Privacy Policy

At BioStudio, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

1. Information We Collect

Account Information

When you create an account, we collect:

• Username (publicly visible on your profile)
• Email address (kept private, used for account-related communications)
• Password (securely hashed and never stored in plain text)
• Profile image (optional)
• Bio/description (optional, publicly visible)

Links and Content

We store the links you add to your profile. Links marked as "public" are visible to anyone who visits your profile. Links stored in your Private Vault are encrypted end-to-end and cannot be read by our servers.

Usage Data

We automatically collect certain information when you use our service:

• Click analytics (for your own links - visible only to you)
• Device type and browser information
• IP address (for security and rate limiting)
• Access timestamps

2. Zero-Knowledge Encryption

Links stored in your Private Vault are encrypted using AES-256 encryption before they leave your device. The encryption key is derived from your password, meaning:

• We cannot read your private links
• If you lose your password, your private links cannot be recovered
• Government requests or data breaches cannot expose your private links

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our service
• Improve, personalize, and expand our service
• Understand and analyze how you use our service
• Develop new features and functionality
• Communicate with you about updates, security, and service-related matters
• Protect against fraud and unauthorized access

4. Data Sharing

We do not sell, rent, or trade your personal information. We may share your data only in the following circumstances:

• Public Links: Links you mark as public are visible to anyone
• Service Providers: We use third-party services for hosting and infrastructure
• Legal Requirements: We may disclose information if required by law (note: private encrypted links cannot be disclosed)
• Business Transfers: In the event of a merger or acquisition

5. Cookies and Tracking

We use essential cookies for:

• Session management (keeping you logged in)
• Security (CSRF protection)
• Remembering your preferences

We do not use third-party tracking cookies, analytics scripts, or advertising pixels. We respect your privacy.

6. Data Retention

We retain your information for as long as your account is active. You can request deletion of your account at any time from your settings page. Upon account deletion:

• Your profile is immediately deactivated
• Your data is permanently deleted within 30 days
• Encrypted private links become unrecoverable immediately

7. Free vs Premium Accounts

Free Accounts: Your public profile may display a small promotional link to LinkHub. This helps support our free service.

Premium Accounts: Your profile is ad-free. You also get access to premium themes, advanced analytics, and priority support.

8. Security

We implement industry-standard security measures including:

• HTTPS encryption for all connections
• Bcrypt password hashing
• AES-256 encryption for private links
• CSRF protection
• Rate limiting to prevent brute force attacks
• Regular security audits

9. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and data
• Export your data
• Object to processing

10. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will delete it immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us at: