Privacy Policy
Privacy Policy
Latest update: 04.05.2026
This Privacy Policy explains how Rodent2Human (“Rodent2Human,” “we,” “us,” or “our”) collects, uses, stores, shares, and protects personal data when you access or use our website, platform, products, and related services, including the Clarisyn platform (collectively, the “Service”).
This Privacy Policy is intended to help you understand our privacy practices. It does not create contractual rights by itself. If you do not agree with this Privacy Policy, you should not use the Service.
This Privacy Policy should be read together with our Cookie Policy and any applicable Terms of Service.
This Privacy Policy describes how Rodent2Human (“we”, “our”, “us”) collects, uses, stores, and protects personal data when you use our website and platform (collectively, the “Service”). By using the Service (Bu yeterli değil anladığım kadarıyla. Buraya basit de olsa bir opt-in yapmak gerekebilir. Cookie policy gibi privacy policy de bir tick atma veya linke tıklama olması gerekiyor anladığım kadarıyla. Çünkü ICO consenti bu şekilde istiyor. Dolayısıyla sırf bunu yazdık ve insanlar sistemi kullanıyor diye kabul etmiş sayılmayacaklar. Aktif bir şekilde rıza almak gerekecektir.), you agree to the practices described in this policy.
1. Who We Are
Company: Rodent2Human
Website: rodent2human.com
Contact email: ravzanazli@rodent2human.com
Address: SE2 9HB
Data Controller: Rodent2Human
For the purposes of applicable data protection laws, including the UK GDPR, Rodent2Human acts as the data controller for personal data we collect and process for our own purposes.
In some cases, we may process personal data on behalf of a customer, organization, institution, or other third party. In those cases, we may act as a processor or service provider, and the relevant customer or organization may be the controller of that personal data. If your data is processed in connection with your organization’s use of the Service, you may need to contact that organization to exercise your privacy rights.
2. Personal Data We Collect
The personal data we collect depends on how you interact with us and the Service.
2.1 Account and Identity Data
When you register for an account, use the Service, or contact us, we may collect:
Full name
Email address
Organization or company name
Job title or role
Account login details and authentication information
Communication preferences
2.2 Platform, Query, and Research Data
When you use the Clarisyn platform, we may collect and process:
Queries, prompts, questions, or instructions you submit to the platform
Reports, summaries, outputs, or other responses generated through the platform
Uploaded files, documents, datasets, or other materials you provide
Research context or project-related information you choose to submit
Interaction logs, such as features used, session activity, timestamps, and usage patterns
Queries, uploaded content, and generated reports may contain sensitive biomedical, scientific, confidential, or proprietary research information. We treat this content as confidential and use it only as described in this Privacy Policy and our applicable agreements.
Unless we clearly state otherwise or obtain your explicit permission, we do not use your confidential query content, uploaded files, or reports to train or fine-tune third-party foundation models.
2.3 Technical, Device, and Usage Data
When you access or use the Service, we may automatically collect certain technical and usage data, including:
IP address
Browser type and version
Device type and operating system
Approximate location derived from IP address
Referring URLs
Pages or features accessed
Session duration and interaction logs
Error logs and diagnostic information
Cookie identifiers and similar technical identifiers
We use this information to provide, secure, monitor, troubleshoot, and improve the Service.
2.4 Communication and Support Data
If you contact us by email, website form, or another communication channel, we may collect:
Your email address
Your name and contact details
The content of your message
Any attachments or documents you send us
Support history and related correspondence
2.5 Cookies and Similar Technologies
We use cookies and similar technologies as described in our Cookie Policy.
These may include strictly necessary cookies, functional cookies, analytics cookies, local storage, pixels, SDKs, browser identifiers, and log files.
Non-essential cookies, including analytics cookies where required, are used only with your consent.
