Privacy Policy
Last updated: October 21, 2026
Who we are
GeneOps is operated by GeneOps Inc., a Delaware corporation in the United States. For privacy inquiries, contact us at ops@geneops.ai.
What data we collect
Account data
Your email address and optional display name. No passwords — we use magic link authentication.
Genetic data Special category
If you upload a genome file, we process it to identify specific genetic variants relevant to health. Your raw genome file (containing hundreds of thousands of data points) is classified as special category data under GDPR Article 9 — the most sensitive classification. We match your data against approximately 1228 health-relevant variants in our database.
Health profiles
Computed summaries and recommendations based on your matched genotypes, organized by health category.
Payment data
If you pay, we store a Stripe customer ID and payment timestamp. We never see or store your card number — that is handled entirely by Stripe.
Cookies and visit measurement
An encrypted cookie keeps you logged in. On public pages we measure how visits arrive and how the pages are used, with our own cookies and on our own servers; see Marketing & analytics and Cookies. We set no third-party cookies.
How we use your data
| Purpose | Data | Legal basis |
|---|---|---|
| Personalized genetic insights | Genetic data, health profiles | Explicit consent (Art. 9(2)(a)) |
| Account management | Email, display name | Contract (Art. 6(1)(b)) |
| Login links | Contract (Art. 6(1)(b)) | |
| Payment processing | Stripe customer ID | Contract (Art. 6(1)(b)) |
| Offspring analysis | Both connected users' genotypes | Explicit consent from both |
| The AI agent's answers | Your messages, health profile, and the genotypes and documents the agent reads | Explicit consent (Art. 9(2)(a); for the transfer outside the EU, Art. 49(1)(a)) |
| Checking where we may offer our services (Where we can't offer our services) | The country of your internet address, the country of residence you tell us, your card's issuing country | Legitimate interest (Art. 6(1)(f)): complying with the US and national laws that bind us |
| Screening payers against US government lists | The name on your card, your card's and billing address's country | Legitimate interest (Art. 6(1)(f)): complying with US sanctions law |
| Ad and landing-page measurement | Page requests, ad click identifiers, how public pages are used, a keyed hash of your email for 30 days | Legitimate interest (Art. 6(1)(f)) |
Your genetic data
- We never sell or rent your genetic data, and we share it with no third party except to answer you when you use the AI agent, as described in The AI agent.
- Your genome data is stored and processed on our own servers in the EU. The one exception is the AI agent: when you use it, your messages and the genetic data the agent looks up are sent to the AI provider shown under the chat input, through OpenRouter (USA), as described in The AI agent.
- You can delete all your genetic data at any time from your account page. Deletion is immediate and permanent.
- We delete your raw genome file after processing unless you tick the box on the upload page asking us to keep it. If you do not tick it, the file is deleted as soon as processing finishes and only your matched genotypes (~1228 variants) are retained.
- If you do choose to keep your file, we store it encrypted and use it to re-check your genome against variants we add to our catalogue later, and for chromosome inheritance analysis. You can delete the stored file at any time from your account page without deleting the rest of your data.
- You can export all your data in machine-readable format (JSON/CSV) at any time.
The AI agent
- Every model here runs with zero data retention: the company that runs it keeps no copy of your messages or genome data after answering. Your data is never sent to a company based in or owned from China, Russia, Iran, North Korea, Cuba or Venezuela.
- When you send the agent a message, your message, your health profile, and the genotypes and documents the agent reads to answer you are sent through OpenRouter (USA), which routes each request to the company that runs the model you chose. OpenRouter chooses only among hosts that meet these rules.
- The title of a conversation and the document the agent saves for you are written by the smaller model of the same lab (the model you chose, when you chose that one), under the same rules.
- We do not use versions of a model quantized below the precision its maker publishes.
- The chat is optional. Nothing is sent until you send a message.
- The line directly under the chat input always names who receives your messages and genome data for the model you have selected.
