Privacy Policy

Principia Health Sciences, Inc. ("Principia", "we", "us") respects your privacy. This policy describes what information we collect through our website (principia.health) and how we use it. This policy applies only to the marketing website; our product software (the CuRE platform) is governed by separate customer agreements and Business Associate Agreements where applicable.

Information we collect

When you contact us through this site we collect the information you choose to provide — typically your name, email address, organization, and the content of your message. We do not request or intentionally collect any protected health information (PHI) through the website.

Like most websites, our hosting provider (Vercel) records standard server log data such as IP address, browser type, referring page, and timestamp for security and operational purposes.

How we use information

We use the information you submit to:

• Respond to your inquiries and follow up on partnership or sales conversations.
• Send you information you've requested, such as platform demos or whitepapers.
• Improve our website, services, and customer communications.
• Meet legal, audit, and contractual obligations.

We do not sell your personal information, and we do not share it with third parties except with service providers acting on our behalf (for example, email delivery and form processing) or when required by law.

Cookies and analytics

Our website uses a minimal set of cookies required for basic functionality. If and when we deploy analytics or marketing tools, we will update this policy and provide appropriate notice and choice.

Data retention

We retain inquiry information for as long as needed to respond to you and maintain a record of our communications, and then delete or anonymize it in accordance with our internal retention policies.

Your choices and rights

You may request access to, correction of, or deletion of the information you've provided by emailing privacy@principia.health. Depending on your jurisdiction, you may have additional rights under laws such as the GDPR or CCPA.

CuRE Clarion MCP connector

Separately from the website, Principia operates CuRE Clarion MCP (mcp.cure.principia.health), a public Model Context Protocol (MCP) server that lets an AI assistant such as Claude call three read-only advisory tools: a public methodology catalog, a regulatory conformance scanner, and a TMF (Trial Master File) document classifier. This section describes what that connector processes. Full technical detail is on the connector documentation page.

• No tenant or patient data. The connector has no connection to any customer database. It never receives or returns patient data, and its only inputs are the public corpus that ships with it plus whatever artifact you or your AI assistant supply on a given call (for example, your own system descriptor, dataset metadata, or document metadata).
• Inputs are not stored. The content of a call — the artifact or document metadata supplied — is processed transiently to compute the result and is not retained. What is retained is a SHA-256 hash of the input, not the input itself.
• What is logged per call. Each call is written to a hash-chained, tamper-evident audit log recording: the tool name invoked, a SHA-256 hash of the input arguments, the outcome status, a timestamp, and — for per-caller rate limiting — the caller's source IP address.
• Advisory output only. Every result carries a standing disclaimer that it is an advisory input to your own workflow, not a 21 CFR Part 11 / Annex 11 record and not derived from any CuRE-resident patient data.

Children's privacy

This website is not directed to children under 13, and we do not knowingly collect information from children.

Changes to this policy

We may update this policy from time to time. When we do, we'll update the "Last updated" date above and, where appropriate, provide additional notice.

Contact us

Questions about this policy? Email privacy@principia.health.