Privacy Policy

Last updated: 21 August 2026

Protecting your privacy is fundamental to GenoBank.io's mission. This Privacy Policy describes how we leverage Web3 technology and blockchain infrastructure to give you unprecedented control over your genomic data. GenoBank.io Inc. ("GenoBank.io", "us", "we", or "our"), a Delaware corporation, operates the GenoBank.io platform and related services (collectively, the "Service"). Your use of our Service is governed by this Privacy Policy.

By accessing or using our Service, you acknowledge that you have read, understood, and agree to this Privacy Policy. If you do not accept these terms, please do not use our Service.

Web3 Privacy Architecture

GenoBank.io implements a revolutionary Web3-based privacy architecture that fundamentally changes how genomic data is controlled and accessed:

  1. Self-Sovereign Identity: You control your data through cryptographic wallet addresses. No central authority, including GenoBank.io, can access your data without your explicit cryptographic consent.
  2. Deletable storage: Genomic files live in Google Cloud Storage (GCS) under AES-256 encryption, gated by BioNFT ownership. GCS is used because GDPR Article 17 requires erasure; content-addressed networks that cannot unpin a file cannot meet that duty.
  3. Bloom-filter access control: Permission checks use Bloom filters over BioNFT consent, not zero-knowledge proofs.
  4. Permissioned Access: All data access is recorded immutably on the blockchain, creating a transparent audit trail of who accessed your data and when.

Blockchain Data Storage

Our blockchain integration provides unprecedented security and transparency:

  1. Story Protocol Integration: We use Story Protocol (Chain ID: 1500) for intellectual property management and data licensing.
  2. Avalanche Network: Primary blockchain operations occur on Avalanche C-Chain (Chain ID: 43114) for fast, secure transactions.
  3. Immutable Audit Trails: Every data access, permission change, and transaction is permanently recorded on-chain.
  4. Smart Contract Governance: Data access rules are enforced by smart contracts, not centralized servers.

Wallet-Based Authentication

GenoBank.io uses Web3 wallet authentication exclusively:

  1. No Passwords: Authentication is handled through cryptographic signatures from your Web3 wallet (MetaMask, BioWallet, or Magic).
  2. Message Signing: You authenticate by signing the message "I want to proceed" with your private key.
  3. Non-Custodial: We never store or have access to your private keys.
  4. Multi-Wallet Support: Support for MetaMask, GenoBank BioWallet, and Magic (Google OAuth bridge to Web3).

BioNFT™ Data Rights

Our patented BioNFT™ technology (US Patents 11,984,203 B1 and 11,915,808 B1) revolutionizes genomic data ownership:

  1. True Ownership: Your genomic data is tokenized as a BioNFT™, giving you verifiable ownership on the blockchain.
  2. Monetization Rights: You can license your BioNFT™ to researchers while maintaining ownership.
  3. Revocable Permissions: Instantly revoke access to your data through smart contract interactions.
  4. Inheritance Planning: BioNFTs™ can be transferred or inherited like any digital asset.

Google Cloud Storage

Your genomic files are stored in Google Cloud Storage with the following protections:

  1. Addressing: Every biological dataset is named by a biocid:// identifier. Storage URLs are an internal transport and are not the thing we hand to a user or to Claude.
  2. Encryption at rest: AES-256. Access is gated by BioNFT ownership and consent.
  3. Erasure: Objects can be deleted. That is why the Service uses GCS rather than IPFS.
  4. No IPFS: The Service does not store genomic files on IPFS.

Data Collection and Utilization

GenoBank.io collects the following types of information:

  1. Wallet Addresses: Your Ethereum-compatible wallet address serves as your identifier.
  2. Genomic Data: VCF files, DNA sequences, and related biosample information you choose to upload.
  3. Biosample Metadata: Collection dates, laboratory information, and processing status.
  4. Blockchain Transactions: All on-chain activities are publicly visible by design.
  5. Newsletter Subscriptions: Email addresses for investor and community updates (optional).

We use your data for:

  1. Service Provision: Operating the GenoBank platform and related services.
  2. Research Facilitation: Connecting you with researchers (only with your explicit consent).
  3. Platform Improvement: Aggregated, anonymized usage statistics.
  4. Legal Compliance: As required by applicable laws and regulations.

No Cookies Policy

GenoBank.io does not use cookies for tracking. We use localStorage for:

  1. Storing your wallet address and authentication signature
  2. Maintaining session state
  3. User preferences (language, display settings)

All localStorage data can be cleared by you at any time through your browser settings.

Do Not Track Disclosure

GenoBank.io respects Do Not Track signals. When DNT is enabled:

  1. We disable all analytics tracking
  2. No third-party services receive your browsing data
  3. Only essential service functionality remains active

Service Providers and Third Parties

We work with the following service providers:

  1. Google Cloud: Encrypted object storage (GCS) and compute in us-central1
  2. Cloudflare: TLS termination and DDoS protection for genobank.app and genobank.io
  3. Sequentia: Permissioned chain for BioNFT consent, job proofs, and seqUSDC settlement
  4. Story Protocol: Intellectual property licensing records
  5. Avalanche: Additional smart-contract operations where a public page names that network
  6. OpenCRAVAT: Genomic variant annotation, self-hosted
  7. Magic: OAuth to Web3 authentication bridge
  8. Anthropic: Optional Claude client that a data owner connects to the GenoBank.io MCP connector. Anthropic retains conversation data according to the Anthropic consumer or commercial terms that apply to that owner. GenoBank.io does not send vault bytes to Anthropic except the tool results Claude requests after the owner signs in.
  9. MongoDB on the GenoBank.io node: Session, audit, and job metadata. Bound to localhost on the production VM.

