Data handling
What happens to the file you upload, on one screen. Each answer links to it in full in the privacy notice.
What leaves your machine
The file you choose to upload, and nothing else. It travels over an encrypted connection, unencrypted connections are refused, and is stored encrypted at rest in our own Amazon Web Services account. Your upload is deleted 7 days after it arrives and your results 30 days after the run, and the results hold copies of your expression data, not only summaries. You can delete either yourself, at once: see How long we keep it.
What happens to it
Your file is analysed by our own pipeline, on machines we rent from Amazon Web Services inside our own account; every analysis you tick runs there without a language model. Only three steps call one. Each of the three is switched on by a choice you make: press the detect button, tick "Interpret results", or bring your own cell-type labels. Leave them and no call is made. They send column names, a few example values from them, your label names, statistics the run computed and text you typed, never your expression matrix, to a model on Amazon Bedrock inside our own account, and your data is never used to train our models: see Where your data goes: the language-model steps.
Who can see it
Access to stored uploads and results is limited to the service itself and to one administrator. Every access is recorded. If your run fails we may open your file inside that account to see why; that access is logged and we tell you by email. We never copy your file to any machine outside the account. See Who at VarnaOps can reach your data.
Who else is involved
Everything that touches your files runs inside our own Amazon Web Services account; Stripe, who take payment, never see a file. Amazon Web Services runs the storage (Amazon S3), the compute (AWS Batch), the email (Amazon SES), the sign-in (Amazon Cognito) and this site (Amazon CloudFront); Amazon Web Services (Amazon Bedrock) serves the language model; Stripe takes payment. Nobody else. See Who else sees your data.
Your rights and the contract
The contract for your file is the data processing agreement, and you accept it by ticking the box when you sign in. You can delete a run, or your whole account and everything in it, yourself from the site. Other questions go to support@varnaops.com. Read the Data Processing Agreement.