1. What We Collect
When you run an analysis, the following data is processed:
- Gene symbols and disease context you enter into the analysis form — used solely to query biological databases and generate your results. These inputs are not logged to a persistent database.
- Standard server logs (IP address, browser type, request timestamp) — retained for up to 30 days for operational monitoring, then deleted.
- Locally stored analysis data — your browser's localStorage may retain your last analysis result and trust scoreboard metrics. This data never leaves your browser unless you explicitly share a snapshot.
2. Saved Snapshots
If you use the "Save Analysis" or snapshot feature, the analysis output (gene panel, disease context, results, and scoring metadata) is stored server-side and assigned a UUID. This snapshot is accessible to anyone with the UUID link. Do not include personally identifiable patient data in analysis inputs.
3. What We Do Not Collect
- We do not require account registration or email addresses for standard analysis.
- We do not use third-party advertising trackers or analytics that profile individual users.
- We do not sell, rent, or share your data with third parties for commercial purposes.
- We do not process protected health information (PHI). GaiaLab is a research tool — do not enter patient-identifiable data.
4. Third-Party Database Queries
During analysis, GaiaLab queries 35+ external biological databases (PubMed, ChEMBL, OpenTargets, BioGRID, ClinicalTrials.gov, etc.) on your behalf. Your gene symbols and disease context are transmitted to these APIs as part of database queries. Each database has its own terms of use and privacy policy. GaiaLab uses only publicly available APIs.
5. AI Model Providers
AI synthesis is performed via API calls to one or more of: DeepSeek, OpenAI, Google, Anthropic. Your gene panel and disease context are included in prompts sent to these services. Please review the respective provider privacy policies if you have concerns about data handling by these services.
6. Cookies
GaiaLab uses localStorage (not cookies) to store your dark mode preference and the most recent analysis summary for the Signal Credibility Metrics panel. No cross-site tracking cookies are set.
7. Research Use Only
GaiaLab is a research tool. All outputs require expert validation before clinical or therapeutic application. Do not enter patient-identifiable information. GaiaLab is not a covered entity under HIPAA and is not intended for use with protected health information.
8. Data Retention
- Server request logs: 30 days
- Saved analysis snapshots: retained until deleted by the platform or on request
- localStorage data: browser-controlled; cleared when you clear browser data
9. Contact
For privacy questions or data deletion requests: partnerships@gailabai.com
GaiaLab · Houston, TX