Privacy Policy

Last updated: October 10, 2026

ABYLAY helps research labs compare exact catalog items, verified public prices, publication evidence, lab outcomes, restock needs, and grant budget context. We keep the product honest: unknown data stays unknown, and private lab data is not treated as public evidence.

Information we collect

We collect the information needed to run the product: your email address, one-time login code session data, lab membership, product searches, lab notes, product outcomes, restock requests, grant budget entries, and basic usage logs such as timestamps and pages visited.

ABYLAY uses one-time codes sent to eligible academic email addresses. We do not collect university passwords.

Product and evidence data

ABYLAY may store product names, manufacturers, catalog numbers, package sizes, verified public price sources, publication metadata, and method quotes tied to exact catalog numbers. Prices and publication links are shown only when they have source information and verification status.

Publication evidence does not automatically mean a product worked. Lab outcomes are separate records.

Lab data

Lab notes, private outcomes, restock lists, inventory details, and grant budget entries are intended for the lab workspace. We do not sell this data. Access is controlled by lab membership and application permissions.

How we use data

We use data to provide search, product pages, price comparison, publication evidence, lab memory, restock tracking, budget tracking, authentication, security, debugging, and product improvement.

AI may be used on the server to help process text, but ABYLAY rules do not allow AI to invent prices, products, citations, lab results, or budget amounts.

Service providers

ABYLAY currently relies on infrastructure providers such as Vercel for hosting and Supabase for database, authentication, and access controls. These providers process data only as needed to operate the service.

Security

We use Supabase Row Level Security and server-side access patterns to protect private data. Service-role credentials must stay server-side. No system is perfect, but we design ABYLAY to avoid unnecessary exposure of lab data.

Your choices

You can ask for access, correction, export, or deletion of your account or lab data where legally and technically possible. Some records may need to be retained for security, audit, or backup reasons.

Contact

For privacy requests, contact ABYLAY through the email address or contact channel provided by the founder.