This notice explains what personal data AlphaSuite collects, why, on what legal basis, and what rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Please read it carefully.
AlphaSuite is developed and operated by AvennaX (company registration in progress; until incorporation is complete, AlphaSuite is operated by its founding team). References to “we”, “us”, or “our” mean AvennaX / the AlphaSuite founding team. We are the data controller for personal data processed in connection with AlphaSuite.
We are based in the United Kingdom. UK GDPR applies to all processing described in this notice.
Contact: AvennaXLtd@outlook.com
Once we are registered with Companies House, we will update this notice with our registered company number and address. We will also register with the Information Commissioner’s Office (ICO) as required under the Data Protection (Charges and Information) Regulations 2018.
AlphaSuite does not require account creation or login for the first free Atlas proteins each day. Most ordinary use of AlphaSuite involves no collection of directly identifiable personal data, but we do use an essential anonymous access cookie to show and enforce the daily free allowance, which resets at 00:00 UTC.
We use privacy-friendly analytics to understand overall usage patterns and improve AlphaSuite. This includes Plausible Analytics and limited server-side aggregate counters. Plausible does not set cookies, does not track visitors across websites, and does not store raw IP addresses. At collection time, Plausible uses the visitor IP address, browser user-agent, and site domain to generate a daily anonymous visitor hash and approximate location before discarding the raw IP address.
Our internal server-side counters also derive a short anonymised fingerprint from your IP address and browser type. This fingerprint is a one-way, non-reversible SHA-256 hash, truncated to 16 characters. We cannot reverse this to identify you. It is used solely to count approximate unique visitors and understand aggregate usage patterns.
When you open Atlas or load proteins in Atlas without an account, we set an essential signed cookie in your browser and store a one-way hash of that anonymous identifier on our server. We record the UniProt IDs accessed and timestamps so we can enforce the free daily protein allowance and show the token meter. We do not store the raw cookie token in the quota database, and we do not use this cookie for advertising or cross-site tracking.
If you choose to upload a PDB, CIF, or mmCIF file, it may contain unpublished, commercially sensitive, or otherwise confidential scientific information. We process the file only to validate and display the coordinates, identify chains, create residue mappings and annotations, and calculate interfaces that you request. Uploaded coordinates are not used to train models, made public, or added to AlphaSuite’s public model cache.
If you choose to join our waitlist, we collect your email address and, optionally, your name.
If you contact us by email, we process your email address and the content of your correspondence in order to respond to your enquiry.
All scientific database lookups performed by AlphaSuite (UniProt, InterPro, PDBe, SIFTS, RCSB PDB, AlphaFold DB) are performed server-side. Your browser does not contact these databases directly, and they do not receive your IP address from AlphaSuite. Uploaded coordinate files are not sent to those scientific databases; only a user-selected accession or a claimed public identifier may be checked against them.
However, when your browser loads AlphaSuite, it contacts the following third-party services, which may receive your IP address and browser information as part of normal web request processing:
We do not share your personal data with any other third parties, and we do not use your data for advertising purposes.
Your analytics data and waitlist data are stored on servers located in the United Kingdom or the European Economic Area. We do not transfer your personal data outside the UK/EEA.
Google Fonts transmits your IP address to Google LLC, which is based in the United States. Google relies on Standard Contractual Clauses approved under the UK GDPR framework to ensure adequate protection for this transfer. For more information, see Google’s privacy frameworks page.
AlphaSuite uses an essential signed cookie to remember your anonymous Atlas allowance, browser local storage for interface preferences such as your chosen colour theme, and session storage for the capability token that protects a temporary structure upload. The upload capability is cleared when its browser tab session ends and is never placed in a URL.
For full information, including how to clear this data, see our Cookies & Local Storage page.
We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or destruction. These include HTTPS encryption in transit, hashed analytics identifiers, password-protected administrative access, and rate limiting on our API. No system can be completely secure; in the unlikely event of a personal data breach that affects your rights and freedoms, we will notify the ICO and affected individuals as required by UK GDPR.
You have the following rights in relation to personal data we hold about you. Not all rights apply in all circumstances — we will tell you if a particular right does not apply to your request.
To exercise any of these rights, email us at AvennaXLtd@outlook.com. We will respond within one calendar month. We may need to verify your identity before acting on a request. There is no charge for making a request.
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO):
We would, however, welcome the opportunity to resolve any concern you have directly before you contact the ICO — please reach out to us first.
AlphaSuite is intended for users aged 16 and over. We do not knowingly collect personal data from anyone under the age of 16. If you believe we have inadvertently collected data from a person under 16, please contact us and we will delete it promptly.
We may update this privacy notice from time to time to reflect changes in our practices or legal obligations. We will update the “Last updated” date at the top of this page. Where we make material changes, we will take reasonable steps to bring those changes to your attention. Continued use of AlphaSuite after an update constitutes acceptance of the revised notice.
For any privacy-related questions, requests, or complaints, contact us at:
AvennaXLtd@outlook.com
AlphaSuite / AvennaX — United Kingdom