the current version.