Terms of Service

These Terms of Service constitute a legally binding agreement between you (the User) and VIEOMICS COMPANY LIMITED (the “Company”, “we”), the legal entity operating the Omicslab Platform (the “Platform”). By creating an account, accessing or using the Platform, you acknowledge that you have read, understood and agree to be bound by these Terms, our Privacy Policy, and any additional policies referenced herein.

You must be at least 18 years of age to create an account or use the Platform. By registering, you represent and warrant that you are 18 years of age or older and are legally capable of entering into a binding agreement. The Platform is not intended for individuals under 18, and we do not knowingly collect personal data from minors. If we become aware that a user is under 18, we will deactivate the account and handle the associated personal data in accordance with our Privacy Policy — deleted or anonymised as required by law.

If you use the Platform on behalf of an organisation, you represent that you have the authority to bind that organisation to these Terms.

The public Platform is not intended for non-public sensitive personal data and does not accept or process it. You must not upload non-public sensitive personal data of individuals in Vietnam to the public Platform, including human genomic, genetic, health-related and other special-category data as defined under Vietnamese law. Data that has been lawfully published and made openly accessible, or properly de-identified such that re-identification is not reasonably possible, may in limited cases be processed on the public Platform, but only where its source, access conditions, licence and privacy risk have been assessed — public availability alone does not make data anonymous. Accordingly, the public Platform is intended only for non-human data (microorganisms, plants, animals and environmental samples), simulated or benchmark data, and lawfully published or properly de-identified public data that has passed that assessment. Do not rely on the label alone: the file format (for example FASTQ, BAM or VCF), the use of a Sample ID or subject code instead of a patient name, or availability on a public repository such as NCBI does not by itself remove personal-data obligations, because genomic and health data can remain linkable to, or enable inferences about, an individual. Assess the access conditions, licence, permitted purpose, accompanying metadata and the risk of re-identification before processing. The rules that apply to a specific dataset are a legal question; customers should confirm them with qualified Vietnamese legal counsel.

To process sensitive data, you must contact us to arrange a self-hosted deployment under a separate agreement. Vieomics provides the Omicslab Platform as the platform management system, and you perform the full deployment on infrastructure you own or control and self-host it. The service is entirely your own: you run, configure and operate the whole stack — frontend, backend and APIs, application database, object storage, compute and workflow execution, pipelines and analysis tools, and access control — and the data is created, analysed, stored and managed only in your environment. No customer data is automatically transmitted from a self-hosted deployment to Vieomics. You may choose to provide specific logs, diagnostics or other information, or authorise access to your environment, solely for the agreed support and maintenance purposes. Any such access or processing remains subject to applicable law and the agreed service scope. Vieomics may assist with platform operation at your request, within the agreed service scope; any such access is authorised by you and limited to platform operation and maintenance, and Vieomics does not analyse your data. Responsibility for personal data follows the actual processing activities, the access granted, the purposes of processing and applicable law — you are responsible for your own legal basis, permissions, consent requirements where applicable, the security configuration of your environment, and any personal data processing impact assessment required by law.

Self-Hosted Deployment

In a self-hosted deployment, Vieomics provides the Omicslab Platform as the platform management system, and the customer performs the full deployment on infrastructure it owns or controls and self-hosts it. The customer is responsible for deploying, configuring and managing all components of the system, including the frontend, backend, database, object storage, compute resources and analysis tools.

Vieomics provides the Omicslab Platform as the platform management system, together with its documentation, updates and technical support within the agreed scope of service. The customer performs the full deployment and self-hosts it. In this model, Vieomics does not automatically have access to or control over the infrastructure, database or data that the customer stores and processes on its own systems, and does not analyse that data. No customer data is automatically transmitted from a self-hosted deployment to Vieomics. The customer may choose to provide specific logs, diagnostics or other information, or authorise access to its environment, solely for the agreed support and maintenance purposes. Any such access or processing remains subject to applicable law and the agreed service scope. Vieomics may assist with platform operation at the customer’s request, within the agreed scope.

Any access by Vieomics to the customer’s environment, if any, must be authorised by the customer and limited to the agreed support purposes. Each party’s responsibility for personal data is determined by the actual processing activities, the authority to decide on the processing, and applicable law. Where Vieomics actually accesses the environment for platform operation or support you request, views data as needed to operate or troubleshoot the platform, receives logs, diagnostics or platform/job metadata that contain personal data, or otherwise performs platform-operation activities on infrastructure you operate, those activities may make us a processor — or, where we determine the purposes of the processing, a controller — for the data involved, and we apply the corresponding obligations. We do not carry out analysis of your research data. Contractual statements do not override obligations that applicable law makes mandatory.

