Privacy Policy
Last updated: March 12, 2026
Vanovian Bio Inc. (“we”, “us”, “our”) operates BioBriefcase. This policy explains how we collect, use, and protect your personal information in compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA).
Information We Collect
- Account information (email address, name) provided during registration or single sign-on
- Search queries and facets you enter when using the service
- Run history and results metadata
- Usage data (pages visited, features used, timestamps)
- Payment information is collected and processed by Stripe — we do not store credit card numbers
How We Use Your Information
- To provide and operate BioBriefcase
- To authenticate your account
- To process your search queries and deliver results
- To improve the service based on usage patterns
- To communicate important service updates
- To process payments
Data Storage and Security
Account data is stored in Supabase (hosted in the United States). Search results and evidence packs are stored in Amazon Web Services S3 (United States). We use industry-standard security measures including encryption in transit (TLS), row-level security on all database tables, authenticated API routes, and server-side API key management.
Third-Party AI Processing
No account identifiers, email addresses, names, or other personally identifiable information are sent to AI providers.
Search query text is sent to Anthropic’s API for structured parsing to improve search quality. These API calls contain only the query text and any search facets. Anthropic’s data retention policies apply to these calls; refer to Anthropic’s privacy policy for details.
Data Sharing
We do not sell your personal information. We share data only with:
- Service providers necessary to operate BioBriefcase (Supabase, Amazon Web Services, Stripe, Anthropic, Vercel)
- As required by law
Your Rights Under PIPEDA
You have the right to:
- Access your personal information we hold
- Request correction of inaccurate information
- Withdraw consent for data collection (which may limit service functionality)
- Request deletion of your account and associated data
To exercise these rights, contact privacy@vanovianbio.com.
Cookies and Tracking
We use essential cookies for authentication and session management. We do not use third-party advertising or tracking cookies.
Data Retention
We retain your account data and run history for as long as your account is active. Upon account deletion, personal data is removed within 30 days. Anonymized usage data may be retained for service improvement.
International Users
BioBriefcase data is stored and processed in the United States. By using the service, you consent to the transfer of your information to the United States. If you are located in the European Economic Area or United Kingdom, additional data protection terms may apply — contact privacy@vanovianbio.com for details.
Children
BioBriefcase is not intended for users under 18 years of age.
Changes
We may update this policy periodically. We will notify you of material changes via email or in-app notification.
Contact
Privacy inquiries: privacy@vanovianbio.com