Privacy Policy
Last updated 20 July 2026
OpenDrugGraph (“the Service”) is operated by Congruent Systems LLC (“we”, “us”). This policy explains what information we collect, why, and your choices. We collect as little as the Service needs to work.
What we collect
- Account identity. When you sign in with GitHub, Google, or Apple, or via an email magic link, we receive your verified email address and a display name. We never receive your password, and nothing from your provider profile beyond your email and name.
- Contributions. If you propose an interaction, we store what you submit — the drugs, the FDA-label citation, and any notes — attributed to your account, because contributions are public and cited.
- A session cookie. One first-party, HttpOnly cookie keeps you signed in. There are no third-party, advertising, or cross-site tracking cookies.
What we do not collect
- No patient data / PHI. The Service operates over public drug-label data. Do not enter patient-identifiable information; we neither want nor knowingly store it.
- No payment information, no precise location, no device fingerprinting.
- We do not sell, rent, or share your personal information with advertisers or data brokers.
Why we use it
Only to sign you in, to attribute the contributions you choose to make, and to operate and secure the Service.
Third-party sign-in
Choosing “Sign in with GitHub / Google / Apple” shares your email and name from that provider with us. Their handling of your data is governed by their own privacy policies.
Retention & deletion
We keep your account and contributions until you ask us to remove them. To delete your account or data, contact support@opendruggraph.com. Already-published cited contributions may be retained in the public graph in de-identified form.
Contact
Questions about this policy: support@opendruggraph.com.
Changes
We may update this policy; material changes are reflected by the “last updated” date above.