Privacy Policy

1. Information We Collect

We collect the following types of information:

2. How We Use Your Information

• Provide, maintain, and improve the Service
• Process your enzyme discovery queries and deliver results
• Manage your account and subscription
• Send important service updates and security notices
• Analyse usage patterns to improve search quality and relevance
• Prevent abuse and enforce our Terms of Service

3. Data Sharing

We do not sell your personal data. We share information only with:

• Service providers — Clerk (authentication), Stripe (payments), and infrastructure providers necessary to operate the Service
• Legal requirements — When required by law, legal process, or to protect our rights

Your search queries are sent to third-party scientific APIs (Semantic Scholar, KEGG, BRENDA, UniProt, ExPASy) to retrieve enzyme data. These queries contain scientific terms only and are not linked to your personal identity.

4. Data Retention

We retain your account data for as long as your account is active. Search results and saved projects are retained until you delete them or close your account. Usage analytics are retained in anonymised form. You can request deletion of your account and associated data at any time.

5. Data Security

We use industry-standard security measures to protect your data, including encryption in transit (TLS), encrypted storage, and access controls. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

6. Cookies

We use essential cookies for authentication and session management. We may use analytics cookies to understand how the Service is used. You can control cookie preferences through your browser settings, though disabling essential cookies may affect Service functionality.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict certain processing
• Data portability — receive your data in a structured format
• Withdraw consent where processing is based on consent

To exercise these rights, contact us at privacy@bioroute.io.

8. International Transfers

Your data may be processed in countries other than your own. We ensure appropriate safeguards are in place for any international data transfers in accordance with applicable data protection laws.

9. Children

The Service is not directed at individuals under 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will delete it promptly.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email or through the Service. The "last updated" date at the top reflects the most recent revision.

11. Contact

For privacy-related questions, contact us at privacy@bioroute.io.