Privacy Policy

Allbio AI LLC is the data controller responsible for your personal data. Our mailing address is:

Allbio AI LLC 455 Market St, Ste 1940 PMB #411419 San Francisco, CA 94105-2448 U.S.A.

You can reach us through our contact form (preferred — privacy requests are tracked in our support queue) or at legal@allbio.ai.

• Account data: real name, email address, and profile information (your name generates your member profile URL).
• Content you submit: posts, comments, tutorials, listings, events, courses, jobs, and messages.
• Connection data: connection requests you send and receive, their status, the date a connection was accepted, and any mutes or blocks you set.
• Transaction data: billing details processed by Stripe (we do not store full card numbers).
• Usage data: pages viewed, referring URLs, device/browser type, and approximate location.
• Cookie and similar tracking data, as described in our Cookies Policy.

We use personal data to:

• Provide, operate, and improve the Service (performance of a contract).
• Process payments and manage listings (performance of a contract).
• Measure content and listing performance and show owners rolled-up, aggregate counts (views, clicks, bookmarks) that are not tied to identifiable individuals (legitimate interests).
• Communicate with you about your account or transactions (legitimate interests / contract).
• Send marketing communications where permitted, with an opt-out (consent / legitimate interests).
• Detect, prevent, and address fraud, abuse, and security incidents (legitimate interests).
• Comply with legal obligations.

Our AI assistant, Huxley, uses large language models accessed through Lovable's AI Gateway. When you use Huxley, we send your messages and relevant context to Lovable for processing. We instruct Lovable and its underlying providers not to use your data to train their models, but your messages may be temporarily processed and stored in accordance with Lovable's privacy policy.

We also use automated tools to pre-screen submitted listings and content for compliance with our Acceptable Use Policy. This screening may classify a submission as safe, caution, or reject. A human reviews any submission flagged as caution or reject before any removal or final decision. You may request human review of an automated decision by contacting us through our privacy request form.

Do not submit protected health information (PHI), trade secrets, or other sensitive personal data to Huxley or in public submissions.

We share personal data only with service providers who process it on our behalf under contractual confidentiality and security obligations:

We may also share data with professional advisers (legal, accounting), authorities when required by law, or in connection with a business transfer.

Some of our subprocessors operate outside your country of residence, including in the United States and the European Union. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses, adequacy decisions, or equivalent mechanisms to protect data transferred internationally.

We retain personal data for the following periods, subject to legal or security needs:

• Account data: until you delete your account, plus up to 90 days for backups and legal compliance.
• Content submissions: while published and for 12 months after removal or deletion, unless a longer period is required by law or for dispute resolution.
• Messages: while your account is active and for 12 months after deletion.
• Support tickets: 3 years after closure.
• Security and audit logs: up to 12 months.
• Billing records: 7 years after the transaction.
• Analytics data: 26 months or less, depending on the provider.

When data is no longer needed, we delete or anonymize it. Deletion may not be immediate in backup systems, but we do not use retained backup data for active processing.

We implement reasonable technical and organizational measures to protect personal data, including encryption in transit, access controls, and regular review of our subprocessors. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

If we become aware of a security incident that materially affects your personal data, we will notify affected users without undue delay, and in any case within the timeframes required by applicable law. We will also take reasonable steps to mitigate the incident and prevent recurrence.

Depending on your location, you may have the right to access, correct, delete, or export your personal data; restrict or object to processing; and withdraw consent. To exercise these rights, submit a request through our privacy request form (preferred, so we can track and verify your request), or email legal@allbio.ai.

GDPR and UK rights

If you are in the European Economic Area, Switzerland, or the UK, you have the rights listed above plus the right to object to processing based on legitimate interests, the right to data portability, the right to lodge a complaint with your local supervisory authority or the UK Information Commissioner's Office (ICO), and the right to human review of any automated decision that produces legal or similarly significant effects. We respond to verified requests within one month, or longer if permitted by law with notice to you.

CCPA/CPRA rights (California)

California residents have the right to know, delete, correct, and opt out of the "sale" or "sharing" of personal information. We do not sell personal information for monetary consideration, and we do not "share" personal information for cross-context behavioral advertising. We do not process sensitive personal information for the purpose of inferring characteristics. We will not discriminate against you for exercising your CCPA/CPRA rights. You may designate an authorized agent to submit requests on your behalf; we will verify the agent's authority before acting.

Other US state privacy rights

Residents of Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, Nevada, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, and other states with comprehensive privacy laws may have rights to access, correct, delete, opt out of targeted advertising or profiling, and appeal a denied request. To appeal a denied request, email legal@allbio.ai with "Privacy Appeal" in the subject line and include your original request details. We will respond to appeals within the timeframe required by applicable law.

The following table describes the categories of personal information we collect, the sources, purposes, and categories of recipients:

The Service is intended for adults 18 years of age or older. We do not knowingly collect personal data from children under 13 (COPPA) or, in the EEA/UK, from anyone under 16. If we learn that we have collected personal data from a child under the applicable age, we will delete the account and data promptly.

If you are a parent or guardian and believe your child has provided personal data to us, please contact us through our privacy request form or at legal@allbio.ai.

If you are a California resident under 18 and a registered user of the Service, you have the right under California Business and Professions Code Section 22581 to request removal of content or information you have publicly posted. To make a request, use our privacy request form and select "minor content removal." We will review and respond in accordance with California law. Please note that removal does not ensure complete or comprehensive removal of the content from the internet or from third-party services that may have copied or indexed it.

Published contributions — use cases, articles, tutorials, events, product listings, courses, and job listings — are public: anyone can read them without an account, and they can be indexed by search engines. Your identity, however, is shown on a two-tier basis: signed-in members see your real name, profile photo, and a link to your profile on content you authored; signed-out visitors and search engines see only "An Allbio.AI member," with no name or link. Paid listings (jobs, products, courses, events) display the company or organizer name, never the lister's personal name.

Some areas of the Service are members-only and are not exposed to search engines: the Community forum, comments on editorial and listing pages, the member directory, private messages, and any profile fields you set to members-only or hidden. Upvotes, bookmarks, and similar activity are shown only as aggregate counts. We are not responsible for how third parties copy, index, or share content that is public.

The Service may contain links to third-party websites, product listings, job posts, tutorials, and community content. We do not control those sites and are not responsible for their privacy practices. Please review the privacy policies of any third-party site you visit.

We honor the Global Privacy Control (GPC) and similar browser opt-out preference signals. If your browser sends a GPC signal, we will treat it as a request to opt out of analytics/tracking cookies and will not load Plausible, Google Analytics, or other non-essential analytics scripts. You can also manage preferences through our cookie consent tool as described in our Cookies Policy.

Our Service does not otherwise respond to browser "Do Not Track" signals because there is no consistent industry standard for doing so.

Nevada residents may opt out of the future sale of personal information. We do not sell personal information, but you may still contact us at legal@allbio.ai with any questions.

California residents may request information about disclosures of personal data to third parties for their direct marketing purposes through our contact form or by emailing legal@allbio.ai. We do not disclose personal data for third-party direct marketing purposes.

We may update this Privacy Policy periodically. Material changes will be reflected by updating the Effective Date above and, where appropriate, by notice on the Service or by email.

Allbio AI LLC 455 Market St, Ste 1940 PMB #411419 San Francisco, CA 94105-2448 U.S.A.

Contact form (preferred): privacy request form
General: contact@allbio.ai
Privacy/Legal: legal@allbio.ai