Privacy Policy

1. Overview

MolWard LLC ("MolWard", "we", "us") built this Platform around a zero-retention chemistry architecture: the molecular structures you analyze are processed in memory and never written to disk or logged. This policy explains what we do collect — account and contact information, usage data, and non-sensitive report metadata — and how we handle it.

Short version: your chemical structures are never stored. Your name, email, and the reports you generate are stored so we can run your account, respond to you, and maintain a tamper-evident audit trail for regulatory-grade reports.

2. Chemical structures: zero-retention by design

When you draw or upload a structure to the Degradation, Stability, or Toxicology tool, it is sent to our computational backend, processed entirely in volatile memory, and discarded once the response is returned. We do not persist molblocks, SMILES strings, InChI strings, or any other representation of your chemical structure on our servers, and we do not use your structures to train models without your separate, explicit consent.

3. Information we collect

Category	Examples	Source
Account & contact information	Name, work email, organization, message content	Provided by you (contact form, signup)
Usage data	Pages visited, tool used, timestamps, coarse device/browser info	Automatically collected
Report metadata	Report ID, SHA-256 hash, generation timestamp, tool name, requesting user	Generated when you create a PDF report
Stability input data	Timepoints and specification limits you enter into the ICH Q1E tool	Provided by you
Dosing parameters	Maximum Daily Dose and custom Acceptable Intake limits you enter into the ICH M7 tool	Provided by you

We deliberately do not collect or store the chemical structure itself in any of the above categories — see Section 2.

4. How we use information

To operate the Platform and the tools you request (degradation prediction, stability analysis, toxicology assessment);
To respond to inquiries submitted through our contact form;
To maintain the tamper-evident audit trail described in Section 5, so reports can be verified as authentic;
To improve the Platform's reliability and usability, using aggregated, de-identified usage data;
To send Beta program updates, including the 30-day notice we commit to before any feature moves to a paid tier;
To comply with legal obligations and enforce our Terms & Conditions.

5. Audit trail and report integrity

Every PDF report MolWard generates carries a unique Report ID, a UTC timestamp, and a SHA-256 integrity hash of the file. We log only this non-sensitive metadata — report ID, hash, timestamps, the requesting user, and which tool produced it — in an append-only, hash-chained issuance log. This log never contains the underlying chemical structure. It exists so that you, a regulator, or an auditor can later verify that a report genuinely came from MolWard and has not been altered, using our report-verification endpoint.

6. AI-assisted drafting

Our optional, premium regulatory-narrative feature drafts an Executive Summary and Toxicological Justification from your assessment's computed results, using a configurable large-language-model endpoint. We require this endpoint to be zero-retention / no-training (self-hosted where possible). The model is given only the templated, computed numeric facts from your assessment — never your raw structure beyond what is necessary to phrase the result — and every draft is explicitly labeled as requiring qualified human review before use.

We do not sell your personal information. We share data only with:

Infrastructure providers that host our website and computational backend, under contracts requiring them to protect your data and process it only on our instructions;
The zero-retention LLM endpoint described in Section 6, if you use the AI-narrative feature;
Authorities, where required by law or to protect MolWard's or others' rights and safety;
A successor entity, in the event of a merger, acquisition, or asset sale, subject to the same privacy commitments.

8. Data retention

Chemical structures: not retained (see Section 2). Account and contact information: retained while your account is active or as needed to respond to your inquiry, then deleted or anonymized on request. Audit log metadata: retained on persistent storage to preserve the integrity of the issuance chain, consistent with our 21 CFR Part 11 record-keeping commitments. You can request deletion of your personal information at any time, subject to our legal and audit-integrity obligations.

9. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise any of these rights, contact us at contact@molward.com. We will respond within a reasonable time and in accordance with applicable law, including GDPR for users in the European Economic Area and the UK, and applicable U.S. state privacy laws.

10. Security

We use industry-standard encryption in transit and at rest for the data we do store, and our zero-retention architecture for chemical structures is itself a security control: data that is never stored cannot be breached. No system is perfectly secure, and we encourage you to use a strong, unique password and to notify us promptly of any suspected unauthorized access.

11. Children's privacy

The Platform is intended for professional and research use and is not directed at children under 16. We do not knowingly collect personal information from children.

12. Changes to this policy

We may update this Privacy Policy as the Platform evolves, particularly as the Beta program matures. Material changes will be communicated by email to registered users or via a notice on the Platform.

13. Contact

Questions about this policy, or requests to exercise your privacy rights, can be sent to contact@molward.com or by mail to MolWard LLC, 600 W Peachtree St NW, Suite 1700, PMB 70138, Atlanta, GA 30308.

On this page