Privacy Policy

1. Information We Collect

1.1 Information You Provide

• Account Information: Name, email address, company name, password
• Profile Data: Job title, phone number, profile picture (optional)
• Payment Information: Billing address, payment method details (processed by third-party payment processors)
• Customer Data: Data you upload, process, or store using our services
• Communications: Messages, support tickets, feedback

1.2 Information Collected Automatically

• Usage Data: Pages visited, features used, time spent, actions taken
• Device Information: IP address, browser type, operating system, device identifiers
• Location Data: General geographic location based on IP address
• Cookies & Tracking: See our Cookie Policy

2. How We Use Your Information

We use your information for the following purposes:

• Providing, maintaining, and improving our services
• Processing transactions and managing your account
• Communicating with you about updates, security, and support
• Analyzing usage patterns to enhance user experience
• Detecting, preventing, and addressing technical issues or fraud
• Complying with legal obligations and enforcing our terms
• Sending marketing communications (with your consent, you can opt-out anytime)

3. Legal Basis for Processing (GDPR)

We process your personal data based on:

• Contract: To provide our services as per our agreement
• Legitimate Interest: To improve our services and prevent fraud
• Consent: For marketing communications and optional cookies
• Legal Obligation: To comply with applicable laws

4. How We Share Your Information

We do NOT sell your personal information. We may share data with:

• Service Providers: Cloud hosting (AWS/Azure), payment processing (Stripe), email services
• Business Transfers: In case of merger, acquisition, or asset sale
• Legal Requirements: When required by law, court order, or government request
• With Your Consent: When you explicitly authorize sharing

5. Data Security

We implement industry-standard security measures:

• AES-256 encryption for data at rest
• TLS/SSL encryption for data in transit
• Multi-factor authentication (MFA)
• Regular security audits and penetration testing
• Access controls and employee training
• SOC 2 Type II certification

However, no system is 100% secure. Please use a strong password and enable MFA.

6. Data Retention

We retain your information as long as necessary:

• Account Data: While your account is active, plus 90 days after deletion
• Customer Data: Per your retention settings, typically 30 days after account termination
• Logs & Analytics: Up to 12 months
• Legal Holds: Longer if required by law or legal proceedings

7. Your Privacy Rights

GDPR Rights (EU/EEA/UK)

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a machine-readable format
• Objection: Object to processing based on legitimate interests
• Restriction: Limit processing under certain circumstances
• Withdraw Consent: For processing based on consent

CCPA Rights (California Residents)

• Know what personal information is collected
• Know if your information is sold or shared
• Opt-out of sale (we don't sell your data)
• Request deletion of your information
• Non-discrimination for exercising rights

To exercise your rights, email us at privacy@datachgene.com

8. International Data Transfers

We operate globally and may transfer data to countries outside your jurisdiction. We use appropriate safeguards:

• Standard Contractual Clauses (SCCs)
• Data processing agreements with vendors
• Compliance with EU-US Data Privacy Framework

9. Children's Privacy

Our services are not intended for children under 16. We do not knowingly collect data from children. If you believe we have inadvertently collected such data, contact us immediately.

10. Third-Party Links

Our platform may contain links to third-party websites or integrations. We are not responsible for their privacy practices. Please review their policies separately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via:

• Email notification
• In-app notice
• Updated "Last Modified" date on this page

12. Contact & Data Protection Officer

For privacy-related questions or to exercise your rights:

• Email: privacy@datachgene.com
• Data Protection Officer: dpo@datachgene.com
• Address: 1420 Fifth Avenue, Suite 2200, Seattle, WA 98101, USA

If you're in the EU/EEA, you also have the right to lodge a complaint with your local supervisory authority.