Privacy Notice
This notice explains how AafiyetLABS ('we', 'us') collects and uses personal data when you use aafinomics. AafiyetLABS is the data controller for the personal data described here.
Data we collect
- Account data: email address, display name, login credentials (via our authentication provider).
- Content you provide: chat messages, uploaded genomic files (VCF, FASTQ, BAM and similar), and saved analysis results.
- Usage data: pages visited, feature usage, device and browser information, and IP address.
- Support communications you send us.
Payment information (card details, billing address) is collected and processed directly by Paddle, our Merchant of Record — we never see or store your card numbers.
Why we use it
- To create and maintain your account (contract performance).
- To provide the service: storing your conversations, files, and results so you can return to them (contract performance).
- To keep the service secure and prevent fraud and abuse (legitimate interests).
- To improve aafinomics, including understanding which features are used (legitimate interests).
- To meet legal obligations such as tax and accounting records (legal obligation).
Genomic data
Genomic files you upload are stored in a private area visible only to your account. We never share your genomic data with other users, and we do not use it to train models. You can delete files at any time; deletion removes both the record and the stored file.
Who we share data with
- Service providers that host and operate aafinomics (cloud hosting, database, authentication).
- Paddle (paddle.com), our Merchant of Record, for selling subscriptions, payment processing, tax compliance, and invoicing.
- Professional advisers (legal, accounting) where needed.
- Authorities where required by law.
Retention
We keep your data while your account is active. When data is no longer needed — for example after you delete content or close your account — it is deleted or anonymised. Some records may be retained where the law requires it.
Your rights
Depending on your location, you may have the right to access, correct, delete, restrict, or port your personal data, to object to processing, and to withdraw consent. EEA/UK users can also complain to their supervisory authority; we respond to requests within one month. To exercise any right, contact us through the support channel listed on the site.
International transfers
Some of our service providers process data outside the UK/EEA. Where this happens, we use appropriate safeguards such as adequacy decisions or standard contractual clauses.
Security
We apply appropriate technical and organisational measures, including encryption in transit, access controls, and row-level isolation of user data.
Cookies
aafinomics uses essential cookies and browser storage to keep you signed in and remember your preferences. We do not use marketing cookies. You can clear these in your browser settings.