Privacy policy
Last updated: 23 August 2026
Indo-Aryan is a trading name of 5ChAGI.AI Corp, a company registered in British Columbia, Canada. This policy is written specifically for this service rather than adapted from a general e-commerce template, because the most sensitive thing we handle — your raw genotype — would not otherwise be mentioned at all.
Privacy contact: support@indoaryan.com
Indo-Aryan, 15910 Fraser Highway, Suite 280, Surrey, British Columbia V4N 0X9, Canada
- WHAT WE COLLECT
Your raw genotype file — the export you upload from 23andMe, AncestryDNA or MyHeritage.
Your email address — collected by Shopify at checkout, used to deliver your report and to contact you about your order.
Order data — the amount paid, the order reference, timestamps.
Technical data — the size of your upload, timestamps, and a tag derived from your IP address used only to limit how many uploads one person can start at once.
We do not ask for, and do not want, your name, date of birth, home address, or any health information.
2. WHY WE COLLECT IT
Your genotype is used for exactly one purpose: to run a qpAdm ancestry decomposition against published ancient reference populations and produce the report you paid for. It is used for nothing else.
3. YOUR PAYMENT AND YOUR DNA ARE KEPT APART
This matters, so we state it plainly. Your genotype file never reaches Shopify. Shopify handles checkout and payment, and sees your email address, the amount, and an opaque reference code. Your genetic data is stored separately on Cloudflare infrastructure. The two are linked only by that opaque code. We never see or store your card details — those go directly to Shopify Payments.
4. HOW LONG WE KEEP YOUR GENOTYPE
Your uploaded file is stored encrypted at rest and is automatically and permanently deleted 30 days after upload. You may ask us to delete it sooner by emailing support@indoaryan.com, and we will. Order records — email, amount, reference — are kept longer because we are required to retain business and tax records.
5. HOW THE ANALYSIS IS ACTUALLY PERFORMED
We would rather be accurate than sound larger than we are. Indo-Aryan is operated by one person. The analysis is not fully automated: your file is downloaded to a controlled workstation operated by us, the qpAdm analysis is run there with the assistance of software tooling, and the working copy on that machine is deleted once your report has been sent. The stored copy remains in encrypted cloud storage until the 30-day deletion described above.
6. WHAT WE NEVER DO
We do not sell, rent or trade your genetic data. Ever.
We do not share it with insurers, employers, advertisers, or any other third party, and not with law enforcement absent a valid legal order.
We do not add your data to any reference panel, dataset or research corpus without asking you separately and receiving your explicit agreement. Buying a report is not that agreement.
We do not use your genetic data to train models.
7. WHO ELSE TOUCHES YOUR DATA
Cloudflare — hosting, encrypted file storage, database, and outbound email.
Shopify — checkout, payment processing, order records and order emails.
Google — support mail sent to our published addresses is forwarded to a Google mailbox.
Data is processed in Canada and in the countries where those providers operate.
8. YOUR RIGHTS
Wherever you live, you may ask us to tell you what we hold about you, give you a copy of it, correct it, delete it, or withdraw your consent to our processing it. Email support@indoaryan.com. We aim to respond within 30 days and will not charge you.
Withdrawing consent before your report is produced means we delete your file and refund you. Withdrawing it afterwards means we delete your file; a report already delivered cannot be un-sent.
If you are in Canada you may complain to the Office of the Privacy Commissioner of Canada. In the UK or EU, to your national supervisory authority. In India, you may exercise your rights under the Digital Personal Data Protection Act by writing to the address above.
9. THIS IS NOT A MEDICAL SERVICE
The report is an ancestry decomposition for informational purposes. It is not medical, diagnostic, paternity or forensic. It does not report health conditions, disease risk or carrier status, and it establishes no nationality, community, caste, religion or entitlement.
10. CHILDREN
This service is not for anyone under 18. Do not upload a child's genotype.
11. CHANGES
If we change this policy we will change the date at the top. Material changes affecting data we already hold will be emailed to affected customers.