Privacy Policy
Last updated: 3 August 2026
Draft — not a binding agreement
This page is placeholder scaffolding published so the product's consent flow can be built and tested. It has not been drafted or reviewed by counsel and does not represent EpistaBase's actual terms. For any question about how we handle your data today, email info@epistabase.com.
What this page will cover
The published version of this policy will set out, in plain language, the commitments below. Each heading is a placeholder for text that counsel has not yet drafted.
Data we collect
Account details you give us, the research data you upload, and technical telemetry generated when you use the product. The final policy will distinguish these clearly, because they are governed very differently.
Research and patient-derived data
Data you upload belongs to you. Where a dataset contains protected health information, its handling is governed by a Business Associate Agreement, and access is restricted by the platform's own controls. The final policy will state our obligations here precisely.
How we use data
To operate the service, support you, and improve reliability. The final policy will state the lawful basis for each use and will be explicit about what we do not do with your research data.
Subprocessors and storage locations
We rely on infrastructure providers to run the service. The final policy will name them and say where data is stored and processed.
Retention and deletion
How long we keep data, what happens when you close an account, and how to request deletion.
Your rights
How to access, correct, export, or delete your personal data, and how to contact us to do so.
Cookies and analytics
This site uses Google Analytics, loaded only after you accept analytics cookies in the banner. Declining leaves analytics off. The final policy will list each cookie and its purpose.
Security and breach notification
The safeguards protecting your data and our commitments if they fail.
Contact
Questions about privacy: info@epistabase.com.