Privacy Policy

2.What we collect

2.1Information you give us or that you create by using the service

• Account details: your email address, your name if you give it, and how you sign in (an emailed code, or Google). If you choose Google sign-in, Google shares your basic profile with us: name, email address and profile picture.
• Orders: what you bought or claimed, prices, discounts, order and payment identifiers, order status, and the date and time. Our payment provider shares with us the email address and name you used at checkout and the outcome of the payment.
• Acceptance records: the version of our Terms you agreed to, when, and the order or account it relates to, together with the IP address and browser details at that moment.
• Downloads: which document you downloaded, when, from which IP address, and how many times.
• Saved items: saved searches and the firms or sites you choose to watch.
• Messages: what you send us by email, such as support, refund or correction requests.

2.2Information collected automatically

• Technical logs: IP address, browser and device type, pages requested, referring page, date and time, and errors. Our hosting provider records these to deliver and secure the website.
• Analytics: we use Vercel Web Analytics, which counts page views and visits without cookies and without building a profile of you across other websites.
• Cookies: see section 4.

2.3What we do not collect

We do not receive or store full card numbers or card security codes; our payment provider handles those. We do not knowingly collect sensitive data such as health information about you, and we ask you not to send it to us.

3.How we use it and our legal bases

Privacy laws such as the GDPR and UK GDPR ask us to explain the legal basis for each use. We use personal data:

• To provide the service you asked for (performance of our contract with you): to create and run your account, sign you in, process orders with our payment provider, deliver downloads, keep your saved searches and watchlist, send service emails such as sign-in codes and receipts, and answer your messages.
• To keep the service secure and enforce our terms (our legitimate interests in protecting FDA Intel, our customers and our documents): to detect and prevent fraud, abuse of the first-document offer, account sharing, scraping and bulk downloading, to enforce download limits and the licence in our Terms, and to give evidence of delivery to our payment provider or a card network in a payment dispute.
• To understand and improve the service (our legitimate interests): to see which pages and features are used, fix problems and plan improvements, using aggregated or cookieless data where we can.
• To meet legal obligations: to keep records of transactions and acceptances, respond to lawful requests from authorities, and comply with tax and accounting rules (our payment provider, as Merchant of Record, keeps the tax and invoice records for each payment).
• To send marketing emails (your consent, or where the law allows, our legitimate interest in telling existing customers about similar services): only if you have agreed or not opted out. Every marketing email has an unsubscribe link.
• To establish, exercise or defend legal claims (our legitimate interests).

Where we rely on legitimate interests, we have weighed them against your rights. You can object at any time (see section 9).

4.Cookies and analytics

We use only cookies that are needed for the website to work:

• Session and sign-in cookies that keep you signed in and protect your account;
• Cart cookie that remembers the documents in your cart;
• Site-access cookie that remembers you have passed an access gate on pre-release versions of the site;
• A short-lived acceptance cookie that carries your agreement to our Terms from the sign-up form to your new account.

We do not use advertising, retargeting or cross-site tracking cookies. Our analytics (Vercel Web Analytics) works without cookies. Because we use only essential cookies, we do not show a cookie banner. You can block cookies in your browser, but signing in and the cart will then stop working.

5.Who we share it with

We share personal data only with service providers who help us run FDA Intel, under contracts that limit their use of it, and only as much as they need:

• Our payment provider, our online reseller and Merchant of Record: checkout, payments, fraud checks, tax, invoices and refunds. For payments, our payment provider also acts as a controller under its own privacy notice.
• Vercel: website hosting, technical logs and Web Analytics.
• Neon: our database and our account and sign-in system.
• Cloudflare: storage and delivery of document files.
• Google: sign-in, only if you choose "Continue with Google".
• Our email delivery provider(s): sending sign-in codes and service emails.

We may also disclose personal data: to professional advisers such as lawyers and accountants; to authorities, courts or others when the law requires it or when needed to protect our rights, our customers or the public, including to enforce our Terms; and to a buyer or successor if all or part of FDA Intel is sold, merged or reorganized, under the protections of this policy.

We do not sell your personal data, and we do not share it for cross-context behavioral advertising.

