Privacy

Privacy notice

What LYNNAGEN collects on this site and in the workspace, where it is processed, how long it is kept, and what you can ask of us.

On the public site

The public site collects only what you type into the demo-request form: your name, work e-mail, organization and message. It is stored in the service's own database for the people who answer such requests, and nowhere else. The site sets no tracking cookies and loads nothing from third parties. Standard technical information needed to operate and secure the site (such as request logs) may be processed by the hosting provider.

In the workspace

When you create a profile, LYNNAGEN keeps your e-mail address, the password you chose (stored only as a hash by the sign-in service), and the details you enter on your Account page: display name, profession, organization, country, and the version of the terms you accepted. If you turn on two-step sign-in, the authenticator secret is kept by the sign-in service.

When you run a case, the workspace keeps the callset you upload until it has been interpreted, and then the results: the worklist rows, the variant records, the case summary — including the clinical history you typed — and the condition views. Which cases are opened, printed, submitted or cancelled, and by whom, is written to an access log. Payments are handled by Stripe; LYNNAGEN keeps the subscription's status and the identifiers Stripe reports, never card details.

Where it is processed

The workspace's data lives in a Supabase project in the European Union (Frankfurt). The web application runs on Vercel. Interpretation itself runs on the laboratory's analysis workstation, which downloads a case's callset, interprets it and publishes the results. The complete durable record of a case stays on that workstation. Sequencing reads are never uploaded.

Clinical data and consent

You are responsible for having the consent and the authority to process the genomic and clinical data you bring into your workspace, and for not entering patient-identifying information where it is not needed. Do not submit patient data, genomic files or clinical records through the public site or its demo form.

How long

An uploaded callset is removed as soon as its case is interpreted. Results stay in your workspace until you remove the case or close the workspace. At the end of a service, or on request, a workspace's data can be exported to you in full and then erased from the cloud.

Your rights

Depending on applicable law, you may have rights relating to access, correction, deletion, portability or other processing of your personal information. Requests and privacy questions can be sent to .