3. How We Use Your Personal Data
We use personal data for the following purposes:
To provide, operate, maintain, and improve the Service
To create, authenticate, and manage user accounts
To process your queries, prompts, uploaded materials, and requests
To generate reports, summaries, outputs, or other platform responses
To provide customer support and respond to your inquiries
To communicate with you about your account, service updates, security notices, or changes to our policies
To monitor platform performance and troubleshoot technical issues
To understand how users interact with the Service
To improve the quality, accuracy, reliability, and safety of our platform
To protect the Service against fraud, misuse, unauthorized access, security incidents, or illegal activity
To comply with legal, regulatory, contractual, and tax obligations
To enforce our Terms of Service and other applicable agreements
We do not sell your personal data. We do not share your personal data with third-party advertisers. We do not use your personal data for third-party advertising or retargeting.
4. Legal Bases for Processing
Where UK GDPR, EU GDPR, or similar data protection laws apply, we rely on the following legal bases:
Contractual necessity: We process personal data where necessary to provide the Service, manage your account, process your queries, generate outputs, and perform our obligations to you.
Legitimate interests: We process personal data where necessary for our legitimate interests, including improving the Service, ensuring security, preventing fraud or misuse, conducting internal analytics, troubleshooting, and developing our business, provided those interests are not overridden by your rights and freedoms.
Consent: We rely on consent where required, including for non-essential cookies, certain analytics activities, optional marketing communications, and any other processing where consent is required by law.
Legal obligation: We process personal data where necessary to comply with applicable laws, regulatory requirements, court orders, tax obligations, or lawful requests from authorities.
5. AI Processing and Model Improvement
The Service uses artificial intelligence systems and AI infrastructure providers to process user queries, uploaded content, and related inputs in order to generate outputs and provide the Service.
We may use query and usage data to improve the safety, reliability, functionality, and performance of our own Service. Where possible, we use aggregated, de-identified, or pseudonymized information for improvement and analytics purposes.
We do not use your confidential query content, uploaded files, or generated reports to train or fine-tune third-party foundation models unless:
You have explicitly agreed to this;
It is clearly enabled by your organization’s agreement with us; or
The content has been anonymized or de-identified so that it no longer identifies you or your organization.
Third-party AI infrastructure providers process data on our behalf and under our instructions, where applicable. These providers are not permitted to use your data for their own independent purposes except as allowed by their contractual terms with us or applicable law.
6. How We Share Personal Data
We may share personal data with the following categories of recipients:
6.1 AI Infrastructure Providers: We may share queries, prompts, uploaded content, and related data with AI infrastructure providers, such as Anthropic, where necessary to process your requests and provide the Service. These providers act as processors or subprocessors where applicable and process data under contractual restrictions.
6.2 Cloud Hosting and Storage Providers: We may share data with cloud hosting, database, storage, infrastructure, and security providers that help us operate and secure the Service.
6.3 Analytics Providers: We may share limited usage and technical data with analytics providers, such as Mixpanel, to understand platform usage and improve the Service. Where required, analytics cookies or similar technologies are used only with your consent.
6.4 Professional Advisors: We may share data with lawyers, accountants, auditors, insurers, or other professional advisors where necessary for legal, compliance, accounting, or business purposes.
6.5 Legal Authorities: We may disclose personal data where required to comply with applicable law, court orders, regulatory obligations, legal process, or lawful requests from public authorities.
6.6 Business Transactions: If Rodent2Human is involved in a merger, acquisition, financing, restructuring, sale of assets, or similar transaction, personal data may be transferred or disclosed as part of that transaction, subject to appropriate safeguards.
6.7 With Your Consent or Direction: We may share personal data with third parties where you have instructed us to do so or given us consent.
We require third-party processors to maintain appropriate confidentiality, security, and data protection standards.
7. International Data Transfers
Your personal data may be transferred to, stored, or processed in countries outside the United Kingdom, European Economic Area, or your country of residence.
Where we transfer personal data internationally, we take steps designed to ensure appropriate safeguards are in place. These may include:
Standard Contractual Clauses approved by the European Commission or the UK Information Commissioner’s Office;
International data transfer agreements or addenda;
Adequacy decisions, where applicable;
Contractual, technical, and organizational safeguards.
