Privacy Policy

Last updated: 2026-06-09

Information We Collect

We collect and process the following categories of information to operate the VigyanLLM service:

Account Data. When you register, we collect your name, email address, and authentication credentials. If you use Google OAuth, we receive the email address and profile information associated with your Google account. This data is used to identify you, manage your session, and provide customer support.

Sequence and Design Data. All primer, probe, and assay design inputs you submit — including nucleotide sequences, accession numbers, design parameters, and generated reports — are processed to produce your requested results. We store these inputs and outputs to enable history, repeat runs, and account management features. You should treat sequence data submitted to the service as confidential research material.

Payment Information. Payments and billing are handled entirely through Razorpay. When you purchase top-up credits or a subscription, Razorpay collects your payment card details directly. VigyanLLM receives only a payment identifier, order ID, and reconciliation metadata — never full card numbers, CVV codes, or banking passwords.

Usage Logs. Our servers automatically record technical information about each request, including IP address, browser user-agent string, timestamps, and the specific endpoints accessed. We use this data for operational monitoring, abuse prevention, and service improvement.

How We Use Information

Service Delivery. Account and sequence data are used to authenticate you, process design jobs, store results, and serve your history dashboard. Without this processing, the service cannot function.

Improvements. Aggregated, de-identified usage patterns help us understand feature adoption, detect performance bottlenecks, and prioritise development. We do not train models or build behavioural profiles on individual users.

Communication. We may send service-related emails — payment receipts, quota exhaustion warnings, and critical security notices. Promotional or marketing emails are sent only with your explicit consent.

Data Storage and Security

All data in transit is encrypted with TLS 1.2 or higher. Data at rest is stored in encrypted database volumes with AES-256 encryption. Access to production systems is restricted to authenticated personnel with role-based permissions and is logged for audit. We do not share, sell, or license your personal information or sequence data to third parties. VigyanLLM operates as a data processor for your account content; you retain full ownership of your sequence and design data.

Data Retention

We retain personal data only as long as necessary for the purposes described in this policy. Specific retention periods:

• Account Data. Duration of active account. Deleted within 30 days of account closure request.
• Sequence & Design Data. Duration of active account. Deleted on account closure.
• Payment Records. 7 years (Indian tax law compliance under the Income Tax Act, 1961).
• Server Usage Logs. 90 days, then automatically purged.
• Anonymous Usage Data. 7 days (rate-limiting counters for unauthenticated visitors).
• Consent Records. 365 days (demonstrating DPDP compliance).
• Audit Logs. 365 days, then automatically purged.

Aggregated statistics that cannot identify individual users may be kept indefinitely.

API Data Collection

When you use VigyanLLM's API endpoints, we collect the following data associated with each request:

• Sequence inputs — DNA/RNA sequences, accession numbers, and design parameters you submit.
• Analysis results — primer designs, BLAST hits, docking scores, and alignment outputs generated by our tools.
• Request metadata — timestamp, IP address (for abuse prevention), and browser user-agent string.
• Job identifiers — unique IDs used to track and retrieve your analysis results.

Sequence data submitted via API is processed in real time and stored only if you have an account and choose to save results. Anonymous API requests are not linked to personal identifiers.

Cookie Categories

We use the following categories of cookies:

• Necessary. Authentication (pf_token HttpOnly cookie), session management, CSRF protection. These are strictly necessary for the service to function and do not require consent.
• Analytics. Google Analytics 4 (property G-PB0XMF4GEH), delivered through Google Tag Manager with Consent Mode v2, and Microsoft Clarity session replay on some pages. Clarity loads only after you enable Analytics in our cookie banner. For EEA/UK/Switzerland visitors analytics storage stays denied until explicit consent; other regions start enabled until you decline.
• Marketing. Google Ads remarketing and conversion tracking. Loaded only after explicit consent.

DPDP Act 2023 Compliance

VigyanLLM complies with the Digital Personal Data Protection Act, 2023 (DPDP Act). For full details on your rights, data categories, and retention periods under the DPDP Act, see our DPDP Compliance page.

Data Protection Officer

For questions about this privacy policy, to exercise your data rights, or to file a complaint, contact our Data Protection Officer:

Data Protection Officer
VigyanLLM Private Limited
Email: contact@vigyanllm.in

Third-Party Services

VigyanLLM integrates with several third-party services necessary to deliver the platform:

Razorpay. Payment processing and subscription management. Razorpay is PCI-DSS Level 1 compliant. Refer to Razorpay's privacy policy for details on how they handle your payment data.

Google OAuth. Optional social login. Google shares only the email address and profile information you authorise during the OAuth consent screen.

NCBI APIs. Sequence lookup and BLAST operations are performed against public NCBI databases. When you query an accession number, that identifier is transmitted to NCBI servers per their usage policies. No personally identifiable information is included in these requests.

Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Access. Request a copy of the personal data we hold about you.

Correction. Request that we correct inaccurate or incomplete data.

Deletion. Request deletion of your account and associated data, subject to legal retention obligations.

Data Portability. Request a machine-readable export of your sequence designs and account metadata.

To exercise any of these rights, email contact@vigyanllm.in. We will respond within 30 days.

Contact

If you have questions about this privacy policy, wish to exercise your data rights, or need to report a data concern, please contact us at contact@vigyanllm.in.