DeepFCS ← Back to site

Privacy Policy

This policy explains what personal data DeepFCS collects, why we use it and the choices you have. It applies to deepfcs.com and app.deepfcs.com.

In short.

We use your data to run DeepFCS and keep it secure. We do not sell it.
Patient identifiers are removed from files when you upload them.
You can download your data or close your account at any time from your account page.

1. Who we are

DeepFCS is operated by PAN INFORMATION TECHNOLOGIES, DIK SOK. NO:13 34841 ISTANBUL, Türkiye ("DeepFCS", "we", "us"). You can reach us at privacy@deepfcs.com.

For your account, we decide how your personal data is used: we are its controller. For the case files you upload, your laboratory or institution is the controller, and we process those files on its behalf to produce your analysis: we are its processor.

2. What we collect

Account. Your e-mail address, confirmed by Google when you sign in. We never see your Google password.
Profile (optional). Your name, institution, department or lab, professional role, country and the instruments you work with: only what you choose to add.
Files and results. The flow-cytometry files you upload, and the analyses and PDF reports we produce.
Feedback. What you write when you send us feedback. If you choose to attach your conversation with Nova, the assistant, we keep that too.
Usage and security. How many analyses you run, when you sign in, and technical data such as IP address and browser type in our server logs.
Your choices. When you accepted our Terms of Use, and whether you want product news.

3. How we use it

To provide DeepFCS: sign you in, run your analyses, show your results and manage your monthly allowance (legal basis: our contract with you).
To keep DeepFCS secure and prevent misuse (legal basis: our legitimate interest in protecting the service).
To develop and improve DeepFCS using de-identified data (legal basis: our legitimate interest in improving the service).
To send product news, only if you opted in (legal basis: your consent).
To meet our legal obligations (legal basis: law).

We do not sell personal data, and we do not use the content of your case files to advertise to you.

4. Uploaded files

Identifiers are removed on upload. Patient-identifying metadata in a file (names, IDs, operator fields and similar) is removed when you upload it, before the file is stored. An upload that cannot be de-identified is rejected.
Deleting. Deleting a file, or closing your account, removes the file and its results from your account.

5. Nova, the assistant

Nova runs on our own servers. Your questions and files are not sent to an outside AI provider. Your conversation is used only to answer you and is not saved: it exists only in your browser while the page is open, and is gone when you close it. If you choose to attach a conversation to feedback you send us, we keep that copy with your feedback.

6. Signing in

You sign in with Google, or with another sign-in provider we support. Google confirms your e-mail address to us; we never see your password. Google's use of your data is governed by Google's own privacy policy.

7. Cookies and browser storage

To keep you signed in, we store a sign-in token in your browser, as a cookie and in local storage. We also remember whether you have seen the product tour. We do not use advertising or analytics cookies.

8. Where your data is stored

Your account data and files are stored on servers located in Türkiye. Some providers we rely on, such as Google for sign-in, may process data outside Türkiye.

9. Who we share it with

Providers that help us run DeepFCS, such as Google for sign-in, only as far as needed.
Public authorities, when the law requires it.

10. How long we keep it

Account and profile: while your account is open. If you close it, you can restore it within 7 days. After 7 days, your account and personal data are deleted from our active systems.
Files, analyses and reports: until you delete them or your account is deleted.
Nova conversations: not saved (see section 5).
Feedback: until your account is deleted, at the latest.
De-identified copies: kept to develop DeepFCS.

We keep something longer only where the law requires it.

11. Security

We protect data with encryption in transit, access controls and de-identification on upload. If a breach affects your personal data, we will inform you and the authorities as the law requires.

12. Your rights

Depending on where you live, you can ask to access, correct, export or delete your personal data, to restrict or object to how we use it, and to withdraw consent you gave, such as for product news. You can also complain to your data protection authority.

You can do much of this yourself on your account page: edit your profile, download your data, turn product news off or close your account. For anything else, write to privacy@deepfcs.com from the e-mail address on your account. We reply within 30 days.

If you are a patient and a laboratory uploaded your data, please contact that laboratory; we will help it respond.

13. Children

DeepFCS is for healthcare and research professionals and is not meant for anyone under 18.

14. People in Türkiye

Our Türkiye (KVKK) notice gives the information required by Turkish data protection law (Law No. 6698).

15. Changes

If we change this policy in a material way, we will tell you in the app or by e-mail and ask you to confirm before you continue.

16. Contact

privacy@deepfcs.com · PAN INFORMATION TECHNOLOGIES, DIK SOK. NO:13 34841 ISTANBUL, Türkiye