What we record, and why.

v1 · 4 October 2026

1. Who is responsible

AptaPilot is operated by Xiaohan Zhang as an individual, in Waterloo, Ontario, Canada. For any privacy question or request, write to [email protected].

This notice covers the aptapilot.com website and the service projects you commission through it. Accounts, the Launcher and the licensed desktop software are covered by the AptaPilot Privacy Policy on the portal.

2. What we record

When you open a page

• A page-view counter of our own. Each page sends one record: the page path, the host name of the site that referred you (if any), your country as worked out by our hosting provider, the browser's user-agent string, the time, and a visitor code. The code is a shortened hash of your IP address, user-agent and the date. Your IP address is not stored, and because the date is part of it, the code changes every day and visits cannot be linked from one day to the next. No cookie is set.
• Cloudflare Web Analytics. Our hosting provider measures page loads and performance in aggregate, without cookies and without visitor profiles.
• Delivery and security. Cloudflare processes your IP address and request details to serve pages and to block abusive traffic.

When you send a request

The request form takes your name, work email, organisation, what you are asking about, your message, and optionally your buffer and the kind of data you hold. With each submission we also record the IP address, user-agent, country and time, so that abuse can be dealt with. Cloudflare Turnstile checks that the sender is not a bot. The submission is stored with Cloudflare and a copy is delivered to our mailbox. Email sent to [email protected] reaches the same mailbox.

Please do not paste sequences or unpublished results into the form. Nothing of that kind is needed before an NDA is in place.

When you commission a project

Sequencing files and other project data are received through a private transfer link after an NDA is signed. They are used only for the project you commissioned, are not shared with third parties, and are not used to train models or reused in other projects without your written permission. The partner laboratory sees them only for wet-lab work you commission. At project close we delete the raw data on request and keep what the agreement says we keep, typically the report and its checksums. The service agreement governs if it says something different from this page.

The tools

Kd Fitting runs in your browser and uploads nothing. The desktop tools process your files on your own computer. Downloads are counted by tool, platform and country, without an IP address.

3. Why, and on what basis

Page-view and download counts tell us which pages and tools are used, and request data keeps the site running and secure. Where the GDPR applies, this rests on our legitimate interest in operating the site. A request is used to answer you and to take the steps you asked for before any contract. Project data is processed to perform the agreement with you or your organisation. Nothing is sold, and nothing is used for advertising.

4. Where it is kept, and for how long

The site, the form and the counters run on Cloudflare, whose network operates in many countries, and our mailbox is hosted by a third-party email provider. Your information may therefore be processed outside your own country, including in Canada and the United States.

• Page-view records hold no name, email or IP address and are kept as statistics.
• Download counts are kept for about three months.
• Requests and correspondence are kept for as long as the conversation or the resulting project is active and as a record of it afterwards, and are deleted on request.
• Project data is kept as the NDA and service agreement provide.

5. Your choices

You can ask what we hold about you, ask for it to be corrected or deleted, or object to its use. Write to [email protected] from the address concerned. Depending on where you live you may have further rights under PIPEDA (Canada), the GDPR (EU/UK) or PIPL (China), including the right to complain to your data-protection authority.

6. Changes

If what the site records changes, this page changes with it and the version at the top is raised.