Privacy
Policy

01 Scope

This policy explains how Kaimen Inc. ("Adcurare") handles information collected through adcurare.com and the Adcurare Rigor Review tool. The public tool does not require an account. Confidential engagements are governed by the data-processing terms of your pilot agreement, which control where they differ from this policy.

02 Information We Collect

• Pilot & contact requests: the name, work email, organization, role, use case, and any message you submit through our forms.
• Rigor Review submissions: the documents, text, or identifiers (e.g. a DOI or PMCID) you provide for analysis, and the resulting report.
• Technical data: limited server logs, including IP address, used to apply rate limits, prevent abuse, and keep the Service secure.
• Analytics: aggregate usage data, collected only if you opt in (Section 08).

03 How We Use Information

• To generate and deliver your Rigor Review analysis and reports.
• To respond to pilot and contact requests.
• To operate, secure, and rate-limit the Service.
• To improve our methodology. We do not sell your data and do not use your submitted content to train third-party foundation models.

04AI Processing & Subprocessors

Producing a review requires sending the submitted material to third-party AI model providers for inference. Because of this, please do not submit confidential or personal data to the public tool. We rely on the following subprocessors:

• Vercel — application hosting.
• Supabase — database and file storage.
• OpenRouter and the underlying model providers it routes to — AI inference.
• Postmark / Resend — transactional email for pilot correspondence.
• Google Analytics — aggregate usage analytics, opt-in only.

A current subprocessor list and our Data Processing Agreement are available to pilot customers on request atprivacy@adcurare.com.

05Retention & Deletion

A Rigor Review and its report are retained so the shareable Rigor Record at its link remains available. You can request deletion of a submission or report, or of a contact record, by emailing us. Data handled under a pilot agreement is retained and deleted according to that agreement.

06Data Sharing & Disclosure

We do not sell personal data. We share information only with the subprocessors above to operate the Service, when required by law or to protect rights and safety, or as part of a Rigor Record you choose to share via its link. A shared record is reachable by anyone who has that unguessable URL.

07 Security

Data is encrypted in transit (TLS) and at rest by our hosting and database providers, and access to production systems is restricted on a least-privilege basis. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

08Analytics & Cookies

We use Google Analytics to understand how the site is used. It is off by default: no analytics cookies are set, and Google Analytics does not load, unless you select “Allow” in our consent banner. Choosing “Decline” — or clearing this site’s data in your browser — keeps analytics off. We do not use advertising or cross-site tracking cookies.

09Your Rights & International Transfers

You may request access to, correction of, or deletion of your personal information by contacting us. Depending on your location, you may have additional rights under laws such as the GDPR or CCPA. The Service is operated from the United States, and information is processed there and by the subprocessors listed above.

10 Contact

For privacy-related inquiries, contactprivacy@adcurare.com.