Privacy Policy

Last updated: July 16, 2026

At CBIS Co., Ltd. ("CBIS", "we", "us"), we are committed to protecting your privacy and ensuring the security of your personal information. This policy explains what information we collect through Q-omics (qomics.ai) — including its MCP connector for LLM clients such as Claude and ChatGPT — how we collect it, how we use it, and who we share it with.

1. Information We Collect

• Identity and Contact Data: your email address (and a separate purchase email, if you provide one), first and last name, organization, and country, collected when you register or purchase a license.
• Account and Security Data: your password (stored as a hash, never in plain text), email verification codes, session/refresh tokens, and the device-binding token used to enforce our one-device license policy. If you generate an API key to access Q-omics programmatically, we store that key on your account.
• Billing and Subscription Data: payment identifiers from our payment partner Toss Payments (a payment key and order ID — not your full card number), and, if you subscribe through AWS Marketplace, your AWS customer identifier, AWS account ID, and license identifiers. We also keep a record of order amounts, currency, and usage-credit consumption tied to your account.
• Technical Data: your IP address, captured transiently in our server access logs for security and abuse prevention (not stored in our user database); and, on our public pages, browser/usage data collected via Google Analytics.
• MCP / OAuth Session Data: when you connect Q-omics to an LLM client via MCP, we issue an OAuth authorization tied to your account. Your questions and the analysis results — based on public research datasets — pass through your chosen LLM provider as part of the conversation. The connector is not meant for uploading private patient data or raw sequencing files.
• Communication Data: records of support emails or other correspondence you have with us.

2. How We Collect Your Information

• Direct interactions: when you register, purchase a license, complete AWS Marketplace onboarding, generate an API key, or email our support address.
• Automated technologies: cookies, a device ID stored in your browser, and server access logs, collected automatically as you use the service.
• Third parties: AWS (Marketplace ResolveCustomer/entitlement APIs) and Toss Payments provide us with billing and subscription identifiers when you purchase through those channels.

3. How We Use Your Information

• To create and operate your account, and to enforce license and one-device terms.
• To process payments, issue license keys, and manage subscriptions and usage credits.
• To authenticate MCP/OAuth connections between your account and the LLM client you choose to use.
• To respond to support requests and send transactional emails (verification codes, receipts).
• To maintain the security of the service, including detecting and preventing abuse using access logs.
• To understand aggregate usage of our public pages and improve them.
• To comply with our legal and regulatory obligations.

4. Disclosure of Your Information

CBIS does not sell, rent, or trade your personal information. We share it only as needed to run the service:

• Service providers: Toss Payments (payment processing), AWS Marketplace (subscription billing and entitlement checks), and our email delivery provider (sending verification codes and receipts).
• Your chosen LLM provider (e.g. Anthropic, OpenAI): only the queries and results within an MCP session — never your password, payment details, or API keys.
• Legal requirements: if we are required to disclose information to comply with a legal obligation, or to protect the rights, property, or safety of CBIS, our users, or others.

5. Data Security

We have implemented reasonable technical and administrative measures to prevent your personal information from being accidentally lost, misused, or accessed without authorization — including password hashing, hashed session and device-binding tokens, and httpOnly cookies. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

6. Cookies

Our website uses cookies to keep you signed in (refresh-token and device cookies) and, on our public pages, Google Analytics cookies to distinguish visitors and measure aggregate traffic. You can disable cookies in your browser, but some features — such as staying signed in — may stop working.

7. Your Rights

You may contact us at any time to:

• Ask for a copy of the personal information we hold about you.
• Request that we correct or delete your account information.
• Revoke an API key or disconnect an MCP/OAuth connection.
• Close your account.

8. Children's Privacy

Q-omics is not directed at children, and we do not knowingly collect personal information from children under 14.

9. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with a revised "Last updated" date.

10. Governing Law

This policy is governed by the laws of the Republic of Korea.

11. Contact Us

CBIS Co., Ltd.
404, Science Hall, 100 Cheongpa-ro 47-gil, Yongsan-gu, Seoul, Republic of Korea
Email: qomics@cbis.co.kr
Phone: +82-2-710-9415