Legal
Privacy Policy
Effective date: April 11, 2026
Cytomaton (“we,” “us,” or “our”) operates the website at cytomaton.ai and the Cytomaton web application (collectively, the “Service”). This Privacy Policy explains what information we collect, how we use it, and what choices you have.
1. What We Collect
Account information
When you create an account or join our waitlist, we collect your email address and any display name you provide. If you sign up through a third-party authentication provider, we receive the profile information that provider shares (typically name and email).
Flow cytometry data
When you use the Service, you upload FCS files and create gating analyses. These files and analyses are stored in your account and are not shared with other users unless you explicitly choose to share them.
Usage data
We automatically collect information about how you interact with the Service, including pages visited, features used, session duration, browser type, operating system, and device information. This data is collected through our product analytics service and our traffic analytics service.
Error data
Our error monitoring service automatically captures technical errors that occur during your use of the Service. Error reports may include browser environment information, the action that triggered the error, and stack traces. Error reports do not include your flow cytometry data.
AI interaction data
When you use AI-assisted features (gating suggestions, the AI chat assistant), your prompts and the context needed to generate responses are processed by our AI service providers. AI gating uses a per-user model trained only on your own gate history — no cross-user data is used.
2. How We Use Your Data
- Provide, maintain, and improve the Service
- Process and store your flow cytometry analyses
- Train per-user AI gating models on your own data
- Send transactional emails (account verification, password reset)
- Monitor and fix technical errors
- Understand aggregate usage patterns to improve the product
- Respond to your support requests
- Comply with legal obligations
We do not sell your personal information. We do not use your flow cytometry data to train shared AI models or for any purpose other than providing the Service to you.
3. Third-Party Service Providers
We use the following categories of third-party service providers to operate the Service. These providers process data on our behalf and are contractually obligated to protect it:
- Database and authentication service — stores your account information, flow cytometry data, and gating analyses. Data is encrypted at rest and in transit.
- Product analytics service — collects anonymized usage data to help us understand how features are used and where to improve.
- Traffic analytics service — collects anonymized website traffic data including page views, referral sources, and geographic region.
- Error monitoring service — captures technical error reports to help us identify and fix bugs.
- AI service providers — process AI chat and gating requests. Our AI providers do not use API inputs or outputs to train their models per their API terms of service.
- Hosting and content delivery services — serve the application and marketing site.
- Email delivery service — sends transactional emails (verification, password reset).
4. Data Storage and Security
Your data is stored on servers located in the United States. We use industry-standard security measures including:
- Encryption at rest for all stored data
- TLS 1.2+ encryption for all data in transit
- Row-level security policies ensuring users can only access their own data
- AES-256-GCM encryption for stored API keys
- Rate limiting on all API endpoints
- Automated database backups
No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
5. Data Retention
We retain your account information and flow cytometry data for as long as your account is active. If you delete your account, we will delete your personal information and flow cytometry data within 30 days, except where retention is required by law.
Usage analytics and error monitoring data are retained in aggregate form and are not linked to your account after deletion.
6. Cookies and Similar Technologies
We use cookies and similar technologies for the following purposes:
- Essential cookies — required for authentication and core application functionality.
- Analytics cookies — help us understand usage patterns. You can opt out of analytics tracking through your browser's Do Not Track setting.
We do not use advertising cookies or retargeting pixels.
7. Your Rights
Depending on your location, you may have the right to:
- Access the personal information we hold about you
- Correct inaccurate personal information
- Delete your personal information and account
- Export your data in a portable format (FCS files, CSV exports)
- Object to or restrict certain processing activities
- Withdraw consent where processing is based on consent
To exercise any of these rights, contact us at hello@cytomaton.ai. We will respond within 30 days.
8. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to know — you may request the categories and specific pieces of personal information we have collected about you.
- Right to delete — you may request deletion of your personal information.
- Right to non-discrimination — we will not discriminate against you for exercising your privacy rights.
- Right to opt-out of sale — we do not sell personal information.
To make a verifiable consumer request, contact us at hello@cytomaton.ai.
9. Children’s Privacy
The Service is not directed to children under 16. We do not knowingly collect personal information from children under 16. If we learn that we have collected personal information from a child under 16, we will delete it promptly. If you believe we have collected information from a child under 16, please contact us at hello@cytomaton.ai.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the effective date. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.
11. Contact Us
If you have questions about this Privacy Policy or our data practices, contact us at:
Cytomaton, LLC — Wyoming, United States