Privacy Policy | BioNith

1. Introduction

Welcome to BioNith ("we," "our," or "us"). BioNith is a platform designed to help creators and professionals build a living, verified digital reputation matrix. We respect your privacy and are deeply committed to protecting your personal data.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (bionith.com) and use our platform. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.

2. Information We Collect

We collect information that you voluntarily provide to us when you register on the platform, express an interest in obtaining information about us, or otherwise contact us.

Personal Identification Information: Name, email address, custom handles, and profile images.
Third-Party Authentication Data: When you link your account using OAuth (e.g., Google or GitHub), we collect necessary authentication tokens and basic profile information authorized by you.
Platform Usage Data: IP addresses, browser types, operating systems, and platform interaction metrics to ensure security and optimize performance.

3. Google API Services Usage Disclosure

BioNith utilizes Google's Application Programming Interface (API) Services to enable seamless authentication and ecosystem synchronization. We are committed to maintaining the highest standards of data security and transparency regarding your Google data.

Limited Use Policy: BioNith's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

What we collect: Upon your explicit consent during the Google OAuth flow, we securely retrieve your primary Google email address, your name, and your public profile picture.
How we use it: This data is strictly used to provision your BioNith account, verify your identity, and populate your initial public matrix. We do not use Google data for advertising purposes.
How we protect it: Your Google OAuth tokens and profile data are encrypted in transit using industry-standard TLS and encrypted at rest within our secure Firebase infrastructure.
Information Sharing: We do not sell, trade, or transfer your Google user data to unauthorized third parties under any circumstances.

4. How We Use Your Information

Having accurate information about you permits us to provide you with a smooth, efficient, and customized experience. Specifically, we may use information collected about you to:

Create and manage your verified BioNith account.
Synchronize external commits, tracks, and videos to your matrix based on your connected integrations.
Prevent fraudulent transactions, monitor against theft, and protect against criminal activity.
Compile anonymous statistical data for internal use to improve platform architecture.
Deliver administrative notices regarding security or platform updates.

5. Information Sharing

We strictly limit the sharing of your personal information. We may share information we have collected about you in certain situations:

Public Matrix: Information you explicitly choose to make public (your handle, public endorsements, connected public repository metrics) will be visible on your BioNith profile.
Service Providers: We may share data with trusted third-party vendors (like Google Firebase for hosting and authentication) who perform services for us, under strict confidentiality agreements.
By Law or to Protect Rights: If we believe the release of information about you is necessary to respond to legal process, or to protect the rights, property, and safety of others.

6. Data Security & Retention

We use administrative, technical, and physical security measures to help protect your personal information. Our platform relies on enterprise-grade infrastructure utilizing AES-256 encryption for data at rest and TLS 1.3 for data in transit.

We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy policy, unless a longer retention period is required or permitted by law. When you delete your account, your personal data and OAuth tokens are permanently purged from our active databases.