Log In Sign Up

Privacy Policy

Last updated: 2025-11-26

Thank you for visiting Potato. This Privacy Policy outlines how we collect, use, and protect the information you provide while using our website.

Happy Potato, Inc., a Delaware corporation (“Potato”, “we”, “our”, or “us”) is committed to protecting your privacy.

This Privacy Policy explains how we collect, use, store, share, and otherwise process information when you visit our website at https://potato.ai/, and use Potato's proprietary software and web platform, application programming interfaces (APIs), content, and related technologies (together, the “Services”). This Privacy Policy does not apply to information collected by third parties, including other websites or services that link to or from the Services.

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy. Capitalized terms used but not defined in this Privacy Policy have the meaning given to them in the Terms of Use.

  1. What Personal Information Do We Collect?

    2. For the purpose of this Privacy Policy, “personal information” means all information that identifies, relates to, describes, can be associated with, or could reasonably identify you as an individual. We collect information in two main ways: information you provide, and information collected automatically.

    1. Personal Information You Provide

      2. The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use.

      • Account Information. When you create an account, we collect information such as your name, email address, password, and affiliated lab/organization.
      • User Input. When you use the Services, you may provide Input, such as papers, datasets, protocols, code, lab notes, prompts, figures, files, questions, and other scientific or technical information, which may contain personal information if you choose to include it.
      • Communication Information. When you contact us (for example, via email, support forms, or in-product chat), complete a user survey, give feedback, enroll in an event, or participate in marketing initiatives, we collect the information you provide, such as your name, phone number, email address, any personal identifiers you voluntarily share, the content of your message, and any supporting details (e.g., logs, screenshots, or survey responses).
    2. Personal Information We Collect Automatically

      3. When you use the Services, we automatically collect certain technical and usage information, such as:

      • Device and Usage Data. IP address, browser type, operating system, device identifiers, language settings, referring URLs, pages viewed, features used, error reports, the date and time of your visits, session duration, navigation flows, clicks, high-level usage statistics, and other information about how you interact with the Services. We may aggregate this information to understand how the Services are used.
      • Approximate Location. We may infer an approximate location (for example, city or region) from your IP address to help us provide secure and reliable Services, such as detecting unusual login activity.
      • Cookies and Similar Tracking Technologies. We use cookies and similar tracking technologies to keep you signed in and remember your preferences, understand how visitors use our pages, and support analytics, conversion tracking, and advertising with third parties (for example, HubSpot).
  2. Why Do We Collect Your Personal Information?

    3. We collect and process your personal information for the following purposes and rely on the following legal bases:

    1. Legal Basis of Use
      • Performance of an agreement with you: We collect and process your personal information in order to (i) provide you with the Services; (ii) maintain and improve our Services; (iii) develop new services and features; and (iv) personalize the Services in order for you to get a better user experience.
      • With your consent: We collect and process your personal information for specific purposes only with your consent, which you may withdraw at any time.
      • Legitimate interest: We process your information for our legitimate interests while applying appropriate safeguards that protect your privacy. This means that we process your information for things like (i) detecting, preventing, or otherwise addressing fraud, abuse, security, usability, functionality or technical issues with our Services; (ii) protecting against harm to the rights, property or safety of our properties, or our users, or the public as required or permitted by law; (iii) enforcing legal claims, including investigation of potential violations of this Privacy Policy; and (iv) complying with and fulfilling our obligations under applicable laws, regulations, guidelines, industry standards and contractual requirements, legal process, subpoena or governmental request, as well as our Terms of Use.
    2. Purpose of Use
      • To create, maintain, and manage your account and workspace. We process your personal information to register and manage your account with us, such as account configuration, service features, customer correspondence, customer relationship management.
      • To provide and maintain the Services. We process your personal information to provide, operate, and secure the Services, including our AI agents, literature tools, protocol generator, and computational workflows, and to diagnose and fix errors, monitor performance, and improve reliability.
      • To improve the Services and enhance your experience. Subject to the Terms of Use, we may use Input, Output, and related usage and log data to develop and improve the Services. We do not authorize any third party to use your Content, or our Services, to train, validate, or improve their own AI systems in violation of our Terms of Use.
      • To communicate with you and provide customer support. We process your personal information to resolve technical issues you encounter, respond to your questions, support requests and feedback, and to send transactional communications, such as registration confirmations, security alerts, and important service notices.
      • To market and promote our Services. With your consent or as permitted by law, we may send marketing communications about new features, events, and updates, including by email and by displaying ads.
      • To conduct analytics and business operations. We process your personal information for analytics and usage measurement, business planning, reporting, and forecasting, and understanding how the Services are used.
      • To maintain safety and security of the Services. We process personal information to improve the safety and reliability of the Services, including detecting, preventing, and responding to fraud, abuse, security risks, and technical issues that could harm the Services, our users, or the public.
      • For Legal Compliance. We use your data to comply with applicable laws and regulations, protect our legal interests, and respond to or defend against legal proceedings.
  3. How Do We Share Your Personal Information?

