Privacy Policy
Effective Date: November 9, 2026 • Self-Hosted Architecture • On-Premise Data Storage
Our Commitment: Self-Hosted Data Sovereignty
Bibiolink is a self-hosted, unencrypted software platform. Unlike cloud-hosted platforms that aggregate user profiles, your subscriber databases and click analytics are stored directly on your configured server database.
1. Information We Collect as the Software Vendor
When you purchase, register, or interact with Bibiolink directly on this website, we collect only the minimum data required to deliver license entitlements and support:
- Billing & Order Data: When purchasing through Lemon Squeezy (our authorized Merchant of Record), we receive your name, email address, billing country, purchase timestamp, and generated order ID. We never see or store your credit card numbers, CVVs, or full payment credentials on our servers.
- Customer Portal Credentials: When you register an account in our Customer Portal, we store your email address and secure cryptographically hashed password to authenticate your access to software downloads and update notices.
- License Verification Data: When you register your license key, our cloud update gateway verifies your license existence and records your primary installation domain to deliver targeted over-the-air (OTA) updates and prevent pirated key conflicts.
- Customer Support Communications: Tickets, error logs, and messages you submit through our portal or direct email to assist in resolving technical queries.
2. Information We Never Collect (Your End Users & Visitors)
Because Bibiolink runs directly on your hosting environment:
- We have no access to the visitors browsing your bio link pages.
- We have no access to the subscriber accounts, passwords, or emails stored in your self-hosted MySQL database.
- We have no access to your Stripe, PayPal, or payment gateway API secret keys configured on your server.
- We do not log, inspect, or intercept NFC digital business card taps or .vcf downloads.
As the server administrator of your deployment, you maintain complete data controller responsibilities under GDPR and CCPA for the end users who register on your platform.
3. How We Use Buyer Information
We process your data strictly under the lawful basis of contract execution and legitimate interest:
- Generating and issuing your unique product license key upon payment confirmation.
- Providing continuous software updates, critical security patches, and emergency download links.
- Notifying you via email when support engineers resolve your support tickets.
- Preventing software counterfeiting and unauthorized key duplication.
We never sell, rent, monetize, or trade buyer email addresses or transaction records to third-party advertising brokers or data aggregators.
4. Trusted Sub-Processors & Infrastructure Partners
We partner with specialized, security-audited infrastructure providers to operate our sales, authentication, and notification desk:
5. Cookie Policy & Browser Storage
Our website practices strict cookie minimalism:
- No Advertising Cookies: We do not deploy Facebook Pixel, Google AdSense, or third-party retargeting cookies.
- Functional Session Storage: When you log into the customer portal, we store a secure JWT authentication token in your browser's local storage (
biolink_user) to keep you signed in across tabs.
6. Your Rights (GDPR & CCPA Compliance)
Regardless of your geographic location, you hold the following privacy rights regarding your account data:
- Right of Access: Request a complete export of your customer profile, registered licenses, and ticket history.
- Right to Rectification: Request correction of inaccurate contact or billing details.
- Right to Erasure (“Right to be Forgotten”): Request deletion of your customer portal account and ticket records, subject only to mandatory legal tax audit retention periods.
7. Data Protection Officer & Inquiries
To exercise any of your data protection rights, or if you have questions regarding our privacy architecture, contact our Data Protection desk directly: