Privacy notice

Who this covers

This draft covers canXcer.com visitors, public waitlist contacts, and users of the private research workspace. The site is operated by canXcer, Inc., a subsidiary of Goddess Phenezy Holdings, Inc. Its mailing address is 6060 Center Drive, 10th Floor, Los Angeles, CA 90045, United States. Privacy contact: info@canXcer.com.

Information we receive

The public waitlist asks for name, email address, phone number, role or interest, and—if applicable—research field. With your acknowledgement, these contact fields and the submission time are saved in a private waitlist directory for follow-up. Optional comments may be included in a private email notification but are not copied into the searchable directory. Do not put medical histories, genetic information, or identifiable patient stories in that form.

Private workspace access may involve account identity, role and project permissions, research questions, source-linked records, decisions, and security or audit events. Each research project needs its own data authority and privacy review before any sensitive or researcher-derived data is accepted.

Research participation application preview

The public trial-application page displays fixed fictional examples without collecting application information, granting consent, or enrolling anyone. Real participant registration and sensitive intake remain closed pending approval of the participant-specific consent, privacy, retention, correction, withdrawal, sharing, researcher-use, and incident procedures. Approved test accounts use fixed sample information in the private workflow.

Why we use it

We use waitlist information to respond to an expression of interest; account and project information to provide the private workspace; and security events to protect access, investigate misuse, and maintain accountability. We must confirm the legal basis for each processing purpose and any special-category research data before this notice is published.

Service providers and outside sources

The code currently uses Supabase for authentication and workspace data, Resend to deliver waitlist emails, and Vercel for site hosting. Authorized research workflows may contact public source APIs. Research questions or private researcher-derived data must not be sent to optional AI services or public sources without the required project permissions and review. Vendor contracts, subprocessor lists, storage locations, and international-transfer safeguards still need verification.

Retention, access, and your choices

Record-specific retention periods and deletion exceptions are still being defined; we will not invent a fixed period here. Depending on applicable law, you may be able to request access, correction, export, restriction, objection, or deletion. Account deletion is reviewed against research provenance, security, and legal retention duties rather than performed immediately by an unguarded button.

Send privacy requests to info@canXcer.com. See the cookie and storage notice for browser-side choices.

Optional public site statistics

When enabled for this site and separately allowed in your browser, Vercel Web Analytics counts visits to selected public pages. It receives the public page path and request-derived information including browser, device and approximate region, using a short-lived visitor hash. Private workspaces and unknown routes are excluded; URL query strings and fragments are removed, and unsafe referrers are refused. This integration does not send form contents, research records or custom events. Statistics remain off until you allow them and are also withheld for Do Not Track or Global Privacy Control. Withdraw the choice using Cookie settings. This does not authorize participant research, health-data sharing, profiling or advertising.

Record a privacy request

Signed-in users can submit a minimal privacy request and view its status. Medical records and identity documents are not accepted through this form. If you cannot sign in, use the privacy contact above to arrange secure handling.

Children and medical boundaries

The public forms are not intended for children or for clinical care. canXcer does not diagnose disease or recommend treatment. Do not submit someone else’s health information without appropriate authority.