Privacy Policy

1. Introduction

Biofy ("we", "us", "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at biofy.click.

By registering for or using Biofy, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the platform.

2. Information We Collect

Information you provide to us:

• Account registration: username, email address, and a hashed password.
• Profile content: display name, bio, profile picture URL, social media links, theme preferences (colors, fonts, layouts, effects), background images/GIFs, Spotify URL, music URL, donation URL, custom badge styling, and any other profile fields you fill in.
• Business information: business name, business avatar, business description, business email, business phone, business website, business location, and business social links.
• Alias handles: custom alias handles you create and their target usernames.
• Contact messages: your name, email address, and message content when you contact us through the contact form or a business contact form.

Information collected automatically:

• Analytics: we record page views and link clicks on your profile. Each view stores your user ID (for business team analytics), the target user ID, and a timestamp. No IP addresses or user agents are stored with analytics data.
• IP addresses: your IP address is stored when you submit a contact message or a business contact message (for rate limiting and spam prevention). IPs are not used for any other purpose.
• Authentication token: a token is stored in your browser's localStorage to keep you logged in. This is not a cookie.

Payment information: Biofy does not collect or store credit/debit card numbers or payment details. All payments for Premium and Business access are processed by Lemon Squeezy, a third-party payment processor. We do not receive or store your payment card details.

3. How We Use Your Information

We use your information for the following purposes:

• To create and maintain your account and profile.
• To display your bio page, links, badges, and business information to visitors.
• To process payments and grant Premium or Business access.
• To provide analytics and page view counts to you.
• To respond to contact messages and support requests.
• To enforce our Terms of Use (e.g., detecting banned usernames, preventing abuse).
• To improve the platform and fix bugs.
• To display business directory listings and business employee relationships.

4. Data Sharing & Third Parties

We do not sell, rent, or trade your personal information.

Lemon Squeezy: When you purchase Premium or Business access, your payment is processed by Lemon Squeezy, our Merchant of Record. Lemon Squeezy handles all payment processing, tax collection, and compliance. Your interaction with Lemon Squeezy is governed by Lemon Squeezy's Privacy Policy. We do not store your payment card details.

Content Delivery Networks (CDNs): Our pages load icons from Font Awesome and fonts from Google Fonts. These CDNs may collect your IP address. Please refer to Google Fonts' privacy information and Font Awesome's privacy notice.

Spotify embeds: If you embed Spotify content on your profile, your visitors' interaction with the Spotify embed is governed by Spotify's Privacy Policy.

Business directory: If you have a Business account, your business name, description, location, and website are displayed in the public Business Directory. This is a feature of the service, not a data sale.

5. Data Retention & Deletion

We retain your data for as long as your account is active. You can delete your account at any time from the dashboard. Account deletion is permanent and irreversible:

• All profile data, links, badges, badge customizations, analytics, aliases, and business associations are deleted.
• Purchase history is removed and cannot be transferred to another account.
• Contact messages and IP addresses associated with your account are deleted.
• Analytics data (page views, link clicks) tied to your user ID is deleted.

If you are an employee of a business account, your Premium badge is removed when you are removed from the business, but your personal account data remains intact unless you also delete your account.

6. Your Rights (GDPR & CCPA)

Depending on your jurisdiction, you may have the following rights:

• Access: request a copy of the personal data we hold about you.
• Rectification: correct inaccurate or incomplete data (can be done via the dashboard).
• Erasure: request deletion of your personal data (can be done via the dashboard).
• Data portability: request a machine-readable copy of your data.
• Objection: object to the processing of your data for certain purposes.

To exercise any of these rights, please contact us at info@biofy.click or use the contact form on the home page.

7. Cookies & Local Storage

Biofy does not use tracking cookies, advertising cookies, or third-party analytics cookies. We use your browser's localStorage solely to store your authentication token (to keep you logged in) and your theme color preference. This data stays on your device and is not sent to third parties.

Third-party CDNs (Google Fonts, Font Awesome) may set cookies as described in their respective privacy policies linked above.

8. Security

We take reasonable technical and organizational measures to protect your data:

• Passwords are hashed using a secure hashing algorithm (not stored in plain text).
• Authentication is handled via server-generated tokens stored in your browser's localStorage.
• Database connections are restricted to localhost (same server).
• We follow least-privilege access principles for database operations.

No method of transmission or storage is 100% secure. We cannot guarantee absolute security, but we follow industry best practices.

9. Children's Privacy

Biofy is not intended for children under 13 years of age (or 16 within the European Economic Area). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via site notice or email. Continued use of Biofy after changes take effect constitutes your acceptance of the revised policy.

The date at the top of this page indicates when the policy was last updated.

11. Contact

If you have questions or concerns about this Privacy Policy or your data, please contact us:

• Email: info@biofy.click
• Contact form: biofy.click