Privacy Policy & Data Protection

We collect only the minimum information required for B2B technical qualification, institutional communication, and secure operation of the EndoXplain platform:

• Professional Contact Data: Full name, business or institutional email address, job title, country/jurisdiction, and intended application context voluntarily submitted via our qualification form.
• Platform Account Data: Authentication credentials, organization tenant association, and access audit logs for authorized EndoXplain users.
• Technical Telemetry: Minimal, anonymized security and request logs required to maintain service reliability and prevent abuse. We never sell or broker personal data to third parties.

We recognize that molecular structures (SMILES, SDF, CSV), candidate lead series, and toxicological reports represent high-value proprietary intellectual property:

• Strict Multi-Tenant Isolation: All submissions, predictions, and reports within EndoXplain are logically isolated per client organization with role-based access control (RBAC).
• No Cross-Client Data Leakage: Proprietary chemical structures submitted under commercial or pilot evaluations remain the exclusive property of the client organization.
• Encrypted Transmission: All platform and API interactions are protected in transit via modern TLS encryption and scoped authentication tokens.

We process personal and institutional data strictly under recognized legal bases pursuant to the Brazilian General Data Protection Law (LGPD — Law No. 13.709/2018) and GDPR principles:

• Performance of a contract or pre-contractual technical evaluation, pilot scoping, and platform licensing.
• Compliance with legal, regulatory, and scientific audit traceability obligations.
• Legitimate institutional interest in securing our infrastructure, preventing unauthorized access, and supporting R&D collaborations.

We retain personal data only for as long as necessary to fulfill contractual, regulatory, or legal obligations. Under applicable data protection laws, you may request at any time:

• Confirmation of processing and access to your personal data.
• Rectification of inaccurate, incomplete, or outdated information.
• Deletion or anonymization of non-essential personal data, or withdrawal of consent where applicable.

To exercise your data protection rights, inquire about our security practices, or request a mutual Non-Disclosure Agreement (NDA) prior to technical evaluation, contact our team at: contato@iterchem.com.br (Goiânia, Goiás, Brazil).