Last updated: June 2026
We do not sell personal data to third parties.
Document inputs are sent to Anthropic's Claude API for generation. Anthropic's privacy policy governs how they handle this data. Do not submit documents containing identifiable patient data without appropriate de-identification.
Your documents are retained as long as your account is active. You may delete individual documents at any time. To request full account deletion, email us at contact@clinidraft.com.
We use industry-standard security measures including HTTPS, hashed passwords (bcrypt), and server-side session management. No system is perfectly secure; use the Service accordingly.
Depending on your jurisdiction, you may have rights to access, correct, or delete your personal data. Contact us at contact@clinidraft.com to exercise these rights.
We use a single session cookie to keep you logged in. We do not use third-party tracking or advertising cookies.
We will notify users of material changes by email or by displaying a notice in the application.