Privacy Policy for BioAIgents Platform

a. User-Provided Information

• Personal Information: Name, email address, institutional affiliation, and other details provided during registration or usage of the platform.
• Query Data: Questions or interactions submitted to the AI agent

b. Database Access Information

• Public Databases: Data retrieved from publicly available biomedical and clinical databases hosted on our servers or accessed via external data providers.
• Permission-Based Databases: Certain datasets may require explicit user permissions or institutional agreements to access. Users must adhere to these permissions and comply with any associated licensing terms.

c. Automated Information Collection

• Usage Data: Logs of user interactions for improving platform performance and troubleshooting issues.
• Technical Data: Metadata such as IP address, browser type, device type, and session details.

a. Query Processing

• Process and respond to user queries by retrieving data from public or permission-based databases.
• Ensure compliance with licensing and access restrictions for specific datasets.

b. Platform Improvement

• Analyze aggregated, non-identifiable user interaction data to improve the AI agent’s capabilities and platform functionality.

c. Compliance

• Maintain compliance with data usage regulations, licensing agreements, and user access permissions for all datasets.

a. Public Databases

The platform accesses public databases that are either:

• Stored on Our Servers: Curated and maintained by our team for faster query response times.
• Accessed via Data Providers: Retrieved in real-time through third-party APIs or direct connections.

b. Permission-Based Databases

• Some databases may require explicit user authorization, institutional agreements, or data usage licenses to access.
• Users are responsible for ensuring they have the necessary permissions to access these datasets.
• We assist users in verifying and complying with database-specific requirements where applicable.

c. Data Usage Compliance

• All data usage must comply with applicable laws (e.g., HIPAA, GDPR) and database-specific terms of use.
• The platform enforces restrictions and logs access to ensure compliance with data usage agreements.

a. With Data Providers

• For accessing permission-based databases, where necessary to authenticate users or fulfill compliance requirements.

b. Research and Reporting

• Anonymized, aggregated data may be shared for research or reporting purposes, provided it does not violate database-specific terms of use.

c. Legal Requirements

• To comply with applicable laws, regulations, subpoenas, or legal processes.

a. Encryption

• All data in transit and at rest is encrypted to ensure confidentiality.

b. Access Control

• Strict access control policies are enforced to prevent unauthorized access to sensitive databases.

c. Compliance Audits

• Regular audits are conducted to ensure adherence to database usage agreements and data protection laws.

a. Respect for Database Permissions

• Ensure they have valid permissions, licenses, or institutional agreements to access permission-based datasets.
• Comply with data usage restrictions and licensing terms for all databases.

b. Restricted Activities

• Sharing database access credentials with unauthorized individuals.
• Using retrieved data for purposes not covered under the database’s terms of use.

a. Query Logs

• Retained for a limited duration to improve platform performance and ensure compliance.

b. Dataset Usage Logs

• Retained as required by licensing agreements or regulatory requirements.

c. Biomedical and Clinical Data

• Data retrieved from public databases is not stored permanently unless explicitly authorized by the user or required for compliance purposes.

• If you access our platform from outside the United States, your data may be transferred to and processed in jurisdictions where our servers or data providers are located.
• These transfers comply with applicable data protection laws and database usage agreements.

• We reserve the right to update this Privacy Policy to reflect changes in technology, database usage requirements, or legal obligations.
• Users will be notified of significant updates via email or a notification on the platform.