Last Revised: 19.12.2025
This Privacy Policy (“Policy”) describes how Loculus (“Loculus”, “we”, “our”, or “us”) collects, uses, stores, and shares personal data when you access or use our website, applications, and related tools, services, features, and functionalities (collectively, the “Services”).
For the purposes of applicable data protection laws, Loculus acts as the data controller. References to “you” or “your” mean you as a user of the Services.
Please read this Policy carefully to understand how we process your personal data and what rights you have. If you do not agree with this Policy, you should not access or use the Services.
When you access, use, or interact with the Services, we may collect certain categories of personal data from you or about you.
This may include:
We process this information to:
Legal basis: performance of a contract; legitimate interests.
When you access or use the Services, we may automatically collect:
This data is processed to:
Legal basis: legitimate interests; in some cases, legal obligations.
When you interact with Loculus’ AI-powered features, we may process:
This data is used to:
AI learning processes are conducted on anonymous or aggregated data and are not used to make fully automated decisions with legal or similarly significant effects on you.
Legal basis: legitimate interests and, where required, your consent.
Certain Services may require you to connect a third-party wallet. When you do so, we may process:
We do not control or store private keys and do not access wallet credentials.
Use of third-party wallets is governed by the privacy policies and terms of those wallet providers. Loculus is not responsible for their practices.
Legal basis: performance of a contract; legitimate interests.
We use personal data to:
We may also create aggregated or anonymized datasets that no longer identify you.
We may use cookies and similar technologies to:
Where required by law, cookies will be subject to your consent.
We may share your personal data in limited circumstances, including:
We do not sell your personal data.
Your data may be processed in countries outside your country of residence, including outside the EEA or UK.
Where required, we implement appropriate safeguards, such as:
We retain personal data only for as long as necessary to:
Retention periods depend on data type and purpose.
Depending on your location, you may have rights to:
Requests can be made using the contact details below. We may need to verify your identity.
The Services are not intended for individuals under the age of 18.
We do not knowingly collect personal data from children.
We implement reasonable technical and organizational measures to protect personal data.
However, no system can guarantee absolute security, and use of the Services is at your own risk.
The Services may contain links to third-party websites or tools.
We are not responsible for their privacy practices or content.
We may update this Policy from time to time.
Material changes will be reflected by updating the “Last Revised” date.
For questions or requests regarding this Policy or your personal data, contact us at:
support@loculus.xyz