Privacy policy

Vialo is a web platform for managing research labs. This policy covers the website and the platform, and is governed by Argentina's Personal Data Protection Law 25,326.

Who is responsible for each piece of data

• Your account and what you write to us: the controller is the operator of Vialo, whose legal details you can request through the contact form and which are stated when contracting.
• What each lab records: the controller is the lab or its institution, which decides what is recorded and why. Vialo processes it on its behalf, as a processor, under the data processing agreement. If your request is about that data, we refer it to the lab's admins.

What data we use

• Your account: name, email, chosen language, the labs you belong to and your role in each, and which version of these documents you accepted and when.
• Google sign-in: if you choose "Continue with Google", Google shares your name, email and account identifier with us. We only use them to log you in. We don't access your email, contacts or Google files.
• What your lab records: samples, equipment, supplies, protocols, budgets, services and their clients, sensor readings, attachments and each lab's own fields. These may include health data or data about research participants, which are sensitive data: the lab must have the legal basis to record them.
• Change history: who created, moved or edited each record, and when.
• Notifications: if you turn them on, the subscription for each browser where you get them and the email you choose for alerts.
• Contact form and support: what you fill in to request a trial or write to us.
• Technical errors: the error message, without emails, and the screen where it happened, so we can fix it.
• Billing: when a plan is bought on the web, tax details and payment status. Card details are handled by the payment processor: they don't reach Vialo.
• Cookies: only the ones needed to keep you logged in and remember your language. We don't use third-party advertising or analytics cookies.

Why we use it

To provide the service, under our contract: let you log in, see and record your lab's data according to your role, send you the alerts you chose, keep the platform secure and reply when you write to us. We don't sell data, don't use it for advertising and don't train AI models with labs' data.

Who we share it with

Only with the providers that run Vialo, and only what each one needs:

• Supabase: database, sign-in and attachments (servers in São Paulo, Brazil).
• Vercel: hosts the web app.
• GitHub: stores the daily encrypted backups for 90 days (United States).
• Brevo: sends alert and contact emails.
• Google: if you choose to log in with Google, and to send sign-in and invitation emails.
• Browser notification services (from Google, Mozilla or Apple, depending on your browser): deliver the notifications you turned on.
• Payment processor: when a plan is bought on the web, it processes the payment.

Also with an authority, if the law requires it. If you connect an AI assistant to Vialo with a token, that assistant sees the data its token allows, and its provider processes it under whatever you or your lab agreed with them.

Data outside Argentina

As the list shows, data is stored and processed outside Argentina. We do so with providers contractually bound to protect it, with the safeguards required by Argentine rules on international transfers. By using Vialo, and for your account data, you accept that transfer.

Separation and security

Each lab's data stays in that lab: separation and each role's permissions are enforced in the database, not just on screen. Connections and backups are encrypted, and passwords and tokens aren't stored in plain text. If an incident affects your data, we notify the affected labs without delay, and the authority when required.

How long we keep it

• Lab data: while the service is active. When it ends, the lab has at least 30 days to export it, and then it's deleted from the platform; sooner if its admins ask in writing.
• Backups: delete themselves after 90 days.
• Your account: while you belong to a lab or until you ask to close it. A lab's history is part of its records: if you leave, it may still show what you did for as long as the lab exists.
• Technical errors: 90 days.
• Acceptance of these documents and billing data: what's needed to prove the contract and what the law requires.

Your rights

You can ask to access, correct, update or delete your personal data, free of charge. Write to us through the contact form or ask your lab's admins. The Agencia de Acceso a la Información Pública, the authority for Law 25,326, handles complaints about non-compliance.

Changes

If we change this policy, we post the new version here with its date; if the change is significant, we ask you to accept it.