Privacy Policy

1. Introduction

OCSR.ai ("Platform", "Service", "we", "us", "our") is a Chemical Intelligence Engine operated by Rasayan Labs Inc. ("Rasayan Labs", "Company"), a company incorporated in the United States. This Privacy Policy describes how we collect, use, store, and protect information when you access or use our platform at ocsr.ai, our APIs, our AI assistant Darvi, or any related services.

By using OCSR.ai, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please discontinue use of the Platform.

2. Information We Collect

2.1 Information You Provide

• Search Queries: Molecular identifiers you submit including SMILES strings, InChIKeys, InChI, IUPAC names, CAS numbers, molecular formulas, and free-text compound names.
• Uploaded Files: Chemical structure images (PNG, JPG), MOL files, and SDF files uploaded for optical chemical structure recognition (OCSR) or structure-based search.
• Drawn Structures: Molecular structures created using the integrated Ketcher molecular editor.
• Darvi AI Conversations: Questions and messages submitted to Darvi, our AI chemistry assistant, along with the compound context provided during those conversations.
• Contact Information: Email address and other information you voluntarily provide when contacting us.

2.2 Information Collected Automatically

• Usage Data: Pages visited, search queries performed, compounds viewed, features used, timestamps, and interaction patterns.
• Device & Browser Information: IP address, browser type and version, operating system, device type, screen resolution, and language preferences.
• Cookies & Similar Technologies: Session cookies for functionality, analytics cookies for usage measurement, and performance cookies for optimization. We do not use advertising or tracking cookies.
• Referral Data: The URL that referred you to OCSR.ai and pages you visit after leaving.

2.3 Information We Do Not Collect

• We do not require user registration, login, or account creation for core search functionality.
• We do not collect payment information through the Platform.
• We do not collect biometric data or precise geolocation.

3. How We Use Information

• Search & Discovery: Processing your queries to return relevant molecular data, computing similarity scores, and resolving compound identifiers across our databases.
• Auto-Created Compounds: When you search for a novel SMILES string not in our index, we may automatically create a compound record with a generated identifier (RASDDID format), compute its molecular properties, and add it to our searchable database and similarity index. This enriches the Platform for all users.
• Structure Recognition: Processing uploaded images through our OCSR engine to extract molecular structures and convert them to machine-readable formats (SMILES, InChIKey).
• AI Assistant (Darvi): Your questions and the compound context are sent to our AI model to generate chemistry-specific responses. Conversation history is maintained only for the duration of your browser session and is not stored server-side after the session ends.
• Predictions & Analysis: Running your molecules through our computational models for toxicity (Ames, Tox21), ADMET, pharmacokinetics, drug-likeness, and other property predictions.
• PDF Report Generation: Compiling compound data, predictions, and literature references into downloadable reports.
• Platform Improvement: Analyzing aggregate usage patterns to improve search quality, prediction accuracy, user experience, and system performance.
• Security & Integrity: Detecting and preventing abuse, rate-limiting excessive automated access, and maintaining platform stability.

4. Data Retention

• Search Queries: Server logs containing search queries are retained for up to 90 days for debugging and quality improvement, then deleted.
• Uploaded Images: Images submitted for OCSR processing are deleted from our servers after processing is complete (typically within minutes). We do not retain uploaded images.
• Auto-Created Compounds: Compounds created from novel SMILES searches are permanently added to our chemical database. These records contain only chemical identifiers and computed properties, not personal information.
• Darvi Conversations: AI chat conversations are not stored persistently. They exist only in your browser's memory during the session.
• Analytics Data: Aggregated, anonymized analytics data may be retained indefinitely for trend analysis.

5. Data Sharing & Disclosure

We do not sell, rent, or trade your personal information. We may share data in the following limited circumstances:

• Service Providers: We use Cloudflare for CDN, DDoS protection, and DNS. Cloudflare may process your IP address and request headers in accordance with their privacy policy.
• Legal Requirements: We may disclose information if required by law, subpoena, court order, or government request, or to protect our rights, safety, or property.
• Business Transfers: In the event of a merger, acquisition, or asset sale, user data may be transferred as part of the transaction.
• Aggregated Data: We may share anonymized, aggregated statistics about platform usage (e.g., "X million searches performed this month") that cannot be linked to individual users.

6. Data Sources

OCSR.ai integrates molecular data from multiple public scientific databases. The data served through our Platform originates from:

• PubChem (NIH/NLM): Compound identifiers, titles, synonyms, patent counts, and PubMed reference counts. Used under NIH open data policy.
• ChEMBL (EMBL-EBI): Bioactivity data, clinical development phase, indications, mechanisms of action, and approved drug products. Licensed under Creative Commons Attribution-ShareAlike 3.0.
• FDA Approved Drugs: Drug names and approval status from the U.S. Food and Drug Administration's public databases.
• SureChEMBL (EMBL-EBI): Patent-compound mappings and patent metadata for literature mining.
• PubMed (NIH/NLM): Publication titles, authors, journals, and DOIs for academic literature references.
• Computational Models (Rasayan Labs): Toxicity, ADMET, pharmacokinetic, and molecular property predictions generated by our proprietary machine learning models.

7. Rate Limits & Automated Access

• OCSR.ai is designed for interactive human use. Automated scraping, crawling, or bulk data extraction is prohibited without prior written authorization.
• We enforce rate limits on API endpoints to ensure fair access for all users. Excessive automated requests may result in temporary or permanent IP blocking.
• Researchers requiring bulk data access or API integration should contact us at [email protected] to discuss authorized access arrangements.

8. Security

• All data transmission between your browser and OCSR.ai is encrypted using TLS 1.2/1.3 (HTTPS).
• We enforce HTTP Strict Transport Security (HSTS) with a two-year max-age.
• Our infrastructure is protected by Cloudflare's DDoS mitigation and Web Application Firewall (WAF).
• Internal services communicate over localhost or private networks and are not exposed to the public internet.
• We apply the principle of least privilege for all internal service access.

9. International Data Transfers

OCSR.ai is hosted in the United States. If you access the Platform from outside the United States, your data will be transferred to and processed in the United States. By using the Platform, you consent to this transfer. We implement appropriate safeguards to protect your data in accordance with applicable data protection laws.

10. Children's Privacy

OCSR.ai is not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 16, we will take steps to delete it promptly.

11. Your Rights

Depending on your jurisdiction, you may have the right to:

• Request access to the personal data we hold about you.
• Request correction or deletion of your personal data.
• Object to or restrict processing of your personal data.
• Request data portability.
• Withdraw consent at any time (where processing is based on consent).

To exercise these rights, contact us at [email protected]. We will respond within 30 days.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Last updated" date. Continued use of the Platform after changes constitutes acceptance of the revised policy.

13. Contact

For questions, concerns, or requests regarding this Privacy Policy or your data: