Privacy Policy
Last updated: May 2026
1. What We Collect
- Account data — your name and email address from Google, collected when you sign in via Google OAuth.
- Uploaded files — VCF files you submit are stored in Google Cloud Storage for the duration of your pipeline run and retained for case review.
- Pipeline results — ranked candidates, clinical reports, and mRNA sequences are stored in our database linked to your account.
- Usage data — submission timestamps and case status. We do not use analytics trackers or ad networks.
2. How We Use It
Your data is used solely to operate the pipeline and display results to you. We do not sell, share, or license your data to third parties. VCF files and pipeline outputs are never used to train machine learning models without explicit consent.
3. Where It's Stored
Account and case data is stored in Supabase (PostgreSQL), hosted on AWS. VCF files are stored in Google Cloud Storage (us-central1). Pipeline jobs run on Google Cloud Run. All data is encrypted at rest and in transit.
4. Data Retention
Case data and uploaded files are retained for as long as your account is active. You may request deletion of your data at any time by emailing shashank.padala@gmail.com.
5. Third-Party Services
- Google OAuth— used for authentication. Governed by Google's Privacy Policy.
- Supabase — database and auth infrastructure.
- Google Cloud — file storage and pipeline compute.
- Vercel — web hosting.
6. Your Rights
You may request access to, correction of, or deletion of your personal data at any time. Contact us at shashank.padala@gmail.com.
7. Changes
We may update this policy as the platform evolves. Significant changes will be communicated via email to registered users.