Privacy Policy

1. What we collect

When you create a ChemSweep account, we collect:

• Account information: practice name, email address, and password (stored encrypted via Supabase Auth)
• Chemical inventory data you enter or upload: product names, manufacturers, CAS numbers, hazard information
• SDS documents you upload
• Payment information, processed and stored by Stripe — ChemSweep does not directly store credit card numbers
• Your agreement record: the name and title typed at signup, the date and time you accepted, and the version of the terms you accepted
• Basic technical data that our hosting and security providers may log automatically, such as IP address, browser type, and timestamps

2. How we use it

• To provide and operate the ChemSweep platform for your office
• To extract chemical and hazard information from uploaded SDS documents using AI-assisted processing (via Anthropic's Claude API)
• To process payments via Stripe
• To send account-related communications (password resets, service updates)
• To improve the platform's features and reliability

3. AI processing of your documents

Uploaded SDS documents are sent to Anthropic's Claude API for text extraction (chemical names, CAS numbers, first-aid information). This processing is used solely to populate your ChemSweep account and is not used to train AI models on your data.

4. Data storage & security

Your data is stored using Supabase (PostgreSQL database with row-level security) and Cloudflare (hosting and file handling). Each office's data is isolated by organization and is not accessible to other ChemSweep customers. We use industry-standard encryption for data in transit (HTTPS/TLS).

5. Data sharing

We do not sell your data. We share data only with the service providers necessary to operate ChemSweep: Supabase (database hosting), Cloudflare (web hosting and file processing), Stripe (payment processing), and Anthropic (AI-assisted SDS extraction). We may disclose data if required by law.

6. Data retention

We retain your account data for as long as your account is active. When your subscription or account ends for any reason, data is retained for 30 days to allow for export requests, after which it may be permanently deleted. We may keep your agreement record, billing records, and correspondence longer where needed for legal, tax, or dispute purposes. ChemSweep is not a records-retention service — keep your own copies of any records the law requires you to keep.

6a. No patient information

Do not enter or upload patient information or protected health information into ChemSweep, including in notes, photos, or file names. ChemSweep is not designed to hold it, is not a HIPAA business associate, and does not sign business associate agreements. If we learn that patient information has been entered, we may delete it.

7. Your rights

• You may request a copy (export) of your data at any time
• You may request correction of inaccurate account information
• You may request account deletion, subject to the retention terms above

Requests can be sent to hello@chemsweep.com.

8. Cookies

ChemSweep uses minimal browser local storage to keep you signed in and to cache your inventory for offline reliability. We do not use third-party advertising or tracking cookies.

9. Children's privacy

ChemSweep is a business-to-business tool intended for use by dental office staff and is not directed at or intended for use by children.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will post the new version on this page with a new "Last updated" date, and material changes will be communicated by email or in-app notice.

11. Contact

Questions about this Privacy Policy can be sent to hello@chemsweep.com.