Yukti Genomics AI Private Limited

Last Updated: 15th July’2026

Yukti Genomics AI Private Limited, including its product platform Seq2Clin (“Yukti Genomics,” “Seq2Clin,” “we,” “our,” or “us”), respects the privacy of individuals and organizations that interact with our website, products, services, platforms, and communications.

This Privacy Policy explains how we collect, use, store, disclose, protect, and manage personal data when you visit our website, contact us, request a demo, use our services, or interact with the Seq2Clin platform.

This Policy is intended to be read together with our applicable contracts, terms of use, data processing agreements, consent forms, and service agreements.

1. Scope of this Policy

This Privacy Policy applies to:

• visitors to the Yukti Genomics / Seq2Clin website;

• individuals who contact us through forms, email, phone, events, or business channels;

• customers, partners, vendors, advisors, and business contacts;

• authorized users of the Seq2Clin platform;

• personal data processed through our platform or services, where applicable.

Where Seq2Clin is used by hospitals, diagnostic laboratories, genomic laboratories, research institutions, or healthcare organizations, such organizations may act as the primary data fiduciary/controller for patient, clinical, or genomic data. In such cases, Yukti Genomics may process data as a service provider/data processor in accordance with applicable agreements and instructions.

2. Information We May Collect

We may collect the following categories of information:

Website and enquiry information

When you visit our website or contact us, we may collect:

• name;

• email address;

• phone number;

• organization name;

• designation;

• city/country;

• enquiry details;

• demo or meeting requests;

• communication preferences.

Platform and account information

When an organization uses Seq2Clin, we may collect:

• authorized user details;

• login credentials and access records;

• organization details;

• usage logs;

• workflow activity;

• technical support information;

• audit trails and system activity logs.

Genomic, clinical, and healthcare-related data

Depending on the services agreed with a customer, Seq2Clin may process genomic, clinical, phenotypic, pathology, radiology, laboratory, pharmacogenomic, or related healthcare data. This may include files or datasets such as FASTQ, BAM, CRAM, VCF, reports, annotations, clinical indications, variant information, and associated metadata.

We process such data only for the purposes agreed with the customer and subject to applicable law, consent requirements, contractual obligations, and ethical standards.

Technical and usage data

We may collect limited technical information such as:

• browser type;

• device information;

• operating system;

• pages visited;

• date and time of access;

• cookies and similar technologies;

• website analytics data.

3. How We Use Information

We may use personal data for the following purposes:

• to respond to enquiries and demo requests;

• to provide information about our products and services;

• to create and manage customer or user accounts;

• to provide, operate, maintain, and improve Seq2Clin;

• to support genomic analysis, interpretation workflows, and report generation as contracted;

• to provide technical support and troubleshooting;

• to improve platform security, reliability, and performance;

• to communicate product updates, service information, or business communications;

• to conduct internal analytics and service improvement;

• to comply with legal, regulatory, contractual, audit, or compliance obligations;

• to protect our rights, systems, users, customers, and platform integrity.

We do not use personal data for purposes that are incompatible with the purpose for which it was collected, unless permitted by law or consented to by the relevant individual or organization.

4. Use of Genomic and Clinical Data

We recognize that genomic and clinical data is highly sensitive and must be handled responsibly.

Where Seq2Clin processes genomic or clinical data, we follow these principles:

• data is processed only for agreed clinical, research, analytical, reporting, validation, or service purposes;

• access is restricted to authorized personnel and systems;

• data is handled under applicable customer agreements and security controls;

• identifiable patient data is used only where necessary for the contracted purpose;

• de-identified or anonymized data may be used only where permitted by law, agreement, or consent;

• genomic or clinical data is not sold;

• genomic or clinical data is not used for unrelated commercial purposes without authorization;

• AI-assisted features, where used, are intended to support interpretation, prioritization, evidence summarization, workflow efficiency, and reporting support, not to replace expert clinical judgment.

Seq2Clin does not independently diagnose, prescribe, or make treatment decisions. Clinical decisions remain the responsibility of qualified healthcare professionals.

5. AI-Assisted Processing

Seq2Clin may use selective AI-assisted capabilities to support genomic intelligence workflows, including evidence summarization, variant prioritization support, report structuring, workflow automation, and knowledge organization.

Where AI-assisted tools are used, we aim to ensure that outputs remain:

• evidence-linked;

• reviewable;

• explainable where applicable;

• subject to expert review;

• aligned with the intended clinical or research workflow.

We do not intentionally use identifiable patient-level genomic or clinical data to train unrelated third-party AI models unless expressly permitted by contract, consent, and applicable law.

6. Legal Basis and Consent

We process personal data based on applicable legal grounds, which may include consent, contractual necessity, compliance with legal obligations, legitimate business purposes, or other grounds permitted under applicable data protection laws.

