Privacy Policy

Who We Are

MannaSync Solutions Inc. ("MannaSync," "we," "us," or "our") operates the Corterve platform ("Corterve," the "Service"), a clinical-trial matching and recruitment service based in Dayton, OH. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal and health information when you use the Service.

Information We Collect

We collect information that you provide directly and that is generated through your use of the Service, including:

• Account information — username and credentials
• Contact information — name, email address, phone number, and mailing location
• Health and condition information — diagnoses, symptoms, medications, and other details you provide during assessments
• Demographic information — such as age, sex, and location (including zip code) used for matching with nearby trials
• Usage information — device, log, and interaction data generated as you use the Service
• Communications — messages and inquiries you send to us

How We Use Your Information

We use the information we collect to:

• Match you with clinical trials for which you may be eligible
• Contact you about matched trials through the channels you have opted into
• Operate, maintain, secure, and improve the Service and our matching
• Respond to your inquiries and provide support
• Comply with legal, regulatory, and contractual obligations

Consent-First Sharing

Your privacy is protected by a consent-first model. We disclose your identifying and health information to a research site or study sponsor only after you expressly consent to a specific referral. Until you provide that consent, your identity is not shared with any site or sponsor for recruitment. We do not sell your personal information, and we do not use it for third-party advertising. We may disclose information to comply with law, enforce our terms, or protect the rights and safety of users and the public.

Service Providers & Sub-Processors

We engage trusted service providers to operate the Service. They may process your information only on our instructions and under contractual confidentiality and security obligations. Our key sub-processors are:

• Google Cloud — hosting and database infrastructure
• Stripe — payment processing
• Twilio — SMS messaging
• Hostinger — email services

Data Security

We use administrative, technical, and physical safeguards to protect your information, including encryption in transit and at rest, role-based access controls on a least-privilege, deny-by-default basis, authentication controls, and comprehensive audit logging of access to sensitive data. No system is perfectly secure, but we work continuously to protect your information. For more detail on our handling of health information, see our HIPAA Compliance page.

Data Retention

We retain your information for as long as your account is active or as needed to provide the Service, and thereafter only as required to comply with legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we securely delete or de-identify it.

Your Rights & Choices

Subject to applicable law, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your information
• Withdraw consent to a referral or to further contact at any time
• Opt out of non-essential communications

To exercise any of these rights, contact us at privacy@corterve.com. We will respond within the timeframes required by applicable law.

Communications Consent

We send email and SMS messages only to the channels you have opted into, consistent with the CAN-SPAM Act and the Telephone Consumer Protection Act (TCPA). Every marketing email includes an unsubscribe link. For SMS, message and data rates may apply; reply STOP to unsubscribe or HELP for assistance at any time. Withdrawing consent to messaging does not affect the lawfulness of processing before withdrawal.

Cookies

We use cookies and similar technologies to operate and improve the Service. For details on the cookies we use and how to manage them, see our Cookie Policy.

Children's Privacy

The Service is not directed to children, and individuals under 18 may not register on their own behalf. A minor may only be enrolled by a parent or legal guardian who provides the required consents. If we learn we have collected information from a child without appropriate consent, we will delete it.

State Privacy Rights

Residents of certain U.S. states may have additional rights under state privacy laws, including the rights to know, access, correct, delete, and opt out of the sale or sharing of personal information, and to not be discriminated against for exercising these rights. Because we do not sell personal information, we do not offer a sale opt-out. To exercise your state privacy rights, contact us at privacy@corterve.com.

U.S.-Only Service

The Service is intended for users located in the United States, and information is processed in the United States. We do not offer the Service to, or knowingly collect information from, individuals outside the United States.

Changes to This Policy

We may update this Privacy Policy from time to time. We will revise the "Last updated" date above and, for material changes, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

Contact Us

This Privacy Policy is issued by MannaSync Solutions Inc., which operates the Corterve platform. If you have questions about this Policy or our data practices, please contact us at:

Privacy requests: privacy@corterve.com
General inquiries: support@corterve.com
MannaSync Solutions Inc., Dayton, OH