Privacy Policy

At Bhio (accessible at https://bhio.link), we are committed to respecting your privacy and protecting any personal information you share with us. This Privacy Policy outlines what information we collect, how we handle and protect it, and the choices and rights you have regarding your data.

1. Information We Collect

We only collect information necessary to provide, personalize, and secure our link-in-bio service:

• Account Registration Data: When you create an account using email and password, we collect your email address, chosen handle (@username), and securely hashed passwords managed through our authentication provider (Supabase Auth).
• Google Account Data (OAuth 2.0): If you choose to register or log in using Google ("Continue with Google"), Google provides us with your verified email address, your display name, your unique Google account identifier, and your profile picture/avatar URL.
• Public Profile Content: Any content you choose to publish on your Bhio page, including links, URLs, button labels, bio text, custom profile photos, social media handles, and layout theme preferences.
• Aggregated Technical Data: Non-personally identifiable diagnostic information including browser type, operating system, device screen category, and anonymized interaction heatmaps (via Microsoft Clarity) to optimize platform speed and fix layout issues.

2. Google API Services User Data Policy Compliance

Specifically regarding Google User Data:

• Purpose of Access: We request access only to your basic public profile information and email address to authenticate your identity and set up your Bhio account without needing a separate password.
• No Sale of Data: We never sell, rent, license, or monetize your Google user data to data brokers, advertisers, or third parties under any circumstances.
• No Unauthorized Transfer: We do not transfer your Google user data to third parties except as necessary to provide or improve the core functionality of Bhio, comply with applicable law, or as part of a merger/acquisition with explicit notice.
• No AI Model Training: We do not use Google user data to develop, train, or fine-tune generalized artificial intelligence (AI) or machine learning (ML) models.
• No Advertising Use: Google user data is never used to serve targeted advertisements or build advertising user profiles.

3. How We Use Your Information

We use the collected information solely for legitimate operational purposes:

• To create, manage, and authenticate your user account across your devices (desktop and mobile).
• To host and display your public bio page at bhio.link/yourname.
• To automatically synchronize your saved links, bio edits, and custom themes to the cloud.
• To monitor system uptime, prevent abusive or fraudulent activities, and maintain platform security.
• To provide customer support and respond to user inquiries.

4. Data Storage, Security & Infrastructure

We implement industry-standard technical and organizational security measures to protect your information:

• Database & Authentication: All accounts and profiles are encrypted in transit (TLS 1.3) and stored in high-security PostgreSQL instances managed by Supabase with Row-Level Security (RLS) policies ensuring users can only edit their own records.
• Edge Delivery & CDN: Bhio's frontend is served globally via Cloudflare, featuring enterprise DDoS protection and SSL encryption.
• Passwords: We never store plain text passwords; all credentials are salted and hashed using cryptographic industry standards.

5. Cookies & Local Storage

Bhio uses minimal browser storage mechanisms:

• Essential Storage: LocalStorage and session tokens are used strictly to maintain your active authentication session and save draft edits on your device while you customize your page.
• Analytics: First-party cookies from Microsoft Clarity (_clck, _clsk) help us analyze traffic patterns and fix bugs. You can disable cookies at any time via your browser settings.

6. Your Rights, Data Retention & Deletion

You have full control over your data at all times:

• Modify Content: You can edit, replace, or delete your links, bio, avatars, and social icons at any time in the Bhio editor.
• Account Deletion: You can request complete deletion of your account and all associated profile data by emailing us at support@bhio.link. Upon request, all data is permanently purged from our database.
• Revoking Google Access: If you signed in with Google, you can revoke Bhio's access to your Google account at any time by visiting your Google Account Permissions Settings.

7. Children's Privacy

Bhio is not intended for children under the age of 13. We do not knowingly collect or solicit personal information from children under 13. If we learn that we have collected information from a child under 13, we will promptly delete that data.

8. Updates to This Policy

We may update this Privacy Policy periodically to reflect enhancements to our platform or changes in applicable legal regulations. When updates occur, the "Last Updated" date at the top of this page will be revised. We encourage you to review this page periodically.