Which companies run each model changes over time. When you are signed in, this section lists every model with its maker and hosts, and the line under the chat input names them for the model you have selected.
Marketing & analytics
We advertise on Google and measure, on our own servers, how visitors arrive and how our public pages are used, so we can improve the pages. No third party receives this measurement, and nothing is measured on any page that shows your account or genetic data, apart from the plan page and the page you return to after paying, described below.
Every visit
For every page request we record the page, the time, your browser's user agent, the referring page, any campaign parameters in the link, and a hash of your IP address made with a random key that is replaced every day and then discarded, so the hash cannot be turned back into the address. The hash is deleted after two days. If you arrive from one of our ads, we keep the ad click identifier in the link in a cookie for 90 days, so that a later sign-up or purchase can be counted for that ad.
Measured visits to public pages
A visit is measured in more detail only when all of these hold: you are in the United States but not in Washington or Nevada, your browser sends no Global Privacy Control or Do Not Track signal, you are not logged in when the visit starts, and you have not opted out. On a measured visit we set a random visitor ID in a cookie and record the visit: the page you arrived on, the referring page, the campaign, the ad and the search keyword it came from, and the kind of device and the size of the window. On the public pages we record how they are used: which sections you see and for how long, how far you scroll, when the pointer rests on a button and whether you click it, repeated clicks on one spot, and how long you stay. We may show different versions of a page to different visitors to compare them; the version is chosen from the visitor ID.
Replays
On a measured visit we may also record a replay of the home page, our ad landing pages and the login pages: what the page showed, pointer movement, scrolling and clicks, so we can watch how the page was used. Every form field is masked: what you type, including your email address, is never recorded, and the email address shown after you request a login link is masked too. Nothing is recorded on any page shown while you are logged in, or on the demo.
The upgrade page
If a measured visit continues after you log in, the plan page and the page you return to after paying record which plans you see, how far you scroll, how long you stay and whether you hover over or click a buy button. No replay is recorded there.
Linking a visit to your account
When you sign up or log in, the measured visits made in that browser are linked to your account. When you request a login link during a measured visit, we store a keyed hash of the email address you typed, never the address itself, so that a sign-up completed on another device (for example from your phone's email app) can be linked to the visit that started it. The hash is cleared after 30 days. If your visit is not measured, no hash of your email is stored.
Location
We look up your country and state from your IP address in a copy of a location database kept on our own servers, at the time of the request. Neither the IP address nor the state is stored. This lookup is wrong for some visitors, for example behind a VPN or on some mobile networks, so it reduces what we measure outside the regions above but cannot rule it out. This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.
- Replays are deleted after 90 days and detailed interaction events after 13 months. When you delete your account, your replays and interaction events are deleted at once.
- When you buy a plan after clicking one of our Google ads, we tell Google the click identifier, the amount and the time, so Google can count the purchase for the ad. We do not send your email address, your activity on our pages or any genetic information.
- Your genetic data is never shared with any advertising platform.
- To opt out, turn on Global Privacy Control or Do Not Track in your browser, or use Do not record my visits (also in the footer of every page), which stops measurement in that browser for a year and deletes the replay of your current visit.
Who we share data with
We use five external services. Only OpenRouter, and the AI provider it routes to, receives genetic data, and only when you use the AI agent.
