Privacy Policy | Chemistry42

Insilico Medicine

Privacy Policy

Effective Date: Jun 17, 2024

InSilico Medicine and its affiliates ("us", "we", or "our") operate the Chemistry42 website. We want you to be familiar with how we collect, use, and disclose information, including personal information. This Privacy Policy describes our practices in connection with your access to chemistry42.com ("Website"). This Privacy Policy applies to information that we collect on the Website, through fillable forms, information entry, email, text, or other electronic messages or information exchange between you and the Website (collectively, the "Service").

This page informs you of our policies regarding the collection, use, and disclosure of Personal Data when you use our Service and the choices you have associated with that data.

We use your data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

This Privacy Policy describes:

Information that we collect and how we collect it;
How we use the information that we collect;
Our use of analytics and marketing;
How we may share or disclose information with third parties;
How to access and correct your information;
How we store and protect information;
How we respond to do not track signals;
Your European Union Data Protection Rights under the General Data Protection Regulation (GDPR), if you are a resident of the European Union;
Links to other sites;
Prohibited use of the Service by children;
Changes to the Privacy Policy; and
How to contact us about this Privacy Policy.

We collect several different types of information for various purposes to provide and improve our Service to you.

Where we need to collect Personal Data by law, or under the terms of a contract we have with you, and you fail to provide that data when requested, we may not be able to provide the Service or perform the contract we have or are trying to enter into with you.

While using our Service, we collect certain personally identifiable information that can be used (either alone or in combination with other information) to contact or identify you ("Personal Data"). We collect and use your Personal Data for the purposes set out below. The Personal Data we collect may be provided by you, for example, by entering information in forms on the Service, registering an account, subscribing to communications, searches on the Service, carrying out transactions using the Service, or reporting problems with the Service. If you contact us, we may also retain copies of your correspondence including any Personal Data therein.

Personal Data includes the following

Email address
First name and last name
Organization name
Usage Data (including data obtained from the use of cookies or similar technologies)
Location Data
Cookies Data

Usage Data

We may also collect information about how you use and access the Service (for example, the duration of a page visit and your browsing journey, including where you entered the Service from and where you go when you exit) ("Usage Data"). This Usage Data includes information such as your device's Internet Protocol address (i.e. IP address), browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

Google Analytics

We use Google Analytics, a web analytics service provided by Google LLC ("Google"), to collect, monitor, and analyze Usage Data. Google Analytics uses cookies or other tracking technologies to help us understand how users interact with and navigate our Service, compile reports on website activity, and provide other services relating to website activity and internet usage. The information generated by Google Analytics cookies about your use of the Service (including your IP address) may be transmitted to and stored by Google on servers outside your country of residence. Google may also transfer this information to third parties where required to do so by law or where such third parties process the information on Google's behalf.
By using our Service, you consent to the processing of data about you by Google in the manner and for the purposes set out in Google's Privacy Policy. You can learn more about how Google collects and processes data by visiting the following link: https://policies.google.com/privacy.
You can opt-out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on. The add-on prevents Google Analytics from sharing information with Google Analytics about visits activity.

Location Data

We may use and store information about your location if you give us permission to do so ("Location Data") by setting your device to allow for location tracking/data or by opting in to browser prompt that asks for location tracking. We use this data to provide features of our Service, to improve and customize our Service, such as:

Content that is available to your specific location; and
Marketing our services or products for your specific location.

You can enable or disable location services when you use our Service at any time, through your device settings.

Tracking Cookies Data

We use cookies and similar tracking technologies, including those provided by Google Analytics, to track the activity on our Service and hold certain information ("Cookies Data"). We use cookies to enable certain functions of the Service, including to provide data analytics on your use of the Service, to store your preferences, and to enable marketing, including targeted marketing of the Service. For more information regarding the Cookies Data, please see our Cookies Policy.
You can instruct your browser to refuse all cookies or to indicate when a cookie is being set. However, if you do not accept cookies, you may be unable to use some portions of our Service. Please see our Cookies Policy for further information.

Payment Processing

We use Stripe, a third-party payment processor, to handle payments for the Subscription and Service(s). Stripe collects, uses, and processes your payment information in accordance with its own privacy policy. You can review Stripe’s privacy policy here.

When you make a payment, the following information is collected and securely stored by Stripe:

Contact information (name, email)
Payment method details (such as credit card number and billing address)
Transaction details (amount, date, currency)

We do not store your complete payment method information on our servers. However, we do keep a record of your transactions for account management and compliance purposes.

By making a payment for the Subscription and/or Service, you agree to Stripe’s terms and conditions and privacy policy.

We do not make any representation or warranties for, or in any event, be responsible or liable for, Stripe or any services provided by Stripe.

