Privacy & Data Security

Privacy Policy

Last Updated: October 2026 • Effective Immediately

1. Commitment to Research Confidentiality

Bernoullli (“we”, “our”, or “us”) respects your privacy and recognizes that academic, clinical, and corporate research data is highly sensitive. This Privacy Policy details the types of information we collect, how it is handled, how it is protected, and your rights regarding your data.

2. Information We Collect

We collect information strictly necessary to provide computational and analysis capabilities:

  • Account Credentials: When registering, we collect your email address, display name, and avatar profile picture via Supabase Auth or Google OAuth.
  • Uploaded Datasets and Documents: When you connect datasets (CSV, Excel, TSV) or attach files (PDF, Word, TXT), they are uploaded to your private project vault solely to enable statistical operations, formula execution, and report generation.
  • Prompt and Conversation History: Queries and instructions you submit to Bernoullli are stored to maintain thread continuity and provide conversational context.
  • Technical Diagnostics: Standard connection metadata, including browser type, session tokens, and IP geolocation (used strictly for localized currency display and abuse mitigation).

3. How We Use Your Data

Your information is used exclusively for the following purposes:

  • Executing statistical tests, assumption checks, R scripts, and document synthesis.
  • Maintaining authentication state and protecting account security.
  • Processing compute token recharges and verifying payment transactions.
  • Providing customer support and debugging execution failures.

We never sell your personal data or uploaded research material to advertising networks, brokers, or external third parties.

4. Isolated Execution and Model Training Policy

We do not use your proprietary datasets, analysis files, or research prompts to train public foundation models.

All statistical code operations run within isolated sandbox execution environments. Once an execution step completes, artifacts are returned to your private session and stored in encrypted cloud storage with strict row-level security policies.

5. Data Retention and Account Deletion

Your datasets, blueprints, and conversations remain in your workspace for as long as your account remains active, or until you choose to delete them.

When you initiate account deletion from your Account Settings, our automated systems enforce a 7-day grace period. After this period, all personal identifiers, conversation histories, and stored research files are permanently and irreversibly deleted from our active database records.

6. Cookies and Storage

Bernoullli uses essential cookies and local browser storage to keep you logged in, save local UI preferences (such as dark/light theme and Balanced Scorecard mode), and protect against cross-site request forgery. We do not use intrusive third-party cross-site advertising cookies.

7. Your Rights and Data Control

Depending on your jurisdiction, you have the right to:

  • Access and export your research documents and chat archives.
  • Update or correct your personal account details.
  • Request immediate and permanent deletion of your data.

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect platform enhancements or legal requirements. Material updates will be communicated through an in-app notice or account notification.

9. Contact Us

For any questions regarding this Privacy Policy or our data protection practices, please contact us at privacy@bernoullli.com or submit a request via our in-app Support Center.