Privacy Policy

1. What we collect

We serve public records; we are not in the business of collecting personal data beyond running the service. What we do collect:

• Account details — your name and email address, and your company name if you give it, collected when you sign up through Clerk, our sign-in provider.
• Billing details — payments are processed by Stripe through Clerk Billing. Stripe collects your card details; we never receive or store full card numbers. We keep your plan, billing history, and the invoices and receipts tied to them.
• Usage records — for dataset subscriptions: key ID, tool called, parameters, timestamp and response size. For our dashboards and PeptideIQ: which features you use and when. We use these for security, support and capacity planning.
• Support messages — what you send us by email or through a support form, and our replies.
• PeptideIQ data — your store's details (store name, website and the products and prices we track for it), price files you upload, and your conversations with the PeptideIQ AI assistant.

2. Why we use it

To create and secure your account; to provide the service and the plan you pay for; to process payments, renewals and refunds; to answer support requests; to send service messages (receipts, renewal and security notices, changes to these policies); to keep the service reliable and to detect abuse; and to meet legal and tax obligations. Because dataset pricing is flat, usage logs are never used for billing. We do not sell your data, use your queries to trade, share them with other customers, or use them for advertising.

3. Service providers we use

These companies process data on our behalf, only to run the service:

• Clerk — sign-in, account management and the billing screens.
• Stripe — payment processing, fraud prevention and receipts.
• Microsoft Azure — hosting, databases, file storage and key management, in US regions.
• Azure Communication Services (Microsoft) — account and service emails.
• Cloudflare — network security and content delivery.
• Anthropic — the model behind the PeptideIQ AI assistant. Your assistant conversations are sent to Anthropic to generate replies, under its commercial API terms, which do not allow it to train its models on that data.

4. When we disclose data

Only to the providers above; when the law requires it (for example, a valid subpoena or court order — we'll tell you first unless we're legally barred from doing so); to protect the service, our users or the public from fraud or abuse; or to a successor if the business is sold or merged, under this policy's protections. PeptideIQ subscriptions are private: what you upload or ask the assistant is never shown to other stores or published on The Peptide Index.

5. How long we keep it

We do not routinely delete older records. Unless a line below says otherwise, what we collect stays with us with no fixed end date, including after an account closes: account details, dataset access logs and other usage records, PeptideIQ store data and uploaded price files, support messages, and billing and tax records (which we keep at least as long as tax and accounting law requires). Stripe and Clerk keep their own records under their own policies. Institutional licensees can agree different retention in their license.

What is deleted automatically:

• PeptideIQ AI assistant conversations: 90 days, then the text of each question and answer is erased.
• PeptideIQ usage records: 24 months, then deleted (these are the records behind the assistant's monthly allowance).
• PeptideIQ sign-ups whose email address was never confirmed: deleted after 7 days.

6. How we protect it

Data is encrypted in transit (HTTPS/TLS) and at rest on Azure's encrypted storage. Access to production systems is limited to the people who need it, and each part of the service has only the permissions it needs. Passwords, API secrets and connection strings are kept in Azure Key Vault, not in code. We never see your card number. No system is perfectly secure; if a breach affects your data, we'll notify you as the law requires. We do not currently hold third-party security certifications.

7. Cookies

The marketing site sets no tracking or advertising cookies. When you sign in, Clerk sets cookies that keep you signed in, and Stripe may set cookies during checkout to prevent fraud. That's the list.

8. Your rights

You may ask for a copy of your account data, ask us to correct it, or ask us to delete it; a person handles each request and tells you what can be removed and what we must keep, such as tax records. You can ask to close your account in your account settings (Account > Profile > Close account) or by email. That records your request, and we cancel your subscription so it ends at the end of the period you paid for. Closing an account does not erase its records; they are kept as described in section 5. Write to privacy@agenticdatamining.ai from your account email; we respond within 30 days and won't treat you differently for asking. Depending on where you live, you may have additional rights under local law; we honor them. The service is for businesses and is not directed at children under 16.

9. Changes and contact

If we make a material change to this policy, we'll update the date above and tell subscribers by email or in the product before it takes effect. Questions: privacy@agenticdatamining.ai, or see Support.