Privacy Policy

Last updated:

1. Introduction

PioneerBio ("we", "us", or "our") operates Studio AI. This Privacy Policy explains how we collect, use, disclose, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Swedish data protection laws.

2. Data Controller

PioneerBio
Email: support@pioneerbio.tech
We are the data controller responsible for your personal data.

3. Personal Data We Collect

3.1 Information You Provide

  • Account Information: Username, email address, password (encrypted)
  • Profile Information: Name, organization, profile picture (optional)
  • User Content: Images, annotations, project data, and analysis results you upload
  • Communication Data: Messages you send to our support team

3.2 Automatically Collected Data

  • Usage Data: Pages visited, features used, time spent on the platform
  • Device Information: Browser type, operating system, IP address
  • Cookies: Essential cookies for authentication and preferences (see Cookie Policy below)

4. Legal Basis for Processing

We process your personal data based on:

  • Contract Performance: To provide the Service you've signed up for (Art. 6(1)(b) GDPR)
  • Legitimate Interests: To improve our Service, prevent fraud, and ensure security (Art. 6(1)(f) GDPR)
  • Consent: For optional features like analytics or marketing (Art. 6(1)(a) GDPR)
  • Legal Obligation: To comply with applicable laws (Art. 6(1)(c) GDPR)

5. How We Use Your Data

We use your personal data to:

  • Provide and maintain the Service
  • Process your images and annotations
  • Manage your account and authentication
  • Enable collaboration features with your team
  • Send service-related notifications
  • Respond to your support requests
  • Improve and optimize the Service
  • Ensure security and prevent fraud
  • Comply with legal obligations

6. Data Sharing and Disclosure

6.1 We Do Not Sell Your Data: We never sell your personal data to third parties.

6.2 Service Providers: We may share data with trusted service providers who assist us in operating the Service (e.g., cloud hosting, email delivery). These providers are bound by data protection agreements.

6.3 Legal Requirements: We may disclose data if required by law, court order, or to protect our rights and safety.

6.4 Team Collaboration: Data you share within projects is accessible to your team members with appropriate permissions.

7. International Data Transfers

Your data may be transferred to and processed in countries outside the EU/EEA. We ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, to protect your data in accordance with GDPR.

8. Data Retention

We retain your personal data for as long as:

  • Your account is active
  • Needed to provide the Service
  • Required by law (e.g., tax, accounting records)
  • Necessary to resolve disputes or enforce our agreements

After account deletion, we will delete or anonymize your data within 90 days, except where retention is required by law.

9. Your Rights Under GDPR

You have the following rights:

  • Right of Access: Request a copy of your personal data
  • Right to Rectification: Correct inaccurate or incomplete data
  • Right to Erasure ("Right to be Forgotten"): Request deletion of your data
  • Right to Restriction: Limit how we process your data
  • Right to Data Portability: Receive your data in a structured, machine-readable format
  • Right to Object: Object to processing based on legitimate interests
  • Right to Withdraw Consent: Withdraw consent for processing at any time
  • Right to Lodge a Complaint: File a complaint with the Swedish Data Protection Authority (Integritetsskyddsmyndigheten) or your local supervisory authority

To exercise these rights, please contact us at: support@pioneerbio.tech

10. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

  • Encryption of data in transit (HTTPS/TLS) and at rest
  • Access controls and authentication mechanisms
  • Regular security assessments and updates
  • Secure data backup and recovery procedures
  • Employee training on data protection

11. Cookies

11.1 Essential Cookies: We use cookies necessary for authentication, security, and basic functionality.

11.2 Analytics Cookies: With your consent, we use analytics to understand how users interact with the Service.

11.3 Cookie Management: You can manage cookie preferences through your browser settings.

12. Children's Privacy

Our Service is not intended for users under 16 years of age. We do not knowingly collect personal data from children. If we become aware of such collection, we will delete the data immediately.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through a prominent notice on the Service. The "Last updated" date at the top indicates when changes were made.

14. Contact Us

For questions about this Privacy Policy or to exercise your rights, please contact:

PioneerBio
Email: support@pioneerbio.tech

Swedish Data Protection Authority (Integritetsskyddsmyndigheten):
Website: https://www.imy.se