Legal

Privacy Policy

Last updated: June 5, 2026

1. Information We Collect

BioMate AI collects information you provide directly (account registration, contact forms, workflow inputs), usage data (log files, session data, workflow run metadata), and technical data (browser type, IP address). We do not collect or store raw biological specimens or patient-identifiable health records through this platform.

2. How We Use Your Data

We use collected data to: operate and improve the BioMate AI platform; process and return workflow results; communicate service updates; enforce our terms; and comply with legal obligations. Your research data, workflow inputs, and outputs are never used to train shared AI models. Each tenant's data is isolated in a workspace-scoped vector index.

3. Data Retention and Security

Workflow inputs, outputs, and audit trails are retained for the duration of your active account plus 90 days after termination, unless a longer retention period is required by law or requested under an Enterprise agreement. We employ encryption in transit (TLS 1.2+) and at rest, role-based access controls, and regular security audits.

4. Data Sharing

We do not sell your personal data. We share data only with: (a) infrastructure subprocessors necessary to operate the service (AWS, etc.) under data processing agreements; (b) professional advisors under confidentiality obligations; (c) law enforcement when legally required. We provide a full subprocessor list on request.

5. Your Rights

Depending on your jurisdiction you may have rights to access, correct, delete, or port your personal data, and to object to or restrict certain processing. To exercise these rights, contact contact@biomate.ai. We respond within 30 days.

6. Cookies

We use essential cookies to operate the platform (session management, authentication) and analytics cookies (Google Analytics) to understand usage. You can disable analytics cookies in your browser settings without affecting core platform functionality.

7. Enterprise and HIPAA

Enterprise customers may execute a Business Associate Agreement (BAA) for HIPAA-covered workflows. Private deployment (VPC) options are available where all data stays within your network perimeter. Contact contact@biomate.ai to discuss compliance requirements.

8. Changes to This Policy

We may update this policy. Material changes will be announced by email to registered users at least 14 days before they take effect. Continued use after the effective date constitutes acceptance.

9. Contact

Questions about this policy: contact@biomate.ai · BioMate AI, Houston, Texas.