← Back to BioStack

Privacy Policy

Effective Date: April 11, 2026

1. Information We Collect

Intactis Bio Corp. ("we," "us") collects the following information when you use the BioStack auction platform:

• Account Information: Email address and display name provided during registration.
• Payment Information: Credit or debit card details are collected and processed exclusively by Stripe, Inc. We do not store your full card number on our servers. We store only a Stripe customer ID and payment method reference token.
• Auction Activity: Bid amounts, timestamps, auction outcomes, and session records.
• Usage Data: IP address, browser type, and access timestamps for security and analytics purposes.

2. How We Use Your Information

• To create and manage your account
• To process auction bids and payments
• To deliver gaming session access to auction winners
• To send transactional emails (bid confirmations, auction results, payment receipts)
• To prevent fraud and ensure platform security
• To improve the Platform and user experience

3. Third-Party Services

We use the following third-party services that may process your data:

• Stripe, Inc. — Payment processing. Subject to Stripe's Privacy Policy.
• Supabase, Inc. — Database hosting and authentication. Subject to Supabase's Privacy Policy.
• Resend — Transactional email delivery. Subject to Resend's Privacy Policy.
• Google Cloud Platform — Game server hosting. Subject to Google Cloud's Privacy Notice.
• Vercel, Inc. — Web hosting. Subject to Vercel's Privacy Policy.

4. Data Retention

We retain your account information and transaction history for as long as your account is active and for 3 years thereafter for legal and accounting purposes. You may request account deletion at any time by emailing us.

5. Data Security

We use industry-standard security measures including encrypted connections (TLS), secure authentication tokens, and access controls. Payment data is handled entirely by Stripe's PCI-DSS compliant infrastructure.

6. Your Rights

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Receive a copy of your data in a portable format
• Opt out of non-essential communications

7. Cookies

We use essential cookies and local storage to maintain your authentication session. We do not use advertising cookies or third-party tracking pixels.

8. Children's Privacy

The Platform is not intended for users under 18. We do not knowingly collect information from minors.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date.

10. Contact

For privacy-related questions or data requests:
Intactis Bio Corp.
Email: daniel@intactis.bio