TLF Report Generator

At TLF Report Generator, operated at https://tlf.xwqin.com, we prioritize protecting the privacy of our clinical research users and tenants. This document details the types of information we collect and how we safeguard it.

1. Information We Collect

Account Credentials: When you register, we collect personal registration data such as your name, email address, and authentication tokens handled securely via SuperTokens.
Billing Metadata: Subscription payments are processed directly by our payment reseller, Lemon Squeezy. We do not store or process your credit card numbers on our local databases.
Clinical Content: We temporarily store dataset files (e.g., SAS7BDAT, CSV), SAPs, and generated reports you upload or compile. These are isolated per tenant.

2. How We Use Your Information

We use the collected information strictly to:
- Provision and maintain your secure multi-tenant clinical workspace.
- Authenticate access logs and enforce role-based access controls.
- Handle webhook callbacks from Lemon Squeezy to keep subscription statuses updated.
- Perform system auditing and monitor service health.

3. Data Protection (HIPAA & GDPR Alignment)

We enforce technical and administrative safeguards: All data in transit is encrypted using TLS 1.3, and all data at rest is encrypted using AES-256. When you request the deletion of a dataset or Study, the corresponding storage objects are permanently deleted immediately.

4. Third-Party Integrations

We only share account or billing metadata with verified compliance partners:
- SuperTokens (for role-based authentication and secure session encryption)
- Creem (as our checkout and payment partner for handling invoices and secure processing)

5. Contact Us

If you have any questions regarding this Privacy Policy, please feel free to reach out to us at info@xwqin.com.