Where you operate the Platform in your own environment, you agree that:

• You have obtained all required ethical approvals, informed consents and authorisations needed to process the data, in accordance with applicable law and your institution’s review boards.
• You will not process data collected from individuals who have not consented to its processing for bioinformatics research, except where permitted by law.
• You remain the data controller (or an authorised processor under your own agreements), and you are responsible for ensuring your use complies with all applicable data protection legislation, including the Law on Personal Data Protection (Law No. 91/2025/QH15) and, where applicable, the GDPR or HIPAA.
• You will not use the Platform to store unlawful content or data whose processing would violate the rights of any person.

You are responsible for maintaining the confidentiality of your credentials and for all activity that occurs under your account. You agree to notify us immediately of any unauthorised access or suspected breach. We employ industry-standard security controls for the services and infrastructure we directly operate — including encryption in transit and at rest, access control and audit logging — but no system is impenetrable, and you must take reasonable steps to protect your own credentials. Where you operate or connect your own infrastructure (BYOC), its encryption, backup, access control and logging are your responsibility and that of your providers; Vieomics cannot guarantee them. Details are published in our E-commerce Policies.

You agree not to use the Platform to:

• Violate any applicable law, regulation or third-party right.
• Upload malicious code, attempt to gain unauthorised access to the Platform, its infrastructure or other users’ data.
• Use the Platform to identify or re-identify individuals, or to discriminate against any person or group.
• Circumvent usage limits, quotas or security controls, or resell Platform access without written permission.
• Interfere with the operation or availability of the Platform.

We process personal data in accordance with the Personal Data Protection Law No. 91/2025/QH15, Decree No. 356/2025/ND-CP and equivalent regulations. Our systems and processes are also designed to align with the GDPR (EU) and HIPAA (US) should those frameworks come into scope for us in the future — Omicslab holds no certification under either of them today. Key commitments include:

• Lawfulness: we process personal data only on a valid legal basis — consent, contract, legal obligation, or legitimate interests.
• Data minimisation: we collect only what is necessary to operate the Platform.
• Security: technical and organisational measures protect personal data against unauthorised access, loss or alteration within the services Vieomics directly operates; for infrastructure you operate or connect (BYOC), security is your responsibility.
• Your rights: you may exercise rights of access, rectification, erasure, restriction, portability and objection — see our Privacy Policy for details.

For research data you upload, you retain control and ownership. We act as a processor only for data you provide to a platform-managed service that we operate; for data held in a customer-managed deployment we do not process it. We act as a controller for the account, billing, security and usage data needed to run the service.

We aim to provide a reliable service but do not warrant that the Platform will be uninterrupted, error-free, or that results will be scientifically valid for any particular purpose. The Platform is provided “as is”. You are responsible for validating analysis results and for maintaining independent backups of research data where required by your obligations.

To the extent permitted by law, we are not liable for indirect or unforeseeable damages, or for the loss of data, revenue or goodwill.

In any event, our maximum aggregate liability relating to the Platform will not exceed the amount you have paid in the 12 months preceding the claim.

These Terms do not reduce or eliminate any mandatory legal liability provided by law.

You may close your account at any time. We may suspend or terminate access — with or without notice — for violation of these Terms, unlawful activity, or as required by law. Upon termination, you remain responsible for obligations accrued before termination. Personal and research data are handled per our Privacy Policy.

We may revise these Terms from time to time. Material changes will be announced through the Platform before taking effect. Continued use of the Platform after changes take effect constitutes acceptance of the revised Terms.

These Terms are governed by the laws of Vietnam, without regard to conflict-of-law principles. Any disputes shall be subject to the exclusive jurisdiction of the competent courts of Vietnam.

Questions about these Terms may be directed to us through our Contact page or to contact@omicslab.io, or to the data protection contact referenced in the Privacy Policy.

The payment terms and cycles below apply to the Platform; detailed data retention periods are set out in our Privacy Policy.

• Subscription: billed in cycles, normally monthly. Renewal must be completed before the current cycle ends.
• Marketplace storage (pay-as-you-go): storage capacity is charged on a usage basis in monthly cycles, tied to your subscription, and cannot extend beyond the term of the subscription that is in force.
• Advance email notices: before any action is taken we email your administrators — a reminder 7 days before the storage cycle ends, and a notice as soon as it expires.
• Workspace cleanup: when the storage cycle ends, workspace access is blocked and the data is retained for a 7-day window; it is then permanently deleted — only the audit log is kept for tracing purposes (details in Section 6 of our Privacy Policy).
• Top-up balance: can only be spent while your organization has an active subscription. When the subscription expires or is cancelled with no renewal in flight, the remaining balance is forfeited and reset to zero; balance information and deadlines are also sent by email before this is applied.