Privacy notice
Version 0.1, effective 22 Oct 2026. Draft for a research beta; not reviewed by a lawyer.
This notice covers this website and the common ground for the four Anaphase products. Each product's own privacy notice, linked from its footer, lists every action in that product that sends information off your computer and is the authority for that product.
Who we are
The website and the products are made by Anaphase (Anaphase Ltd, incorporation pending). Until incorporation completes, the service is provided by Paul Maciocia, London, UK, trading as Anaphase. Registered office (on incorporation): 71-75 Shelton Street, London WC2H 9JQ. The company number will be added here once it is issued.
For this notice, Anaphase is the controller of the account, support and security information described below. For research content you upload to a cloud feature, you decide what to upload; Anaphase stores and processes it only to provide the feature you asked for.
Contact for privacy questions and requests: paul@anaphasescience.com.
The short version
- Your project stays in the browser unless you choose cloud share, cloud save or an AI request. Those actions, what they send and who receives it are listed in each product's notice and summarised below.
- This website sets no cookies and loads no analytics, advertising or tracking scripts. Its fonts are served from this site.
- Anaphase does not sell personal information and does not use your content to train AI models.
- The products are for research use only. They are not for clinical, diagnostic or treatment decisions. Do not put patient-identifiable information into them.
This website
This site is a set of static pages. It has no forms, accounts or scripts. When you visit, the hosting provider (Vercel) records standard request information: network address, time, page, browser type and response status. We use it only to keep the site running and to investigate misuse. Email links open your own email program; nothing is sent until you send the email.
In the products
Work you do in a product (data tables, files you open, projects, settings and history) is stored in your browser (local storage and IndexedDB). It is not encrypted by the product and is readable by anyone with access to that browser profile. Clearing site data removes it. Anaphase cannot see or recover it.
Actions that send information off your computer, in summary:
| Product | Action you choose | What goes where |
|---|---|---|
| BioPlot | Cloud share link | The shared project goes to Supabase and is kept for 30 days. A self-contained share link carries the project inside the link instead. |
| BioPlot | AI request with your own key | The prompt and a bounded sample of the selected table pass through BioPlot's server to the provider you chose. The server does not store them or your key. |
| BioPlot | MCP connector | Tool results go through a relay on Anaphase's server in Germany to the AI assistant you connected. The relay does not store them. |
| SideScatter | AI request | Channel, marker and gate names, counts and statistics go to the provider you chose, or in limited hosted mode through Anaphase's server to OpenRouter. Never event data. |
| SideScatter | Problem report | Your browser type, the page address, the error and any note you write go to the hosting provider's logs. |
| BioSmith | Storage connection | Files go to your own Dropbox, Google Drive, OneDrive or S3 account, under your agreement with that provider. |
| BioSmith | Sync and account | Your email, a password hash and the constructs you sync go to Anaphase's sync server in Germany. |
| BioSmith | NCBI search or BLAST | The query sequence or term goes to the US National Center for Biotechnology Information. |
| BioSmith | AI request | The selected sequence region or feature list and your question go to the provider you chose. |
| BioGlyph | Account and figures | Your account details and saved figures are held on Anaphase's server in Germany. |
| BioGlyph | AI request | Object IDs, types, names, labels and positions for the scope you choose go to the provider you chose. Your key is stored on the server, encrypted for your account. |
Optional AI
AI features are off until you turn them on and confirm what will be sent. With your own key, the request goes to the provider you chose under your agreement with that provider. The Anaphase-hosted assistant is not yet funded; when it is switched on, requests will go to Anaphase's server and then to Anthropic as Anaphase's processor, and this notice will be updated first. AI suggestions are drafts for you to check. See the AI disclosure.
Support and feedback
If you email paul@anaphasescience.com, we keep the email thread to answer you. Send a synthetic or redacted example rather than real research data, and never send passwords, keys or patient information.
Lawful bases (UK GDPR)
| Purpose | Basis |
|---|---|
| Providing an account or a cloud feature you asked for | Contract |
| Security logs, abuse prevention, rate limits | Legitimate interests (keeping the service available and safe) |
| Optional AI requests | Your choice to send each request; the request is processed to perform the action you asked for (contract) |
| Answering support email | Legitimate interests |
| Keeping billing records, once paid plans exist | Legal obligation |
Who receives information
The sub-processor list names every service that can receive personal information, what it receives and where it is located.
Some providers are in the United States. Transfers rely on the UK Extension to the EU-US Data Privacy Framework where the provider is certified, or on the UK International Data Transfer Addendum otherwise.
How long information is kept
See the retention table. Periods marked "proposed" are targets that are not yet enforced by an automatic deletion job.
Your rights
You can ask for a copy of your personal information, ask us to correct or delete it, object to or restrict some processing, and ask for portability where it applies. Email paul@anaphasescience.com. We will check identity before acting and reply within one month.
If you are unhappy with our answer you can complain to the Information Commissioner's Office: https://ico.org.uk/make-a-complaint/ or 0303 123 1113.
Children
The products are research tools for adults and are not directed at children.
Changes
We will change the version and date at the top when this notice changes.