Privacy Policy

Last updated: [DATE]

This policy explains what personal data [COMPANY NAME] ("we") collects through Enzyme Atlas and how we use it.

What we collect

• Account details: your email address and password (stored only as a secure hash by our login provider).
• Billing details: name, billing address, tax ID and payment card details are collected and held by Stripe. We see the last four digits and expiry, never the full card number.
• Usage: API calls and exports counted per day for plan limits, and which API keys were last used.
• Your content: report drafts you save to your account.
• Enquiries: name, email, organisation and message when you ask for a quote.

Why we use it

• To provide the service and your plan (contract).
• To take payment, issue invoices and meet tax and accounting duties (contract and legal obligation).
• To keep the service secure and prevent abuse (legitimate interests).
• To send service emails such as sign-in links, receipts and notice of changes. We send marketing only if you agree, and you can opt out at any time.

Who processes it

We use these providers, each under its own data protection terms: Cloudflare (hosting and content delivery), Supabase (accounts and database), Stripe (payments), and [EMAIL PROVIDER] (sign-in and service emails). Some of them process data outside your country; where needed they use standard contractual clauses. We do not sell personal data.

How long we keep it

Account data is kept while your account is open and deleted within 90 days after you close it, except billing records, which we keep as long as tax law requires.

Your rights

You can ask to access, correct, export or delete your personal data, or object to how we use it, by emailing [CONTACT EMAIL]. You can also complain to your data protection authority.

Cookies and storage

We use your browser's storage to keep you signed in and remember simple preferences. We do not use advertising or tracking cookies.

Questions: [CONTACT EMAIL]. [COMPANY NAME], [REGISTERED ADDRESS].