Privacy Policy - ViSOAR LLC Family of Products or Services, including Scientist Cloud Data Portal and Scientist Cloud Storage, Developed by ViSUS LLC, doing business as ViSOAR LLC. Contact: Amy ([email protected]) or [email protected]
Updated August 26, 2025. On record August 15, 2025.
When you log in, you will use Auth0 to validate your account with us or use an existing account at Google or your institution (LDAP login).
What Google Data is Accessed
Updated August 26, 2025. On record August 15, 2025.
- You Own Your Data – Everything you upload to ScientistCloud is yours. We don’t claim ownership.
- We Don’t Sell or Give Away Your Data – No selling, renting, or sharing of your personal or project data unless you explicitly tell us we can, or the law requires it.
- Public Domain and Open Data – We support open science and public domain datasets. If you choose to share the data files you upload publicly, it may be freely viewed and reused. “Open science/public domain datasets” do not contain Google user private data, and sharing public data does not override personal data privacy guarantees.
- Your data is not used for AI training or personalized advertising without explicit consent.
- Cookies and Logs – We use only minimal cookies and server logs to keep the site running securely.
- Security – We use industry‑standard measures to keep your data safe.
- Data Encryption – All user password(s) and personal information are encrypted using strong standards (e.g., AES-256) both at rest and during transmission (TLS/SSL).
- Access Controls – Access to sensitive data is limited to authorized personnel, protected by role-based access controls and two-factor authentication. Data that is not marked public requires authentication to access.
- Audit and Monitoring – All access to sensitive information is logged, monitored, and regularly reviewed for suspicious activity.
- Compliance – ViSOAR LLC reviews its practices for compliance with applicable privacy and data protection regulations. For details or specific compliance inquiries, contact [[email protected]].
- Breach Notification – In the event of a data breach impacting your information, you will be notified as required by applicable law, and mitigation steps will be communicated promptly.
- Account/Data deletion: You can add, manage, or delete your data any time. All user data is deleted from our servers within 30 days of account deletion, unless legally required to retain it. Aggregated, anonymous usage data is retained for analytics purposes for up to 12 months.
- Contact – Email us at [support@visoar.net] for privacy questions.
When you log in, you will use Auth0 to validate your account with us or use an existing account at Google or your institution (LDAP login).
What Google Data is Accessed
- When you sign in with Google, we may request access to your Google profile (name and email), see and download your Google Drive files, and, if you grant permission, send email on your behalf. We only request the minimum necessary access for ScientistCloud.com functionality.
- Google API Scopes Requested: ScientistCloud.com requests the following Google API scopes: openid, email, profile, https://www.googleapis.com/auth/drive.file, and https://www.googleapis.com/auth/gmail.send. These are used exclusively for authentication, access to Google Drive files as selected by users, and sending email notifications that users initiate.
- ScientistCloud.com requests the minimum Google Drive API scopes (drive.file), so only files choosen by users are accessed.
- Within the ScientistCloud Data Portal, users can use a picker UI to select specific files or folders from Google Drive to upload their own data. Only these selected files are accessible for conversion (e.g., TIFF stacks, NEXUS, HDF5 to OpenViSUS IDX). After processing, users retain access to both original and converted files, which can be managed, deleted, or downloaded at any time. This approach ensures that your privacy is protected, as only the files you authorize are accessed by the app.
- We retain your Google data only while your ScientistCloud.com account is active and you have not revoked permissions. If you disconnect your Google account or delete your ScientistCloud.com account, all associated Google data is promptly deleted from our servers, except for anonymized, aggregated analytics.
- How to Request Data Deletion: You may request deletion of all Google data associated with your ScientistCloud account by emailing [email protected]. Your request will be processed within 30 days.
- Data Retention and Deletion Timeline: All Google user data is deleted from our servers within 30 days of account deletion or Google disconnect, unless legally required to retain it. Aggregated, anonymous usage data is retained for analytics purposes for up to 12 months.
- We do not share, sell, or rent your Google user data to third parties, except as required for legal compliance or as authorized by you.
- Open Data Disclosure: Public domain and open science datasets shared on ScientistCloud.com are separate from user-specific Google account data and do not compromise personal privacy settings.
- You may revoke ScientistCloud.com’s access to your Google account at any time via your Google Account settings.
- For more details on how Google manages permissions, see Google Account Permissions: https://myaccount.google.com/permissions.
- Contact – Email us at [[email protected]] for privacy questions.