6.International transfers

Our providers process data in the United States and other countries that may not have the same data-protection laws as yours. Where personal data from the European Economic Area, the United Kingdom or Switzerland is transferred to a country without an adequacy decision, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (with the UK addendum where relevant), or the provider's certification under the EU-U.S. Data Privacy Framework and its UK and Swiss extensions. You can ask us for more information about these safeguards at info@fdaintel.ai.

7.How long we keep it

• Account data: for as long as your account is open. When you ask us to delete your account, we delete or anonymize it within 30 days, except what we must keep for the reasons below.
• Orders, invoices and acceptance records: for as long as tax, accounting and consumer laws require, generally 7 years after the purchase, and for as long as needed to handle disputes or legal claims.
• Download records and technical logs: about 12 months, unless we need them longer to investigate misuse or for a dispute.
• Messages: for as long as needed to deal with your request and any follow-up, normally no more than 3 years.
• Saved searches and watchlist: until you remove them or close your account.

Backups are overwritten on a rolling basis, so deleted data may remain in a backup for a short time before it is removed.

8.Security

We protect personal data with measures suited to the risk, including encrypted connections (HTTPS), sign-in by one-time code or Google without stored passwords, access controls that limit who and which systems can read customer data, separate read-only roles for data work, download links that expire, and providers that maintain recognized security programs. No system is perfectly secure, so we cannot guarantee security. If a breach affects your personal data, we will tell you and the authorities where the law requires.

9.Your rights

Depending on where you live, you may have the right to:

• access the personal data we hold about you and get a copy;
• correct data that is wrong or incomplete;
• delete your data;
• port your data, meaning receive it in a common machine-readable format or have it sent to another provider;
• object to our use of your data based on legitimate interests, and to direct marketing at any time;
• restrict our use of your data in some circumstances;
• withdraw consent where we rely on it, without affecting earlier use;
• complain to a data-protection supervisory authority, for example the authority where you live or work. In Israel this is the Privacy Protection Authority; in the UK, the Information Commissioner's Office.

Some rights have limits. For example, we may need to keep order records for tax reasons even if you ask us to delete them, and we will tell you when that applies.

10.California and other U.S. state rights

If you live in California or another U.S. state with a comprehensive privacy law, you have the right to know what personal information we collect, use and disclose; to access, correct and delete it; to opt out of the sale or sharing of personal information and of targeted advertising; and not to be discriminated against for using these rights.

In the past 12 months we have collected these categories of personal information, for the purposes described in this policy: identifiers (such as email address, name and IP address); commercial information (orders and downloads); internet or other electronic network activity (technical logs and analytics); and inferences only to the extent needed to detect fraud and misuse. We disclose them for business purposes to the service providers listed above. We do not sell personal information or share it for cross-context behavioral advertising, and we do not use or disclose sensitive personal information for purposes that would give you a right to limit it.

You can use these rights yourself or through an authorized agent. If you are an agent, we will ask for proof that the person authorized you.

11.How to use your rights

Email info@fdaintel.ai from the address on your account, or tell us which email address your request is about. We will verify your identity before acting, usually by asking you to confirm from that address. We will answer within the time the law allows, normally one month (GDPR and UK GDPR) or 45 days (California), and tell you if we need more time. Using your rights is free unless a request is clearly unfounded or excessive. If we decline a request, we will explain why and, where the law provides one, how to appeal.

12.Children

FDA Intel is for professionals and is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.

13.Personal data inside the documents

The documents and profiles on FDA Intel come from official regulatory records. They can include the names, job titles and work details of FDA investigators, employees of inspected firms and other people, as they appear in those records. We process this information because it is part of the regulatory record and helps professionals understand how inspections are carried out and how firms respond, which we consider a legitimate interest and, where relevant, part of the public interest in transparency about regulatory oversight. We do not use it to profile individuals for marketing.

If you are named in a document or profile and want us to correct an error, review the information, or consider removing or redacting it, write to info@fdaintel.ai with the page or document and your request. We review each request case by case, weighing your rights and interests against the purpose of the record, and we will tell you the outcome. See also our copyright, corrections and takedown page.

14.Changes to this policy

We may update this policy. We will post the new version here with a new date and version, and where a change is significant we will tell you by email or on the website before it applies.

15.Contact

Cortex Group (FDA Intel). Email: info@fdaintel.ai.