Privacy notice

What we collect today

If you join early access, we store your email address, signup time, which of our signup pages you used, and the version of the waitlist notice you agreed to. Please do not enter health, diagnosis, treatment or other sensitive information in the waitlist form or in an unsolicited email to us.

Email accounts

If you create an account, Google Firebase Authentication processes your email and password to provide sign-in, verification and password reset. Your password is sent directly to Firebase; it is not stored in Tesserie’s website database. Firebase may process technical request information to protect account access. Authentication messages are separate from optional product emails.

We store your Firebase account identifier, email, email-verification status, registration time, last sign-in time synced with this site and terms-notice version. Only your own account details are returned to you. The site owner can view this registration information in a private dashboard. Sign-in state is kept for the browser tab’s session; sign out explicitly on shared devices.

Creating an account does not join the mailing list, enroll you in research or enable medical-record uploads. Do not put health information in your account email or send medical files through this website.

How we use it

We use your email for Tesserie early-access and product updates. Joining the product waitlist is not consent for medical research. We do not sell the waitlist or make email addresses visible to other visitors. Signup confirms an entry in the list; it does not send an automatic confirmation email.

Research participation stays separate

Future research participation, if offered, will require a separate and explicit consent process. Product access will not depend on agreeing to research, and interest in early access does not authorize Tesserie to use health information for research.

Service providers

This website uses OpenAI Sites for hosting and a Cloudflare D1 database for waitlist and basic registration metadata. Firebase Authentication provides ordinary email accounts. Access to the stored lists is restricted to the site owner and authorized administrators; there is no publicly accessible endpoint for reading the list. Hosting providers may process technical request information to operate and protect the site.

Private administration

The site owner can view and export the waitlist through a private dashboard. Administrator sign-in uses ChatGPT identity. We retain the owner’s site-specific account identifier to restrict access, and record admin page opens and list exports with the administrator’s account identifier, email, time and export count. We do not copy waitlist emails into separate activity records. These administrative records are kept while this early-access site is operated.

Joining the waitlist does not create an account. Email-account creation is recorded separately. Medical uploads, patient records and research records are not collected on this site.

Protection against automated submissions

To limit repeated submissions, we temporarily store keyed identifiers derived from network addresses, together with an attempt count and expiry time. These identifiers change hourly and expired entries are removed as new signups are processed. We do not store raw network addresses in the waitlist database.

Your choices

We retain waitlist entries while managing early access. You can ask us to remove your entry and stop product emails at any time; please send the request from the address you used to join. Future product emails will include a way to opt out.

Account metadata is retained while your account is active. To request account removal, contact us from the registered address. This covers both the Firebase identity and Tesserie registration; waitlist removal is a separate choice. Please do not include medical information in removal requests.

For contact or removal requests, email yirancai00@gmail.com.

Before medical-record features launch

Tesserie will publish a fuller privacy notice before accepting medical records. It will explain what is collected, where it is stored, who can access it, how long it is retained, and how research choices can be changed. This website does not claim HIPAA compliance, IRB approval or research authorization.