8. Data Retention
We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.
Our general retention periods are:
Account data: Retained for the duration of your account and up to 6 years after account closure, where necessary for legal, contractual, tax, accounting, dispute resolution, or compliance purposes.
Query, prompt, uploaded content, and report data: Retained for as long as necessary to provide the Service, maintain user access to previous outputs, support product functionality, comply with customer agreements, and meet legal or security obligations. Unless a different retention period is agreed with you or your organization, we aim to delete or anonymize this data within 24 months after account closure.
Communication and support data: Retained for up to 6 years after the relevant communication, unless a longer period is required for legal, security, or dispute resolution purposes.
Technical logs and security records: Retained for up to 12 months, unless longer retention is necessary to investigate security incidents, prevent abuse, or comply with legal obligations.
Analytics data: Retained for up to 13 months, unless a shorter period is configured or required by applicable law. Where possible, analytics data is aggregated, anonymized, or pseudonymized.
Cookie data: Retained as described in our Cookie Policy.
When personal data is no longer needed, we will delete, anonymize, or securely retain it in accordance with applicable law and our internal retention practices.
9. Data Security
We implement appropriate technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.
These measures may include:
Encryption in transit using TLS/HTTPS
Encryption at rest for sensitive data, where appropriate
Access controls and authentication
Role-based permissions
Logging and monitoring
Secure development practices
Regular security reviews
Confidentiality obligations for personnel and service providers
However, no method of transmission or storage is completely secure. We cannot guarantee absolute security of personal data.
If a personal data breach occurs and we are legally required to notify you or a supervisory authority, we will do so in accordance with applicable law, including the UK GDPR where applicable.
10. Your Privacy Rights
Depending on your location and applicable data protection laws, you may have the following rights:
Access: to request a copy of the personal data we hold about you
Rectification: to request correction of inaccurate or incomplete data
Erasure: to request deletion of your personal data
Restriction: to request that we limit how we process your data
Portability: to receive your personal data in a structured, commonly used, machine-readable format
Objection: to object to processing based on legitimate interests
Withdraw consent: to withdraw consent at any time where processing is based on consent
Complaint: to lodge a complaint with a data protection authority
To exercise your rights, contact us at: ravzanazli@rodent2human.com
We will respond to your request within one month, unless a longer period is permitted by applicable law.
If you are in the United Kingdom, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO). You can contact the ICO at ico.org.uk. If you are located in the European Economic Area, you may also contact your local data protection authority.
Please note that some requests may be subject to legal limitations. For example, we may need to retain certain information for legal, security, fraud prevention, or contractual reasons.
11. Marketing Communications
If you choose to receive marketing communications from us, we may use your contact details to send you updates about our products, services, research, events, or company news.
You can opt out of marketing emails at any time by using the unsubscribe link in the email or by contacting us.
Even if you opt out of marketing communications, we may still send you service-related communications, such as account, security, legal, or transactional notices.
12. Third-Party Links and Services
The Service may contain links to third-party websites, applications, integrations, or services. This Privacy Policy does not apply to third-party services that we do not control. We are not responsible for the privacy practices, content, or security of third-party websites or services. We encourage you to review the privacy policies of any third-party services you use.
13. Children’s Privacy
The Service is intended for professional and research use only. We do not knowingly collect personal data from individuals under the age of 18. If you believe that a minor has provided us with personal data, please contact us immediately at ravzanazli@rodent2human.com.
If we learn that we have collected personal data from a minor without appropriate consent or legal basis, we will take reasonable steps to delete that information.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our technology, services, legal obligations, or privacy practices. When we update this Privacy Policy, we will revise the “Last updated” date at the top of this page. If we make material changes, we may notify you by email, in-platform notice, or another appropriate method. We encourage you to review this Privacy Policy periodically.
15. Contact Us
If you have questions, requests, or concerns about this Privacy Policy or how we process personal data, please contact us:
Rodent2Human
Email: ravzanazli@rodent2human.com
Website: rodent2human.com
Address: SE2 9HB