Privacy Policy

1. Introduction

Gradiance (“we,” “us,” or “our”) is an independently operated software service and is not currently operated through an incorporated legal entity. We are not affiliated with, endorsed by, or acting on behalf of any university or research institution. This Privacy Policy describes how information is handled when you use our analysis platform at gradiancebio.com (the “Service”).

This policy covers Gradiance, including the Gradiance Flow cytometry workspace.

By using the Service, you agree to the terms of this Privacy Policy. If you do not agree, please do not use our Service.

2. Information We Collect

Account Information

When you sign in via Google OAuth, we receive your name, email address, and a Google profile identifier. We do not store your Google account password or have access to your Google account beyond the authentication event.

Scientific Data You Upload

You may upload experimental datasets, including CSV, Excel, FCS, and related analysis files. We process and store uploaded files and derived analysis data to provide runs and Gradiance Flow workspaces. When you choose an AI-assisted feature, your request, relevant scientific context, and tool results may be sent through OpenRouter to the model provider selected for that request (see Section 4).

Usage and Analytics Data

We process operational information needed to run and secure the Service, such as request timestamps, errors, feature usage, and performance information. We do not currently use third-party advertising trackers.

Payment Information

If you subscribe to a paid tier, payment is processed entirely by Stripe. We do not store credit card numbers or other payment details. Stripe handles all payment processing and storage under its own privacy policy and PCI DSS compliance standards.

Log Data

Our hosting and application systems may record standard request and security information, such as IP addresses, browser or user-agent information, timestamps, and errors. We use this information for security, reliability, and troubleshooting rather than advertising profiling.

3. How We Use Your Information

• To provide and operate the Gradiance analysis platform
• To authenticate your identity and manage your account
• To process payments for subscription services
• To send transactional communications (e.g., payment receipts, account notifications)
• To monitor platform performance and fix bugs
• To comply with legal obligations

We do not sell, trade, or share your personal information or uploaded scientific data with third parties for marketing or commercial purposes.

4. Third-Party Services

We rely on the following third-party services to operate Gradiance. Each maintains its own privacy policy:

5. Data Storage and Retention

• Uploaded research data and derived analyses, including uploaded files, workspace copies, derived data, and analysis results, become eligible for deletion 30 days after creation. A scheduled daily cleanup removes eligible data from active storage, ordinarily within the following 24 hours. Deleting a run, workspace, or account may remove active records sooner.
• Third-party AI processing is separate from our 30-day retention rule. Data sent to OpenRouter and an underlying model provider is handled under their policies and controls; we cannot directly delete copies retained by those providers.
• Account and authentication data, including your profile and sign-in records, is retained while your account is active so we can provide and secure access.
• Minimal billing, quota, fraud-prevention, and security records may be retained as needed to administer usage limits, process or document payments, prevent abuse, resolve disputes, and meet legal obligations.
• Operational logs are retained according to operational and hosting-provider needs.

6. Your Rights

You have the right to:

• Access your account information and analysis data at any time via the platform
• Export your analysis results in multiple formats (CSV, Python scripts, figures, PDF reports)
• Delete individual analysis runs from your dashboard
• Request account deletion through account settings or by contacting us

To exercise these rights or request account deletion, contact us at hello@gradiancebio.com.

7. Security

We do not sell your personal information or scientific data. Gradiance does not use your scientific data to train its own models. AI requests are processed by OpenRouter and underlying model providers under their respective data practices, as described in Section 4. Access to backend systems is restricted to authorized personnel.

No system is completely secure. We strongly recommend that you do not upload data subject to regulatory restrictions, including Protected Health Information (PHI), personally identifiable information (PII) of research subjects, or export-controlled data, unless you have a dedicated Enterprise agreement that addresses those specific compliance requirements.

8. Cookies and Tracking

Gradiance uses session cookies to maintain your authenticated state across gradiancebio.com and its subdomains. We do not use third-party advertising cookies or sell cookie data.

You can manage or disable cookies through your browser settings. Disabling session cookies will prevent you from signing in to the platform.

9. Children's Privacy

Gradiance is not designed for or directed at individuals under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us at hello@gradiancebio.com so we may delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice appropriate to the change and post the updated policy on this page with a revised “Last updated” date.

11. Contact Us

If you have questions or concerns about this Privacy Policy or how we handle your data, please contact us at: