Privacy Policy

Effective date: May 29, 2026

Rightview (operated by First Search Inc., "we," "us," or "our") provides clinical regulatory and document intelligence services at rightview.ai, crx.rightview.ai, and sites.rightview.ai (the "Service"). This Privacy Policy describes how we handle your information across all Rightview products.

1. Information We Collect

Email address. Collected when you sign up or are provisioned an account, used to identify your account and send product communications.

Queries you submit. Questions you send to the Service are processed to generate answers and may be stored for quality review and service improvement. We do not use your queries or the information we collect from them to train AI models.

Account activity. We record when your account was created, when you last signed in, and aggregate usage counts to manage access and understand how the Service is used.

Session cookie. We set a single HTTP-only cookie to keep you signed in. It contains a cryptographically signed token and cannot be read by browser scripts. See Section 5 for product-specific session lengths.

Server logs. Our hosting infrastructure records standard access logs, which may include IP addresses and timestamps, retained briefly for security and debugging only.

2. How We Use Your Information

To provide, operate, and improve the Service
To manage your account and enforce access limits
To evaluate answer quality and monitor service performance — not to train AI models
To send product updates and regulatory content (opt out any time by emailing us)
To detect and prevent abuse or unauthorized access

We do not use your queries, account information, or uploaded documents to train AI models, and we do not permit our service providers to do so.

3. Service Providers

We use third-party service providers for cloud infrastructure, encrypted storage, AI language model inference, and answer quality monitoring. When queries are processed for quality monitoring, your email address and query text are shared with that provider so responses can be reviewed. All providers are based in the United States, process data on our behalf only, and are prohibited from using it for their own purposes. We do not sell your data or share it for advertising.

4. No PHI

Do not submit protected health information (PHI) or patient-identifiable data. The Service is not designed or approved for PHI. Our Terms of Service expressly prohibit it.

5. Product-Specific Details

Rightview CRX (crx.rightview.ai)

Accounts are self-created with an email address — no password required
Session cookie expires 90 days after sign-in
No document uploads; queries are limited to governance documents we index
Query count is tracked per account to enforce usage limits
Referral links may be used to unlock additional free queries when a colleague signs up

Rightview Full Platform (sites.rightview.ai)

Accounts are provisioned by your organization's administrator, not self-created
Sessions expire after approximately 3 hours of inactivity
Uploaded documents (protocols, ICFs, investigator brochures, etc.) are stored in encrypted cloud storage and indexed for search within your organization's isolated workspace — they are never shared across organizations
Quality monitoring traces include your email address, display name, organizational workspace identifier, and thread ID alongside query text, to allow answer review within your organization's context

6. Data Security

Data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Session tokens are stored in HTTP-only cookies inaccessible to browser scripts. We implement industry-standard safeguards but cannot guarantee absolute security.

7. Data Retention

We retain your account information and query history for as long as your account is active and for a reasonable period thereafter. You may request deletion by emailing info@rightview.ai.

8. Your Rights

You may request access to, correction of, or deletion of your personal data at any time. Email info@rightview.ai and we will respond within 30 days.

9. Children

The Service is not directed to children under 18. We do not knowingly collect personal information from minors.

10. Changes

We may update this policy from time to time and will notify you of material changes by email or by posting a notice on the Service.

11. Contact

Questions? Email info@rightview.ai or write to First Search Inc., New Jersey, USA.