We collect your order email, billing country, scoped question, supplied name/notes, affirmative consent timestamps and policy version, private source uploads, project updates, research report and outside-source decisions. Stripe processes payment and billing details. Cloudflare hosts the service, private files and project database; SMTP2GO delivers order/project email. No private research files or genetic summaries are sent to AI services by this division. We do not sell private research or genetic data, use it for advertising, train models on it, or post your family tree publicly.
Public usage counts contain event type and time only (visit, installation, checkout start), with no family names, research questions, files, genetic content or order details. A short-lived keyed network identifier is used to prevent abuse; raw addresses are not written to the division event table. Hosting providers may process ordinary connection/security logs. Browser Do Not Track/global privacy choices are respected by this division's optional event collection; there are no advertising cookies or cross-site trackers.
Private research links act as access keys. Keep them secure. Files use signed links that expire after 15 minutes; refresh the private project page to get new links. Private pages, files and API responses are not stored in the app's offline cache. Installing the app does not publish your information. Downloads are your responsibility to store and share securely. No system can promise absolute security.
We use the minimum information necessary for the purchased question. Do not submit passwords, account access, Social Security numbers, payment details, raw DNA, health results, minors' genetic information, or unredacted lists about unrelated living people. Redact living people unless their inclusion is necessary and authorized. Use initials for match summaries.
Private research materials are retained while the project is active. At 90 days after completion the owner desk flags them for a retention/deletion review; download your report promptly. This is a review target, not a claim of automatic deletion. Contact support to request earlier deletion or a limited extension. Necessary transaction, consent, fraud/dispute, tax and legal records may be retained separately as required; backup copies may persist through provider recovery cycles. Your ordinary research files can be removed without deleting legally required transaction records.
Request access, correction, a copy, deletion or withdrawal of optional genetic consent at support@eftsona.com using the order email and number. We verify control of the order before disclosure or removal. The private project page offers a privacy pause. Withdrawal stops further affected processing; it cannot undo research already lawfully completed or retrieve reports you have shared. We aim to respond within 45 days and explain any lawful extension or limitation. You may appeal a denied privacy request by replying with “Privacy appeal”; we aim to respond within 60 days. Applicable rights and complaint options remain available. Services are for adults; do not submit a minor's DNA. Unexpected child data is placed on hold for removal.