Privacy Policy

CertaintyGrade (certaintygrade.com) is an educational evidence-appraisal tool built and operated by Dr. Adarsh K. Gupta, DO, MS, FACOFP. Contact: contact@certaintygrade.com

We collect only what is necessary to operate the service:

• Account information — your email address when you create an account (via Supabase Auth magic link).
• Assessment content — the PICO questions and study text you enter to run an assessment. This is stored so you can review past assessments.
• Usage logs — request timestamps and assessment counts, used for billing, rate limiting, and abuse prevention.
• Standard server logs — IP addresses and browser user-agent strings, retained for up to 30 days.

We do not collect payment card data directly — payments are processed by Stripe, which has its own privacy policy.

• We do not sell your data to any third party.
• We do not use your clinical content or assessment data to train AI models.
• We do not run third-party advertising or tracking scripts.
• We do not share personal information with third parties except as described below.

We use the following sub-processors, each with their own privacy policies:

• Supabase — database and authentication (hosted on AWS)
• Vercel — hosting and edge network
• Anthropic — AI inference for GRADE assessments (your study text is sent to Anthropic's API; Anthropic does not train on API data by default)
• Stripe — payment processing (we do not receive or store full card numbers)

We use authentication cookies set by Supabase Auth to keep you signed in. These are strictly necessary and cannot be opted out of while using an account. We do not use marketing or analytics cookies.

You may request deletion of your account and all associated data at any time by emailing contact@certaintygrade.com. We will process deletion requests within 30 days.

If you are in the EU/EEA, you have additional rights under the GDPR including the right to access, rectify, and port your data. Contact us to exercise these rights.

Assessment data is retained as long as your account is active. Server logs are deleted after 30 days. After account deletion, all personal data is removed within 30 days.

We will post any changes to this page with an updated effective date. Material changes will be communicated via email if you have an account.

Questions about this policy: contact@certaintygrade.com