Privacy Policy for CliniWiz

Last Updated: June 20, 2025

1. Introduction

Welcome to CliniWiz ("Service"), operated by CORDOC LLC ("us", "we", or "our"). CliniWiz is an AI-powered medical answer search engine that provides answers backed by peer-reviewed medical literature. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the Service.

2. Information We Collect

We may collect information about you in a variety of ways. The information we may collect on the Service includes:

a. Personal Data You Provide to Us:

Account Information: When you register for an account through our third-party authentication provider, Clerk, we may collect your name, email address, and other information Clerk provides to us based on your Clerk account settings.
Search Queries: We collect the search queries you submit to the Service to provide you with search results and to improve our AI models and service offerings.
Communications: If you contact us directly, we may receive additional information about you such as your name, email address, phone number, the contents of the message and/or attachments you may send us, and any other information you may choose to provide.
Payment Information: If you make any purchases through the Service (e.g., for premium features), your payment information (such as credit card details) is collected and processed by our third-party payment processor, Stripe. We do not directly store your full payment card information.

b. Data Collected Automatically:

Usage Data: We automatically collect information when you access and use the Service. This information may include your IP address, browser type, operating system, access times, pages viewed directly before and after accessing the Service, and other actions you take on the Service, such as search history and interaction with results.
Cookies and Tracking Technologies: We use cookies and similar tracking technologies to track the activity on our Service and store certain information. For more details, please refer to our Cookie Policy.
Device Information: We may collect information about your computer or mobile device, such as the hardware model, operating system and version, unique device identifiers, and mobile network information.

c. Information from Third Parties:

Authentication Services: As mentioned, we use Clerk for user authentication. When you create an account or log in through Clerk, we receive personal data from Clerk as permitted by your privacy settings on that service.

3. How We Use Your Information

Having accurate information about you permits us to provide you with a smooth, efficient, and customized experience. Specifically, we may use information collected about you via the Service to:

Create and manage your account.
Provide, operate, and maintain our Service, including processing your search queries using our AI (potentially processed via Groq) and displaying relevant medical literature.
Improve, personalize, and expand our Service, including analyzing usage patterns and using services like Recombee for personalized recommendations.
Understand and analyze how you use our Service to develop new products, services, features, and functionality.
Communicate with you, either directly or through one of our partners, including for customer service, to provide you with updates and other information relating to the Service, and for marketing and promotional purposes (where you have consented).
Process your transactions and manage your orders, if applicable, through Stripe.
Send you technical notices, updates, security alerts, and support and administrative messages.
Prevent fraudulent transactions, monitor against theft, and protect against criminal activity.
Enforce our Terms of Service and other policies.
Comply with legal and regulatory obligations.

4. How We Share Your Information

We may share information we have collected about you in certain situations. Your information may be disclosed as follows:

a. By Law or to Protect Rights:

If we believe the release of information about you is necessary to respond to legal process, to investigate or remedy potential violations of our policies, or to protect the rights, property, and safety of others, we may share your information as permitted or required by any applicable law, rule, or regulation.

b. Third-Party Service Providers:

We may share your information with third parties that perform services for us or on our behalf, including:

Clerk: For user authentication and account management.
Stripe: For payment processing (if applicable).
Recombee: For content personalization and recommendations.
Groq: For AI processing of search queries.
Database Providers (e.g., PostgreSQL with Drizzle ORM): For storing your data.
Hosting Providers: For hosting our Service.
Analytics Providers: To help us understand usage of our Service.

These third-party service providers are contractually obligated to protect your information and are not permitted to use your personal data for any other purpose.

c. Business Transfers:

We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

d. With Your Consent:

We may disclose your personal information for any other purpose with your consent.

We do not sell your personal information to third parties.

5. Data Storage and Security

We use administrative, technical, and physical security measures to help protect your personal information. Your data, including account information and search history, is stored in our PostgreSQL database, managed via Drizzle ORM. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse. Any information disclosed online is vulnerable to interception and misuse by unauthorized parties.

6. Data Retention

We will retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your information to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies. Usage data is generally retained for a shorter period, except when this data is used to strengthen the security or to improve the functionality of our Service, or we are legally obligated to retain this data for longer time periods.

7. Your Data Protection Rights

Depending on your location, you may have the following rights regarding your personal data:

The right to access – You have the right to request copies of your personal data.
The right to rectification – You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
The right to erasure – You have the right to request that we erase your personal data, under certain conditions.
The right to restrict processing – You have the right to request that we restrict the processing of your personal data, under certain conditions.
The right to object to processing – You have the right to object to our processing of your personal data, under certain conditions.
The right to data portability – You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

If you wish to exercise any of these rights, please contact us at contact@cliniwiz.com. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and use personal information about you. For further information about the types of cookies we use, why, and how you can control cookies, please see our Cookie Policy.

9. Children's Privacy

Our Service is not intended for use by children under the age of 13 (or a higher age threshold as required by applicable law in your jurisdiction). We do not knowingly collect personally identifiable information from children under this age. If you become aware that a child has provided us with personal information without parental consent, please contact us. If we become aware that we have collected personal information from a child without verification of parental consent, we take steps to remove that information from our servers.

10. International Data Transfers

Your information, including personal data, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those from your jurisdiction. If you are located outside the United States and choose to provide information to us, please note that we transfer the data, including personal data, to the United States and process it there. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

11. Links to Other Websites

Our Service may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this Privacy Policy. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

13. Data Processing for Medical AI

CliniWiz processes your search queries through advanced AI systems to provide relevant medical literature. This processing includes:

Semantic analysis of medical queries
Matching queries to peer-reviewed medical literature
Generation of evidence-based responses with citations
Improvement of search algorithms based on aggregated, anonymized data

We do not use your personal health queries for any purpose other than providing you with search results and improving our service.

14. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

The right to know what personal information we collect, use, disclose, and sell
The right to request deletion of your personal information
The right to opt-out of the sale of personal information (we do not sell personal information)
The right to non-discrimination for exercising your privacy rights

To exercise these rights, please contact us using the information below.

15. Data Breach Notification

In the event of a data breach that may compromise your personal information, we will notify affected users within 72 hours of becoming aware of the breach, in accordance with applicable laws. Notifications will be sent to the email address associated with your account.

16. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

CORDOC LLC
4030 Wake Forest Rd Suite 349
Raleigh, NC 27609
General Inquiries: contact@cliniwiz.com
Privacy Officer: privacy@cliniwiz.com
Data Protection: dpo@cliniwiz.com

Data Protection Officer:
For privacy-related concerns, you may also contact our Data Protection Officer directly at the email address above.