1. Scope and who we are
This Privacy Policy applies to biotechstockintel.com and the accounts, research tools, newsletters, memberships, and related services offered under the Biotech Stock Intel name (collectively, the “Service”). Biotech Stock Intel is the controller of personal information processed for operating the Service. A payment provider acting as merchant of record or another third party may separately control information it collects under its own privacy policy.
2. Information we collect
Information you provide
- Account information: your name, email address, login method, account identifier, and password-related authentication records. Passwords are processed by our authentication provider; we do not receive your readable password.
- Membership information: your plan, subscription status, renewal or expiration date, cancellation status, and identifiers connecting your account to a payment transaction.
- Communications and preferences: messages you send us, support history, newsletter consent, and email preferences.
- Payment-related information: the merchant or payment provider may send us transaction status, customer and subscription identifiers, amount, currency, billing interval, and limited purchaser details. We do not store full payment-card numbers or card security codes.
Information collected automatically
When you use the Service, we and our infrastructure and security providers may process IP address, browser and device information, requested pages, timestamps, approximate location derived from IP address, referring URL, cookie or session identifiers, security signals, and diagnostic logs. We also record actions needed to operate accounts and subscriptions.
Information from third parties
If you sign in with Google, we receive the account information you authorize Google to provide, such as your name, email address, and provider account identifier. We may also receive subscription and payment events from the merchant shown at checkout and newsletter status from our email service provider.
3. How we use information
We use personal information to:
- create, authenticate, secure, and administer accounts;
- provide free and paid features and determine membership access;
- process and reconcile subscription events, cancellations, refunds, disputes, and support requests;
- send transactional messages, security alerts, and service notices;
- send the newsletter or marketing messages when you have opted in, and record or honor your choices;
- detect bots, fraud, misuse, and threats and maintain service reliability;
- debug, measure, and improve the Service using operational and aggregated information;
- comply with law, enforce our Terms, and establish or defend legal claims.
Where applicable law requires a legal basis, we rely on performance of our contract, our legitimate interests in operating and securing the Service, consent where requested, and compliance with legal obligations.
4. Cookies and similar technologies
We use cookies and similar storage that are necessary for login sessions, account security, OAuth sign-in, preferences, and fraud prevention. Cloudflare Turnstile processes security signals to distinguish legitimate visitors from automated traffic. Embedded charts or other third-party content may receive network and device information and may use their own technologies under their policies.
We do not currently sell personal information or use it for cross-context behavioral advertising. Browser “Do Not Track” signals are not standardized. Where legally required and technically applicable, we will honor recognized privacy preference signals.
5. How information is disclosed
We disclose information only as reasonably necessary to operate the Service, complete transactions, protect users, or comply with law. Recipients may include:
- Supabase for authentication, account records, and database infrastructure;
- Vercel for application hosting and operational delivery;
- Cloudflare for DNS, network security, and Turnstile bot protection;
- Google when you choose Google sign-in;
- beehiiv when you opt into our newsletter;
- Commas (operated by FanBasis, Inc.) or another provider identified at checkout for checkout, recurring billing, receipts, taxes where applicable, fraud controls, refunds, disputes, and payment support;
- professional advisers, authorities, counterparties, or courts when reasonably necessary for legal, compliance, safety, financing, or corporate transactions.
Market-information providers generally receive server-side requests for the requested security or ticker rather than your account profile. Links and embedded third-party tools may allow the destination provider to receive your IP address, browser information, and the page you visited.
6. Payment privacy
If Commas is displayed as the merchant at checkout, your purchase is processed by FanBasis, Inc. doing business as Commas. Commas and its financial partners collect and control payment and billing information under the Commas Privacy Policy. A card or bank statement may use a Commas- or FanBasis-related descriptor. We receive only the information needed to activate and administer your membership and address transaction issues.
7. Retention
We retain information for as long as reasonably necessary to provide the Service and for legitimate operational, security, tax, accounting, dispute, and legal purposes. Account and membership records are generally retained while your account is active and for a reasonable period afterward. Security logs and failed authentication records may be retained for shorter operational periods. Newsletter records may be retained to document consent and suppression choices. Payment providers keep transaction records according to their own legal and compliance obligations.
8. Security
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information, including encrypted transport, managed authentication, access controls, and server-side handling of secret credentials. No internet service is completely secure, and we cannot guarantee absolute security. Please use a unique password and notify us if you suspect unauthorized account access.
9. International transfers
Our providers and their systems may operate in countries other than yours. Information may therefore be transferred to and processed in jurisdictions with different privacy laws. Where required, we and our providers use recognized safeguards for international transfers.
10. Your choices and rights
You may update certain account information, cancel a membership, unsubscribe from marketing using the link in an email, or ask us to access, correct, delete, restrict, or provide a copy of your personal information. Depending on where you live, you may also have rights to object, withdraw consent, or appeal a privacy decision. These rights may be limited by identity verification, legal exceptions, and retention obligations.
Send requests to support@biotechstockintel.com. We may ask for information reasonably necessary to verify your identity. You may also complain to your local privacy or data-protection authority.
11. Children
The Service is intended for adults and is not directed to anyone under 18. We do not knowingly collect personal information from children. Contact us if you believe a child has provided information to the Service.
12. Changes to this policy
We may update this policy as the Service, providers, or legal requirements change. We will post the revised policy with a new effective date and provide additional notice when required. Material changes apply prospectively unless applicable law permits otherwise.