Privacy Policy

Summary

This is a research-stage product. Evolrix AI is operated by IH BLUEX (Shanghai) Intelligent Technology Co., Ltd. (Chinese: 蓝色光钥（上海）智能科技有限公司, brand "IH Bluex"). The only personal data we collect through this website is the email address you submit to join the research-access waitlist. We use it only to contact you about access to Evolrix AI. We do not run analytics, we do not use advertising trackers, and we set no tracking cookies. Your email is stored on infrastructure located in mainland China.

Who is responsible for your data

The data controller is:

IH BLUEX (Shanghai) Intelligent Technology Co., Ltd.
蓝色光钥（上海）智能科技有限公司 (IH Bluex)
Shanghai, People's Republic of China
ICP filing: 沪ICP备2021012411号

For data-protection questions specifically, write to lei@bluex.net.cn. For general questions, lei@bluex.net.cn.

What we collect

We collect the minimum needed to operate the waitlist:

• Email address — when you submit the research-access form. This is the only field we ask for; we do not request your name, institution, or phone number through the form.
• A locale tag ("en" or "zh") — recorded with your email so we can reply in the language of the page you used.
• Server logs — like most websites, our hosting provider may record standard request metadata (IP address, timestamp, user agent) for security and abuse prevention. These are not linked to your email for profiling.

Trying Kairos requires no email and no account — anonymous trial tokens are random strings we cannot tie to you.

We do not collect: browsing behavior, precise geolocation, biometric data, or any data from third-party profiles. We do not use analytics tools.

How we use your data

• To respond to your access request and onboarding communication.
• To send you relevant access updates only — as stated on the form, there is no newsletter cadence; we write only when there is a relevant access update.
• To prevent duplicate submissions and abuse (de-duplication).
• To meet legal or regulatory obligations where required.

We do not use your email for marketing newsletters, advertising, or sale to third parties.

Legal basis for processing

Depending on the jurisdiction that applies to you, our legal basis is:

• PIPL (China): your consent when submitting the form, and necessity for performing our response to your request.
• GDPR (EEA/UK): the processing is necessary to take steps at your request prior to entering a contract (the access request), and your consent.
• CCPA/CPRA (California): we use your email to perform the business purpose of responding to your inquiry.

Storage & retention

Your email is stored on infrastructure located in mainland China, maintained by our hosting provider. We retain waitlist emails for as long as needed to process your access request and inform you of relevant updates, and for a reasonable period thereafter to respond to follow-up questions. You may request deletion at any time (see Your rights).

Kairos research assistant — data handling

In your browser

The Kairos chat interface stores your conversations, queries, and any protein sequences you enter in your browser's local storage (kairos-chat-v1, or kairos-chat-v1:u:<your email> when you are signed in) so your history persists across visits. If you sign in with email, the sign-in token and the email address you used are kept in local storage (kairos-em-token, kairos-em-email) to keep you signed in and show your own research; signing out deletes them. Your invite or trial token is kept in session storage and cleared when the tab closes, unless you choose "remember this browser". This data stays on your device; you can clear it anytime with the "Clear local conversation data" button or by clearing your browser storage.

On our servers

Research queries and sequences you submit are processed to generate your result. Your own research reports are retained server-side so you can re-open them across sessions and after service restarts; they are used for no other purpose and are deleted on request.

Retention periods

Work data from anonymous trial sessions is processed in memory only; on the server disk it is kept temporarily only while the session is in progress, and is deleted within 24 hours after the session ends. Research records of signed-in users are retained for 7 days by default; report copies that users actively share are retained for at most 30 days. Data whose retention period has expired is deleted automatically and cannot be recovered.

Model training

Your queries and protein sequences are never used to train or fine-tune any model.

Data residency & processors

Web serving and retrieval run on our own infrastructure in China (Aliyun, self-hosted Qdrant). Reasoning is generated by DeepSeek language models via DeepSeek's API: your research question and the retrieved literature snippets are transmitted to DeepSeek for processing, and are not used by DeepSeek to train models (per DeepSeek's API terms). Structure checks accept a UniProt accession only, and a question that carries a sequence-shaped payload is refused before it is sent — sequences you paste are intercepted by our egress gate and never leave. By using the Kairos research assistant you consent to this processing.

Assay feedback you submit

If you voluntarily submit measured wet-lab results via the feedback feature, those records (sequence, protein, host, readout, value, conditions) are stored by us to improve calibration — because you chose to contribute them. You can request their deletion by emailing lei@bluex.net.cn.

Deletion & DPA

Local data: clear it yourself anytime (above). Server-side: your research reports are retained for your own re-access and can be deleted on request; voluntarily-submitted assay records can be deleted on request. Enterprise customers may request a Data Processing Agreement (DPA) at lei@bluex.net.cn.

Sharing & third-party processors

We do not sell, rent, or trade your personal data. We share it only:

• with our hosting/infrastructure provider (operating in mainland China) to the extent necessary to store and deliver the service;
• with DeepSeek, Inc. (API service provider, processing outside mainland China), to the extent necessary to generate AI reasoning for your research queries;
• when required by law, regulation, or legal process.

This website does not load any third-party analytics, advertising, or social-media trackers. Fonts and assets are self-hosted.

International data transfers

If you access this website from outside mainland China, your email submission will be transferred to and stored on infrastructure in mainland China. By submitting the form, you consent to this transfer. Additionally, when you use the Kairos research assistant, your research question and the retrieved scientific literature snippets are transmitted to DeepSeek's API service (operated outside mainland China) solely to generate your result. China's PIPL, the EU's GDPR (Chapter V), and other laws may give you rights regarding such transfers — see below.

Cookies & tracking technologies

This website uses no cookies for tracking, analytics, or advertising. Local storage is used only to remember your light/dark theme preference (evolrix-theme) and, if you use the Kairos chat, to keep your conversations and sign-in on your own device, as described above. Except for the email address you provide when signing in, it is stored in your browser only and is not personal data. See our Cookie Policy for details.

Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you;
• Correct inaccurate data;
• Delete your data ("right to erasure" / "right to be forgotten");
• Withdraw consent at any time (withdrawal does not affect processing already done);
• Object to or restrict certain processing;
• Data portability (receive your data in a structured format);
• Lodge a complaint with a supervisory authority.

To exercise any of these, email lei@bluex.net.cn. We will respond within the timeframes required by applicable law (generally within 30 days).

Children's privacy

Evolrix AI is a B2B research tool intended for professional research and R&D teams. It is not directed at children, and we do not knowingly collect data from anyone under 16. If you believe a minor has submitted data, contact us and we will delete it.

Changes to this policy

We may update this policy as the product evolves. We will revise the "Last updated" date above and, for material changes, notify affected users by email.