Privacy Policy

1. Introduction

Assaygrove, Inc. ("the Company," "we," "us," or "our") operates assaygrove.com and the Assaygrove drug target discovery platform (collectively, the "Service"). The Service helps biotech and pharmaceutical research teams rank drug targets based on multi-omics evidence and published literature, so they can commit wet-lab resources to the candidates most likely to yield results.

This Privacy Policy explains what personal information we collect through the Service, how we use it, and the choices you have. It applies to visitors to assaygrove.com, users who request early access or a demo, and research teams using our platform. We are based at 27 Drydock Avenue, 6th Floor, Boston, MA 02210, and can be reached at [email protected].

We do not process patient health data or Protected Health Information as defined by HIPAA. The omics datasets researchers upload to the Assaygrove platform are de-identified molecular data (expression matrices, GWAS summary statistics, proteomics abundance tables); they do not constitute individually identifiable health information.

2. Information We Collect

2.1 Information You Provide

We collect information you submit directly, including:

• Contact details (name, email, phone) when you fill out a form, request a demo, or subscribe to updates;
• Company information you choose to share (employer, role, project context, therapeutic area of focus);
• The content of any messages you send us, including descriptions of your research programs;
• Account credentials (email and password) when you register for platform access.

2.2 Research Data You Upload

When using the Assaygrove platform, you may upload de-identified omics datasets including RNA-seq expression matrices, proteomics abundance files, and GWAS summary statistics. This data is processed solely to generate target rankings, evidence summaries, and confidence scores for your research program. We do not use uploaded omics data to train machine learning models, share it with third parties, or use it for any purpose beyond delivering your results. See Section 3 for our data-use commitments.

2.3 Information Collected Automatically

When you visit assaygrove.com, we automatically collect limited technical information:

• IP address and approximate location (city/region level);
• Browser type, operating system, device class;
• Pages visited, referring URLs, time on page;
• Cookie and similar identifiers (see Section 5).

2.4 We Do Not Knowingly Collect Children's Data

assaygrove.com is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact [email protected] and we will delete it.

3. How We Use Information

We use the information we collect to:

• Respond to inquiries, demo requests, and early-access applications from research teams;
• Operate, maintain, and improve the Service, including the target ranking engine and evidence integration pipeline;
• Process omics datasets you upload and return ranked target lists, evidence cards, and confidence scores to your account;
• Send service updates and (with your consent where required) communications about platform improvements or new evidence modules;
• Detect, investigate, and prevent fraud, abuse, or unauthorized access;
• Comply with legal obligations applicable to a life sciences software company operating in the United States.

We do not use omics data you upload to train models without explicit written consent. We do not sell personal information for monetary value. Where applicable state law treats certain advertising arrangements as a "sale" or "share," see your state's section below.

4. Sharing of Information

We share personal information only with:

• Service providers acting on our behalf (for example, cloud hosting, email delivery, and usage analytics) under contractual confidentiality terms that prohibit use of data for any other purpose;
• Authorities, when required by law or court order, or to protect the rights, safety, or property of the Company, our users, or the public;
• A successor entity in the event of a merger, acquisition, or asset sale, subject to this Policy.

We do not sell personal information to third parties. We do not share uploaded omics data with any third party except as required to operate the infrastructure that processes your datasets.

5. Cookies and Tracking

We use cookies and similar technologies to operate the site, remember preferences, and measure usage. For details and choices, see our Cookie Policy.

6. Data Retention

We retain personal information only as long as needed for the purposes described in this Policy, to comply with legal or accounting obligations, and to resolve disputes. Specifically:

• Contact and inquiry records are retained for 24 months after last interaction, then purged;
• Platform account data is retained for the duration of an active subscription and for 12 months after account closure, to support data export requests;
• Uploaded omics datasets are retained for the duration of your active program and deleted within 30 days of program close or account cancellation, unless you request earlier deletion;
• Server access logs are retained 90 days, then aggregated and anonymized.

7. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including TLS encryption in transit, restricted-access databases, and least-privilege access controls. Uploaded research data is stored in isolated, access-controlled environments. No system is perfectly secure; we cannot guarantee absolute security. In the event of a data breach affecting your personal information, we will notify affected users as required by applicable law.

8. Your General Rights

Depending on your jurisdiction, you may have rights including access, correction, deletion, and the ability to limit certain processing. To make a request, email [email protected]. We will respond within the timeframe required by applicable law.

9. Massachusetts Residents

Massachusetts does not currently have a comprehensive consumer privacy statute. As a matter of policy, the Company extends the following baseline rights to all U.S. residents regardless of state of residence.

9.1 Baseline Rights

• Right to Know: request the categories of personal information we have collected about you.
• Right to Delete: request deletion of personal information you have provided.
• Right to Correct: request correction of inaccurate personal information.
• Right to Opt Out of Marketing: unsubscribe from marketing emails or opt out via the link in each marketing message.

9.2 How to Exercise

Email [email protected] with a description of your request and enough detail for us to verify your identity. We respond within 45 days.

9.3 Sector-Specific Rights

If you are protected by federal sector laws (for example, HIPAA, GLBA, FERPA), those laws may give you additional rights with respect to data covered by them. Assaygrove does not process Protected Health Information; researchers remain responsible for ensuring their omics submissions comply with any data use agreements applicable to their source datasets.

10. California Visitors

If you are a California resident, you may also exercise the rights granted under the California Consumer Privacy Act ("CCPA") and California Privacy Rights Act ("CPRA"), including the right to know, the right to delete, the right to correct, and the right to opt out of sale or sharing. The Company does not sell personal information and does not "share" personal information for cross-context behavioral advertising.

To submit a CCPA / CPRA request, email [email protected] with the subject line "California Privacy Request."

11. Changes to This Policy

We may update this Policy from time to time. Material changes will be reflected by a new "Last updated" date and, where appropriate, a notice on the Service.

12. Contact

Questions, requests, or complaints can be sent to: