Privacy policy

This policy explains what personal data BioGein processes, why, and the choices you have. BioGein is provided by Geinforce Technology Private Limited ("Geinforce", "we", "us"), which is responsible for the personal data described here. We process personal data in line with the Digital Personal Data Protection Act, 2023 and other laws that apply to us.

Data we process

Your account

Your name, email address, mobile number, organisation and whether you are a student, a researcher or an organisation, a one-way hash of your password (we never store the password itself), the time of your last sign-in, your country if you give it, and whether you agreed to receive product news. We use your mobile number for your account and payment receipts, and to reach you about your account. To verify your email address and to reset passwords we email you short-lived one-time codes; only a one-way hash of each code is stored, and codes are deleted after two days.

Signing in with Google

If you choose "Continue with Google", Google confirms your identity and shares your name, email address and a stable account identifier with us. We use them only to create and sign in to your BioGein account; we do not receive your Google password or access any other Google data.

Sign-in sessions

When you sign in we create a session record that holds a hashed session token, the time it expires (30 days after sign-in), your IP address and your browser's user agent. Signing out deletes the session.

Your figures

The figures you create are saved to your account automatically while you edit: the figure content, its name, its canvas size and a small preview image. They stay in your account until you delete them.

What you give the design agent

When you use the design agent, your instructions, your answers to its questions, the current state of your figure, and the text or images of files you attach are processed to produce the figure.

Attached documents and images are stored on our server so the design agent can read them and place their original figures on your canvas (for PDF files the original file is kept so figures can be cut out at print resolution). They are linked to your account and can only be opened by you.

Plans, credits and payments

When you buy a plan or credit pack we keep a record of the order: the item, amount, currency, order ID, payment ID, payment status and time, and the mobile number you give for the payment receipt. We also keep a history of your credit balance (credits added, used for design-agent work, expired or refunded) and a count of your monthly exports.

Payments are processed by our payment partner, Cashfree Payments India Private Limited, a payment aggregator authorised by the Reserve Bank of India. Your card number, UPI ID, bank login and similar payment details are entered on the payment partner's secure checkout and are handled by them under their own privacy policy and the card network and RBI security rules. We never see or store your full card details.

Emails we send

We send emails that are needed to run your account: verification and password reset codes, a welcome email, payment receipts, low or used-up credit notices and a reminder before a plan period ends. Product news is sent only if you agreed to receive it, and you can opt out at any time.

Contact messages

If you use the contact form we store your name, email address, organisation (if given), the topic, your message and the IP address it was sent from.

Protection against automated abuse

The sign-in, sign-up, password reset and contact forms use Google reCAPTCHA to tell people from automated programs. When you open or submit one of these forms, your browser sends Google information about your device and how the page is used, such as your IP address and browser details, and Google returns a score that our server checks before it accepts the request. Google processes this information under the Google Privacy Policy and the Google Terms of Service. We keep a short note in our server logs only when a request is refused.

Data kept in your browser

The editor keeps a backup copy of your current figure, shapes the design agent created for you, and the positions of floating editor windows in your browser's local storage, so work is not lost if the connection drops. This data stays on your device.

Cookies

BioGein uses one cookie, bg_session, which keeps you signed in. It is strictly necessary for the service, is not readable by scripts, and expires after 30 days or when you sign out. On the sign-in, sign-up, password reset and contact pages, Google reCAPTCHA may also set its own cookie for the same security purpose (see Protection against automated abuse above). We do not use advertising or analytics cookies.

Why we process it

• To provide BioGein: signing you in, saving your figures and running the design agent on your request.
• To keep the service secure, for example limiting repeated sign-in attempts and investigating misuse.
• To process payments, add the credits you bought, send receipts and handle refunds.
• To answer your messages and support requests.
• To meet legal obligations.

We do not sell personal data and we do not use your figures, documents or instructions for advertising.

Service providers

BioGein runs on infrastructure operated for us by service providers, including hosting, email delivery, our payment partner and the computing services that power the design agent. Your instructions, figure state and attachments are sent to these services only to produce the result you asked for, under contractual obligations to protect the data and to use it only to provide the service to us. Some of these providers may process data outside India; where they do, we rely on the safeguards that the law requires.

How long we keep data

• Account data: while your account exists.
• Sessions: until you sign out or the session expires; expired sessions are deleted.
• Figures: until you delete them or your account is closed.
• Attached documents and images: while they are needed for your figures; figures you place are copied into the figure itself.
• Contact messages: as long as needed to deal with your request and any follow-up.
• Payment and invoice records: for as long as Indian tax and company law requires us to keep them (currently up to 8 years), even if you close your account.

Security

Passwords are stored only as salted scrypt hashes, session cookies are HttpOnly and limited to our site, figures are only accessible to the account that owns them, and requests from other websites that try to change your data are rejected.

Your rights

You can ask us for a summary of the personal data we hold about you, ask us to correct or complete it, and ask us to erase it. You can also withdraw consent where processing is based on consent, nominate another person to exercise your rights, and raise a grievance with us. You can delete individual figures yourself in the editor. For anything else, write to us through the contact page and choose "Privacy and data". If you are not satisfied with our response you may complain to the Data Protection Board of India.

Grievance officer

For complaints about how your personal data or your account is handled, you can write to our Grievance Officer at [email protected] with the subject "Grievance", or by post to the address below. We acknowledge grievances within 48 hours and aim to resolve them within 30 days.

Children

BioGein is intended for researchers and professionals and is not directed at children.

Changes to this policy

We will update this page when our practices change and revise the date at the top. Significant changes will be announced in the product.

Contact

Use the contact page for privacy questions and requests, or reach us at: