Privacy Policy

We may collect account information such as your name, email address, role, and authentication details when you sign in or are invited to access a dataset.

We also collect operational information needed to run the service, including dataset metadata, file paths, upload and download activity, API usage, audit records, and limited technical logs such as IP addresses, browser details, and error reports.

If you connect Google Drive, we store the connection metadata required to identify the linked Google account and encrypted tokens needed to perform imports that you explicitly request.

We use collected information to authenticate users, manage access permissions, store and serve datasets, process uploads and downloads, support administrative workflows, and maintain platform security and reliability.

When you initiate a Google Drive import, we use the granted Google authorization to read the selected files and folders and copy them into OHANA storage. We do not use that access for unrelated purposes.

We do not sell personal information. Information may be shared with infrastructure providers and service partners that help us host the platform, store data, provide authentication, and monitor performance, but only as needed to operate the service.

We may also disclose information if required to comply with applicable law, enforce platform rules, investigate abuse, or protect the rights, safety, or integrity of the lab, platform, and users.

We retain account records, audit events, and dataset management information for as long as reasonably necessary to operate the platform, comply with institutional requirements, resolve disputes, and maintain security records.

Connected Google Drive credentials may be retained until you disconnect the integration, remove the related import source, or an administrator disables the connection.

We use administrative access controls, encrypted transport, and other reasonable technical and organizational safeguards designed to protect platform data. No system is perfectly secure, and we cannot guarantee absolute security.

You may request updates to your account information, ask to disconnect a third-party integration, or contact us regarding access and deletion questions related to personal information we hold about you, subject to applicable law and institutional obligations.

We may update this Privacy Policy from time to time. When we do, we will update the effective date on this page and post the revised version at this URL.