Privacy Policy

What Data We Collect

• —
  Email address: Used for authentication (magic link login) and account identification. No passwords are stored.
• —
  Construct data: Plasmid designs you create — sequences, features, annotations, primers, and metadata — are stored so you can access them across sessions.
• —
  AI chat history: Messages sent to the AI assistant during your session are used to provide contextual responses. Chat content is not persisted on our servers after your session ends.
• —
  Usage analytics: We collect usage data linked to a pseudonymous account ID and your email domain (not your full email) to understand how the product is used and improve it. See the Analytics section below for details.
• —
  Billing information: If you subscribe, payment is processed by Stripe. We store your subscription status, plan, checkout session references, and billing event history (for example, subscription started, renewed, or cancelled). We never receive or store your card number.
• —
  Upgrade and plan interactions: When the app shows you information about paid plans or a usage limit, we record that it was shown, which plan you were on, and how you responded (for example, “upgrade clicked” or “not yet”). These records are linked to your account and are used to decide how we price and package PlasmidStudio.

How We Use Your Data

• —
  Provide the Service: Store and retrieve your constructs, process AI design requests, manage your account.
• —
  Improve the product: Analyze usage patterns to prioritize features, fix bugs, and improve the user experience.
• —
  We do not sell your data. We do not sell, rent, or share your personal information or construct data with third parties for marketing or advertising purposes.

AI Data Processing

• —
  AI design requests are proxied through our server-side AI processing gateway and sent to AI providers (Anthropic and OpenAI).
• —
  Per their API terms of service, neither Anthropic nor OpenAI uses API data to train their models. Providers may temporarily retain requests for abuse monitoring and safety purposes.
• —
  Your browser never communicates directly with AI providers — all requests are routed through our API proxy.

Data Storage

• —
  Data is stored in a managed cloud database with encryption at rest (AES-256).
• —
  All data in transit is encrypted with TLS 1.3.
• —
  API keys (admin and user-provided) are encrypted with AES-256-GCM before storage.
• —
  For full details on our security practices, see our Security page.

Analytics

We use third-party services for the following purposes:

• —
  Product analytics — to understand feature usage and user flows. Users are identified by a pseudonymous account ID plus their email domain (not the full email) used to classify professional vs consumer user type for product analytics. Respects Do Not Track browser settings.
• —
  Traffic analytics — to understand how visitors find PlasmidStudio and measure marketing effectiveness.
• —
  Error tracking — to detect and fix bugs. Captures error context but not construct content.

For the current list of specific service providers we use (processor name, purpose, data handled, and their privacy policy), see our Subprocessors page.

Data Retention

• —
  Constructs: Stored indefinitely while your account is active. You can delete individual constructs at any time.
• —
  Usage logs: Detailed AI usage logs are retained while your account is active.
• —
  Billing records and upgrade/plan-interaction records: Kept while your account is active; deleted when your account is deleted. Stripe retains its own payment records under its legal obligations — see Stripe’s privacy policy and our Subprocessors page.

Your Rights

• —
  Export your data: You can export your constructs at any time in GenBank, FASTA, SnapGene, SBOL, or PDF format.
• —
  Request deletion: Email hello@plasmidstudio.ai to request complete deletion of your account and all associated data.

Cookies

PlasmidStudio uses cookies and similar technologies from our analytics and error-tracking service providers for product analytics, traffic measurement, and error tracking. Session cookies are used for authentication. We do not use cookies for advertising purposes beyond conversion tracking for our own marketing campaigns. See our Subprocessors page for the specific providers.

Children

PlasmidStudio is not designed for or directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us so we can delete it.