| Service | Data shared | Purpose | Safeguard |
|---|---|---|---|
| Stripe | Email, payment info | Payment processing | EU-US Data Privacy Framework |
| SendGrid (Twilio) | Email address | Email delivery | EU-US Data Privacy Framework |
| US International Trade Administration (Consolidated Screening List) | When you pay: the name on your card | Checking payers against US government screening lists | No email address, no payment details and no genetic data is sent; a possible match is reviewed by a person |
| OpenRouter (USA) | Agent conversations, including the genome data the agent reads | Routing AI agent requests to model hosts | Your explicit consent (GDPR Art. 49(1)(a)); zero data retention; no host in a country of concern |
| Google (Google Ads) | When you buy a plan after clicking one of our Google ads: the click identifier Google added to that ad's link, the amount and the time | Ad campaign measurement | No email address, no page activity and no genetic data is sent |
International transfers
Your genetic data is stored in the EU. When you use the AI agent, your messages, your health profile and the genotypes and documents the agent reads are sent through OpenRouter (USA) to the company that runs the model you chose, named under the chat input, under zero data retention, and never to a company based in or owned from a country of concern (see The AI agent). The USA has no EU adequacy decision covering every one of these companies, and we have not yet signed standard contractual clauses with OpenRouter. We therefore send agent conversations outside the EU only on the basis of your explicit consent (GDPR Art. 49(1)(a)), which you give when you consent to the processing of your genetic data at upload and when you send a message after the line under the chat input has named who receives it. Without those safeguards your data may be less protected in the USA than in the EU; for example, US authorities may be able to require access to it. The agent is optional: if you do not use it, none of your data leaves our servers in the EU. Your email address is transmitted to SendGrid (US) for email delivery and to Stripe (US) for payment processing, both protected by the EU-US Data Privacy Framework. When a purchase follows a Google ad click, the click identifier, amount and time go to Google (US). Visit measurement and replays stay on our own servers.
Where we can't offer our services
GeneOps Inc. does not offer uploads, offspring analysis, purchases or the AI agent where US law prohibits it, or where a country's law prohibits selling genetic testing to its residents; the list and the reasons are on Countries we can't serve. To apply it we check:
- the country of your internet address at the time of each request; this site does not store the address;
- the country of residence you tell us at your first upload;
- the country your payment card was issued in, after you pay; a payment from a country we can't serve is refunded;
- the name of every payer, against US government screening lists; a possible match is reviewed by a person, and a confirmed match blocks the account.
If we can no longer serve you, your existing results stay readable, and you can download or delete your data at any time.
How long we keep your data
| Data | Retention |
|---|---|
| Raw genome file (not kept) | Deleted as soon as processing finishes — this is the default |
| Raw genome file (kept at your request) | Stored encrypted until you delete it or your account — no automatic expiry |
| Matched genotypes & health profiles | Until you delete your data or your account |
| Account data | Until you delete your account |
| Magic link tokens | Expire automatically after 15 minutes |
| Payment records | 7 years (legal accounting obligations) |
| Replays of visits to public pages | Deleted after 90 days, or at once when you delete your account |
| Detailed interaction events on public pages (sections seen, scrolling, clicks, time on page) | Deleted after 13 months, or at once when you delete your account |
| Keyed hash of the email typed into the login form | Cleared after 30 days |
| Records of page requests and of sign-ups, uploads and payments | No fixed expiry; used for our own sales reporting. The hash of your IP address in them is deleted after two days |
Your rights
Under GDPR, you have the following rights. We aim to respond within 30 days.
Access
View all your stored data on your account page.
Portability
Download all your data in JSON and CSV format from your account page.
Erasure
Delete your genetic data or your entire account at any time. Deletion is immediate and permanent.
Rectification
Upload a new genome file to replace your previous results.
Restriction
Request that we stop processing while a concern is resolved.
Complaint
File a complaint with your local data protection authority.
Security measures
- All data transmitted over HTTPS (TLS encryption in transit)
- No passwords to breach — magic link authentication only
- Server access restricted to SSH key authentication
- Visit measurement and replays on public pages only, stored on our own servers — never on pages showing your account or genetic data
- Our servers are located in the EU; AI agent conversations are processed by the providers named in The AI agent
Children
We do not knowingly collect data from persons under 16 years of age.
Changes to this policy
We update the date at the top when this policy changes. Material changes to how we process genetic data will be communicated directly to affected users.
Contact
- Privacy contact
- ops@geneops.ai
- Postal address
- GeneOps Inc., 251 Little Falls Drive, Wilmington, DE 19808, United States