Privacy Policy
Effective date: 25 September 2026
1. Personal Data We Process and Legal Bases
We process the following categories of personal data:
- Account information (name, email address, country)
- Order and payment data (for customers)
- User-generated content (breeding records, animal profiles)
- Technical data (IP address, device and usage data via cookies)
The legal bases for processing are:
- Performance of a contract (Art. 6(1)(b) GDPR) for paid laboratory services
- Legitimate interest (Art. 6(1)(f) GDPR) for free account functionality, customer support, fraud prevention, quality control, and scientific research
- Consent (Art. 6(1)(a) GDPR) for non-essential cookies and tracking technologies, where required
2. Data Retention and Research Use
Animal Genetic and Health Data:
Genetic sequences, test results, and related animal health markers do not constitute personal data under the GDPR. The Company retains such data indefinitely in order to:
- Enable verification and re-analysis in the event of result disputes
- Conduct longitudinal scientific research and improve test accuracy over time
This processing is based on the Company's legitimate interest in quality assurance, scientific integrity, and database continuity.
Personal Data:
Personal data linked to user accounts is retained for as long as the account remains active or as required by applicable tax, accounting, or legal obligations. Users may request deletion of their account at any time, subject to mandatory retention requirements.
3. Your Rights Under the GDPR
You have the right to:
- Request access to your personal data
- Request rectification of inaccurate data
- Request erasure of your personal data, where legally permissible
- Request restriction of processing
- Object to processing based on legitimate interests
- Request data portability
You also have the right to lodge a complaint with your local data protection authority.
Requests may be sent to legal@trugenix.com. We will respond to all requests without undue delay and no later than one month from receipt.
4. Cookies and Tracking Technologies
We use cookies and similar technologies to operate the website, analyze usage, and improve our services.
- Essential cookies are required for core functionality and cannot be disabled
- Analytics cookies may be provided through PostHog, using PostHog's EU infrastructure
- Aggregated, anonymous, cookieless measurement tools may be used to understand traffic and site performance
- Fine-grained, user-specific analytics are enabled only with your consent
- With your consent, we may record session replays to see how visitors use the site; the text you enter into forms is masked
You may manage or withdraw your consent at any time via the cookie settings on our website.
We may store your analytics consent choice and related compliance information in order to respect your preferences and document consent decisions.
Feedback and bug reporting tool
Signed-in users can send us feedback through an embedded reporting tool. When you choose to send a report, it may include a screenshot of the page you are on, the text of any errors your browser recorded, a short trail of the actions you took immediately beforehand, and technical metadata such as browser, operating system, screen size, time zone and language. Form fields are masked in screenshots, and email addresses and long numeric or token-like strings are removed from the captured text before delivery. Reports are delivered only to storage we control and are not shared with any third party. You can hide the tool at any time using its close control.
Knowledge article feedback
Each knowledge article ends with the question “Was this article helpful?”. If you answer it, we store your answer, which article it was about, the date, and the note you write if you choose to tell us what was missing. Answering also sets one first-party cookie holding a randomly generated identifier, so that a later visit updates your answer instead of recording a second one, and so that a note attaches to the answer you already gave. That identifier expires after a year and is not linked to your account, your IP address, or any analytics profile, which is why this cookie is essential to the feature rather than an analytics cookie. Once an article has collected at least five answers, it displays the share of readers who found it helpful, for example “80% of readers thought this article was helpful”. That figure is the only thing other visitors see: no individual answer, no note, and no count is ever published.
Requests for a species we do not test yet
If we do not offer a test for your species yet, you can ask us to tell you when we do. You do not need an account for this. We store your email address, the species you picked or the name you typed, whether you said you could send a shed, the page you asked from, your language, and the date. If you are signed in, the request is also linked to your account. We process this data on the basis of your consent, which you give by sending the request.
We use your email address only to tell you when we can test the species. We also count requests per species so our laboratory can decide which tests to build next; the team receives those counts once a month, without any email addresses. We keep your email address for 24 months at most. After that it is erased, and only the anonymous count of the request remains. It is also erased when you delete your account, and it is included when you export your account data. You can withdraw your consent and have your request deleted at any time by writing to legal@trugenix.com.
5. Service Providers and Sub-processors
We rely on carefully selected third-party providers to operate our service. These providers process personal data on our behalf under data processing agreements and only as necessary to deliver the functions described below:
| Provider | Purpose | Processing region |
|---|---|---|
| Clerk | User authentication and account management | EU / US |
| Stripe | Payment processing and invoicing | EU / US |
| Neon | Database hosting | EU |
| Vercel | Application hosting, file/media storage, and performance measurement | EU / US |
| Resend | Transactional email delivery | US |
| PostHog | Product and usage analytics (consent-based) | EU |
| Laboklin | Laboratory genetic testing partner | EU |
| OpenAI | AI-assisted features | US |
Where these providers process personal data outside the European Economic Area, we rely on appropriate safeguards such as the EU Standard Contractual Clauses or applicable adequacy decisions. We keep this list up to date and update it when our providers change.
6. Mandatory Disclosures
We may be legally obligated to share data with government authorities if we suspect a violation of animal health or endangered species laws (CITES).