# Privacy Policy

**Effective Date:** January 1, 2024  
**Last Updated:** January 1, 2024

## Introduction

DiscoveryOS-AI-Chemist ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered chemistry discovery platform.

## Information We Collect

### Personal Information
- Email addresses and account credentials
- Profile information you provide
- Payment information (processed securely through Stripe)
- Communication records and support requests

### Usage Data
- Email usage patterns and frequency
- Platform interaction logs and session data
- Feature usage analytics and preferences
- Performance metrics and error logs

### Scientific Data
- Molecular structures and formulas you generate
- Chemical compound data and properties
- Research queries and search history
- Experimental parameters and results
- Publication and sharing preferences

### Technical Information
- IP addresses and device identifiers
- Browser type, version, and settings
- Operating system information
- Cookies and similar tracking technologies

## How We Use Your Information

### Service Provision
- Authenticate and manage your account
- Process payments and subscriptions
- Provide AI chemistry tools and features
- Generate molecular predictions and analyses
- Enable collaboration and data sharing

### Communication
- Send service updates and notifications
- Respond to support requests
- Deliver educational content and resources
- Provide security alerts and updates

### Analytics and Improvement
- Analyze usage patterns and trends
- Improve AI model accuracy and performance
- Develop new features and capabilities
- Monitor system performance and reliability

### Legal Compliance
- Comply with applicable laws and regulations
- Protect against fraud and security threats
- Enforce our terms of service
- Respond to legal requests and obligations

## Data Storage and Security

### Security Measures
We implement industry-standard security measures including:
- End-to-end encryption for sensitive data
- Secure socket layer (SSL) technology
- Multi-factor authentication options
- Regular security audits and assessments
- Access controls and monitoring systems

### Data Location
- Primary servers located in secure data centers
- Geographic redundancy for data protection
- Compliance with regional data protection laws
- Third-party security certifications maintained

### Retention Periods
- Account data: Retained while account is active
- Usage logs: Retained for 2 years
- Molecular data: Retained per user preferences
- Payment records: Retained per legal requirements

## Third-Party Services

### Clerk (Authentication)
- Handles user authentication and identity management
- Processes login credentials and session data
- Privacy Policy: https://clerk.dev/privacy

### Stripe (Payment Processing)
- Processes subscription and payment transactions
- Handles billing information and payment methods
- Privacy Policy: https://stripe.com/privacy

### Plausible (Analytics)
- Provides privacy-friendly website analytics
- Tracks page views and basic usage metrics
- Privacy Policy: https://plausible.io/privacy

### Additional Integrations
- AI model providers for chemistry predictions
- Cloud storage services for data backup
- Email delivery services for notifications

## Cookies and Tracking Technologies

### Essential Cookies
- Authentication and session management
- Security and fraud prevention
- Load balancing and performance optimization

### Analytics Cookies
- Usage statistics and performance metrics
- Feature adoption and user behavior analysis
- Error tracking and debugging information

### Cookie Management
You can control cookie preferences through your browser settings. Disabling certain cookies may limit functionality.

## Data Sharing and Disclosure

### We Do Not Sell Personal Data
We do not sell, rent, or trade your personal information to third parties for marketing purposes.

### Limited Sharing Scenarios
- Service providers and business partners (under strict agreements)
- Legal compliance and law enforcement requests
- Business transfers or acquisitions
- With your explicit consent

### Scientific Data Sharing
- Molecular data shared only with your permission
- Anonymous aggregated data for research purposes
- Public sharing features controlled by user settings

## Your Rights Under GDPR

### Access Rights
- Request copies of your personal data
- Obtain information about data processing
- Receive data in a structured, machine-readable format

### Correction and Deletion
- Correct inaccurate or incomplete data
- Request deletion of personal information
- Object to certain types of processing

### Data Portability
- Export your molecular data and research
- Transfer data to other platforms
- Receive data in commonly used formats

### Withdrawal of Consent
- Revoke consent for data processing
- Opt-out of marketing communications
- Disable optional data collection features

## Children's Privacy

Our platform is not intended for users under 16 years of age. We do not knowingly collect personal information from children under 16.

## California Privacy Rights (CCPA)

California residents have additional rights including:
- Right to know what personal information is collected
- Right to delete personal information
- Right to opt-out of sale of personal information
- Right to non-discrimination for exercising privacy rights

## International Data Transfers

When transferring data internationally, we ensure appropriate safeguards including:
- Standard Contractual Clauses (SCCs)
- Adequacy decisions by relevant authorities
- Other legally recognized transfer mechanisms

## Data Breach Notification

In the event of a data breach affecting your personal information:
- We will notify you within 72 hours when legally required
- We will provide details about the incident and our response
- We will offer guidance on protective measures you can take

## Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will:
- Notify users of significant changes via email
- Post updates on our platform with effective dates
- Maintain previous versions for reference

## Contact Information

### Data Protection Officer
Email: privacy@discoveryos-ai-chemist.com  
Address: [Company Address]

### General Inquiries
Email: support@discoveryos-ai-chemist.com  
Phone: [Phone Number]

### EU Representative
For EU-related privacy matters:  
Email: eu-privacy@discoveryos-ai-chemist.com

## Legal Basis for Processing

We process your data based on:
- Contractual necessity for service provision
- Legitimate interests in improving our platform
- Legal compliance requirements
- Your explicit consent where required

## Data Minimization

We collect only the minimum data necessary to:
- Provide requested services and features
- Ensure platform security and reliability
- Comply with legal obligations
- Improve user experience

## Automated Decision Making

Our AI systems may make automated decisions regarding:
- Molecular property predictions
- Content recommendations
- Security threat detection

You have the right to request human review of automated decisions that significantly affect you.

## Conclusion

Your privacy is fundamental to our mission of advancing scientific discovery. We are committed to maintaining the highest standards of data protection while enabling breakthrough research in chemistry and molecular sciences.

By using DiscoveryOS-AI-Chemist, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of your information as described herein.