Privacy Policy

What personal data is collected?

If you upload a DNA Data File and/or create an account, your DNA Data File and your email address will be processed by us. We will process this information for as long as needed to provide you with the service. We collect the full name and email address of new users during account signup.

If you make a payment to use Genomisaur, we use the Stripe service for billing and therefore we do not store your credit card information or other billing information on Genomisaur; it is stored by Stripe and we do not have access to it.

Storage of your information

Genomisaur maintains a copy of your report and DNA data file unless otherwise requested. If you delete your account, your data will be deleted with it.

You can log into your account at any time and delete any of your data from your profile page. While your DNA Data File is stored with Genomisaur, you may be able to re-generate a Report with updated analysis at no additional cost.

If you upload a DNA Data File but do not continue and generate a Report, the DNA Data File is automatically deleted within 24 hours.

DNA data storage

DNA data storage is optional. You may opt-out from the storage option, in which case we will delete your DNA Data within 24 hours of your Report being generated. If you create an account and store DNA Data in it, you can delete your data at any time after your Report is generated. Otherwise, an encrypted copy of your data will be maintained on our servers.

Rights & License

We do not claim any ownership rights in your DNA Data File and genome — it belongs to you only.

By uploading your DNA Data File, you grant us a temporary, limited, revocable, royalty-free, world-wide license to process and use your DNA Data File for the purpose of providing you with the service — i.e., for generating and re-generating Reports, and if you created an account and stored your DNA Data File, also to use it with new genetic features of the service we may develop in the future, at no additional cost to you. You may delete your DNA Data File at any time.

By uploading DNA Data to Genomisaur, you acknowledge that you acquire no rights in any research or commercial products that may be developed by us (whether or not they relate to the said DNA Data).

Use of your personal data

We may use your personal data under the following circumstances:

1. To provide you with the service. Generating your health reports, processing your genetic data, and delivering results.
2. To communicate with you. We may communicate with you for the purpose of informing you of changes or additions to the service, or to seek feedback. We may send updates when new report features or improvements are available.
3. For internal business purposes. To improve Genomisaur or to develop new products and/or services.
4. For system improvement. We store de-identified summary statistics for further product development and system performance monitoring.

Security

When you provide us with any personal data, that personal data may be transferred to and stored by us in secure data centers. By providing us with personal data, you specifically consent to the transfer and processing of personal data and its storage in our data centers. By using our services, you consent to have your personal data transferred to and processed in the United States and you acknowledge that your personal data may be used as described herein.

We have implemented commercially reasonable security measures to attempt to protect users' data under our control. However, we cannot guarantee against unauthorized access. You acknowledge that you provide your personal data at your own risk.

You hereby acknowledge and agree that:

1. Downloading your Reports will create a copy that is not protected by our security and privacy settings;
2. Download and storage of your Reports after you have downloaded them shall be at your own risk;
3. We shall not have any control over downloaded Reports and shall not be liable to you or to any third party in connection with any such download and/or storage.

Third parties

Your personal data (including DNA Data Files and/or Reports) will never be sold, licensed or otherwise shared by us with any other third parties without your explicit informed consent, except in the very specific scenarios described below:

1. Service providers. To third parties providing services on our behalf, like processing payments via Stripe or storing data on cloud infrastructure. The use of personal data by such third parties is limited in scope and subject to contractual protections. Such parties are prohibited from using it for any purposes other than providing us or you with the required services.
2. Business transfers. In the event that Genomisaur, or substantially all of its assets or stock, are acquired, transferred, or disposed of, personal information including DNA Data will be one of the transferred assets. In such event, your personal information would remain subject to the promises made in the pre-existing Privacy Policy.

Email communications

We may send to you the following types of emails:

1. Transactional emails. Emails sent following a purchase or account action. For example, payment confirmation or report delivery notifications.
2. Notification emails. Emails that include links to your Reports or information concerning privacy policy updates.
3. Announcement emails. Emails concerning the service that announce new features, promotions and offers. You may opt out of these during registration.

You cannot unsubscribe from transactional and notification emails, and by providing your email address you give your consent to receive such emails as necessary.

Legal ground for processing

Under EU data protection law, all processing of personal information is justified by a "condition" for processing. In the majority of cases, any processing will be justified on the basis that:

1. It is necessary for the performance of a contract with you — in this case, your usage of our services;
2. It is necessary for our legitimate commercial interests, subject to your interests and fundamental rights;
3. The processing is necessary for us to comply with a relevant legal obligation.

In addition, the processing of "special category data" is only permitted where a relevant exemption exists. Special category data includes genetic information. This data is processed on the basis of your explicit consent. Where the basis of processing is your consent, you have the right to withdraw your consent, and therefore prevent that processing, at any time.

Minors

If you are a child under the age of 18, please do not use our service. We will not knowingly contact or engage with children under the age of 18. If you have reason to believe that a child has provided us with their personal information, please contact us at support@genomisaur.com and we will endeavor to delete that information from our databases.

Modifications

Your use of Genomisaur constitutes your agreement to follow and be bound by this Privacy Policy. We reserve the right to update or modify this Privacy Policy at any time. For this reason, we encourage you to review this Privacy Policy whenever you use the service.

If we decide to modify our Privacy Policy, we will issue an updated version with an updated date and notify you via email or other appropriate means if the changes are material. If you do not consent to the Privacy Policy or to any changes thereto, you may delete your DNA Data and/or delete your account.

Use of the Website following any changes constitutes your acceptance of the revised Privacy Policy then in effect.

GDPR

You have the right to request access to your personal data that we process, and further have such personal data rectified or erased.

If you feel like your data protection rights under the GDPR have been violated, you may lodge a complaint at the supervisory authority in the Member State in which you reside.

California privacy rights

California residents are entitled to ask us for a notice describing what categories of personal customer information we share with third parties or corporate affiliates for those third parties or corporate affiliates' direct marketing purposes. We do not share your personal information with third parties or corporate affiliates for their direct marketing purposes.