Privacy Policy

1. What we collect

We serve public records; we are not in the business of collecting personal data beyond running the service. What we do collect:

• Account details — your name and email address, and your company name if you give it, collected when you sign up through Clerk, our sign-in provider.
• Billing details — payments are processed by Stripe through Clerk Billing. Stripe collects your card details; we never receive or store full card numbers. We keep your plan, billing history, and the invoices and receipts tied to them.
• Usage records — for dataset subscriptions: key ID, tool called, parameters, timestamp and response size. For our dashboards and PeptideIQ: which features you use and when. We use these for security, support and capacity planning.
• Support messages — what you send us by email or through a support form, and our replies.
• PeptideIQ data — your store's details (store name, website and the products and prices we track for it), price files you upload, and your conversations with the PeptideIQ AI assistant.

2. Why we use it

To create and secure your account; to provide the service and the plan you pay for; to process payments, renewals and refunds; to answer support requests; to send service messages (receipts, renewal and security notices, changes to these policies); to keep the service reliable and to detect abuse; and to meet legal and tax obligations. Because dataset pricing is flat, usage logs are never used for billing. We do not sell your data, use your queries to trade, share them with other customers, or use them for advertising.

3. Service providers we use

These companies process data on our behalf, only to run the service:

• Clerk — sign-in, account management and the billing screens.
• Stripe — payment processing, fraud prevention and receipts.
• Microsoft Azure — hosting, databases, file storage and key management, in US regions.
• Azure Communication Services (Microsoft) — account and service emails.
• Cloudflare — network security and content delivery.
• Anthropic — the model behind the PeptideIQ AI assistant. Your assistant conversations are sent to Anthropic to generate replies, under its commercial API terms, which do not allow it to train its models on that data.

4. When we disclose data

Only to the providers above; when the law requires it (for example, a valid subpoena or court order — we'll tell you first unless we're legally barred from doing so); to protect the service, our users or the public from fraud or abuse; or to a successor if the business is sold or merged, under this policy's protections. PeptideIQ subscriptions are private: what you upload or ask the assistant is never shown to other stores or published on The Peptide Index.

5. How long we keep it

• Account details: while your account is open, and deleted within 30 days of closing it or of your request.
• Dataset access logs: 13 months, then deleted. Institutional licensees can request shorter retention in the license.
• PeptideIQ usage records: 24 months, then deleted.
• PeptideIQ AI assistant conversations: 90 days, then deleted.
• PeptideIQ uploaded price files and store data: while your subscription is active, and deleted within 30 days of closing your account.
• Billing and tax records: as long as tax and accounting law requires (generally 7 years). Stripe and Clerk keep their own records under their own policies.
• Support emails: up to 3 years, so we have the history if you write again.

6. How we protect it

Data is encrypted in transit (HTTPS/TLS) and at rest on Azure's encrypted storage. Access to production systems is limited to the people who need it, and each part of the service has only the permissions it needs. Passwords, API secrets and connection strings are kept in Azure Key Vault, not in code. We never see your card number. No system is perfectly secure; if a breach affects your data, we'll notify you as the law requires. We do not currently hold third-party security certifications.

7. Cookies

The marketing site sets no tracking or advertising cookies. When you sign in, Clerk sets cookies that keep you signed in, and Stripe may set cookies during checkout to prevent fraud. That's the list.

8. Your rights

You may ask for a copy of your account data, ask us to correct it, or ask us to delete it at any time, and you can close your account yourself in your account settings. Write to privacy@agenticdatamining.ai from your account email; we respond within 30 days and won't treat you differently for asking. Depending on where you live, you may have additional rights under local law; we honor them. The service is for businesses and is not directed at children under 16.

9. Changes and contact

If we make a material change to this policy, we'll update the date above and tell subscribers by email or in the product before it takes effect. Questions: privacy@agenticdatamining.ai, or see Support.