TKOResearch ("we," "our," or "us") operates the Technical Analysis & Research Environment (TARE) platform available at tareops.com. This Privacy Policy explains how we collect, use, and protect your information when you use our custody-aware lab records, documentation tools, and related services (collectively, the "Services").

1. Information We Collect

1.1 Information You Provide to Us

Account Information: When you register for an account, we collect your name, email address, password, organization name, and role.
Billing Information: If you subscribe to our professional version, we collect billing details and payment information (processed securely through Stripe).
Research Data: We collect the laboratory data, experiments, SOPs, inventory items, and other scientific records you input, upload, or process through the Services.
Communications: We collect information when you contact us for support or communicate with us in any way.

1.2 Information Collected Automatically

Usage Data: We collect data about how you interact with our platform, such as features used, time spent on pages, and actions taken within the application.
Device and Connection Data: We collect information from your devices, such as IP addresses, browser types, operating systems, and device identifiers. Connected instrument or edge telemetry applies only where those workflows are configured.
Telemetry Data: We collect performance, error, and diagnostic data from our application and, where enabled, from connected laboratory instrumentation or edge workflows.

2. How We Use Your Information

We use the collected information for various purposes, including:

To provide, maintain, and improve the Services.
To process transactions and manage your account.
To authenticate your identity and provide secure access (including SSO for Enterprise users).
To analyze and monitor usage patterns to enhance platform performance and security.
To communicate with you, including sending transactional emails (via Resend), updates, and support messages.
To power configured documentation features that draft, organize, or review selected workflow context.
To comply with legal obligations, enforce our terms, and protect the rights and safety of our users and third parties.

3. Data Protection and Chain-of-Custody

Given that TARE is designed for evidence-sensitive lab records and custody-aware workflows, we take data security seriously and qualify security or compliance claims by workflow scope.

Encryption: Data is encrypted in transit and at rest using industry-standard protocols.
Access Controls: We implement strict Role-Based Access Controls (RBAC) and audit logging to track who accesses and modifies data.
Data Isolation: Organization data is logically separated in the application and database layers, and object storage uses scoped, organization-aware keys and access checks to prevent cross-tenant access.

4. Sharing of Information

We do not sell your personal information or research data. We may share information only in the following circumstances:

Service Providers: We share information with trusted third-party service providers (e.g., Vercel, Stripe, Resend, Cloudflare, OpenAI, Anthropic, ElevenLabs) who perform functions on our behalf. These partners are bound by confidentiality agreements.
Model providers: To provide configured documentation capabilities, selected workflow context may be processed by model providers. Provider scope, retention, and no-training posture depend on the enabled features, provider terms, and customer contract.
Legal Requirements: We may disclose information if required to do so by law or in the good faith belief that such action is necessary to comply with legal obligations or protect our rights.
Business Transfers: In the event of a merger, acquisition, or sale of assets, user information may be transferred.

5. Data Processing and Documentation Tools

The documentation tool may draft, organize, or review selected contextual data such as experiments, inventory, SDS context, attachments, and operator instructions. Suggested content stays provisional until reviewed. Current provider scope and retention posture should be reviewed through the data processing page or security packet request path.

6. Your Rights and Choices

Depending on your location, you may have rights to access, correct, delete, or restrict the processing of your personal data. You can manage your account settings within the platform or contact us to exercise these rights.

We use passwordless magic links for secure authentication. You can request account deletion, which will result in the anonymization or deletion of your personal data, subject to any legal retention requirements.

7. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

8. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Email: notification@tareops.com