TKOResearch ("we," "our," or "us") operates the Technical Analysis & Research Environment (TARE) platform available at tareops.com. This Privacy Policy explains how we collect, use, and protect your information when you use our Laboratory Information Management System (LIMS), Electronic Lab Notebook (ELN), Digital Lab Assistant, and related services (collectively, the "Services").

1. Information We Collect

1.1 Information You Provide to Us

Account Information: When you register for an account, we collect your name, email address, password, organization name, and role.
Billing Information: If you subscribe to our professional version, we collect billing details and payment information (processed securely through Stripe).
Research Data: We collect the laboratory data, experiments, SOPs, inventory items, and other scientific records you input, upload, or process through the Services.
Communications: We collect information when you contact us for support or communicate with us in any way.

1.2 Information Collected Automatically

Usage Data: We collect data about how you interact with our platform, such as features used, time spent on pages, and actions taken within the application.
Device and Connection Data: We collect information from your devices, such as IP addresses, browser types, operating systems, and device identifiers (including data from VECTOR and other connected IoT laboratory instruments).
Telemetry Data: We collect performance, error, and diagnostic data from our application and from connected laboratory instrumentation (via INTERLOCK and VECTOR).

2. How We Use Your Information

We use the collected information for various purposes, including:

To provide, maintain, and improve the Services.
To process transactions and manage your account.
To authenticate your identity and provide secure access (including SSO for Enterprise users).
To analyze and monitor usage patterns to enhance platform performance and security.
To communicate with you, including sending transactional emails (via Resend), updates, and support messages.
To power our AI-features, like the DEJA Copilot, to assist with your research tasks in a context-aware manner.
To comply with legal obligations, enforce our terms, and protect the rights and safety of our users and third parties.

3. Data Protection and Chain-of-Custody

Given that TARE is a high-assurance platform often used for handling sensitive materials and requiring stringent chain-of-custody compliance, we take data security extremely seriously.

Encryption: Data is encrypted in transit and at rest using industry-standard protocols.
Access Controls: We implement strict Role-Based Access Controls (RBAC) and audit logging to track who accesses and modifies data.
Data Isolation: Organization data is logically separated within our database schema, and specific resources like S3/R2 buckets are provisioned per organization to prevent cross-contamination.

4. Sharing of Information

We do not sell your personal information or research data. We may share information only in the following circumstances:

Service Providers: We share information with trusted third-party service providers (e.g., Vercel, Stripe, Resend, Cloudflare, OpenAI, Anthropic, ElevenLabs) who perform functions on our behalf. These partners are bound by confidentiality agreements.
AI and LLM Partners: To provide our Digital Lab Assistant capabilities, strict subsets of your context may be processed by LLM providers (e.g., ChatGPT, OpenRouter). We enforce data privacy agreements with these providers to ensure your proprietary research data is not used to train their foundational models.
Legal Requirements: We may disclose information if required to do so by law or in the good faith belief that such action is necessary to comply with legal obligations or protect our rights.
Business Transfers: In the event of a merger, acquisition, or sale of assets, user information may be transferred.

5. AI Processing and the DEJA Copilot

The Digital Lab Assistant (DEJA) uses AI to analyze your contextual data (e.g., inventory, experiments, SDS sheets). The data processed by our AI models is strictly used to provide insights, safety warnings, and assistance to your organization. It is kept isolated and is not used to train external public models.

6. Your Rights and Choices

Depending on your location, you may have rights to access, correct, delete, or restrict the processing of your personal data. You can manage your account settings within the platform or contact us to exercise these rights.

We use passwordless magic links for secure authentication. You can request account deletion, which will result in the anonymization or deletion of your personal data, subject to any legal retention requirements.

7. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

8. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Email: notification@tareops.com