Privacy

The short version

Threshold Trials is designed to collect as little information as possible. When you upload medical documents, we use them temporarily to create a minimized clinical profile and remove them from our temporary storage once that's done. Uploaded files are not kept as part of your profile. We retain the clinical details needed to search for trials, without direct identifiers such as your name, email address, date of birth, or medical-record number. We do not sell your information or share it with trial sponsors. Some trusted service providers process limited information to operate the service, as described below.

What we built

Threshold Trials helps people search clinical trials and translate eligibility criteria into plain language. It is an information tool. It is not a medical device. It does not give medical advice. It does not replace your doctor.

What we collect

Only what you give us. When you create an account: your email address, used for authentication, account recovery, and (if you opt in) notification emails sent through our email provider. We encourage you to use an email that is not your primary personal one.

When you create a profile: the clinical details you choose to enter or extract from documents. We ask for first names or initials only and never anything more identifying in the profile itself.

We do not use third-party analytics. We do not embed advertising trackers. We do not sell your data to anyone, ever.

How document upload works

When you upload a medical document, the file is held in temporary storage only while we process it. The document is sent to Anthropic's Claude API so it can be read and clinical facts can be extracted. If your file contains a patient name, date of birth, medical record number, or other identifier, Anthropic receives that content during the read — we do not strip the file before sending it.

We explicitly instruct Claude not to extract personally identifying information into your profile. Patient names, dates of birth, medical record numbers, addresses, provider names, hospital names, phone numbers, and similar identifiers are not saved in your profile when extraction succeeds as designed.

After extraction completes, the original document is removed from our temporary storage. We do not keep the file as part of your profile. If processing is interrupted before deletion completes, a copy may remain briefly in temporary storage — an automated cleanup removes any such file within two hours. What we retain is a minimized set of structured clinical facts — diagnosis, biomarkers, treatments, and similar — without direct identifiers such as your name, email, date of birth, or medical-record number.

Anthropic's API terms state they do not train models on data submitted through their API.

Where your data lives

Your account and profile data are stored encrypted at rest in our database, and encrypted in transit between your browser and our servers. Access is protected by account-level access controls; administrative access is restricted.

We also keep caches to make repeat searches faster: a cache of parsed trial eligibility criteria (public trial data only — no patient information) and a matching-results cache keyed to a hash of your minimized clinical profile fields plus trial identifiers. These speed up repeat searches; they do not add new clinical information about you.

No employee at Threshold Trials routinely accesses user profiles. We do not have a customer support team that reviews your data.

Who else sees your data

To extract clinical facts from documents, we send the uploaded file to Anthropic's Claude API to read it — including any identifiers that happen to be in the file. To match trials afterward, we send minimized clinical facts from your profile (diagnosis, biomarkers, treatments, and similar) — not your name or email address.

We no longer collect or store your location. Earlier versions asked for a ZIP code and used it to filter trials by distance; we have removed that entirely. Nothing about where you live is stored on your profile, and there is no location field. Instead, results show each trial's listed sites — city and state — so you can judge reachability yourself.

We query ClinicalTrials.gov — a public US government database — using disease and biomarker search terms derived from your profile. ClinicalTrials.gov receives those search terms, not your name or email.

If you opt in to email notifications, your email address is sent to Resend, our email provider, so it can deliver sign-in links and account-related messages. Resend does not receive your diagnosis or trial details in those emails.

We do not share your information with trial sponsors, hospitals, or anyone else without your explicit consent. We do not contact trial sites on your behalf. Any outreach to a trial is something you initiate, with full control over what you share and with whom.

Service providers

June 2026 — who processes what:

• Supabase — database, authentication, and temporary file storage. Holds your account and profile data. Uploaded documents pass through storage only while being processed.
• Vercel — hosting and infrastructure for the web application.
• Anthropic (Claude API) — reads uploaded documents (which may contain identifiers present in the file) to extract clinical facts; reads your minimized clinical profile to match trials.
• Inngest — schedules background jobs (trial-criteria pre-parsing and sending notification emails). Receives internal identifiers only — not your diagnosis or other clinical detail in notification paths.
• Resend — sends notification emails. Receives your email address and a sign-in link only — no medical information in the message body.
• ClinicalTrials.gov — public US trial registry. Receives only disease and biomarker search terms, not your name or email.

Notifications

If you opt in, we may send you email when new trials match a profile you have created. SMS or text messages are not available today. You can turn email notifications off at any time from your profile. We will never use your email for marketing or anything other than these notifications and basic account management.

Email notifications are delivered through Resend (resend.com). Each notification email contains only a sign-in link and our brand identifier — no diagnosis, no trial names, and no clinical details. When you choose immediate alerts, we send at most one email per search. Resend sees your email address and that you have an account; it never receives your medical information in the email content.

If you choose a weekly summary instead, you receive one digest email about once a week when notifications are enabled.

HIPAA

Threshold Trials is not a HIPAA-covered entity and the information you enter is not Protected Health Information under HIPAA. We are a consumer information service that you choose to use. That said, we treat your data with care that meets or exceeds what HIPAA would require: encryption, access controls, no sharing, no sale, and aggressive minimization of what we retain in the first place.

Deleting your data

You can delete any profile, or your entire account, at any time. Deletion removes your data from the active system immediately. Residual copies in protected backups expire on a retention schedule (typically within 30 days), after which they are gone.

If you delete your entire account, every profile, every match, and every notification preference associated with it is removed from the active system. Your email address is also removed from our authentication system.

Questions

This is a small operation. If you have a question, concern, or complaint, write to us and we will respond. See also our FAQ.