Privacy Policy
Last updated: April 23, 2026
Note for founder: Placeholder. Must be reviewed and finalized by counsel before launch.
What we collect
In V1 (current version), CellIntel.ai collects:
- Briefing inputs — the information you provide in the intake form (your concern, goals, age, sex, treatments tried, etc.). Stored in our database associated with the generated briefing.
- Email address — only if you choose to provide one to receive your briefing PDF. Optional.
- Analytics data — anonymized usage data (page views, interactions) via Vercel Analytics and PostHog.
- IP address (hashed) — used for rate limiting to prevent abuse. Not associated with any other data.
What we don't collect in V1
CellIntel.ai V1 does not collect Protected Health Information (PHI) as defined under HIPAA. We do not accept uploads of medical records, lab results, imaging, or electronic health records in this version. Your intake inputs are general self-descriptions, not formal health records.
We do not claim HIPAA Covered Entity or Business Associate status at this time. If future versions add PHI collection (medical records upload), this policy will be updated and you will be informed before any change affects your data.
How we use your information
- To generate your requested briefing.
- To deliver your briefing PDF by email, if requested.
- To improve our AI quality via anonymized analysis of briefing requests.
- To prevent abuse of the Service (rate limiting).
- To match you with practitioners in your region, if you opt in.
Who we share data with
We share limited data with:
- AI providers (Anthropic, for briefing generation) — they process briefing inputs to generate outputs. We do not authorize them to train their models on your data.
- Hosting providers (Vercel, Supabase) — they store data on our behalf under standard cloud provider terms.
- Payment processors (Stripe, for practitioners only) — standard PCI-compliant processing.
- Email delivery (Resend) — only if you provide an email address to receive your briefing.
- Legal compliance — we may disclose data if legally compelled by valid subpoena or court order.
We do not sell your personal data.
Your rights
Under applicable privacy laws (CCPA, CDPA, GDPR for EU users), you may have rights including:
- Right to access data we hold about you.
- Right to request deletion.
- Right to correct inaccurate data.
- Right to opt out of analytics tracking (cookie banner).
To exercise these rights, contact privacy@cellintel.ai.
Data retention
Briefings and associated intake data are retained to allow you to retrieve your briefing later via its unique URL. You can request deletion at any time.
Children's privacy
CellIntel.ai is not directed at children under 18 and we do not knowingly collect information from them.
Contact
Questions: privacy@cellintel.ai