Privacy Policy
Last updated: October 27, 2026
FGE Diagnostics Inc. ("FGE," "we," "us") is committed to protecting your privacy. This Privacy Policy explains what data we collect, how we use it, and your rights.
1. Data We Collect
1.1 Information You Provide
| Category | Examples | Purpose |
|---|---|---|
| Account Information | Email, name, OCI IAM credentials | Authentication, communication |
| Payment Information | Processed by Stripe; we don't store card numbers | Billing |
| Uploaded Data | FASTQ files, sample names | Processing |
| Analysis Results | Taxonomic profiles, functional profiles, QC reports | Delivering your results |
1.2 Information Automatically Collected
- IP address, user agent, browser type (for security/audit logs)
- Session metadata (login times, IP addresses)
- Service usage patterns (which features you use)
1.3 API Keys
We store only SHA-256 hashes of your API keys. The raw key is shown once at creation and never stored.
2. How We Use Your Data
We use your data to:
- Provide the Service (process your FASTQ files, return results)
- Authenticate you and manage your account
- Process payments
- Send service-related emails (results ready, billing, security alerts)
- Improve the Service (aggregated, anonymized usage analysis)
- Comply with legal obligations
We do not:
- Sell your data to third parties
- Use your FASTQ data to train models without your written consent
- Share your results with other customers
3. Data Retention
| Data Type | Retention |
|---|---|
| FASTQ files | Deleted within 24 hours of successful pipeline completion |
| Analysis results | 30 days from completion, then deleted |
| Account information | Until you delete your account |
| Audit logs | 90 days (IP, login events) |
| API key hashes | Until revoked |
| Payment records | 7 years (legal requirement) |
4. Data Security
We implement industry-standard security measures:
- Encryption in transit (HTTPS/TLS 1.3)
- Encryption at rest (OCI block storage)
- Access controls (role-based, MFA required)
- Audit logging of all sensitive operations
- API key hashing (SHA-256)
- Regular security reviews
5. Data Sharing
We share data only with:
- Stripe: For payment processing (email, billing info)
- Oracle Cloud Infrastructure: For hosting (encrypted storage)
- Email provider: For sending service emails
- Law enforcement: Only if legally compelled
We do not sell or share your FASTQ data or results with third parties except as required by law.
6. Your Rights
Depending on your jurisdiction (GDPR, CCPA, etc.), you have the right to:
- Access: Request a copy of your personal data
- Correction: Correct inaccurate information
- Deletion: Request deletion of your data
- Portability: Receive your data in machine-readable format
- Objection: Object to certain processing
- Withdraw consent: Where processing is based on consent
To exercise these rights, email [email protected]. We respond within 30 days.
7. Cookies
We use essential cookies for session management (login state, CSRF protection). We do not use tracking cookies for advertising.
8. Children's Privacy
The Service is not intended for users under 18. We do not knowingly collect data from minors.
9. International Data Transfers
Our servers are located in the United States (OCI US-Ashburn-1). If you access the Service from outside the US, you consent to the transfer of your data to the US.
10. Changes to This Policy
We may update this Privacy Policy. Material changes will be announced via email or on the Service at least 30 days in advance.
11. Contact
For privacy inquiries:
FGE Diagnostics Inc.
213 N Market St. #1158
Wilmington, DE 19801 USA
Email: [email protected]