Privacy Policy
Last updated: April 28, 2026
1. Introduction
Gradiance (“we,” “us,” or “our”) is a research project affiliated with the University of Pennsylvania. This Privacy Policy describes how we collect, use, and protect your personal information when you use our bioassay analysis platform at gradiance.io (the “Service”).
By using the Service, you agree to the terms of this Privacy Policy. If you do not agree, please do not use our Service.
2. Information We Collect
Account Information
When you sign in via Google OAuth, we receive your name, email address, and a Google profile identifier. We do not store your Google account password or have access to your Google account beyond the authentication event.
Scientific Data You Upload
You may upload experimental datasets (CSV, Excel) to run analyses. This data is processed by our backend systems and, where analysis requires AI assistance, relevant portions are sent to third-party AI providers (see Section 4). Uploaded files are automatically deleted 24 hours after upload unless they are part of a saved analysis run.
Usage and Analytics Data
We collect anonymized usage data to improve the platform, including pages visited, features used, and general performance metrics. This data is not linked to individually identifiable information.
Payment Information
If you subscribe to a paid tier, payment is processed entirely by Stripe. We do not store credit card numbers or other payment details. Stripe handles all payment processing and storage under its own privacy policy and PCI DSS compliance standards.
Log Data
Our servers may record standard log information such as IP addresses, browser type, and timestamps for security and troubleshooting purposes. These logs are retained for a maximum of 30 days and are not used for profiling or marketing.
3. How We Use Your Information
- To provide and operate the Gradiance analysis platform
- To authenticate your identity and manage your account
- To process payments for subscription services
- To send transactional communications (e.g., payment receipts, account notifications)
- To monitor platform performance and fix bugs
- To comply with legal obligations
We do not sell, trade, or share your personal information or uploaded scientific data with third parties for marketing or commercial purposes.
4. Third-Party Services
We rely on the following third-party services to operate Gradiance. Each maintains its own privacy policy:
Used for authentication (sign-in). We receive only the information needed to create and identify your account. Governed by Google's Privacy Policy.
Stripe
Used for payment processing on paid subscription tiers. We do not have access to your payment card details. Governed by Stripe's Privacy Policy.
Anthropic (Claude API)
AI-powered analysis capabilities are provided by Anthropic's Claude API. When you run an analysis, relevant portions of your data (column headers, sample values, and analysis parameters) may be sent to this API to interpret your data, generate curve fits, and produce reproducible Python scripts. Raw experimental datasets are not sent in full where summarized representations suffice. Governed by Anthropic's Privacy Policy.
5. Data Storage and Retention
- Uploaded files are automatically deleted 24 hours after upload unless retained as part of an active analysis run.
- Analysis runs (inputs, results, exported scripts) are retained for as long as your account is active. You may delete individual runs at any time from the Runs dashboard.
- Account data (name, email) is retained until you request account deletion.
- Payment records are retained as required by applicable financial regulations.
- Server logs are retained for a maximum of 30 days.
6. Your Rights
You have the right to:
- Access your account information and analysis data at any time via the platform
- Export your analysis results in multiple formats (CSV, Python scripts, figures, PDF reports)
- Delete individual analysis runs from your dashboard
- Request account deletion, which will permanently remove your account and all associated data (excluding payment records required by law)
- Opt out of non-essential analytics tracking by contacting us
To exercise these rights or request account deletion, contact us at hello@gradiancebio.com.
7. Security
We do not sell your data or train models on it. Access to backend systems is restricted to authorized personnel and monitored.
No system is completely secure. We strongly recommend that you do not upload data subject to regulatory restrictions — including Protected Health Information (PHI), personally identifiable information (PII) of research subjects, or export-controlled data — unless you have a dedicated Enterprise agreement that addresses those specific compliance requirements.
8. Cookies and Tracking
Gradiance uses session cookies to maintain your authenticated state. We do not use third-party tracking cookies or sell cookie data. We may use anonymized analytics to understand platform usage patterns; these analytics do not collect personally identifiable information.
You can manage or disable cookies through your browser settings. Disabling session cookies will prevent you from signing in to the platform.
9. Children's Privacy
Gradiance is not designed for or directed at individuals under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us at hello@gradiancebio.com so we may delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email to registered users at least 14 days before they take effect. The updated policy will be posted on this page with a revised “Last updated” date. Continued use of the Service after the effective date constitutes your acceptance of the updated policy.
11. Contact Us
If you have questions or concerns about this Privacy Policy or how we handle your data, please contact us at: