Privacy Policy
Last updated: October 29, 2026
Biolio (biolio.link) is run by Muhammad Tayyab Khan in Karachi, Pakistan. This policy explains what data we collect, why, and what you can do about it. Short version: we collect only what we need to run Biolio, we never sell your data, and we don't use ad trackers.
1. What we collect
| Data | From whom | Why |
|---|---|---|
| Email address and password (stored encrypted) | You, when you sign up | To log you in and contact you about your account |
| Username, name, bio, photo, links, products and page design | You, on your page | To show your public page |
| Plan, billing country and payment status | Paddle | To give you the right plan. We never see your card details |
| Page views and clicks, the site visitors came from, approximate country and device type | Visitors to Biolio pages | To show creators their analytics |
| Emails that visitors enter in a creator's signup form | Visitors to Biolio pages | To pass them to that creator |
| Messages you send us | You | To answer you |
We use the country our hosting provider detects from a visitor's connection for analytics. We don't store visitors' IP addresses with analytics.
2. Cookies
We use only the cookies needed to keep you logged in. We don't use advertising or tracking cookies, so there is no cookie banner to click through.
3. Who we share data with
We share data only with services that help us run Biolio:
- Supabase: database, login and photo storage
- Vercel: website hosting
- Paddle: payments, invoices and sales tax for Pro plans
These companies may store data outside your country, including in the United States and the EU. We may also share data if the law requires it. We never sell or rent your data.
4. Data collected by creators
When a visitor gives their email to a creator through a Biolio form, that creator decides how to use it. Biolio only stores it and passes it on. Questions about those emails should go to the creator first.
5. How long we keep it
We keep your data while your account is open. When you delete your account, we delete your data within 30 days. Backups are fully cleared within a further 30 days. To stop someone else taking over your old link, we keep your username and a one-way hash of your email (not the email itself) for 30 days, so only you can reclaim that username. We may keep billing records longer where the law requires it.
6. Your rights
You can ask us to see, correct, export or delete your data, or to stop using it, at any time. Much of this you can do yourself in your dashboard. For anything else, email support@biolio.link and we will reply within 30 days. If you are in the EU or UK, you can also complain to your local data protection authority.
7. Children
Biolio is not for anyone under 16, and we don't knowingly collect their data. If you think a child has signed up, email us and we will delete the account.
8. Changes
If we make important changes to this policy, we will email you before they take effect.
9. Contact
support@biolio.link