Privacy Policy
OrainBio, Inc. · Last updated 28 September 2026
This describes what actually happens to your data in this system, including which third parties see it and which country each one is in.
What we collect
Your account details: email address and name, held by Auth0 on our behalf.
The research data you upload. Slide images, derived images, and the results of analyses you run.
Your conversations with the assistant, and a record of the work you ran, so you can come back to it and so we can bill correctly.
Billing records. Card details go straight to Stripe; we never see or store them.
If you ask for access: what you type into the request form (email, name, institution, role, the kinds of data you work with, your note) and which page or link you came from. We use it only to reply and to decide on access.
If you create a sign-in before access is open to you: the email address you used, so we can follow up.
Where your data physically is
The application, the database and most analysis compute run on servers in France.
Uploaded slides and results are stored with Wasabi in the United States. Some heavy analysis runs on Modal, also in the United States, and the assistant is Anthropic's model, also in the United States.
That means data you upload in the EU is transferred to the US in the normal course of using Orain. Those transfers rely on the standard contractual clauses in our agreements with each provider.
What we do with it
We use it to run the service you asked for, to bill you, and to keep the platform working.
We do not sell it. We do not use your research data to train models.
When you ask the assistant a question, the text of that conversation and information about your data are sent to Anthropic to generate the answer.
How long we keep it
Your uploads and results stay until you delete them, or until your account is closed and the export window has passed.
Deleting a file removes it from storage and stops it costing you anything. Backups may retain a copy for a short period afterwards.
Billing records are kept for as long as tax and accounting law requires.
Your rights
If you are in the EU or UK you can ask for a copy of your personal data, ask us to correct or delete it, or object to how we use it. Write to us and we will act within a month.
Where your institution is the controller of the research data and we are processing it for you, we will sign a data processing agreement. Ask and we will send one.
Who else processes it
The providers listed below, and nobody else. We will update this page before adding another.
| Provider | What they do | Where |
|---|---|---|
| Contabo GmbH | Hosts the application servers and the database. Most analysis compute runs here. | Lauterbourg, France (EU) |
| Wasabi Technologies | Object storage for uploaded slides, derived images and results. | United States (us-east-1) |
| Anthropic | The language model behind the assistant. Text you send it, and metadata about your data, are processed to answer you. | United States |
| Modal | Elastic compute for some heavy analysis jobs, when they are not run on the servers above. | United States |
| Auth0 (Okta) | Accounts, sign-in and passwords. Stores your email address. | United States |
| Stripe | Payments. Card details go to Stripe directly and are never held by us. | United States / Ireland |