Privacy Policy

1. Information We Collect

Personal Information

We collect information you provide directly to us, including:

• Account registration information (name, email address, organization)
• Profile information (bio, research interests, professional background)
• Contact information for service inquiries
• Payment information (processed securely through Stripe)
• Communication preferences and subscription settings

Research and Usage Data

• Data you upload or input into our platform for analysis
• Usage patterns and platform interaction data
• Service usage statistics and performance metrics
• API access logs and authentication records

Technical Information

• IP addresses, browser type, and device information
• Cookies and similar tracking technologies
• Log files and system performance data
• OAuth2 tokens and session information

2. How We Use Your Information

We use the collected information for the following purposes:

Service Provision

• Provide, operate, and maintain our platform and services
• Process transactions and manage your membership
• Perform data analysis and provide research insights
• Enable collaboration between researchers and data scientists

Communication

• Send important service updates and notifications
• Respond to your inquiries and provide customer support
• Send newsletters and marketing communications (with consent)
• Notify you about new features and research opportunities

Platform Improvement

• Analyze usage patterns to improve our services
• Develop new features and enhance user experience
• Monitor and ensure platform security and performance
• Conduct research and development activities

3. Research Data Protection

We understand the sensitive nature of biomedical research data and implement special protections:

• Data Ownership: You retain full ownership of your research data
• Confidentiality: We maintain strict confidentiality of all research data
• Access Controls: Only authorized personnel can access your data
• Compliance: We comply with relevant research ethics and data protection regulations
• Data Minimization: We only process data necessary for the requested services

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share information only in these circumstances:

With Your Consent

We may share information when you explicitly consent to such sharing.

Service Providers

We may share information with trusted third-party service providers who help us operate our platform:

• Payment processors (Stripe) for membership billing
• Cloud infrastructure providers (AWS) for secure data storage
• Email service providers for communications
• Analytics services for platform improvement

Legal Requirements

We may disclose information when required by law or to:

• Comply with legal processes or government requests
• Protect our rights, property, or safety
• Protect the rights and safety of our users
• Prevent fraud or abuse of our services

5. Data Security

We implement comprehensive security measures to protect your information:

• Encryption: Data is encrypted in transit and at rest
• Access Controls: Multi-factor authentication and role-based access
• Regular Audits: Security assessments and vulnerability testing
• Compliance: GDPR, HIPAA, and other applicable standards
• Incident Response: Procedures for handling security breaches
• Data Backups: Regular backups with secure storage

6. Data Retention

We retain your information only as long as necessary:

• Account Data: Until you delete your account or request deletion
• Research Data: According to your preferences and legal requirements
• Transaction Records: As required for accounting and tax purposes
• Log Files: Typically 12-24 months for security and debugging
• Marketing Data: Until you unsubscribe or withdraw consent

7. International Data Transfers

If you are located outside the jurisdiction where WeDaita operates, please note that we may transfer your data internationally. We ensure appropriate safeguards are in place for such transfers, including:

• Adequacy decisions by data protection authorities
• Standard contractual clauses with service providers
• Binding corporate rules and certification mechanisms

8. Your Rights and Choices

You have several rights regarding your personal information:

Access and Portability

• Request access to your personal data
• Receive a copy of your data in a portable format
• Download your research data and analysis results

Correction and Deletion

• Update or correct inaccurate information
• Request deletion of your personal data
• Close your account and remove associated data

Control and Consent

• Withdraw consent for data processing activities
• Opt-out of marketing communications
• Manage cookie preferences
• Control data sharing settings

9. Cookies and Tracking

We use cookies and similar technologies to enhance your experience:

• Essential Cookies: Required for platform functionality
• Performance Cookies: Help us analyze platform usage
• Functional Cookies: Remember your preferences
• Marketing Cookies: Deliver relevant content (with consent)

You can control cookie settings through your browser preferences.

10. Children's Privacy

WeDaita is not intended for individuals under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will promptly delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes:

• We will notify you via email or platform notification
• We will post the updated policy on our website
• We will indicate the effective date of changes
• Continued use constitutes acceptance of the updated policy

12. Contact Information

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

• Email: privacy@wedaita.com
• Data Protection Officer: dpo@wedaita.com
• Website: www.wedaita.com
• Contact Form: Submit inquiry through our website

13. Regulatory Compliance

WeDaita complies with applicable data protection regulations, including:

• GDPR: European Union General Data Protection Regulation
• CCPA: California Consumer Privacy Act
• HIPAA: Health Insurance Portability and Accountability Act (where applicable)
• PIPEDA: Personal Information Protection and Electronic Documents Act