    4. We do not sell your personal information. We share information only in these limited circumstances:

    1. Service Providers

      2. We may share personal information with our service providers who perform services on our behalf. Examples of our service providers include cloud hosting and infrastructure, data storage and backup, analytics and logging, email and communication tools, customer support tools, payment processors and billing providers. They are contractually required to treat your personal information as confidential and secure and to use it only to provide the services we request.

    2. Business Integrations (at your discretion)

      3. If you choose to integrate the Services with third-party tools (for example, lab systems or external storage), we share information as needed to enable that integration. Those third parties’ terms and privacy policies govern their use of your information.

    3. Corporate Transactions

      4. We reserve the right to disclose and transfer all information related to the Services, including, without limitation, your personal information and usage information: (i) to a subsequent owner, co-owner or operator of the Services or applicable database; or (ii) in connection with a corporate merger, consolidation, restructuring, the sale of substantially all of our stock and/or assets or other corporate change, including, without limitation, during the course of any due diligence process.

    4. For Legal Reasons

      5. Where required by law or where we believe it is necessary to protect our legal rights, interests, and the interests of others, we use information about you in connection with legal claims, compliance, and regulatory matters. We may also disclose your information, including information about your interaction with the Services, (a) to respond to subpoenas, court orders, legal process, law enforcement requests, legal claims, or government inquiries, (b) to protect and defend the rights, interests, safety, and security of the Services, its users, or the public, and (c) to enforce any terms applicable to the Services.

    5. With Your Consent

      6. We may share your information for other purposes pursuant to your consent or at your direction. For example, we may share testimonials or customer stories with your consent.

  4. How Do We Transfer Your Personal Information?

    5. Potato is based in the United States, and your information may be processed where our service providers operate. Data protection laws in those locations may differ from those in your jurisdiction.

    Where required by law, we use appropriate safeguards (such as standard contractual clauses) to help ensure that international transfers of personal information provide adequate protection.

    By using the Services or providing us with information, you acknowledge that your information may be transferred to and processed in these locations, subject to this Privacy Policy and applicable law.

  5. How Do We Protect Your Data Security?

    6. We use reasonable organizational, technical, and physical safeguards designed to protect personal information against accidental or unlawful destruction, loss, alteration, and unauthorized access, use, or disclosure. These measures may include access controls and authentication, encryption in transit where appropriate, logical separation of workspaces, and internal policies and staff training.

    However, no method of transmission or storage is completely secure. We cannot guarantee that information will never be accessed, used, or disclosed in a manner inconsistent with this Privacy Policy. To help protect your account, please keep your login credentials confidential and notify us promptly if you suspect unauthorized access.

  6. How Long Do We Store Your Personal Information?

    7. We keep personal information only for as long as reasonably necessary to provide and maintain the Services to you or your organization, fulfill the purposes described in this Privacy Policy, comply with legal or reporting obligations, and resolve disputes and enforce our agreements.

