Privacy Policy

What we collect

EvidenceHelix may collect account information such as a display name and email address, password hashes, authenticated research-workspace content, public protocol files you choose to upload, source/provenance metadata, generated research outputs, and ordinary security/reliability logs.

What we do not ask for

EvidenceHelix v1 is not a personal health record, patient portal, EDC, or participant-data system. You must not submit patient records, protected health information, confidential clinical-trial participant data, insurance records, or other sensitive information that you do not have the right to provide.

How we use information

We use information to authenticate accounts, provide research features, preserve evidence provenance, secure and troubleshoot the service, prevent abuse, and improve reliability.

AI and research content

AI features are intended to organize and synthesize research evidence. Research-workspace content is not sold and must not be used for targeted advertising. AI output is not medical advice and may be incomplete or wrong; users remain responsible for reviewing the underlying sources.

Service providers

EvidenceHelix may use hosting, infrastructure, security, analytics, email, or model providers to operate the service. Providers should receive only the information reasonably necessary for their role and are subject to their own terms and privacy practices.

Data retention

We retain information only as reasonably necessary for the service, security, dispute resolution, and applicable legal obligations. See the Data Retention Policy.

Deletion

Authenticated users can delete their account from the EvidenceHelix workspace. Deletion removes the active account and account-owned workspace records, subject to limited backup, security, dispute, and legal-preservation exceptions described in our retention policy. Do not place sensitive information in public issue trackers. See Account Deletion.

Security

EvidenceHelix uses technical safeguards such as one-way password hashing and authenticated API access. No system is perfectly secure, and we cannot guarantee absolute security.

Children

EvidenceHelix v1 is intended for adults age 18 and older. We do not knowingly offer the v1 account service to children under 13.

Medical and regulatory status

EvidenceHelix is designed for research and educational use. It is not a diagnostic or treatment-selection system and does not claim HIPAA, FDA, 21 CFR Part 11, GCP, SOC 2, or similar certification unless expressly stated in a later, supported notice.

Changes

We may update this policy as the product changes. Material changes will be reflected by an updated effective date and, when appropriate, additional notice.