Privacy Policy

Version 2026-09-08

Operator: Seyed Mostafa Jalili Kolour, England, United Kingdom. Privacy and rights contact: info@aibioatlas.com.

Correspondence address: London, United Kingdom

What we collect and why

You can browse without an account. When accounts open, we use your email and authentication records to sign you in and protect your account. We store your acceptance of the Terms. These activities support our agreement with you and our legitimate interests in preventing abuse.

If you submit a product, we store the product name, URL, description, your account reference and moderation status. If you write a review, we store your chosen public name, rating, text, relationship disclosure and moderation status. We use these to provide community contributions under the Terms. Do not include confidential or sensitive personal information.

Company verification

When enabled, we collect company registration details, representative name, role, contact email and limited documentary evidence to check identity and authority and prevent impersonation. Supply only necessary evidence and redact unrelated information. Documents are encrypted on the private server, accessible only to the owner reviewer, and are not sent to AI providers. Public profiles show company name, country, website, verification status and approved listings. Evidence expires after 90 days pending review or 30 days after a decision, whichever is earlier; daily cleanup removes it. Company records and listings remain until account deletion or moderation. Account exports include company records; contact the privacy address for a copy of documentary evidence.

What becomes public

Approved reviews display your chosen name, rating, text, date and relationship disclosure. Your email and account ID are not included in the public review view. Product suggestions stay private during checking. Published product information comes through the evidence-checking process; your contact details are not published with it.

AI Search and service providers

When enabled, AI Search sends the question you enter and a limited selection of public catalog records to OpenAI to select relevant products. It does not send your account email or ID. Do not put personal or sensitive information in your question. The application does not save questions or generated answers; daily usage counters are stored to limit abuse and cost. Request-level response storage is disabled, but this is not a promise of zero provider retention. Provider security, abuse-monitoring and contractual retention terms still apply.

Supabase provides authentication and the database when connected. The website host and email delivery provider necessarily handle connection and delivery data. Their identities, processing locations, retention and international-transfer arrangements must be documented before registration opens. We do not currently load an analytics or advertising service, sell user data, or automatically add users to marketing lists.

Cookies, analytics and affiliate links

Optional analytics and marketing storage require a separate choice in Cookie settings. Refusing optional tracking does not prevent browsing or signing in. A future provider requires an updated cookie inventory and a fresh choice where appropriate. Affiliate links are labelled near the link; clicking takes you to the merchant, whose privacy terms apply. This release adds no affiliate click-tracking cookie.

Retention and deletion

Session cookies last up to one hour. Cookie choices expire after 180 days; saved products remain on your device until removed. Account records and Terms acceptance remain while your account exists. Submitted products are removed after 90 days; unpublished reviews after 90 days; published reviews remain until withdrawn through account deletion or removed under moderation rules. Daily usage counters are removed after 30 days. Operational cleanup must run daily. Account deletion removes associated contributions from the active database. Backup expiry and any necessary legal or security retention must be confirmed with the selected providers before launch.

Your choices and rights

Your account offers a data export and deletion. Contact the privacy address for access, correction, portability, restriction, objection, deletion, withdrawal of consent or assistance where applicable. Export is not a substitute for a broader access request. We may verify identity before acting. You may complain to the UK Information Commissioner’s Office or the relevant authority in your jurisdiction. We do not make automated decisions with legal or similarly significant effects about you.

Community accounts are intended for adults aged 18 and over. Contact us if a child has supplied personal information. Material changes will be reflected in the version and communicated where required.