    When deciding how long to retain information, we consider the type and sensitivity of the data, the purposes for which we process it, legal requirements (such as statutes of limitation), and the potential risk of harm from unauthorized use or disclosure.

    When information is no longer needed, or if you delete your account or request deletion of particular data, we will delete, anonymize, or otherwise securely dispose of it in line with applicable laws and our contractual obligations.

  7. What Are Your Rights Regarding Your Personal Information?

    8. Depending on your location and applicable laws, you may have some or all of the following rights with respect to your personal information:

    1. Right to access

      2. You have the right to request confirmation of whether we process your personal information and, where appropriate, a copy of that information.

    2. Right to rectification

      3. You have the right to request correction or update of inaccurate or incomplete personal information.

    3. Right to erasure

      4. You have the right to require the erasure of your personal information, when one of the following conditions applies:

      • Your personal information is no longer necessary for the purposes for which we collected it or otherwise processed it;
      • you retract your consent on which the processing of your personal information is based, and we have no other legal basis for the processing;
      • you object to the personal information processing and we have no compelling legitimate grounds for processing your personal information;
      • the use that is made of your personal information does not comply with the applicable legal or regulatory provisions.
    4. Right to restriction of processing

      5. You have the right to request that we restrict how we process your personal information in certain circumstances, if one of the following conditions applies:

      • you contest the accuracy of your personal information, and wish to restrict the processing of your personal information during the period required to verify the accuracy of your personal information;
      • the personal information processing is unlawful and you oppose the erasure of your personal information and request the restriction of its use instead;
      • we no longer need your personal information for the purposes of the processing, but you require it for the establishment, exercise, or defense of legal claims;
      • you have objected to the processing of your personal information, and wish to restrict its processing pending the verification of whether our compelling legitimate grounds for processing override your grounds for objecting to it.
    5. Right to data portability

      6. You have the right to request a structured, commonly used, and machine-readable copy of certain personal information, and ask us to transfer it to another controller where technically feasible. This right applies only if all of the following conditions are met:

      • your request is only related to your personal information (excluding anonymous or third-party data);
      • your request does not adversely affect the rights or freedoms of others, in particular those of us (including trade secrets);
      • the processing is carried out by automated means (paper files are therefore not included);
      • the processing is based on consent or the performance of a contract.
    6. Right to object

      7. You have the right to object to our processing of your personal information at any time if the processing is based on our legitimate interest, or your personal information is processed for direct marketing purposes.

      We will no longer process your personal information unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, such as the respect of a legal obligation (e.g. legal obligation involving the retention of personal information), or for the establishment, exercise or defense of legal claims.

    7. Right to withdraw your consent

      8. You have the right to withdraw your consent where we rely on your consent. This will not affect the lawfulness of processing before withdrawal.

      Some rights may be subject to limitations or exceptions under applicable laws. If you exercise any rights, we may need to verify your identity before responding.

      You can exercise these rights, or make other privacy requests, by contacting us using the details in Section 10 below. We aim to respond within a reasonable time and in accordance with applicable law.

  8. Children Under 18

    9. The Services are not intended for use by children under the age of 18 years old. We do not knowingly collect information from children under the age of 18. If you believe that a child under 18 has provided us with personal information, please contact us using the details below, and we will take appropriate steps to delete that information as required by law.

  9. Privacy Policy Updates

    10. We may update this Privacy Policy from time to time. When we do, we will revise the “Last Updated” date at the top of this page. If we make material changes, we will take appropriate steps to notify you. Your continued use of the Services after the updated Privacy Policy becomes effective means that you acknowledge the updated Policy.

  10. Contact Us

    11. If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

    Happy Potato, Inc.
    600 1st Ave
    Ste 330 PMB 970434
    Seattle, WA 98104-2246
    hello@potato.ai