Privacy Policy

1. Information We Collect

We collect only the information necessary to operate ReceptoCraft:

• Account data: Name, email address, institution (optional), password hash.
• Session data: Tool sessions, project files, and sequences you save to the Platform.
• Usage data: Login timestamps, last active time, audit log entries (action type, IP address).
• License data: License key assigned to your account and activation date.

2. How We Use Your Information

• To authenticate your account and control access to tool features.
• To store and retrieve your saved design sessions and R&D project files.
• To send account-related emails (verification, password reset, trial expiry notices).
• To administer license keys and detect account abuse.

We do not: sell your data, share it with third parties for marketing, use your sequences for AI training, or serve advertisements.

3. Data Storage

All data is stored on Hostinger-hosted infrastructure within the European Economic Area or the United States, depending on your server region selection. Data is encrypted in transit (HTTPS/TLS). Database passwords and sensitive fields are stored using industry-standard hashing (bcrypt).

4. Cookies

We use a single session cookie (RC_SESSION) to maintain your logged-in state. This cookie is HTTP-only, secure, and not used for tracking or advertising. No third-party tracking cookies are set.

5. Third-Party APIs

ReceptoCraft makes client-side requests to the following external APIs when you use specific features:

• CrossRef API (api.crossref.org) — For literature search. Your search keywords are sent to CrossRef. No account data is shared.
• UniProt REST API (rest.uniprot.org) — For protein sequence lookup. Your query terms are sent to UniProt. No account data is shared.
• Google Fonts — Font files are loaded from fonts.googleapis.com. Standard Google CDN privacy policy applies.

6. Data Retention

Your account and saved data are retained as long as your account is active. You may request deletion of your account and all associated data by emailing privacy@chordexbio.com. We will process deletion requests within 30 days.

7. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, or delete your personal data; object to processing; or request data portability. Contact privacy@chordexbio.com to exercise these rights.

8. Changes to This Policy

We may update this Privacy Policy. Material changes will be communicated by email to registered users. Continued use of the Platform constitutes acceptance of the updated policy.

9. Contact

Privacy inquiries: privacy@chordexbio.com