Where consent is required, we will seek valid consent for the specified purpose. The DPDP Rules require clear and simple notices explaining the specific purpose for personal data collection and use, and require data fiduciaries to provide contact information for queries regarding personal data processing.

Where patient or genomic data is provided to us by a healthcare organization, laboratory, hospital, research institution, or customer, that organization is responsible for ensuring that it has obtained the required consent, authorization, legal basis, ethical approval, or institutional approval before sharing such data with us.

7. Data Sharing and Disclosure

We may share personal data with:

• authorized personnel within Yukti Genomics;

• hospitals, laboratories, research organizations, or customers as required for contracted services;

• cloud hosting, infrastructure, security, analytics, communication, and technical service providers;

• professional advisors such as legal, audit, tax, or compliance consultants;

• third-party technology or knowledge-resource providers where necessary for agreed services;

• regulatory, legal, governmental, or law enforcement authorities where required by law;

• business partners in connection with approved collaborations, pilots, validation programs, or deployments.

We require service providers and partners to process data only for authorized purposes and to maintain appropriate confidentiality and security safeguards.

8. International Data Transfers

Depending on the nature of the service, data may be processed or stored in India or other jurisdictions through secure cloud or technology infrastructure.

Where data is transferred outside India or across jurisdictions, we will take steps intended to ensure that such transfer is carried out in accordance with applicable law, contractual requirements, customer instructions, and security safeguards.

9. Data Security

We use reasonable technical, administrative, and organizational safeguards to protect data against unauthorized access, misuse, loss, alteration, disclosure, or destruction.

These safeguards may include, where applicable:

• access controls;

• encryption;

• secure cloud infrastructure;

• audit logs;

• role-based permissions;

• data segregation;

• confidentiality obligations;

• vulnerability management;

• backup and recovery controls;

• internal security procedures.

No digital system can be guaranteed to be completely secure. However, we take data protection seriously and continuously work to improve our safeguards.

The DPDP framework also requires prompt breach notification to affected individuals in plain language, including the nature and possible consequences of the breach, steps taken, and contact details for assistance.

10. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Policy, unless a longer retention period is required by law, contract, audit, regulatory obligations, dispute resolution, or legitimate business needs.

Customer data processed through Seq2Clin will be retained, deleted, returned, de-identified, or archived in accordance with applicable customer agreements and service terms.

11. Cookies and Website Analytics

Our website may use cookies and similar technologies to improve website functionality, understand visitor interactions, enhance user experience, and analyze website traffic.

You may control or disable cookies through your browser settings. However, disabling cookies may affect some website functionality.

If we use third-party analytics or marketing tools, we will handle such data in accordance with applicable law and relevant consent requirements.

12. Children’s Data

Our website and services are not directed at children for general use.

Where pediatric, newborn, or child-related genomic or clinical data is processed through Seq2Clin as part of healthcare, research, or institutional services, the responsibility for obtaining appropriate parental/guardian consent, legal authorization, and institutional approval rests with the relevant healthcare provider, laboratory, institution, or customer, unless otherwise agreed in writing.

The DPDP Rules require verifiable consent before processing children’s personal data, subject to limited exemptions for essential purposes such as healthcare, education, and real-time safety.

13. Your Rights

Subject to applicable law, individuals may have rights to:

• access information about personal data processed about them;

• request correction or updating of inaccurate personal data;

• request erasure of personal data;

• withdraw consent where processing is based on consent;

• raise a grievance regarding processing of personal data;

• nominate another person to exercise rights in the event of death or incapacity.

The DPDP framework reinforces rights to access, correct, update, erase, and nominate another person to exercise rights, and requires responses to such requests within a maximum of 90 days.

To exercise your rights, please contact us at the details provided below. In certain cases, we may need to verify your identity before responding.

Where your data has been provided to us by a hospital, laboratory, employer, institution, or customer, we may direct your request to the relevant organization.

14. Grievance Redressal and Contact

For privacy-related questions, requests, or grievances, please contact:

Privacy / Grievance Contact: Ashok P / Director

Company: Yukti Genomics AI Private Limited

Email: info@yuktigenomics.com

Address: Kathir IT Park, Wisdom Tree, Neelambur, Coimbatore – 641062, Tamilnadu

We will review and respond to privacy requests in accordance with applicable law and internal procedures.

15. Third-Party Links

Our website may contain links to third-party websites, publications, platforms, or resources. We are not responsible for the privacy practices, security, or content of such third-party websites. Users are encouraged to review the privacy policies of those third parties.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements, or business practices.

The updated version will be posted on our website with the revised “Last Updated” date. Continued use of our website or services after an update indicates acceptance of the updated Policy, where permitted by law.

17. Summary Statement

Yukti Genomics is committed to responsible data handling, privacy protection, and ethical use of genomic, clinical, and healthcare data. Our goal is to support genomic intelligence and precision medicine while respecting confidentiality, security, consent, and clinical accountability.