Privacy Policy

At SellBio, we respect your privacy and are committed to protecting your personal data. This privacy policy explains how we handle your information when you use our web application.

This policy complies with the General Data Protection Regulation (GDPR) of the European Union and applicable US privacy laws including the California Consumer Privacy Act (CCPA).

We use service providers including Supabase (database and storage), Better Auth and OAuth providers (authentication), Stripe (payments), Resend (transactional email), Formspree (forms), Google Analytics (with consent), and Vercel Analytics (cookieless aggregate analytics). We use data to operate, secure, support, and improve Sell Bio. We never sell your personal information.

The data controller responsible for your personal data is:

3.1. Account Information

When you create an account, we collect:

• Email address
• Name (if provided)
• Profile picture (if using social login)
• Authentication and session identifiers, plus OAuth account data when you choose social sign-in

3.2. Usage Data & Analytics

We automatically collect certain information when you use our service through various analytics providers:

• IP address (may be anonymized via Google Analytics)
• Browser type and version
• Operating system
• Pages visited and time spent (Vercel Analytics)
• Date and time of access
• Performance metrics and error tracking

3.3. Email Communications

When you contact us, create an account, or opt in to product emails:

• Contact form data may be processed by Formspree
• Transactional and account emails are delivered through Resend
• Optional product emails are used only for the purpose described when you subscribe
• Never shared or sold to third parties

3.4. User-Generated Content

Content you create or collect using Sell Bio, including:

• Public pages, screens, flows, forms, products, lead records, templates, and designs
• Project settings and configurations
• Custom assets and media you upload

We use cookies and similar technologies to enhance your experience:

5.1. Essential Cookies

Required for the service to function. No consent needed:

• Session management and authentication
• Language and theme preferences
• Cookie consent preferences

5.2. Analytics Cookies

Help us understand how you use our service. Require your consent.

You can manage your cookie preferences at any time. See our Cookie Policy for more details. Cookie Policy

Under GDPR and CCPA, you have the following rights:

We implement industry-standard security measures:

• SSL/TLS encryption for all data transmission
• Secure password hashing (never stored in plain text)
• Regular security audits and updates
• Access controls and authentication
• Data encrypted at rest

Your data may be processed in countries outside your own. When we transfer data internationally, we ensure:

• Transfers to countries with adequate data protection (EU adequacy decisions)
• Standard Contractual Clauses (SCCs) where required
• Compliance with EU-US Data Privacy Framework where applicable

We may update this privacy policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "last updated" date.