Skip to main content
← Back to Hermit

Privacy Policy

Version 1 · Last updated June 20, 2026

This Privacy Policy explains how Biomatica (“Biomatica”, “we”, “us”, or “our”) collects, uses, and protects your information when you use Hermit (the “Service”). It works alongside our Terms of Service. By using the Service, you agree to this Policy.

1. Information we collect

Information you provide.

  • Account information — your first and last name, email address, and (optionally) your company. If you sign in with Google, we receive your name and email from your Google account. Passwords for email/password accounts are handled by our authentication provider; we do not store your raw password.
  • Your content — the design briefs, text, images, and files you upload or create in the Service.
  • Communications — feedback, support requests, and other messages you send us.

Information collected automatically.

  • Usage and metering data — records of your activity such as request counts, AI token usage, costs, and timestamps, which we use to operate the Service and enforce usage limits.
  • System, authentication, and security logs — our infrastructure providers (Google Cloud Platform and Firebase) automatically process routine technical data, such as IP addresses and device or browser information, on a temporary basis for authentication, session management, security auditing, and protection against abuse (for example, denial-of-service attacks).
  • Cookies and similar technologies — see the Cookies section below.

Please do not upload sensitive personal information. The Service is a design-evaluation tool and is not designed to process or store sensitive personal data — for example, government identification numbers, health or medical information, financial account numbers, or precise geolocation. Please do not include such information in your briefs, attachments, or other content.

2. How we use your information

  • provide, operate, maintain, and secure the Service;
  • authenticate you and keep you signed in;
  • generate evaluations, summaries, and recommendations from your content;
  • respond to your feedback and support requests;
  • send you account and service-related communications;
  • enforce usage limits and prevent abuse; and
  • comply with legal obligations and enforce our Terms.

3. AI processing of your content

To generate evaluations, summaries, and similar features, your content is processed by trusted third-party AI service providers acting on our behalf. We do not use your content to train artificial intelligence or machine-learning models. These providers are bound by confidentiality and data processing agreements that prohibit them from using your content for any purpose other than providing the AI services we request — which expressly includes a prohibition on using your content to train or improve their models. We treat your content as confidential: our staff access it only as needed to operate, support, or secure the Service, or where required by law.

4. How we share your information

We do not sell your personal information. We share information only as follows:

  • Service providers (sub-processors). We use trusted providers to run the Service on our behalf, including cloud hosting, authentication, and database providers (Google Cloud Platform and Firebase) to store your account and content, AI processing providers (as described above), an email delivery provider (to send service emails), and a customer relationship management (CRM) provider (to manage our relationship with registered users). They may process your information only to provide services to us.
  • Legal and safety. We may disclose information if required by law or to protect the rights, safety, and security of Biomatica, our users, or the public.
  • Business transfers. If Biomatica is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. In that event, the acquiring entity will be required to honor the commitments in this Privacy Policy — including the commitment not to use your content to train AI models — or we will give you advance notice and an opportunity to delete your data before any materially different policy takes effect.

5. Cookies and similar technologies

We use only essential, first-party cookies that are strictly necessary to run the Service:

  • __session — keeps you securely signed in;
  • user-pending — directs newly registered accounts that are awaiting activation to the right page.

We also use related first-party browser storage for functionality — for example, a small entry that prevents the welcome tutorial from reappearing during a session, and storage our authentication provider uses to keep you signed in.

We do not use advertising, analytics, or cross-site tracking cookies. Because we use only essential cookies, we do not display a cookie consent banner. You can block or delete cookies in your browser settings, but blocking essential cookies may prevent you from signing in or using the Service. If you sign in with Google, Google may set its own cookies during the sign-in process under Google’s privacy policy.

6. Data retention

We retain your account information and content while your account is active and as needed to provide the Service. When you delete content or your account, we delete or anonymize the associated information, except for residual copies that may persist in our encrypted, routine backups for up to 60 days before they are overwritten, or longer where required by law. You can ask us to delete your account by contacting support@biomatica.life.

7. Security

We use reasonable technical and organizational measures to protect your information, including encryption in transit and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. Your rights

Depending on where you live, you may have the following rights over your personal information, consistent with applicable U.S. state privacy laws (such as the California Consumer Privacy Act and the Texas Data Privacy and Security Act) and other applicable laws:

  • the right to access the personal information we hold about you;
  • the right to correct inaccurate personal information;
  • the right to delete your personal information;
  • the right to obtain a portable copy of your content; and
  • the right to object to or restrict certain processing.

You can exercise several of these rights yourself, directly in the Service: update your profile and delete your projects at any time from your account. For other requests, contact us at support@biomatica.life, and we will respond as required by applicable law. To protect your information, before we fulfill an access or deletion request we will take reasonable steps to verify your identity — typically by confirming that the request comes from, or controls, the account email — and we may decline requests we cannot reasonably verify. Where permitted by law, you may use an authorized agent to submit a request on your behalf. We will not discriminate against you for exercising your rights.

9. International users & data transfers

We operate the Service using cloud infrastructure hosted primarily in the United States, so if you access the Service from outside the United States, your information will be transferred to and processed in the United States and other countries. If you are located in the United Kingdom, the European Economic Area, or Switzerland, these cross-border transfers rely on appropriate safeguards — such as the Standard Contractual Clauses and the data processing terms offered by our infrastructure providers (including Google Cloud’s data processing addendum), and, to the extent those providers participate in it, the EU-U.S. Data Privacy Framework together with its UK Extension and the Swiss-U.S. Data Privacy Framework — to give your information an adequate level of protection.

10. Children’s privacy

The Service is not intended for anyone under 18 years old, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.

11. Changes to this Policy

We may update this Privacy Policy from time to time. When we do, we will revise the date above, and for material changes we will provide a more prominent notice where appropriate.

12. Contact

Questions about this Privacy Policy or your information? Contact us at support@biomatica.life.