Privacy Policy

Last updated: 31 October 2026

1. Who we are

This policy explains how The Dream Lab Innovations (“we”, “us”) collects and uses personal data through RBAi at rbai.thedreamlabinnovations.com (the “Platform”). You can read the public pages without an account. By using the Platform you agree to this policy and to the Terms and Conditions.

RBAi is in an experimental phase (beta): features change, and occasional instability, such as a slow or interrupted request, is possible. AI output can contain errors, so check important results against their sources before you rely on them, as the Terms and Conditions say.

2. What we collect

Account: your name and email address, and your password, stored only as a hash. If you sign in with Google, we receive your name and email address from Google.
Your work: the questions you ask, the files you upload, the voice recordings you make in the chat (turned into text and not stored), and the chats, literature reviews, reports, structures, code results and projects you create.
Billing: your plan, and the date, amount and status of each payment. Card and bank details are entered with our payment partner; we do not see or store them in full.
Usage: the credits each request uses, and technical records such as your IP address and browser, which we use for security, rate limits and fixing faults.
Connections you add: your Galaxy API keys (one for each Galaxy server you connect), stored encrypted, and the MCP servers you connect.
Messages to members: the messages you send to and receive from other RBAi members.
Requests: the kinds of request you accept, the lab services you list, and the requests you send with their status. For a request we email to a researcher outside RBAi: the address printed with their paper, the paper, your message and any reply that comes back through RBAi.
Shared documents: the people you share a report with, and the role you give each of them.
Contact form: the name, email address and message you send through the contact form.

3. How we use it

To provide the service: answer your requests, run your tools and keep your work.
To deliver your messages, match your requests with members who accept them, send the request emails you approve within our sending limits, and let the people you share a document with read or edit it.
To manage your plan, credits and payments.
To keep the Platform secure, prevent abuse and enforce our terms.
To answer your messages and tell you about changes to the service or to these policies.
To send you emails that help you get started: a welcome when you verify your email address, and two short tips in your first week. You can turn them off in Settings → Email or with the link at the bottom of each one.
If you ask for it, to send you a weekly email of new papers that match the research interests in your profile and the papers in your projects. It is off unless you turn it on, and every one has a link to unsubscribe. We do not track whether you open these emails or click their links.
To find and fix problems and improve the service.

We do not sell your personal data.

4. Who processes it for us

We share personal data only as far as each of these needs it to provide the service:

Amazon Web Services (AWS), which hosts our servers, database and storage;
the cloud providers that host the AI models answering your requests, such as Microsoft Azure and Cloudflare; we change the models as better ones become available;
an AI service that turns the spreadsheets and slide decks you attach and the voice recordings you make into text, and your files and questions into search vectors; we do not store your recordings;
the cloud sandbox provider that runs code and PyMOL for you;
the public scientific databases and services your requests query, which receive the query (for example a protein name or a sequence, a technique when you look for a lab, or for the weekly digest your research interests and words from the titles of papers in your projects), not your account details;
Cloudflare, which delivers messages and live edits between members, keeps a working copy of shared documents, and turns request and profile text into search vectors for matching without keeping the text;
Microsoft Azure Communication Services, which delivers the request emails you send to researchers outside RBAi;
the Galaxy server you choose (such as usegalaxy.org or usegalaxy.eu), when you connect your own Galaxy account;
our payment partner, for payments;
email services, to deliver our emails to you (sign-in codes and password resets, and, if you keep them on, the getting-started and weekly digest emails), and security services, to protect sign-in, sign-up, password reset and the contact form;
a web analytics service that counts visits to the Platform without cookies; it receives the address of the page, your browser type and an approximate location, not your account details.

When you run a job at EMBL-EBI or NCBI through RBAi (sequence alignment, phylogeny, InterProScan, BLAST), your account email is sent with the job, as these services require, so they can contact you about it.

We may also disclose personal data when the law requires it, or to government or law enforcement agencies in response to a lawful request.