We may share your Personal Data with the parties, or in the circumstances, set out below. We require third parties to respect the security of your Personal Data and to treat it in accordance with the law. We do not allow our third-party Service Providers to use your Personal Data for their own purposes and only permit them to process your Personal Data for specified purposes and in accordance with our instructions in furtherance of performance of the Service. We may further disclose Personal Data as described below and in this Privacy Policy:

To our subsidiaries and affiliates: We may share information collected through the Service with other companies affiliated with Insilico Medicine. These affiliates are permitted to use your information for their own marketing purposes and in a manner otherwise consistent with this Privacy Policy.
Service Providers: We may employ third-party companies and individuals to facilitate our Service, to provide the Service on our behalf, to perform Service-related activities or to assist us in analyzing how our Service is used. These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
Business Transaction: If we are involved in a merger, acquisition or asset sale, your Personal Data may be transferred to another third party. If a change happens to our business, then the new owners may use your Personal Data in the same way as set out in this Privacy Policy.
Disclosure for Law Enforcement: Under certain circumstances, we may be required to disclose your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court, a government agency, or law enforcement organization).
Legal Requirements: We may disclose your Personal Data to such third parties where such action is necessary to: comply with a legal obligation, protect and defend our rights or property, prevent or investigate possible wrongdoing in connection with the Service, protect the personal safety of users of the Service or the public, or protect against legal liability.
Professional Advisors: We will share your Personal Data with our professional advisors, including legal advisors and insurers, where this is necessary for the advice they provide. These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
Marketing Partners: We may share your information with our marketing partners that assist in marketing products and services for Insilico Medicine. Please see "Marketing" above.
Others: We may disclose your Personal Data to fulfill the purpose for which you provide it, for any other purpose disclosed by us when you provide the information, or with your consent.

The security of your data is important to us, but no method of transmission over the internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

Your information, including Personal Data, may be transferred to — and stored on — computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ to those in your local jurisdiction.

Data are stored and processed in Seoul for SaaS subscriptions hosted at cloud.chemistry42.com and in Ireland for subscriptions hosted at lab.chemistry42.com.

Subject to applicable law, your consent to this Privacy Policy OR use of the Service and your submission of such information constitutes your agreement to the transfer of your information to the corresponding location.

InSilico Medicine will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy. No transfer of your Personal Data will take place to an organization or a country unless there are adequate controls in place in relation to the security of your data (including Personal Data).

InSilico Medicine retains your Personal Data for as long as needed or permitted in light of the purposes for which it was obtained, consistent with applicable law, such as during use or term of engagement with the Service. We will also retain and use your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

InSilico Medicine also retains Usage Data for internal analysis and statistical purposes. Usage Data is generally retained for a shorter period of time than other Personal Data, except when such data is used to strengthen the security of the Service or to improve the functionality of our Service, or we are legally obligated to retain such data for longer time periods.

To determine the appropriate retention period for Personal Data, we consider the amount, nature and sensitivity of the Personal Data, the potential risk of harm from unauthorized use or disclosure of your Personal Data, the purposes for which we process your Personal Data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.

For users located in the European Economic Area ("EEA"), and to the extent applicable, InSilico Medicine is the data controller and is responsible for the Personal Data of EEA users of the Service.

If you are located in the EEA, our legal basis for collecting and using your Personal Data, as described in this Privacy Policy, depends on the Personal Data we collect and the specific context in which we collect it.

Generally, We processes your Personal Data on the basis of one or more of the following legal grounds:

We need to perform a contract with you;
You have given us permission to do so;
The processing is in our legitimate interests and it's not overridden by your rights. Such "legitimate interests" include:
- to study how customers use the Service,

to develop the Service and grow our business,
to manage our business, including the provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganization or group restructuring exercise,
to inform our marketing and advertising strategy; or

To comply with our legal and regulatory obligations.
We may process your Personal Data for more than one lawful ground depending on the specific purpose for which we are using your data. Please contact us if you need details about the specific legal ground we are relying on to process your Personal Data.

If you are located in the EEA, and subject to national or local law exemptions, you have certain data protection rights in certain circumstances. Please contact us if you would like to exercise any of these rights.

Right to withdraw consent at any time: This applies where we are relying on consent to process your Personal Data.
Access: This enables you to receive a copy of the Personal Data we hold about you and to check that it is accurate and that we are processing it lawfully.
Object: This enables you to object to processing of your Personal Data where we are relying on a legitimate interest and there is an impact on your fundamental rights and freedoms. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override certain of your rights and freedoms. You also have the right to object where we are processing your Personal Data for direct marketing purposes.
Correction: This enables you to have any incomplete or inaccurate Personal Data we hold about you corrected, though we may need to verify the accuracy of the new Personal Data you provide to us.
Erasure: This enables you to ask us to delete or remove Personal Data where there is no good reason for us continuing to process it. Note, however, that we may not always be able to comply with your request for erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
Portability: This enables you to request the transfer of your Personal Data to you or to a third party. We will provide to you, or a third party you have chosen, your Personal Data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
Restriction: This enables you to ask us to suspend the processing of your Personal Data in the following circumstances: (a) if you want us to establish the information's accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the Personal Data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your Personal Data but we need to verify whether we have overriding legitimate grounds to use it.

Please note that we may ask you to verify your identity before responding to such requests.

You have the right to complain to the relevant EU Data Protection Authority about our collection and use of your Personal Data at any time. However, we would appreciate the opportunity to address your complaint in the first instance.