Privacy Policy

1. Data You Upload

When you upload genomic and gene expression data (counts matrices) for analysis, your data is:

• Encrypted in transit (TLS) and at rest (AES-256)
• Processed inside isolated, ephemeral analysis containers
• Stored in your private, isolated workspace
• Accessible only to you via your authenticated account and role-based access controls
• Owned entirely by you: you retain all rights to your genomic data
• Never sold to anyone, for any purpose
• Never used to train machine learning or AI models
• Never shared with third parties except the sub-processors listed in Section 6
• Deletable at any time upon your request

2. Analysis Results

All analysis outputs (differential expression results, plots, gene scores) are stored in your private workspace and retained for as long as your account is active. You can download or delete your results at any time.

3. Account and Contact Information

We collect your email address and name for account management via Clerk authentication. When billing is enabled, we use Stripe for payment processing. We do not store your credit card information directly.

If you write to us through the request-access form, we collect what you choose to send: your name, work email, organization, the type of data you work with, and your description of the project. We use it for one thing, to reply to you and scope the work you are asking about. It is never sold and never used for advertising. Our lawful basis is our legitimate interest in responding to enquiries about our services, and taking steps at your request before entering into a contract.

That submission is recorded in our access log and emailed to our team. We keep it while we are in conversation with you and for a reasonable period afterwards, and we delete it on request (see Section 7).

5. Data Retention

We retain your uploaded data and analysis results for as long as your account is active, so your work remains available to you. When you delete data or close your account, we remove the associated files from active storage and from routine backups within a reasonable period. We retain only the limited records required to meet legal, security, and accounting obligations.

6. Sub-processors

We rely on a small set of trusted service providers to operate the platform. These sub-processors act only on our instructions and do not use your data for their own purposes:

• Clerk: authentication and account management
• Stripe: payment processing (when billing is enabled)
• Amazon Web Services (EC2, MinIO, SES): compute, object storage, and the email we send when you contact us
• ML / LLM provider: gene-insight scoring (your genomic data is never used to train models)
• Google Analytics: marketing-site analytics only, and only if you accept cookies. Never present on the signed-in platform.

For pharmaceutical and enterprise customers, we also offer bring-your-own-cloud (BYOC) deployments so that your data remains entirely within your own cloud environment.

7. Your Rights (GDPR & CCPA)

We honor data-subject and consumer privacy rights, including for users covered by the GDPR and the CCPA. You may exercise the following rights at any time:

• Access: request a copy of the personal data we hold about you
• Deletion: request that we erase your data and account
• Portability: receive your data in a structured, machine-readable format
• Correction: request that we fix inaccurate account information
• Objection: object to or restrict certain processing

We never sell your personal or genomic data. To exercise any of these rights, email info@prairiebiosciences.com and we will respond within the timeframes required by applicable law.

8. Breach Notification

We maintain technical and organizational safeguards designed to protect your data. In the event of a data breach affecting your personal or genomic data, we will notify affected users and any relevant authorities without undue delay, consistent with our obligations under applicable data protection laws.

9. Contact

For questions about data handling, sub-processors, or to exercise any of your privacy rights, contact us at info@prairiebiosciences.com