Privacy policy

Who we are

TargetID.ai is a research service where AI agents gather and check evidence about drug targets. For visitors in the EU and UK, we are the controller of the personal data described here.

This policy covers our website, the waitlist, and the TargetID.ai app. Questions go to privacy@targetid.ai.

What we collect

If you join the waitlist

Your name, work email, and company or institution.
Your role, the type of organization, and what you'd use the agents for, if you tell us.
Which page you joined from (for example, the home page or the security page).
Your IP address, used for a moment to stop repeated sign-ups. It is kept in memory only and never stored.

If you have an account

Your email address and a password, which we store only as a secure hash.
If you sign in with Google, the email address and name Google shares with us.
If you turn on two-factor authentication, its secret, stored encrypted.

What you put in your workspace

Projects, targets, your questions and the agents' replies, reports, comments, and reviews.
Files you upload and the files you export.

Keys

The AI provider keys you add. They are encrypted, and once saved we only ever show the last four characters.

Security records

An audit log of important actions (such as sign-ins, uploads, exports, and approvals): what happened, who did it, when, and from which IP address.

Optional activity logs

If your administrator turns on detailed activity logging, your questions and the agents' answers are logged too, with keys and file contents hidden. It is off by default.

Cookies and browser storage

One sign-in cookie that keeps you logged in, for up to 7 days.
Your light or dark theme choice and a few layout preferences, kept in your own browser.
No analytics, advertising, or tracking cookies. Our pages load only our own scripts.

How we use it

To run the service: sign you in, run the agents you ask for, and store and show your work.
To email you about your access and about the product, if you joined the waitlist.
To keep accounts and workspaces secure, for example with the audit log and limits on repeated attempts.
To find and fix problems.
We don't sell your data, we don't show ads, and we don't use your content to train AI models.

Only the services needed to do what you ask, and only what each one needs:

The AI providers you choose (Anthropic, OpenAI, Google, or a compatible service you set up). They receive your questions and the agents' work, under your own key and account, and their terms apply. Text from files you upload is only ever sent to Anthropic.
Web search (Tavily) receives the agents' search queries. Once an agent has read one of your files, it can no longer search the web.
Public research databases (such as PubMed and ChEMBL) receive the agents' queries, for example a gene or compound name. Not your personal details.
Our email provider receives your email address to send sign-in and access emails.
Google, only if you choose to sign in with Google.
Langfuse, only if your administrator turns on activity logging, as described above.

Your workspace data, uploaded files, and the waitlist are stored on our own servers. We disclose information to authorities only when the law requires it.

How long we keep it

Waitlist details: until you get access (they then become part of your account) or ask to be removed. If the waitlist closes, we delete them.
Account and workspace data: for as long as your account exists, and deleted within 30 days of a request.
Audit logs: kept with the workspace they belong to.
IP addresses used to limit repeated sign-ups: never stored.

Security

Keys and two-factor secrets are encrypted, files are kept in private storage, and every request is checked against your workspace. The security page lists what is in place and what we are still building.

Your choices and rights

Wherever you live, you can ask us to:

Tell you what we hold about you and send you a copy.
Correct something that is wrong.
Delete your account, your workspace data, or your waitlist entry.
Stop emailing you about the product.

Email privacy@targetid.ai from the address you used with us. We answer within 30 days, and we may ask you to confirm it's you first.

EU and UK visitors

If you are in the European Union or the United Kingdom, the GDPR gives you these additional points:

Why we may use your data. To provide the service you signed up for (contract); because you asked to join the waitlist (consent, which you can withdraw at any time); and to keep the service secure (our legitimate interests).
Transfers. Our servers and some of the providers above may be in the United States. Where data leaves the EU or UK, we rely on the standard contractual clauses or another approved safeguard.
More rights. You can also object to or restrict how we use your data, and ask for it in a portable format.
Complaints. You can complain to your local data protection authority, though we'd like the chance to sort it out first.

US state privacy rights

If you live in California or another state with a consumer privacy law, here is what those laws ask us to tell you:

What we collect: identifiers (name, email, IP address), professional information (company and role), the content you add, and security records of activity in the app. All of it comes from you or from your use of the service.
No selling or sharing. We don't sell personal information or share it for cross-context advertising, and we haven't in the past 12 months.
Sensitive information. We use passwords and sign-in details only to run and protect your account.
Your rights: to know, access, correct, and delete your information, and to opt out of any sale or sharing (which we don't do). An authorized agent can ask for you. We won't treat you differently for using these rights.

Children

TargetID.ai is a professional research tool and is not meant for anyone under 16.

Changes to this policy

If we change this policy, we'll update the date at the top. For important changes we'll also email you before they take effect.

Contact

Questions or requests about your data: privacy@targetid.ai.

The short version