Omevra · Privacy

Privacy Policy

What Omevra collects, how it is used, and your choices. It applies to our website, applications, and API.

This policy applies from the date it is posted on this page.

1. Information we collect

Type	Examples	Source
Account information	Name, email, organization, role	You, at sign-up
Billing information	Plan, billing address, payment status	You, through our payment processor. We do not store full card numbers.
Customer Data	Variant lists, VCF and FASTQ files, project names, generated reports	You, when you upload or run analyses
Usage data	Pages visited, features used, API calls, error logs	Collected automatically
Device data	Browser type, IP address, approximate location	Collected automatically
Communications	Support emails, feedback, demo requests	You

2. How we use information

To provide, run, and secure the Service
To process payments and manage subscriptions
To send service messages, such as usage alerts, re-check alerts, and billing notices
To provide support and respond to requests
To improve the Service using aggregated, de-identified usage data
To meet legal obligations

We use Customer Data only to provide the Service to you. We do not sell your data, and we do not use Customer Data to train our models without your written permission.

3. Health information

The Service is designed for de-identified research data. Do not upload protected health information (PHI) or directly identifying information about patients or research participants unless you have a signed Business Associate Agreement with us. If we learn that PHI was uploaded without a BAA, we may delete it and notify you.

4. How we share information

We share information only with:

Service providers (subprocessors) that help us run the Service, under contracts that limit their use of your data. Today those are GitHub, which hosts this website, and Hugging Face, which hosts the application. Payment, authentication, email, and error-monitoring processors will be named on the Security & data handling page before paid plans launch.
Members of your workspace, when you share a project with them
Authorities, when required by law or to protect rights and safety
A successor, if Omevra is acquired or merged, under the same protections

5. Data retention and deletion

Customer Data is kept while your account is active.
You can delete projects or files at any time. Deleted data is removed from active systems within 30 days and from backups within 90 days.
After account closure, you have 30 days to export your data before it is deleted.
Billing records are kept as long as tax and accounting laws require.

6. Security

We encrypt data in transit (TLS) and at rest, restrict access to authorized personnel, log access to Customer Data, and back up data regularly. No system is perfectly secure. We will notify affected customers of a data breach as required by law.

7. Where data is stored

Data is stored and processed in the United States. If you access the Service from outside the US, you consent to this transfer.

8. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. Residents of California and the EU/UK have additional rights under the CCPA and GDPR. To make a request, email umesh.linga25@gmail.com. We will respond within 30 days and will not discriminate against you for exercising your rights.

9. Cookies

We use essential cookies to keep you signed in and to secure the Service, and optional analytics cookies to understand usage. You can decline optional cookies in the cookie banner or your browser settings.

10. Children

The Service is not intended for anyone under 18, and we do not knowingly collect their personal information.

11. Changes to this policy

We may update this policy. We will post the new version on this page and notify account holders by email of material changes.

12. Contact

Umesh Linga, operating as Omevra · umesh.linga25@gmail.com