Privacy Policy
Note
This page is a summary of key points. The formal text shall prevail as published in the platform and as contract attachments.
1. Information We Collect
| Category | Content | Purpose |
|---|---|---|
| Account information | Name, work email, department, role | Identity and permission management |
| Usage information | Login logs, feature usage records, session content | Service delivery, security audit, product improvement |
| Business data | Files uploaded and batch/assay data entered by users | Solely for serving that customer |
| Device information | IP address, browser type, operating system | Security risk control and compatibility |
| Inquiry information | Name, company, contact details and needs you voluntarily submit via the "Contact Us" form | Sales contact and consultation response |
2. What We Do Not Do
- We do not use customer business data for model training (unless explicitly agreed in a contract and authorized)
- We do not sell or rent customer data to third parties
- We do not disclose personal information to third parties without consent, except as required by laws and regulations
3. Data Storage and Protection
| Measure | Description |
|---|---|
| Storage location | SaaS data is stored on servers within mainland China; on-premise data stays in the customer's own environment |
| Encryption in transit | HTTPS / TLS 1.2+ |
| Encryption at rest | Database and file encryption with independent key management |
| Access control | RBAC permission system + least-privilege principle |
| Tamper resistance | SHA-256 hash-chain audit logs |
| Backups | Daily backups with configurable retention |
4. Data Retention
- During the service term: retained continuously
- After termination: retained for 30 days for export, then irreversibly deleted (audit logs may be retained longer as required by law)
- Customers may request export or deletion of their business data at any time
- Website inquiry submissions: retained no longer than 24 months after the sales follow-up concludes; deletion available on request
5. Your Rights
Under the Personal Information Protection Law (PIPL), individuals enjoy the rights to be informed, to decide, to access and copy, to correct, to delete, and to withdraw consent. To exercise these rights: submit a request through your enterprise administrator, or email privacy@biopharmdai.com.
6. Cookies and Local Storage
The platform uses necessary Cookies / LocalStorage to maintain login sessions and interface preferences; they are not used for cross-site tracking.
7. Minors
The platform serves enterprise professional users and is not intended for minors under 14.
8. Policy Updates
Material changes will be announced 30 days in advance via Changelog and administrators will be notified; continued use constitutes acceptance.