Genetic Data Privacy Notice

In short

This storefront accepts orders and consent records, not genetic results or uploads. All interactive previews use synthetic data.
AUTOSOME's intended use of a genetic result is limited to creating your artwork. Real genetic-data processing requires safeguards and provider terms to be confirmed first.
Optional PromicsEdge reports are available with DNA-personalized artwork at the laboratory's catalog prices, with no added markup. Provider eligibility and separate processing consent are confirmed before processing.
AUTOSOME does not interpret genetic results or prepare reports. Sample and report retention and deletion are governed by the applicable provider terms.
We do not sell, license, or share your genetic data for research, advertising, or model training.
You can withdraw consent, ask for a copy, or ask us to delete any genetic data we hold.

What we collect

Order and delivery details, and payment handled by Shopify.
The sex you provide, which the laboratory requires to validate your sample.
The report services you choose, if any. Shopify records the purchased services, never the report contents or genetic results.
Your consent records: which wording version you agreed to, and when.
A random checkout-attempt identifier to measure progress from our storefront through Shopify checkout.

What we do with it

The storefront records your order and consent. It does not accept genetic results or uploads. AUTOSOME’s planned use of a genetic result is limited to composing your artwork; we do not interpret it or prepare reports. Any transfer or processing of real genetic data requires confirmed provider arrangements, consent, and safeguards.

Optional PromicsEdge reports are available with DNA-personalized artwork. The catalog uses the laboratory’s exact report prices, with no added markup. There are 95 options listed for the standard collection kit. The three whole-genome reports require a different kit and are not available for purchase here. Reports are optional, charged once per kit, and do not change the price of your artwork.

We confirm provider eligibility and separate processing consent before a selected report is processed. If a report is unavailable, its charge will be refunded. The laboratory performs the testing, and AUTOSOME manually emails completed reports to the client. Buying artwork does not require a report, and purchasing a report does not activate genetic-data processing on this storefront.

Checkout asks for artwork consent and, if you select reports, a separate report consent. It does not currently offer consent to store a sample after processing. The laboratory’s terms govern sample retention and destruction; those terms must be confirmed before processing. Report contents and genetic results never belong in Shopify order records or our analytics.

What we never do

Interpret genetic data or prepare medical, diagnostic, ancestry, health, trait, relationship, or identity reports ourselves.
Sell, license, rent, or trade genetic data, or share it for research or model training.
Market to you based on your genetic data, or on the fact that you ordered a kit.
Disclose genetic data to insurers or employers.
Disclose genetic data beyond the service providers authorized for your artwork and any separately consented reports.

Who processes it

OmicsEdge: Collection-kit fulfillment and laboratory coordination, subject to the provider's applicable terms.
The processing laboratory: Sample processing under the applicable laboratory terms and consent. Processing arrangements must be confirmed before a sample is processed.
PromicsEdge: Optional laboratory reports. Eligibility, processing consent, provider terms, and delivery arrangements are confirmed separately from the artwork order.
Shopify: Hosted checkout, payment, tax, and order records. A consent-gated Shopify pixel reports checkout milestones using only a random checkout-attempt identifier.
Our print partner: Receives only the finished artwork file and delivery details. Never your sample or genetic data.
Vercel and PostHog: Hosting and pseudonymous storefront and checkout-step analytics. PostHog receives the random checkout-attempt identifier and checkout stage, not customer contact details, Shopify cart/order IDs, payment details, revenue, genetic data, report selections or contents, or input values.

We do not use your genetic data to infer anything about you, and we do not create advertising profiles from it.

Retention and deletion

The laboratory’s terms govern physical-sample retention and destruction. Applicable provider terms govern report retention and access. These schedules, and the retention and deletion arrangements for any genetic result used to create artwork, must be confirmed before processing. We do not promise a verified deletion window for a workflow that has not yet been activated.

We keep the minimum records needed to complete and document your order: purchase, consent, fulfillment, and the finished artwork.

Your rights

Write to info@getautosome.com to withdraw consent, ask for a copy of the genetic data we hold, or ask us to delete it. We will review your request and explain the applicable process and timing. For destruction of your physical sample or access to provider reports, the applicable provider’s terms apply.

We will not deny you service, change your price, or provide a different level of service because you exercised any of these rights.

Security

Before AUTOSOME processes real genetic data, a short-lived, isolated processing environment, encryption in transit and at rest, limited access, and deletion controls must be in place and tested. We do not accept genetic files through email, chat, or support tools. Enabling optional report purchases does not activate those data processing systems.

Complaints

Contact us first at info@getautosome.com and we will respond. If you believe your rights under California’s Genetic Information Privacy Act have been violated, you may also file a complaint with the California Attorney General.