PRIVACY POLICY – Clinical Corpus website

Last Updated: October 1, 2026.

This Privacy Policy explains what information Clinical Corpus (the “Platform”) collects when you visit or use our website, why we collect it, and the choices you have. It is a companion to our Terms of Use and Cookie Policy, and should be read together with both.

1. WHO WE ARE

1.1. Clinical Corpus is operated by Alexandre Dantas Bandeira de Mello Ltda, a company registered in Rio de Janeiro, Brazil (CNPJ 51.478.455/0001-58). Full contact details are at the bottom of this page.
1.2. This policy covers clinicalcorpus.com and the search service it connects to. It does not cover third-party sites we may link to, such as the source articles returned in search results.

2. INFORMATION WE COLLECT

2.1. Account information: When you register for a plan, we collect your name, email address, and a securely hashed password through our membership system (Restrict Content Pro, running on WordPress).
2.2. Billing information: Payments are processed by Stripe. We do not receive or store your full card number — Stripe handles that directly and shares with us only what is needed to manage your subscription (such as plan type, billing status, and the last four digits of your card).
2.3. Search activity: The questions you ask and the answers you receive are processed to generate your results and to enforce your plan’s usage quota. As explained in our Cookie Policy, the conversation itself is kept only in your browser’s session storage, not logged on our servers against your identity — we retain aggregate usage counts (how many searches, not their content) to enforce fair-use limits.
2.4. Feedback and support: If you use our Feedback form or email us directly, we collect the name, email address, and message you provide.
2.5. Technical data: Like most websites, our servers automatically log standard technical data (such as IP address and browser type) for security and troubleshooting purposes.

3. HOW WE USE YOUR INFORMATION

3.1. To provide, maintain, and authenticate your access to the Platform.
3.2. To process payments, manage subscriptions, and enforce the search limits tied to your plan.
3.3. To respond to feedback, questions, and support requests.
3.4. To maintain the security and integrity of the Platform.
3.5. To comply with legal, tax, and accounting obligations.
3.6. We do not sell your personal information, and we do not use it for third-party advertising.

4. ZERO PATIENT DATA POLICY

4.1. As stated in our Terms of Use, the Platform does not collect, store, or process patient data of any kind, and users are prohibited from entering patient information into search queries.
4.2. Because we do not handle Protected Health Information (PHI), the Platform is not subject to HIPAA.

5. COOKIES AND LOCAL STORAGE

5.1. Our full Cookie Policy is available here. The detail below covers the standard WordPress cookies referenced there.
5.2. Login cookies: Last for two days, or two weeks if you select “Remember Me.” Removed automatically when you log out.
5.3. Screen option cookies: Last for one year and store display preferences in the admin area; they contain no personal data.
5.4. Temporary login-test cookie: Set on the login page to check whether your browser accepts cookies, and discarded when you close your browser.

6. THIRD-PARTY SERVICE PROVIDERS

6.1. Stripe: Processes all payments and stores your billing details under its own privacy policy.
6.2. Google Fonts: Serves the typefaces used on this site; as noted in our Cookie Policy, this does not involve cookies.
6.3. Search infrastructure: Your search queries are sent to our search backend, hosted on cloud infrastructure separate from this website, solely to generate your results.
6.4. Email service provider: Account and transactional emails (such as password resets or billing notices) are sent through a third-party email provider.
6.5. Each of these providers processes data under its own privacy policy and only to the extent needed to deliver its service to us.

7. DATA RETENTION

7.1. We retain your account information for as long as your account is active, and for a reasonable period afterward to meet accounting, tax, and legal obligations.
7.2. Feedback and support messages are retained so we can track and act on recurring issues.
7.3. Search conversations are not retained server-side against your identity beyond the aggregate counts described in Section 2.3.

8. YOUR RIGHTS

8.1. Depending on where you are located, you may have rights to access, correct, delete, or export your personal information under applicable law (such as the GDPR, LGPD, or CCPA).
8.2. You can view and update your basic account information at any time from your account page.
8.3. For any other request — including full data export or deletion — contact us using the details in Section 14. We will respond within a reasonable timeframe.

9. DATA SECURITY

9.1. We use reasonable technical and organizational measures to protect your information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. INTERNATIONAL DATA TRANSFERS

10.1. Our company is based in Brazil, and some of the service providers listed in Section 6 may process data in other countries, including the United States. Where required, we rely on appropriate safeguards for these transfers.

11. CHILDREN’S PRIVACY

11.1. The Platform is intended for healthcare providers, researchers, and other professional or academic users. It is not directed at children, and we do not knowingly collect personal information from anyone under 16.

12. BUSINESS TRANSFERS

12.1. If Clinical Corpus is involved in a merger, acquisition, sale of assets, or a similar corporate transaction, your personal information may be transferred to the acquiring or surviving entity as part of that transaction, on the legal basis of legitimate interest under Article 7, IX of Brazil’s General Data Protection Law (LGPD) and under any other data protection law that applies to you.
12.2. If such a transfer occurs, we will notify affected users through the Platform or by email. The receiving entity will remain bound to handle your personal information under privacy commitments consistent with this Policy, unless you are notified of and given the chance to respond to a materially different practice.
12.3. You keep every right described in Section 8 of this Policy before and after any such transfer, including the right to request access, correction, or deletion of your data from whichever entity then controls it.

13. CHANGES TO THIS POLICY

13.1. We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. The “Last Updated” date at the top of this page will always reflect the most recent revision.

14. CONTACT US

Questions about this Privacy Policy can be sent through our Feedback page, or by writing to us directly:

The Clinical Corpus team