Data Storage & Retention Terms

Scope and purpose

These Data Storage & Retention Terms ("Storage Terms") govern how Mosaic Biodata Inc. ("Mosaic," "we," "us," or "our") stores and retains the genomic data generated from your whole-genome sequencing, and your access to it. Storage of your genomic data is included with your kit and related services at no additional charge. It is not a subscription, and there is no storage fee. These Storage Terms supplement and are incorporated into our Terms of Service, Privacy Policy, Kit & Report Order Terms, and Genetic Data Consent Notice. Mosaic's only subscription product is Clara (governed by the Clara Subscription Terms); these Storage Terms are not a subscription.

What storage includes

Storage includes, at no additional charge for the life of your account: secure cloud storage of your VCF (Variant Call Format) file; viewing and downloading access to your genetic data and lifestyle reports through your account; and backup and redundancy, with commercially reasonable service availability. There is no separate storage plan, archiving tier, or unarchiving fee. Storage for the life of your account applies to genomic data Mosaic generates from your kit. Data you upload yourself (Bring Your Own Data) is stored on a best-effort basis and is governed by the Kit & Report Order Terms; keep your own copy. Storage for the life of your account applies to genomic data Mosaic generates from your kit. Data you upload yourself (Bring Your Own Data) is stored on a best-effort basis and is governed by the Kit & Report Order Terms; keep your own copy.

Security

We protect stored genomic data using technical and organizational measures, including AES-256 encryption, access controls, backup and redundancy systems, and 24/7 monitoring. Data is stored in U.S. data centers regardless of your location. No method of storage or transmission is completely secure.

Data retention: controlled by the data owner

We retain your genomic data for as long as it takes to provide the service and until the data owner requests its deletion. We do not impose a fixed expiration on your genomic data; you decide when it is deleted.

The "data owner" is the individual whose genetic data it is, the person who was sequenced. Deletion and access rights over the genomic data always run to that individual, even where a provider or other party placed the order on their behalf. We verify the data owner's identity through account authentication before acting on a deletion request. Where a provider placed the order on the individual's behalf, the individual's own deletion and access rights control.

The only exceptions to deletion-on-request are limited records we are required by law to retain (for example, transaction and tax records, kept for seven (7) years) and any information our laboratory partner must retain to meet its own legal or accreditation obligations. We honor deletion and consent-revocation requests within the timeframes required by applicable law, including California's Genetic Information Privacy Act and comparable state laws.

Access and account closure

You may view and download your VCF file and reports through your account at any time. Because retention is controlled by the data owner, your genomic data is not deleted automatically on inactivity or account closure, it remains available, and the data owner's right to request deletion continues, until deletion is requested.

Deletion and biological samples

The data owner may request deletion of the stored genomic data at any time through the methods described in the Privacy Policy and Genetic Data Consent Notice, and we will delete it except for the limited legally required records noted in the Data retention section. The laboratory partner destroys the physical sample after successful sequencing. We honor consent revocation and sample-destruction requests as required by applicable genetic-privacy law.

What is not included

These Storage Terms do not cover the sequencing kit itself (purchased separately), report generation, additional genetic analysis or interpretation, genetic counseling, or medical advice, diagnosis, or treatment. Mosaic's genomics products are non-medical.

Acceptable use

You agree not to share account credentials, circumvent access controls, reverse engineer our systems, use the service for unauthorized commercial purposes, or violate applicable law.

Legal compliance and your rights

Our storage and retention practices are designed to comply with applicable law, including GINA, state genetic-privacy laws (such as the California Genetic Information Privacy Act), state comprehensive privacy laws that treat genetic data as sensitive data, CCPA/CPRA, and, for applicable users, GDPR and PIPEDA. Depending on where you live, you may have rights to access, correct, delete, port, or restrict processing of your data; see the Privacy Policy and Genetic Data Consent Notice for how to exercise them.

Governing law

These Storage Terms are governed by the laws of the State of Texas and applicable federal law, without regard to conflict-of-laws principles, except that the consumer-protection laws of your state of residence may also apply and provide additional protections.

Dispute resolution

Disputes are subject to the dispute-resolution procedures in our Terms of Service (informal resolution, then binding arbitration for U.S. residents unless you opt out, individual claims only), incorporated here by reference. See our Terms of Service.

Disclaimers and limitation of liability

Storage is provided "AS IS" and "AS AVAILABLE," without warranties of any kind to the fullest extent permitted by law, including warranties of uninterrupted or error-free service. To the maximum extent permitted by law, we are not liable for indirect, incidental, special, or consequential damages, or for lost profits or data. Our total liability for any claim relating to storage will not exceed US $100 (storage is provided at no charge, so there are no fees to reference). Some jurisdictions do not allow certain limitations.

Changes to these Terms

We may update these Storage Terms to reflect changes in law, our services, or our practices. For material changes we will provide notice (for example, by email or through your account) and update the effective date; continued use after the change constitutes acceptance.

Termination

You may close your account at any time. We may suspend or end access if you breach these Storage Terms or the Terms of Service, or as required by law. Your genomic data is retained and deleted per the Data retention and Deletion and biological samples sections and the Genetic Data Consent Notice. The sections on security, data retention, deletion and biological samples, governing law, dispute resolution, and disclaimers and limitation of liability survive termination.

Contact

Mosaic Biodata Inc., 919 Congress Ave, Suite 525, Austin, TX 78701, United States. Storage questions: support@mosaicbio.io (subject "Data Storage"). Incorporated in Texas.