Service providers process data only to run the Service.

GenoBank.io MCP connector

The GenoBank.io Tele-Genomics connector at https://genobank.app/api_biofs_node/mcp lets you use Claude with your own vault. It is part of the Service.

  1. Sign-in: A recovered wallet signature (MetaMask or Magic/Google) is the access control. The connector does not accept an asserted wallet as identity.
  2. MCP audit: For every tools/call the node writes wallet, session_id, tool name, client_id, decision, and timestamp. That log does not include genomic rows or storage URLs. It is an access-pattern record for security and operations. Export of the log is restricted to a node operator.
  3. Support telemetry (opt-in): On the authorize page, or via the support_telemetry tool, you may grant retention of prompts Claude forwards, tool traces, and debug events for 90 days for quality, training, and debugging. Nothing is written for this purpose unless you grant it. Signatures and gs:// locators are redacted from stored traces. You revoke by calling support_telemetry with granted=false (erase defaults to true), or by emailing [email protected].
  4. Anthropic: Claude conversations live in your Anthropic account. GenoBank.io does not claim that Anthropic has no data retention. Review Anthropic's terms for that product.
  5. How to revoke: Disconnect the connector in Claude, revoke the OAuth connection on genobank.io, or email [email protected]. BioNFT consent remains independently revocable on-chain.

Communications

We may contact you via:

  1. On-chain Messages: Critical updates sent to your wallet address
  2. Email: Only if you've subscribed to our newsletter
  3. Platform Notifications: Important service updates when you're logged in

You can opt out of all non-essential communications at any time.

Legal Compliance

We may disclose information when required by law, but our architecture provides strong protections:

  1. Wallet addresses are pseudonymous by default
  2. Genomic data is encrypted and distributed
  3. We cannot access data without your cryptographic consent
  4. We will notify you of any legal requests unless prohibited by law

Security Measures

Our multi-layered security approach includes:

  1. Cryptographic Security: All data encrypted with AES-256
  2. Blockchain Immutability: Tamper-proof audit trails
  3. Distributed Architecture: No single point of failure
  4. Smart Contract Audits: Regular security audits of our contracts
  5. Bug Bounty Program: Rewards for responsible disclosure

International Data Transfers

Due to our decentralized architecture:

  1. Genomic objects are stored in Google Cloud regions we operate (default us-central1)
  2. Blockchain data is replicated worldwide
  3. All data remains encrypted regardless of location
  4. You maintain control through your wallet regardless of geography

Policy Changes

When we update this policy:

  1. Changes will be posted with a new "Last Updated" date
  2. Material changes will be announced on-chain to all users
  3. Continued use constitutes acceptance of changes
  4. The current policy is published at https://genobank.io/privacy-policy.html

European Data Region (GDPR)

For users in the European Economic Area:

  1. Legal Basis: Consent and legitimate interests
  2. Data Rights: Access, rectification, erasure, portability, and objection
  3. Data Protection Officer: Contact [email protected]
  4. Supervisory Authority: You may lodge complaints with your local authority

US Data Region (CCPA/CPRA)

For California residents:

  1. Right to Know: Request information about data collection
  2. Right to Delete: Request deletion of personal information
  3. Right to Opt-Out: Opt out of data sales (we don't sell data)
  4. Non-Discrimination: No different treatment for exercising rights

Aviso de Privacidad para México

Para usuarios en México:

  1. Derechos ARCO disponibles
  2. Contacto: [email protected]
  3. Datos biométricos considerados sensibles
  4. Consentimiento explícito requerido

Data Retention and Deletion

Our retention policies:

  1. Active Data: Retained while you maintain an active account
  2. Blockchain Data: Immutable by design, but access can be revoked
  3. GCS objects: Deleted on a verified erasure request (GDPR Article 17)
  4. Right to Deletion: Request data deletion at [email protected]

Terms of Use

By using GenoBank.io, you agree to:

  1. Provide accurate information
  2. Maintain security of your wallet
  3. Use services legally and ethically
  4. Respect others' privacy and data rights

External Links

Our Service may contain links to third-party sites. We are not responsible for their privacy practices. We encourage you to review their policies.

Children's Privacy

GenoBank.io is not intended for children under 18. We do not knowingly collect data from minors. If you believe we have collected such data, please contact us immediately.

Updates to This Policy

We may update this Privacy Policy to reflect changes in technology, law, or our practices. Check the "Last Updated" date for the most current version.

Contact Information

For privacy-related questions or concerns:

Patent Notice: GenoBank.io's technology is protected by US Patents 11,984,203 B1 and 11,915,808 B1, covering our innovative BioNFT™ and genomic data management systems.