Some of these providers process data outside India.

5. Messages, requests and shared documents

Connect: messages between members.

Messages you exchange with another member are stored so that you and that member can read them. Only the two of you can read a conversation.
Cloudflare delivers new messages to your open tabs; it does not store what they say.
Our staff read a message only when one of you reports it, or when the law requires it.
If you are away, the email that tells you about an unread message says who wrote, never what they wrote.
When an account is deleted, its conversations are deleted, for the other person too.

Requests.

Signed-in members can find you by your name, handle or institution and message you, unless you turn this off in Settings → Connect. They see your name, position and institution, never your email address.
To find members who match a request, the request and the members’ profile text are turned into search vectors by Cloudflare, which does not keep the text.
Searches for labs and researchers outside RBAi read OpenAlex and Europe PMC, which receive the search, not your account details.
For a request you send from your own email app, Connect keeps the name, affiliation, subject and status you saved, not the person’s email address.

Request emails to researchers outside RBAi.

When you choose to send a request through RBAi, we email the researcher only at the address printed with their paper, and only after you have seen the exact email.
We keep the address, the paper, your message and any reply that comes back through RBAi, to apply our sending limits and to show you the thread.
We never add the address to a mailing list. The link “Don’t send me requests through RBAi” in each email stops requests from every sender to that address, permanently.
Microsoft Azure Communication Services delivers these emails.

Shared documents.

When you share a report, Viewers can read it and Editors can change it.
Changes travel between the people editing through Cloudflare, which keeps a working copy of the document.
RBAi keeps a history of the changes to a shared page, with who made each change and when. The page’s owner and the people it is shared with can see this history, and it is deleted with the page.

6. How long we keep it

We keep your data while your account is open. When you delete your work or your account, we delete it, except records we must keep by law, such as payment records for tax purposes, and records needed to settle a dispute or prevent fraud.

7. Your choices

You can see and correct your account details in Settings.
In Settings → Connect you choose whether members can find you and message you.
In Settings → Data & privacy you can export your workspace, or delete everything in it.
In Settings → Email you choose which of our emails you receive; emails about your account, such as sign-in codes, always arrive.
To close your account, or to ask what data we hold about you, write to the Grievance Officer below.
You can withdraw your consent to our processing of your personal data by writing to the Grievance Officer with the subject “Withdrawal of consent for processing personal data”. We may verify the request first. Withdrawal does not apply to past processing, and without that consent we may not be able to provide the service.

8. Cookies

We use four small cookies: one keeps you signed in, one guards your account against forged requests from other websites, one remembers whether the sidebar is open, and one is set only while you sign in with Google, to check that the sign-in that comes back is yours. The Platform has no advertising cookies or advertising trackers. Visits are counted by a web analytics service that sets no cookies. Your preferences and a copy of your work that helps pages open quickly are kept in your browser’s own storage. The security check on the sign-in, sign-up, password reset and contact forms is provided by a third party and may set its own cookie. Our payment partner’s payment window, which opens only when you pay, may also set its own cookies.

9. Security

Connections to the Platform are encrypted, the database is encrypted, and your Galaxy key is stored encrypted. No system is completely secure, so keep your sign-in details safe. We will never ask for your card PIN or banking password; if anyone claiming to be us does, do not share it and report it to us.

10. Changes to this policy

We may update this policy. The date at the top of this page shows the latest version; we will tell you about significant changes.

11. Grievance Officer

Questions, requests and complaints about your personal data go to:

Grievance Officer, Nodal Officer, Data Protection and Privacy

Business name: The Dream Lab Innovations
Entity type: Micro Enterprise (Sole Proprietorship)
Udyam registration: UDYAM-HR-03-0144946
Registered address: 441, Ganpati Colony, Agwanpur, Gali no. 25, Roshan Nagar, Faridabad, Haryana 121013, India
Phone: +91 93156 31612
Email: hari@thedreamlabinnovations.com
Hours: Monday to Friday, 9:00 to 18:00 IST