Privacy Policy

Last updated: June 4, 2026 · Effective immediately

Medlevate ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect information when you use our Service at medlevate1.netlify.app and related domains.

1. Information We Collect

Account information: When you register, we collect your name, email address, and (optionally) your institution or organization name. If you sign in with Google, we receive your Google profile information.

Innovation descriptions: We collect the text you enter to describe health innovations when generating market analyses. This text is processed by our AI systems and may be retained to improve accuracy.

Usage data: We collect information about how you use the Service, including which features you access, analyses you run, and reports you save. This includes IP addresses, browser type, and access timestamps.

Early access form: If you complete our early access request form, we collect your name, email, institution, role, and any message you provide.

Payment information: We do not currently process payments directly. When billing is enabled, payment information will be processed by Stripe and subject to Stripe's privacy policy. We will not store full card numbers.

2. How We Use Your Information

We do not sell your personal information to third parties. We do not use your data for advertising purposes.

3. Innovation Descriptions and AI Processing

The health innovation descriptions you submit are processed by:

We recommend not including proprietary unpublished research details, trade secrets, or highly confidential IP in your submissions if you have concerns about third-party AI processing.

4. Data Storage and Security

Your data is stored in a PostgreSQL database hosted on Railway (railway.app) in the United States. We implement reasonable technical security measures including:

No security system is completely impenetrable. We will notify you of any confirmed data breach affecting your personal information within 72 hours of discovery.

5. Third-Party Services

The Service integrates with the following third-party services, each subject to their own privacy policies:

Public data sources (ClinicalTrials.gov, openFDA, NIH, WHO, CMS, SEC EDGAR, PubMed, PatentsView) are accessed read-only for analysis purposes. We do not share your personal data with these services.

6. Cookies and Tracking

We use minimal cookies: only those necessary for authentication (storing your login session in localStorage). We do not use advertising cookies, cross-site tracking, or third-party analytics services that collect personal data.

7. Data Retention

We retain your account data and saved reports for as long as your account is active. If you delete your account, your personal data will be deleted within 30 days, except where retention is required by law or for legitimate business purposes (e.g., billing records).

Anonymous usage logs (for security and rate-limiting purposes) are retained for 90 days.

8. Your Rights

You have the right to:

To exercise any of these rights, email us at ijw91021@gmail.com.

9. Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided personal information, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. The "Last updated" date at the top of this page reflects the most recent revision.

11. Contact

For privacy questions or requests, contact us at:
ijw91021@gmail.com
Medlevate · St. Louis, Missouri, United States