Privacy Policy

1. Information We Collect

We collect the following categories of information:

• Account information: Name, email address, company name, job title, and country when you register.
• Subscription and billing information: Payment method details processed securely by Stripe. We do not store full card numbers.
• Formulation data: Ingredient lists, formulation compositions, and related data you submit for regulatory analysis.
• Usage data: Log data, IP addresses, browser type, pages visited, and feature usage for service improvement and security.

2. How We Use Your Information

• To provide and improve the regulatory compliance analysis service.
• To process payments and manage your subscription.
• To send transactional emails (receipts, subscription confirmations, security alerts).
• To respond to support requests.
• To comply with legal obligations.

We do not use your formulation data to train, fine-tune, or improve our AI models.

3. Formulation Data Protection

Your formulation data receives the highest level of protection:

• All formulation data is encrypted in transit using TLS 1.3.
• All formulation data is encrypted at rest using AES-256.
• Formulation data is processed in isolated environments and is not accessible to other users.
• Formulation data is never used to train, improve, or fine-tune any AI or machine learning models.
• Formulation data is never sold, licensed, or shared with third parties.
• You may request deletion of your formulation data at any time.

4. Data Sharing

We share your information only in the following limited circumstances:

• Stripe: For payment processing. Stripe's privacy policy applies to payment data.
• Infrastructure providers: Cloud hosting and storage providers under strict data processing agreements.
• Legal requirements: When required by law, court order, or governmental authority.

We do not sell your personal data or formulation data to any third party.

5. Data Retention

We retain your account information for as long as your account is active. Formulation data is retained for the duration of your subscription and deleted within 30 days of account closure upon request. Billing records are retained for 7 years as required by applicable tax and financial regulations.

6. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your personal data and formulation data.
• Portability: Request your data in a machine-readable format.
• Objection: Object to certain processing activities.

To exercise these rights, contact us at [email protected].

7. GDPR Compliance

For users in the European Union, we process your data under the following legal bases: contract performance (subscription services), legitimate interests (service improvement and security), and legal obligation (tax and financial records). You have the right to lodge a complaint with your local data protection authority.

8. Cookies

We use essential cookies for authentication and session management. We use analytics cookies to understand how users interact with our service. You may disable non-essential cookies in your browser settings.

9. Contact

For privacy-related questions or to exercise your rights, contact our team at [email protected].