Privacy Policy

Learn how Panda Trial protects your personal information and maintains your privacy

Last updated: July 5, 2026

Information We Collect

We collect only the information necessary to match you with relevant clinical trials

Basic demographic information (age, location)
Medical condition and health history
Contact information for trial coordination
Preferences for trial types and locations

How We Protect Your Data

Practical security measures to keep your information safe

Encrypted (HTTPS/TLS) connection for all data in transit
Passwords stored only as salted bcrypt hashes, never in plain text
Dependency and vulnerability scanning on our codebase
Role-based access controls limiting who can view your data
Deletion of your data upon request

Honest about our security: Your connection is encrypted in transit (HTTPS/TLS). PandaTrial is a clinical-trial matching service — not a HIPAA-covered entity, and not SOC 2 certified. We do not currently encrypt data at rest. See "How We Use Your Information" for exactly who your data is shared with.

How We Use Your Information

Your data is used solely to improve your clinical trial matching experience

Matching you with relevant clinical trials
Communicating trial opportunities and updates
Improving our matching algorithms
Sending matching context (condition, medications, age, sex, region) to our AI providers, Groq and Anthropic, to generate your matches

We never sell your data. When you submit an application or ask to be contacted about a trial, your contact details and application information are shared only with the identity-verified trial site or sponsor for that specific study — every site and sponsor on PandaTrial passes a human identity review before they can receive any patient information, and we never share identifiable data beyond the verified organization you chose. Our AI providers (Groq, Anthropic) process matching context to generate results; they are not HIPAA business associates, so we keep that context to what matching needs and are building further de-identification.

Your Rights

You have full control over your personal information

Access your personal information at any time
Request corrections to inaccurate data
Request deletion of your account and associated data by emailing support
Opt-out of communications while maintaining your account
Request a copy of the personal data we hold for you

Questions About Privacy?

We're committed to transparency about how we handle your information

View FAQsHow It Works