1. Who we are
LitHypo (“we”, “us”) operates lithypo.com, a research tool that helps synthetic biology researchers generate, stress-test, and compare hypotheses against published literature. Contact: feedback@lithypo.com.
2. Data we collect
- Account data: name, email, role, institution, field of focus.
- Research content: topics, hypotheses, notes, tags, status updates, outcome notes, uploaded papers, lab notebook entries, and any text you submit.
- Usage data: query counts, timestamps, plan, subscription status, billing history.
- Technical: IP address, browser, device type, and basic logs for security and abuse prevention.
- Cookies / local storage: session tokens for keeping you signed in. We do not use third-party advertising cookies.
3. How we use it
- Provide the service: run hypothesis generation, comparisons, stress tests, and file analyses.
- Send transactional emails: verification, password reset, status reminders (if enabled), weekly literature digests (if enabled), and account notifications.
- Bill you and prevent fraud (via Stripe).
- Internal operations: the founder receives email notifications when new users sign up and when suggestions are submitted, for support and product development purposes.
- Improve product reliability and security.
We do not sell your personal data. We do not use your private research content to train AI models.
4. AI processing (Anthropic Claude)
When you generate, compare, or stress-test a hypothesis, or analyze an uploaded paper, relevant text is sent to Anthropic’s Claude API (anthropic.com) for processing. We use Claude Opus 4.7 as our primary model. Anthropic processes the data as our subprocessor under their commercial terms and does not use API inputs or outputs to train its models. We send only the minimum content needed for the request.
5. Literature data (Europe PMC)
We query Europe PMC (europepmc.org), operated by the European Bioinformatics Institute (EMBL-EBI), to retrieve paper metadata and abstracts. Europe PMC data is publicly available and governed by their terms of use. We do not transmit your account information to Europe PMC.
6. Subprocessors
- Lovable Cloud (Supabase) — database, authentication, file storage, edge runtime, hosting. Hosted in EU/US.
- Anthropic — Claude AI processing. Hosted in US.
- Stripe — payment processing, including card data (PCI-compliant). Hosted in US.
- Cloudflare — DNS management and email routing. Hosted globally.
- Resend — transactional email delivery. Hosted in US.
7. Data retention
We retain your account and content for as long as your account is active. If you delete your account, we delete your profile, hypotheses, notes, uploaded files, and lab notebook entries within 30 days, except where we must retain records for legal, tax, or fraud-prevention purposes. Billing records may be retained up to 7 years to comply with US tax law.
8. Your rights (GDPR, UK GDPR, CCPA)
You have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data (most fields are editable in your profile).
- Delete your account and associated data.
- Export your hypotheses and notes.
- Object to or restrict processing.
- Withdraw consent for transactional emails (via in-app settings) or unsubscribe via signed links in our emails.
- Lodge a complaint with your supervisory authority.
To exercise any of these rights, email feedback@lithypo.com. We respond within 30 days.
9. Security
We use TLS in transit, encryption at rest, row-level security on all user data, scoped service credentials, and modern HTTP security headers. The founder may access user data via the database for legitimate support purposes only (e.g., diagnosing a user-reported bug). We do not browse user content for any other reason. No system is perfectly secure; report issues to feedback@lithypo.com.
10. International transfers
Your data may be processed in the United States and the European Union. Where required, transfers rely on Standard Contractual Clauses with our subprocessors.
11. Children
LitHypo is not intended for users under 16. We do not knowingly collect data from children.
12. Changes
We will post material changes here and, when appropriate, notify you by email.