Privacy Policy

What we collect

• Email address — only if you create an account. Used for authentication and occasional product updates.
• Query text, selected database(s), and timestamp — to enforce per-user rate limits and to improve retrieval quality over time.
• Supabase JWT — issued at sign-in, stored in your browser, sent as an Authorization header to prove who you are.
• Browser fingerprint— a random ID generated in your browser, used to enforce rate limits when you are not signed in (so anonymous users can't bypass the 2-per-7-days cap by clearing cookies).
• Aggregate pageviews — via Cloudflare Web Analytics. No cookies, no third-party tracking. We see how many people visited which page; we do not see who you are.
• Server access logs — IP, User-Agent, viewport, path, status. Standard web-server stuff. Used for debugging and abuse detection.

Why we collect it

• Authentication and account state (email + JWT).
• Rate limiting and abuse prevention (query log + fingerprint).
• Product improvement (anonymous-aggregate query patterns).
• Optional usage analytics for the operator (Cloudflare Web Analytics, server logs).

Who we share with

Nobody, with one important exception below. We do not sell, rent, or trade your data. There are no third-party advertisers on this site.

DeepSeek processing note (important). Your query text is sent to DeepSeek, an LLM provider, so the system can synthesize a written answer. DeepSeek runs on PRC-jurisdictioned infrastructure and their terms allow them to use inputs for model improvement unless you are on their enterprise tier. We are not on enterprise tier.

Do not include confidential research, unpublished data, or proprietary hypotheses in your queries. For public-literature questions this is low risk. For anything sensitive, treat AtlasBio the same way you would treat any external LLM.