Privacy Policy

1. What We Collect

• Account information: When you create an account, we collect your email address and authentication credentials. If you sign in with Google, we receive your name and email address from Google.
• Usage data: We collect token usage counts to enforce subscription limits and for billing purposes. We do not collect the content of your scientific inputs or outputs.
• Audit logs: Osmo maintains a local audit log on your machine of workflow runs. This log contains hashed representations of inputs and outputs for integrity verification. Ordos does not have access to these logs.
• Payment information: Payment is processed by third-party payment processors. Ordos does not store your full payment card details.

2. What We Do Not Collect

• Scientific data: Osmo does not store, transmit to Ordos, or retain your experimental descriptions, compound data, protein sequences, or any other scientific inputs you provide.
• Research outputs: Computational results produced by Osmo are not stored by Ordos.
• On-premise deployments: When Osmo is deployed on your own infrastructure, Ordos collects no data whatsoever from that environment.

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account.
• Enforce subscription limits and process billing.
• Respond to support requests.
• Improve Osmo's performance and reliability.
• Comply with legal obligations.

We do not sell your information to third parties. We do not use your information for advertising.

4. Third Party Services

• Supabase: Handles authentication and stores account information and token usage. Supabase's privacy policy applies to data stored on their platform.
• RunPod: Processes computational biology jobs. Your scientific inputs are transmitted to RunPod for computation and are not retained by RunPod after processing. RunPod's privacy policy applies.
• PubChem: Used to resolve compound names to chemical structures. Queries sent to PubChem are subject to PubChem's terms of use. We apply PII filtering before any query is sent.
• Google: If you use Google sign-in, Google's privacy policy applies to the authentication process.

5. Data Security

We take reasonable technical measures to protect your account information. API keys and credentials are stored in your operating system's secure keychain and are never transmitted to Ordos. Scientific data is never stored on Ordos servers.

No method of transmission or storage is completely secure. We cannot guarantee absolute security.

6. Data Retention

Account information is retained for as long as your account is active. If you delete your account, your account information will be deleted within 30 days. Local audit logs remain on your machine and are under your control.

7. Your Rights

You have the right to access the account information we hold about you, correct inaccurate account information, delete your account and associated data, and receive a copy of your account data. To exercise any of these rights, contact [email protected].

8. Children

Osmo is not directed at children under 18. We do not knowingly collect information from children under 18.

9. International Users

Osmo is operated from the United States. If you access Osmo from outside the United States, your information may be transferred to and processed in the United States.

10. Changes to This Policy

We may update this policy from time to time. If we make material changes, we will notify you by email or through the application. Continued use of Osmo after changes take effect constitutes acceptance of the updated policy.

11. Contact

For any privacy questions or requests, contact [email protected].

12. California Residents - CCPA

If you are a California resident, you have rights under the California Consumer Privacy Act.

• Right to know: You have the right to request what personal information we collect, use, disclose, and sell. We do not sell your personal information.
• Right to delete: You have the right to request deletion of your personal information. To submit a deletion request, contact [email protected]. We will respond within 45 days.
• Right to opt out of sale: We do not sell personal information. You do not need to opt out.
• Right to non-discrimination: We will not discriminate against you for exercising any of your CCPA rights.
• How to submit a request: Email [email protected] with the subject line "California Privacy Request." We will verify your identity before processing your request and respond within 45 days.

13. European Users - GDPR

If you are located in the European Economic Area, United Kingdom, or Switzerland, the following applies to you under the General Data Protection Regulation.

Legal basis for processing:

• Contract: Processing your account information and usage data is necessary to provide the service you subscribed to.
• Legitimate interests: We process certain usage data to maintain security and improve reliability.
• Legal obligation: We may process data to comply with applicable laws.

Your rights: You have the right to access your personal data, correct inaccurate personal data, request erasure, restrict processing, object to processing, request a portable copy, and withdraw consent where processing is based on consent. To exercise any of these rights, contact [email protected]. We will respond within 30 days.

Data transfers: Osmo is operated from the United States. If you are located in the EEA, your account information may be transferred to and processed in the United States. We rely on Standard Contractual Clauses approved by the European Commission as the legal mechanism for these transfers.

Data retention: We retain your account information for as long as your account is active. After account deletion, personal data is deleted within 30 days.

Right to complain: You have the right to lodge a complaint with your local data protection authority if you believe we have not handled your personal data in accordance with applicable law.

Data controller: For the purposes of GDPR, Ordos is the data controller for personal information collected through Osmo. Contact: [email protected].