Privacy Policy

Effective date: July 24, 2026

1. Introduction

This Privacy Policy describes how SudoTrials ("we," "us," or "our") collects, uses, and discloses your personal information when you use our software-as-a-service platform (the "Service").

We take your privacy seriously. This policy explains, as clearly as we can, what information we collect, how we use it, and what rights you have over it. It applies to all information collected through the Service and any related support, sales, or marketing.

2. Definitions

• Company — when this policy says "Company," "we," "us," or "our," it means SudoTrials.
• Country — where SudoTrials is based: Canada.
• Customer — the person or organization that signs up to use the Service.
• Device — any internet-connected device (phone, tablet, computer, etc.) used to access the Service.
• Personal Data — any information that, alone or combined with other information, identifies a natural person.
• Service — the SudoTrials software-as-a-service platform.
• Website — SudoTrials's site at https://www.sudotrials.com.
• You — a person or entity registered to use the Service.

3. Information We Collect

3.1 Personal Data

While using the Service, we may ask you to provide personally identifiable information, which may include:

• Email address
• First and last name
• Cookies and usage data

3.2 Financial Data

Payment method details (such as card numbers) are collected and stored by our payment processor, Stripe — never by us directly. We may receive limited information back from Stripe (such as subscription status) to operate billing. Review Stripe's privacy policy for how it handles that data.

3.3 Usage Data

We may collect data about how the Service is accessed and used, such as IP address, browser type and version, the pages you visit, the time and date of your visit, time spent on those pages, and other diagnostic data.

3.4 Data Uploaded For Analysis

This is the most sensitive data the Service handles, and we treat it accordingly. Uploads are screened for direct identifiers (emails, phone numbers, names, government identifiers, dates of birth). Any such column is pseudonymized with a salted, one-way token before anything is stored — the original identifier values are never persisted. Each account's datasets, trials, and results are scoped to that account and are not accessible to other customers. Completed analyses and generated write-ups are frozen: they cannot be silently re-run or regenerated behind your back.

4. How We Use Your Information

SudoTrials uses the information we collect to:

• Provide and maintain the Service
• Notify you about changes to the Service
• Provide customer support
• Monitor usage, and detect, prevent, and address technical issues
• Gather analysis to improve the Service
• Fulfill any other purpose you provide the information for, or with your consent

5. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), our legal basis for collecting and using your personal information depends on the data and the context in which we collect it. We process your Personal Data because we need to perform a contract with you, you've given us permission to, the processing serves our legitimate interests without overriding your rights, or we must comply with the law.

6. Retention of Your Personal Data

We retain your Personal Data only as long as necessary for the purposes in this policy, including to comply with legal obligations, resolve disputes, and enforce our agreements. Usage Data is generally retained for a shorter period, except where it strengthens security, improves the Service, or we're legally required to keep it longer.

7. Transfer of Your Personal Data

Your information, including Personal Data, is processed in Canada, and may be transferred to and maintained on computers located outside your own state, province, or country, where data protection laws may differ. If you are located outside Canada and provide us information, you consent to that transfer. We take reasonable steps to ensure your data is treated securely and in line with this policy wherever it is processed.

8. Disclosure of Your Personal Data

Business transactions. If SudoTrials is involved in a merger, acquisition, or asset sale, your Personal Data may be transferred; we'll give notice before that happens and before it becomes subject to a different privacy policy.

Law enforcement. We may be required to disclose your Personal Data if required by law or in response to a valid request from a public authority.

Other legal requirements. We may disclose your Personal Data where we believe in good faith it's necessary to comply with a legal obligation, protect our rights or property, investigate wrongdoing connected with the Service, protect anyone's personal safety, or defend against legal liability.

9. Third-Party Disclosure

We use Stripe to process payments for paid plans. We never store or collect your payment card details ourselves — that information goes directly to Stripe, whose use of it is governed by Stripe's own privacy policy. Stripe adheres to PCI-DSS, the security standard maintained by the PCI Security Standards Council (a joint effort of Visa, Mastercard, American Express, and Discover).

10. Security of Your Personal Data

We take the security of your Personal Data seriously, but no method of transmission over the internet or electronic storage is 100% secure. While we use commercially reasonable safeguards, we can't guarantee absolute security.

11. Children's Privacy

The Service is not directed at anyone under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child has provided us Personal Data, contact us and we'll remove it.

12. Your Data Protection Rights

12.1 General access and deletion rights

Regardless of where you're located, you can ask us to:

• Access your data — a copy of the personal information we hold about you, in a structured, commonly used, machine-readable format.
• Delete your data — removal of your personal information from our systems, unless we're legally required to keep some of it.

Contact us at contact@sudotrials.com to make either request. We'll respond within 30 days and may need to verify your identity first.

12.2 Canadian privacy rights

Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial law, you have the right to access your personal information, request correction of inaccurate or incomplete information, withdraw consent to our collection, use, or disclosure of it, and file a complaint with the Office of the Privacy Commissioner of Canada.

We'll respond to an access or correction request within 30 days, unless an extension is required. There may be cases where we can't provide full access — for example, if doing so would reveal another person's personal information, or the information is protected by legal privilege.

13. Service Providers

We may employ third-party companies to facilitate the Service on our behalf, or to help us analyze how it's used. These providers only have access to your Personal Data to perform those tasks for us, and are obligated not to use or disclose it for anything else.

14. Links to Other Sites

The Service may link to sites we don't operate. We have no control over, and take no responsibility for, the content or privacy practices of any third-party site — review their policies before providing them any information.

15. Changes to This Privacy Policy

We may update this policy from time to time. We'll post the new version here, update the effective date above, and — for material changes — notify you by email or a prominent notice on the Service before the change takes effect.

16. Contact Us

Questions about this policy? Email us at contact@sudotrials.com.

← Back home · See also our Terms & Conditions.