Privacy policy

Sutrix, Inc. is responsible for the personal information described in this policy. It applies to our website, booking and contact flows, accounts, and services.

When a research organization provides study data under an engagement agreement, that organization determines the purpose of the research and Sutrix processes the data to provide the requested services. The engagement agreement controls if it contains different or additional data-handling terms.

We collect contact and account details such as your name, email, and institution; information you submit when discussing a study; study data and context you provide for an engagement; and technical records needed to operate, secure, and troubleshoot the service.

If a paid service uses a payment provider, that provider processes payment credentials under its own terms. Sutrix receives transaction and billing records rather than full payment-card details.

We use information to respond to inquiries, provide and support the service, produce requested deliverables, authenticate users, maintain security, communicate about an engagement, comply with law, and, with permission, understand how our public site is used. We do not train models on customer study data.

If you choose “Accept analytics,” we use PostHog to understand public page visits and the steps people take toward discussing a study. When you open Calendly after opting in, we pass an encrypted anonymous reference so a confirmed booking, cancellation, or reschedule can be connected to that visit. This reference expires after 30 days for new bookings. Withdrawing analytics consent also stops future booking analytics for that anonymous reference once the withdrawal reaches our service. If you are offline, we retain the withdrawal locally and retry when you return. We store a one-way reference to honor that choice. We do not send study-brief answers, names, email addresses, uploaded data, or submission identifiers to analytics. Analytics remains off until you opt in. You can withdraw consent at any time through Privacy settings or Cookie preferences, including after signing in. Global Privacy Control keeps analytics off. We store your choice, preference version, and update time in cookies for up to 180 days across Sutrix subdomains. Optional browser analytics excludes URL query contents and does not record sessions.

We use service providers for cloud hosting, authentication, payment processing, communications, and, only after consent, product analytics. They process information to provide services to Sutrix rather than for their own advertising purposes.

We may also disclose information when required by law, to protect the rights and security of users or others, or as part of a merger, financing, acquisition, or sale of assets. We do not sell personal information or share it for cross-context behavioral advertising.

Data is stored with established cloud infrastructure providers and encrypted in transit and at rest. Access is limited to what is needed to produce and support your deliverables. Sutrix is based in the United States, so information may be processed in the United States and other locations where our providers operate, subject to applicable safeguards.

Study context is retained so follow-up analyses can run against the same study without re-uploading, unless an engagement agreement says otherwise. We retain other information only as long as reasonably needed for the purposes described above, including security, dispute, and legal-record needs. You can request deletion of a dataset or your account; after validating the request, we will remove it and derived working copies within 30 days unless retention is legally required.

For studies involving protected health information or other regulated data, contact us before uploading. Secure deployment options and signed data-handling agreements are available and may be required.

Depending on where you live, you may have rights to request access, correction, deletion, or a copy of personal information, or to object to or restrict certain processing. You may also withdraw analytics consent at any time. Send a request to supra@sutrix.ai. We may need to verify your identity before completing it, and you may appeal a refusal by replying to our decision.

Sutrix is a business service and is not directed to children under 18. Do not submit a child's personal information through the public website. Research datasets involving minors may be handled only under an appropriate engagement agreement and required institutional approvals.

We may update this policy and will post the revised date here. Questions or privacy requests can be sent to supra@sutrix.ai. We use email as our public contact channel and do not publish a founder's residential address.