Privacy Policy

1. Who We Are

Biou provides the services described in this Policy and is responsible for account, purchase, and billing data. Contact us at support@biou.me.

2. Information We Collect

Information you provide

• Account data — email, password hash, and Google profile details if you use Google sign-in.
• Page content — your bio, links, images, products, files, prices, and design settings. Published pages are public.
• Buyer data — email, order details, delivery status, and support messages.
• Creator payment data — Stripe Connect account ID and onboarding or payout status. Stripe, not Biou, collects bank, tax, identity, and card details.

Visitor analytics

When someone views a public page or clicks a link, we may record device type, browser and operating-system family, referrer, UTM parameters, approximate country or city, and page or link identifiers. We do not store the visitor’s raw IP address.

Unique visits use a salted one-way token that changes daily and is not designed to track a person across days, pages, or other websites. A temporary sessionStorage value may prevent duplicate counts within one browser session; it clears when the tab closes.

Subscriber emails

If a creator adds a subscribe form to their page, visitors who choose to subscribe give that creator their email address. We store the email, the page it was submitted on, and when the visitor agreed to receive emails. Creators can view, export, and delete their subscribers.

Information from other services

• Google provides the profile information you approve when signing in.
• Stripe provides payment status, transaction references, refunds, disputes, and payout status.

3. How We Use Information

• Operate accounts, public pages, products, purchases, and payouts.
• Deliver receipts, download links, verification, password-reset, and service emails.
• Provide audience and revenue analytics.
• Prevent fraud, abuse, and security incidents.
• Comply with law and enforce our policies.

We do not sell personal information, use it for cross-context behavioural advertising, or use creator or audience data to train third-party AI models.

4. Our Role

Biou controls account, billing, and purchase data. For analytics on a creator’s public page, the creator controls why the analytics are used and Biou processes them to provide the analytics service. Each creator likewise controls the subscriber emails collected on their page and how they use them, and Biou stores them on the creator’s behalf. Visitors with questions about a specific page, or who want to unsubscribe, should contact its creator; we will assist where required.

5. When We Share Information

We share only what is needed with service providers that support payments, authentication, email delivery, hosting, database and file storage, DNS, and error monitoring. We may also disclose information when legally required, to protect users and the Service, or as part of a merger, financing, or sale. Providers may process data in other countries under applicable transfer safeguards.

6. Legal Bases

Where GDPR or similar law applies, we process information to perform our contract, meet legal obligations, protect legitimate interests such as security and fraud prevention, or with consent where required.

7. Cookies and Browser Storage

Signed-in features require authentication storage in your browser. Public-page analytics do not use advertising cookies, pixels, or persistent cross-site identifiers. Biou does not serve targeted advertising.

8. Retention

• Account and page content is kept while the account exists, then deleted unless law requires retention.
• Transaction records may be kept for at least seven years for tax, accounting, dispute, and anti-fraud purposes.
• Page analytics is kept while the related page and creator account exist, unless deleted earlier.
• Subscriber emails are kept until the creator deletes them or deletes the related page or account.
• Email and diagnostic logs are kept only as long as reasonably needed for delivery, security, and debugging.

9. Your Rights

Depending on where you live, you may ask to access, correct, delete, restrict, object to, or export your personal information, withdraw consent, or appeal a decision. You may also have the right to complain to a data-protection authority. California residents may ask about collection and disclosure and exercise applicable deletion, correction, and opt-out rights; Biou does not sell or share personal information for behavioural advertising.

Send requests to support@biou.me. We may verify your identity and will respond within the time required by applicable law.

10. Children and Security

Biou is not directed to anyone under 18. Contact us if you believe a minor has provided personal information. We use HTTPS, password hashing, access controls, limited-lifetime sessions, and data-minimised analytics, but no system is completely secure.

11. Changes and Contact

We may update this Policy and will give reasonable notice of material changes. For privacy, security, or general questions, contact support@biou.me. This Policy is provided in English; translations are for convenience only.