Privacy Policy
This Privacy Policy explains how Reshape ApS processes personal data when you use the Reshape Colony Counter App.
1. Data controller
2. Information we process, marketing & communication preferences
- Account information, including email address, user ID, account-creation details, and how you heard about the service.
- Plate information, including captured or uploaded images, barcodes, identifiers, diameter, notes, analysis results, and associated timestamps.
- Technical information required to operate and secure the service, such as app version, device and network information, request timestamps, and diagnostic logs.
- Communications, feedback, and support requests you send to us. Plate information may constitute personal data where it is linked to your account, organization, or other identifiable information.
-Where you choose to opt in, we collect and process your email address, account identifiers, marketing preferences, and records of your consent to communicate with you about Reshape's products and services.
3. How we use information
- Create, authenticate, administer, and secure your account.
- Upload, analyze, store, synchronize, and display plate information and analysis results.
- Send account verification, security, and service-related messages.
- Provide support, investigate errors, and maintain service reliability.
- Prevent abuse, fraud, unauthorized access, and security incidents.
- Comply with legal obligations and enforce applicable agreements.
We do not use plate images or analysis results to train or improve AI models unless you separately and explicitly agree to that use.
Marketing and sales communications
With your consent, we may:
-Send you educational content, product updates, application insights, and information about Reshape's laboratory automation products and services.
-Contact you individually by email through our marketing or sales team to discuss Reshape's products, services, and potential applications in your laboratory.
-Manage your communication preferences and record your interactions with our marketing and sales communications.
-Marketing communications are optional and are not required to use Colony Counter.
You can withdraw your consent at any time.
4. Legal bases
Depending on the processing activity, we rely on performance of our agreement with you to provide Colony Counter; our legitimate interests in securing, maintaining, supporting, and improving service reliability; compliance with legal obligations; and consent where consent is specifically requested and required.
Legal basis for marketing: Where you have opted in to marketing and sales communications, we rely on your consent under Article 6(1)(a) of the GDPR. You may withdraw this consent at any time without affecting your use of the Colony Counter App. Withdrawal does not affect processing that was lawful before your consent was withdrawn.We use service providers to operate Colony Counter. Current production providers may include:
- Supabase for authentication, database, and storage services.
- Resend for account verification and service-related email delivery.
- Modal for cloud-hosted image analysis infrastructure.
- Other professional advisers, authorities, or service providers where necessary for support, security, legal compliance, or corporate administration.
Service providers may process information only for the relevant service purposes and under applicable contractual and legal protections. We may disclose information where required by law or necessary to establish, exercise, or defend legal claims.
Marketing and customer relationship management providers:
Where applicable, we use HubSpot and other identified service providers to manage marketing preferences, contact records, and sales and marketing communications.These providers process relevant personal information on our behalf, subject to appropriate contractual and data protection safeguards.
6. International transfers
Some providers may process information outside Denmark or the European Economic Area. Where required, we use appropriate transfer mechanisms and safeguards, such as European Commission standard contractual clauses and supplementary measures.
7. Retention
We retain account information, plate images, plate information, and analysis results while your account remains active and for only as long as necessary to provide the service. This includes scientific records for plates that you remove from your active plate list.
When you delete your account, we delete the account and its associated scientific records from our active systems. Limited copies may remain temporarily in protected backups or service-provider operational logs until their applicable retention periods expire, or where retention is required by law, necessary to investigate a security incident, or needed to establish, exercise, or defend legal claims.
Marketing data retention: We retain marketing contact information while your consent remains valid and for no longer than necessary for the purposes described in this policy. Where consent is withdrawn, we stop using your information for the relevant marketing activities and retain only such limited information as is necessary to record and respect your preference, demonstrate compliance, or meet applicable legal obligations.
8. Your rights
Subject to applicable law, you may have the right to access, correct, delete, restrict, or object to processing of your personal data; receive a portable copy of information you provided; and withdraw consent where processing relies on consent. You may also lodge a complaint with the Danish Data Protection Agency or another competent supervisory authority.
Your marketing choices: You have the right to withdraw your marketing consent at any time using the unsubscribe link in our emails, through available communication preferences in the app, or by contacting support@reshapebiotech.com. You also have the right to object at any time to processing of your personal information for direct marketing. We will stop processing your personal information for that purpose when you object.
9. Account deletion
You can delete your account through Account > Delete account in the app. This removes your account and associated plate images, plate information, and analysis results from our active systems. It also removes copies stored by the app on the device where deletion is initiated.
Deleting the app from your device does not delete your account or server-stored information. Limited copies may remain temporarily in protected backups or service-provider logs until their applicable retention periods expire, or where retention is required by law. See Section 7 for further information about retention.
10. Security
We use reasonable technical and organizational safeguards designed to protect information against unauthorized access, alteration, disclosure, or loss. However, no internet-based service can guarantee absolute security.
11. Children
Colony Counter is intended for professional and research users and is not directed to children. We do not knowingly collect personal data from children without appropriate authorization.
12. Changes to this policy
We may update this policy. Material changes will be communicated through the app or another appropriate channel. The effective date at the beginning identifies the current version.
13. Contact
Privacy questions and requests may be sent to support@reshapebiotech.com or by post to Reshape ApS, Østbanegade 55, 1. th, 2100 København Ø, Denmark.
Updated October 14th 2026