Privacy · Version 1.0
This notice applies to visitors, researchers, asset owners, opportunity seekers, institutional representatives, facility providers, administrators, and other users of InOutBio. InOutBio is responsible for the personal information it determines how and why to process. An institution may separately control information it enters or manages about its personnel; in that case, its own privacy notice also applies.
We collect information you choose to provide, including your name, work email, authentication details, optional telephone number and profile photograph, country, organization, role, laboratory, accomplishments, collaboration interests, asset-prefix preferences, asset and facility records, publication links, database identifiers, notes, booking information, expressions of interest, messages, consent choices, and support enquiries. Public asset fields should never contain confidential information or personal contact details.
When you use the service, we and our infrastructure providers may process device and browser information, IP address, authentication and session events, requested pages, timestamps, approximate location derived from network data, error and performance information, security signals, search activity, record views, workflow actions, and audit events. Where you enable analytics, asset and portfolio owners may receive aggregate unique-view counts. They are never given viewer names, contact details, IP addresses, or a viewer list. We use this information to deliver, protect, troubleshoot, and improve the platform—not to create advertising profiles.
We use personal information to create and secure accounts; confirm identity and role; operate scientific profiles, asset records, pipelines, facilities, search, review, notifications, and expressions of interest; provide support; prevent misuse; maintain auditability; enforce platform rules; comply with law; and improve reliability and user experience. We do not use uploaded scientific content to make medical, regulatory, investment, or licensing decisions on your behalf.
You control whether an asset is proposed for public visibility, but publication remains subject to InOutBio review. Public records may show approved scientific and opportunity information, an InOutBio reference number, the owner name or organization where selected, and shareable certificate or pipeline information. Contact details, private notes, draft records, internal review material, and controlled information are not made public through the asset record unless you deliberately place them in a public field. Search access and owner contact may be limited by account type, approval, and subscription status.
We share information only as needed to operate the service, honor your settings, or meet legal obligations. Recipients may include other users when you publish or share information; an asset owner or approved opportunity seeker when an expression of interest is made; your organization and authorized team members; infrastructure, authentication, storage, email, security, analytics, and support providers acting under contractual restrictions; professional advisers; and authorities or other parties where disclosure is legally required or necessary to protect rights, safety, and service integrity.
InOutBio uses cloud and technology providers, including Firebase and Google Cloud, that may process information in countries other than yours. Where applicable law requires safeguards for an international transfer, we use an approved transfer mechanism, contractual protection, or another lawful basis. Data location and transfer rules may also depend on the organization through which you use the service.
Essential cookies and browser storage support secure sign-in, session continuity, fraud prevention, load balancing, and remembering your privacy choice. Optional analytics or personalization technologies remain disabled until you choose them where consent is required. You can reject optional technologies without losing core access and can reopen Cookie preferences from the footer at any time. Blocking essential storage may prevent authentication or protected features from working.
To demonstrate and respect your privacy choice, we retain a pseudonymous consent identifier, selected categories, notice version, and server timestamps for up to six months. We do not intentionally add your email address, IP address, or a device fingerprint to that consent record. A new choice replaces the prior active preference, and you may change it at any time.
We keep information only for as long as it is reasonably needed for the purposes described here. Active account and profile data is generally kept while the account is open. Draft and published scientific records remain until deleted, withdrawn, or no longer required, subject to review history, legitimate dispute, security, contractual, backup, and legal-retention needs. Authentication, moderation, access, and audit records may be retained for a limited period after account deletion to protect the network and demonstrate compliance. Backup copies expire through normal rotation.
Depending on where you live, you may have rights to be informed; request access, correction, deletion, restriction, or portability; object to certain processing; withdraw consent; nominate another person where local law allows; and complain to a privacy regulator. California residents may also have rights to know, correct, delete, opt out of sale or sharing, limit certain sensitive-information uses, and receive equal service. InOutBio does not sell personal information or share it for cross-context behavioral advertising. Submit a request through Contact Us; we may verify identity and authority before acting, and lawful exceptions may apply.
We use layered technical and organizational safeguards appropriate to the service, including authenticated access, authorization controls, restricted administrative functions, encrypted transport, managed secrets, audit events, input validation, and review of public submissions. No online service can guarantee absolute security. If a personal-data incident creates a notification obligation, we will notify affected people and regulators as required by applicable law.
InOutBio is intended for adult professionals, researchers, and students who can form a binding agreement, and is not directed to children. Do not submit patient-level health information, human-subject records, government identifiers, payment-card information, export-controlled material, trade secrets, or other sensitive or regulated data unless InOutBio has expressly provided an approved controlled workflow and your organization has authorized the disclosure.
We may update this notice when the service, providers, or legal requirements change. We will post the revised version and effective date and provide additional notice where a material change requires it. Use the Contact Us form for privacy questions, rights requests, complaints, or to reach the person responsible for privacy. This draft should be reviewed against the final operating entity, data map, vendor contracts, and launch jurisdictions before commercial launch.