Privacy Policy

Effective date: March 18, 2026  ·  Last updated: March 18, 2026

BioAlma ("we", "our", or "us") operates an AI-powered intelligence platform for biotech and medtech companies at bioalma.ai. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

1. Information We Collect

We collect information you provide directly, including:

• Account information — name, email address, and organization, collected via OAuth sign-in (Google or Microsoft).
• Usage data — pages visited, features used, and interactions with dashboards.
• Communications — messages sent through our support chat or email.

For users of BioAlma Trials, we additionally collect:

• Health-related information provided voluntarily for clinical trial pre-screening.
• Contact information stored in encrypted form, subject to HIPAA (US) and LGPD (Brazil) requirements.

2. How We Use Your Information

• To provide, operate, and improve our platform and services.
• To authenticate you and manage your account.
• To communicate with you about your account, updates, and support requests.
• To generate anonymized, aggregated analytics about platform usage.

3. Data Sharing

We do not sell your personal information. We may share data with:

• Service providers — third-party vendors who help us operate our platform (authentication, email delivery, cloud infrastructure), subject to data processing agreements.
• Your organization — usage data associated with your organization's account may be visible to your organization's administrators.
• Legal requirements — when required by law, court order, or governmental authority.

4. Authentication

We use Clerk for authentication, supporting sign-in via Google and Microsoft OAuth. We do not store your OAuth credentials. Authentication is governed by the respective providers' privacy policies.

5. Data Security

We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, and access controls. Sensitive health data (BioAlma Trials) is stored with AES-256 encryption and SHA-256 hashing for identifiers.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide services. You may request deletion of your data at any time by contacting us.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access, correct, or delete your personal data.
• Object to or restrict processing of your data.
• Data portability.
• Withdraw consent at any time.

To exercise these rights, contact us at hello@bioalma.ai.

8. Cookies

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies.

9. Third-Party Services

Our platform integrates with third-party services including Google, Microsoft, Stripe (payments), and Resend (email). Each service has its own privacy policy governing their data practices.

10. Children's Privacy

Our platform is intended for business professionals and is not directed at individuals under 18. We do not knowingly collect data from minors.

11. International Transfers

BioAlma operates in the United States and Brazil. Data may be transferred and processed in the US and other jurisdictions. For Brazilian users, we comply with the Lei Geral de Proteção de Dados (LGPD).

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the effective date.

13. Contact Us

If you have questions about this Privacy Policy, please contact us at:

• Email: hello@bioalma.ai
• Website: bioalma.ai