VariantTriage is operated by an individual (sole trader) based in Belgium. For all privacy-related inquiries, contact us at hello@varianttriage.com.
When you create an account or use our service, we may collect:
We do not store your VCF files or any patient-identifying data. Your VCF is parsed locally in your browser and is never uploaded to our servers. When you actively use AI features, selected variant-level data (without patient identifiers) is transmitted to our sub-processor, Anthropic, solely to generate a summary; it is processed transiently and not retained by us. Genomic data is treated as a special category under GDPR Art. 9. We act as data controller; Anthropic acts as our sub-processor under a Data Processing Agreement.
We do not sell your data. We do not use your data for advertising.
We share data only with essential service providers:
We keep this sub-processor list current and will update it if any new third party is added.
As a user in the EU/EEA, you have the right to:
To exercise any of these rights, email us at hello@varianttriage.com. We will respond within 30 days.
We use only essential cookies and localStorage — for authentication, for your preferences, and to recognise that you have visited before (see section 8a). We do not use advertising cookies, and we do not track you across other websites. No cookie consent banner is required.
We record usage events to understand which features are actually useful and to improve the tool — for example, that a VCF was analysed, that a variant was opened, that the pharmacogenomics report was opened, or that a report was exported.
These events never include your VCF file, variant data, gene names, file names, or any patient information. The only details stored alongside an event are non-identifying counts and action types: the number of variants in a file, whether the data came from your own upload or the built-in demo, the export format (CSV, Excel or TSV), and the professional segment you may optionally select at signup.
If you are signed in, these events are linked to your account, so that we can see how different kinds of users work with the tool. They are therefore pseudonymous, not anonymous. If you are not signed in, they are stored with no account link at all. We do not store your IP address alongside these events, we do not use them for advertising, and we do not sell or share them with third parties.
Legal basis: legitimate interests (Art. 6(1)(f)) — improving the service. You may object at any time by emailing hello@varianttriage.com. These events are retained for 12 months (see section 6).
We implement appropriate technical and organisational measures to protect your data, including HTTPS encryption, hashed passwords, and access controls.
We may update this policy from time to time. We will notify registered users by email of significant changes. The "last updated" date at the top reflects the most recent revision.
For any privacy questions: hello@varianttriage.com
You also have the right to lodge a complaint with the Belgian Data Protection Authority (Autorité de protection des données): dataprotectionauthority.be