Privacy Policy

This policy describes how Chartely (“Chartely”, “we”, “us”) collects, uses and protects information when you use our website, API and MCP server (the “Service”). Chartely is a document-organization tool: it turns the medical records you upload into a page-cited chronology. It is not a law firm, a medical provider, or a covered entity or business associate under HIPAA, and provides no legal or medical advice.

Your uploaded records are processed, not archived

When you upload medical records, we process them in memory to build your chronology, then the source file is not retained. We are not in the business of warehousing the medical documents you upload, and we don’t use the content of records you upload to train models for other customers. See our Security page for more detail on how a job flows through the Service.

Information we collect

• Account information, your name, email address and password (or sign-in provider identifier) when you create an account.
• Chronology results, the structured output of a chronology job (events, gaps, narrative, confidence score) is retained in your account so you can re-download or re-export it, until you delete the job or your account. The source medical records themselves are not retained after processing.
• API usage data, your API key (stored hashed), the endpoints you call, timestamps, response status and page counts, used for rate limiting, billing and the inspectable request log in your dashboard.
• Billing information, if you subscribe to a paid plan, payment is processed by Stripe; we store your plan, billing status and Stripe customer reference, never your full card number.
• Usage data, basic product analytics (pages viewed, features used, device/browser type) and error reports sent to our monitoring provider when something breaks.

How we use your information

• To operate the Service: run your chronology jobs, enforce API rate limits and monthly page quotas.
• To send essential account, billing and job-completion notifications you’ve enabled.
• To process payments for paid plans via Stripe, and to meter usage-based overage.
• To diagnose and fix bugs, and to understand which features are useful so we can improve them.
• To keep the Service secure and prevent abuse (including by automated/agent traffic).

We do not sell your personal information, and we do not use the contents of records you upload to train third-party models.

Data storage & security

Your account, chronology-result and API usage data is stored in Supabase (Postgres), an encrypted database with access restricted to the systems and personnel that need it to operate the Service. We use industry-standard transport encryption (HTTPS/TLS) for all data in transit, and API keys are stored hashed, never in plaintext. Uploaded medical records are held only for the duration of processing and then removed.

Data retention & your choices

You can delete an individual chronology, revoke an API key, or delete your account at any time. If you close your account, we honor deletion requests and remove your account, job and API usage data within a reasonable period, except where we’re required to retain billing records for tax or legal purposes.

Cookies & analytics

We use a small number of cookies required to keep you signed in, plus privacy-conscious product analytics to understand feature usage in aggregate. We don’t use third-party advertising trackers.

Third parties

We share data with the vendors that operate the Service on our behalf, our database and hosting providers, Stripe for billing, each bound to use it only to provide their service to us.

Children

The Service is intended for attorneys, paralegals and the businesses and agents building on top of them, and is not directed to, or knowingly used by, children under 16.

Changes to this policy

If we make a material change to this policy, we’ll update the date above and, where appropriate, notify you by email.

Contact

Questions about this policy or your data, including requests to access, export or delete it, can be sent to hello@chartely.com.