Privacy Policy

Information we collect

We may collect your name, email address, account and sign-in information, subscription status, evaluation allowance and usage records, billing identifiers supplied by Stripe, support communications, and technical information needed to secure and operate the service.

We process research papers that you upload and the evaluation reports generated from them. Research papers should not contain identifiable participant, patient or other sensitive personal information. Please remove names, contact details, dates of birth, record numbers and other identifying information before uploading.

How we collect and use information

We collect information directly from you when you create an account, upload a paper, purchase or manage a subscription, ask a report question or contact us. We also receive limited account, transaction and subscription information from the providers that help operate the service.

We use this information to authenticate users, provide and improve the evaluator, process papers and generate reports, save reports to the correct private account, administer evaluation allowances and subscriptions, send account and transaction communications, provide support, prevent fraud and misuse, maintain security, comply with legal obligations and resolve disputes.

We do not sell your personal information. We do not use uploaded papers or private reports for advertising.

Uploaded papers and saved reports

Uploaded paper files are stored temporarily while the evaluation is processed and are deleted after the evaluation process finishes, including when the process fails. The generated report, its title and citation, and any plain-English questions you ask about it are saved privately to your account until you choose to delete the report.

If you cancel a paid subscription, your account returns to the Free plan and your saved reports remain available. You can delete an individual report from Previous reports. You can also contact us to request deletion of your account and associated reports, subject to any information we must retain for legal, tax, fraud-prevention or dispute-resolution purposes.

Payments

Stripe processes subscription payments and manages payment methods, invoices, refunds and cancellation settings. CRA receives limited transaction and subscription details needed to activate and administer your plan. CRA does not receive or store your complete card number. Stripe handles payment information under its own privacy policy.

Service providers and disclosure

We disclose or provide access to information only as reasonably necessary to operate the evaluator, comply with law, protect rights and security, or with your consent. Providers currently used for the evaluator include:

• Supabase for account authentication, database records and private file storage;
• OpenAI for automated analysis and generation of evaluator content;
• Vercel for website hosting and application delivery; and
• Stripe for subscriptions, payments, invoices and refunds.

Authorised CRA personnel may access account or report information when reasonably necessary for support, security, administration or legal compliance. We may also disclose information where required or authorised by law, or in connection with a business restructure where appropriate privacy protections apply.

Overseas processing

Some service providers operate infrastructure or personnel outside Australia. Your information may therefore be processed or stored overseas, including in the United States, depending on the provider and service configuration. We take reasonable steps to use reputable providers and appropriate contractual, access and security controls. Overseas privacy laws may differ from Australian law.

Cookies and security

The evaluator uses strictly necessary cookies or similar technologies to keep you signed in, protect account sessions and provide requested functions. We do not currently use third-party advertising cookies in the evaluator.

We use reasonable technical and organisational measures to protect information, including encrypted connections, private storage, access controls and secure service credentials. No online service can guarantee absolute security. If a data breach is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner where required by the Notifiable Data Breaches scheme.

Access and correction

You may request access to personal information we hold about you or ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading. We may need to verify your identity before responding. In some circumstances permitted by law, access may be refused; if so, we will explain the reason where required.

Privacy questions and complaints

For a privacy question, access or correction request, account-deletion request or complaint, contact info@clinicalresearch.com.au or write to Innovative Wellness Pty Ltd trading as Clinical Research Australia, 38 Arnisdale Road, Duncraig WA 6023, Australia.

We will investigate privacy complaints and aim to respond within a reasonable time. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner.

Changes to this policy

We may update this policy when the evaluator, our providers or applicable requirements change. The current version and effective date will remain available on this page, and material changes will be notified through the evaluator or by email where reasonably practicable.