Privacy Policy

This privacy policy governs your use of the software-as-a-service application Gencove (the "Service") created for the web by Gencove, Inc. The Service permits a user thereof to provide genome sequencing data for analysis by Gencove.

Gencove ("we" or "us") values the privacy of the Service's users, and we are always striving to improve our user experience. We prepared this Privacy Policy to describe our information practices and, in particular, how we collect, use and share the Personal Information that we gather through the Service.

By using the Service, you are consenting to our use of your information as set forth in this privacy policy, now and as may be amended by us. If you reside outside the United States or use the Service while traveling outside the United States, please note that your information will be transferred, processed and stored in the United States under United States privacy standards, which may be less protective of your privacy than laws of your own country.

BY USING THE SERVICE, YOU CONSENT TO THE INFORMATION PRACTICES AND OTHER TERMS AS DESCRIBED IN THIS PRIVACY POLICY.

How We Collect and Use User Information

We collect Personal Information through the Service. We define the term "Personal Information" to mean any information that we directly associate with a specific person, or that reasonably can be used to identify a specific person. For example, this includes your name, email address, and any other information that we tie to these elements.

We may either collect information when you choose to provide it to us or automatically through your use of the Service.

Information You Provide: We collect Personal Information you provide, for example when you enter the information into form fields in the Service. The following describes the types of information you may provide to us.

• Your name, email address and password when you register and log in to the Service. We will store this information to remember your preferences and enable you to reenter the Service in the future. We may also use your email to promote the use of our services to you. For example, if you provide your email when you join Gencove but do not use any of its features, we may send you an email inviting you to try a feature. You can stop receiving our promotional emails by following the unsubscribe instructions included in every promotional email we send.
• Any other information you choose to provide, including information you send to our customer support team. We will use this information to administer the Service, respond to your inquiries and requests, and improve the Service.

Information Collected by Customers. A Customer or User may store or upload Customer Data into the Service. Gencove has no direct relationship with the individuals whose Personal Data it hosts as part of Customer Data. Each Customer is responsible for providing notice to its customers and third persons concerning the purpose for which Customer collects their Personal Data and how this Personal Data is processed in or through the Service as part of Customer Data.

Information Collected Automatically: We use various technologies to collect other types of data that do not directly reveal your identity ("Other Information"). If we associate Other Information with Personal Information, we will treat the combined information as Personal Information in accordance with this Privacy Policy.

As is true of most Services, we gather certain information automatically and store it in log files. This information may include IP addresses, device type, internet service provider, operating system, date/time stamp and/or clickstream data. We generally only use this data for purposes such as security, fraud detection, and protecting our rights. We may also use the information for analytics purposes to help us monitor the performance of the site and ensure that users do not experience problems with access or functionality. The Service does not gather information about the location of your device.

Additional Uses of Personal Information: In addition to the uses described above, we may use your Personal Information for the following purposes:

• Operating our organization, delivering services provided and managing your account;
• Processing and completing your transactions including, as applicable, billing and order confirmations;
• Evaluating your experience in order to improve or create new products or services;
• Preventing, investigating, or providing notice of fraud, unlawful or criminal activity, or unauthorized access to or use of Personal Information, our website or data systems; or to meet legal obligations;
• Enforcing our Terms and Conditions and other agreements; and,
• Any other lawful purpose for which you have consented.

How We Disclose User Information

As a general rule, we will not share information provided by you or automatically collected by the Service with third parties. Additionally, we do not share personal data with non-agent third parties. If, however, that practice should change in the future we will update this policy and provide individuals with opt out consent. However, we will disclose your Personal Information in the following limited circumstances.

Service Providers: We also may give trusted service providers access to the Service, and by extension to your information, in order to obtain technical services or support, such as our payment processor or hosting services. These service providers will be bound by the obligation of confidentiality set forth in our agreements and this privacy policy.

Consent: We will disclose your Personal Information when you have provided consent.

Legal Process, Safety and Terms Enforcement: We will disclose your Personal Information as required by law (such as to comply with a subpoena or similar legal process), or if we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

Business Transfers: Your Personal Information may be disclosed as part of a corporate reorganization and could be transferred to a third party as one of the business assets in such a transaction. It may also be disclosed in the event of insolvency, bankruptcy or receivership. You will be notified via email and/or a prominent notice of any change in ownership or uses of Personal Information, as well as any choices you may have regarding Personal Information about you.

Security Measures

Gencove takes seriously the trust you place in us. To prevent unauthorized access or disclosure, to maintain data accuracy, and to ensure the appropriate use of information, we use a range of physical, technical, and administrative measures to safeguard your Personal Information. In particular, all connections to and from our website and mobile application are encrypted using Secure Socket Layer (SSL) technology.

Please recognize that protecting your Personal Information is also your responsibility. We ask you to be responsible for safeguarding your password, secret questions and answers, and other authentication information you use to access our Services. You should not disclose your authentication information to any third-party and should immediately notify Gencove of any unauthorized use of your password. Gencove cannot secure Personal Information that you release on your own or that you request us to release.

How to Access and Update Your Information

We acknowledge the EU and Swiss individual's right to access their personal data. You may review your Personal Information through the Service.

You may contact us at support@gencove.com to request that we delete your data and we will respond in a reasonable time.

Children's Privacy

We do not knowingly collect, solicit data from or market to children under the age of 18. If a parent or guardian becomes aware that his or her child has provided us with information without their consent, he or she may contact us at support@gencove.com and we will delete the information in a reasonable time.

Data Privacy Framework Program

Gencove complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. Gencove has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. Gencove has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/.

In compliance with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF), Gencove commits to resolve complaints about our collection or use of your personal information transferred to the U.S. pursuant to the EU-U.S. DPF, the UK extension to the EU-U.S. DPF, and the Swiss-U.S. DPF. EU, UK, and Swiss individuals with inquiries or complaints should first contact Gencove at privacy@gencove.com.

Gencove has further committed to refer unresolved DPF Principles-related complaints to a U.S.-based independent dispute resolution mechanism, BBB NATIONAL PROGRAMS. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, please visit www.bbbprograms.org/dpf-complaints for more information and to file a complaint. This service is provided free of charge to you.

If your DPF complaint cannot be resolved through the above channels, under certain conditions, you may invoke binding arbitration for some residual claims not resolved by other redress mechanisms. See https://www.dataprivacyframework.gov/s/article/ANNEX-I-introduction-dpf.

Updates to the Privacy Policy

This privacy policy may be updated from time to time for any reason. You are advised to consult the effective date above to determine if any changes have been made since your last review, as continued use is deemed approval of all changes. If we make any material changes in the way we use your Personal Information, we will notify you by sending you an e-mail to the last e-mail address you provided to us or by prominently posting notice of the changes on the Service.