CovaSyn privacy & data

The controller is: CovaSyn GmbH Naunhofer Straße 67, 04299 Leipzig, Saxony, Germany

first and last name, work email address, company, role, your interest

account email, plan tier, language preference

Timestamp, tool name invoked, request size, response status, IP address (truncated to /24 after 24 hours)

We do not collect biometric data

Scientific input data. Chemical structures (SMILES, InChI, MOL, SDF), biological sequences (protein, RNA, DNA), spectral data (NMR, IR, MS, UV-Vis), experimental measurements

Providing the requested computational result Art. 6(1)(b) GDPR, contract performance

Rate-limiting, abuse prevention, security Art. 6(1)(f) GDPR, legitimate interest

Billing and account management (paid tiers) Art. 6(1)(b) GDPR, contract performance

Scientific inputs and outputs: processed in memory and not persisted to long-term storage.

Short-term operational logs that may include payloads are discarded within 30 days.

Technical metadata (truncated IP, tool name, timestamp, allowance consumed): 90 days for security and abuse prevention.

Billing records (paid tiers): retained for 10 years per German tax law (§ 147 AO).

primary hosting in Nuremberg (DE) for covasyn.com, workspace.covasyn.com, the MCP gateway, application backend, database servers, and internal systems. EU processing.

Transfers to the USA are based on the EU-U.S. Data Privacy Framework and Standard Contractual Clauses (SCCs).

under which OpenAI is self-certified

We share data only with the following categories of recipients, acting as processors under Art. 28 GDPR.

Data Processing Agreements (DPA / AVV) are in place with each and are available on request via support@covasyn.com .

To exercise these rights, email support@covasyn.com .

Access the personal data we hold about you (Art. 15)

Erase your data (Art. 17), subject to legal retention obligations

Object to processing based on legitimate interest (Art. 21)

Withdraw consent at any time, without affecting prior processing

We do not sell personal data.