Privacy Policy

1Scope and Relationship to HIPAA

This Privacy Policy describes how BioBylt Labs LLC ("BioBylt Labs," "we," or "us") collects, uses, shares, and protects personal information when you visit biobyltlabs.com, interact with our marketing, create an account, or use our non-clinical coordination services. This Privacy Policy does not cover Protected Health Information (PHI) maintained under the Health Insurance Portability and Accountability Act (HIPAA). PHI that you share with, or that is generated by, the BioBylt Labs-affiliated Provider Group in the course of your clinical care is governed by the separate Notice of Privacy Practices issued by the Provider Group. If you are looking for information about how your clinical records are handled, please consult the Notice of Privacy Practices.

2Acting on Behalf of Another Person

If you are using the services on behalf of another person (for example, as an authorized agent, guardian, or caregiver), you represent that you are authorized to act on that person's behalf and that the individual has accepted this Privacy Policy. You agree that the information you provide is accurate and complete.

3Information We Collect

We collect information in the following categories:

• Identifiers and contact information — name, email address, phone number, mailing and billing address, date of birth, and account credentials.
• Demographic information — gender, ZIP code, and similar attributes you choose to provide.
• Eligibility information — self-reported health history, medication history, and eligibility responses you submit through intake questionnaires. (Clinical intake responses you submit during a consultation are governed by HIPAA and the Provider Group's Notice of Privacy Practices.)
• Payment information — payment method details handled by our payment processors (currently Stripe, Inc. and GreenPay). We do not store full credit or debit card numbers on our own servers.
• Device and usage information — IP address, device identifiers, operating system, browser type, referring and exit URLs, pages viewed, time spent, interactions with features, and diagnostic or performance data.
• Location information — general geographic location inferred from IP address, and (with your permission) more precise location from your mobile device.
• Communications — messages you send us by email, chat, or phone; customer-support tickets; and recordings of support calls where permitted and disclosed.
• Marketing and advertising data — information about how you interact with our advertising on third-party platforms and how you arrive at our website.

4How We Collect Information

• Directly from you — when you complete a form, create an account, contact support, or provide information during intake.
• From your device — automatically, through cookies, pixels, software development kits, and similar technologies described in Section 8.
• From service providers — such as our payment processor, email delivery service, analytics providers, and advertising platforms.
• From the Provider Group — limited information (such as prescription status or billing allocations) necessary for BioBylt Labs's administrative coordination role.

5How We Use Information

• To operate, maintain, and improve the BioBylt Labs platform and services.
• To verify your identity and eligibility and to administer your account.
• To coordinate your access to the Provider Group and the dispensing pharmacy.
• To process payments, billing, and refunds through our payment processor.
• To communicate with you about your account, appointments, orders, and the services you have requested.
• To send you marketing and promotional communications where permitted, with an opt-out in each message.
• To measure and improve the performance of our website, marketing, and advertising.
• To prevent fraud, misuse, and security incidents and to enforce our Terms of Service.
• To comply with applicable law and respond to lawful requests from government authorities.

6Artificial Intelligence and Automated Processing

We use artificial intelligence and other automated technologies to process administrative and operational data. Typical applications include support-ticket routing, fraud and abuse detection, marketing performance analysis, spam filtering, and the generation of internal summaries or analytics from de-identified data. AI tools used by BioBylt Labs are deployed with configurations intended to prevent the training of third-party models on our customers' personal information. Clinical decision-making is performed by licensed clinicians; any use of AI by the Provider Group in connection with clinical care is described in that group's Notice of Privacy Practices.

7How We Share Information

We share personal information only in the following circumstances:

• With the Provider Group and the dispensing Pharmacy — to the extent necessary to coordinate your access to clinical care and prescription fulfillment.
• With service providers — including cloud hosting, software infrastructure, email delivery, customer support tooling, analytics, advertising platforms, and our payment processors Stripe, Inc. and GreenPay. Service providers are contractually required to use information only for the purposes we authorize.
• With advertising and analytics partners — including Meta Platforms, Inc. (Facebook and Instagram) and Google LLC (Google Analytics and Google Ads), which may use cookies and pixels to measure campaign performance and deliver interest-based advertising. You may opt out of Meta targeting in your Facebook/Instagram ad settings, and out of Google targeting through Google's ad settings.
• In response to legal process — such as a subpoena, court order, or other lawful request from a government authority.
• To protect rights and safety — where disclosure is necessary to prevent harm, investigate fraud, enforce our terms, or respond to a security incident.
• In a business transaction — such as a merger, acquisition, financing, or sale of assets, subject to reasonable notice and contractual protections.
• With your direction or consent — for any purpose you authorize.

BioBylt Labs does not sell personal information for monetary consideration. Certain advertising practices may qualify as a "sale" or "share" under specific state privacy laws; see the State Privacy Law Addendum for your rights to opt out.

8Cookies, Pixels, and Similar Technologies

We and our service providers use cookies, pixel tags, web beacons, software development kits, scripts, and similar tracking technologies to operate our website, measure usage, remember your preferences, and deliver and measure advertising. Most browsers allow you to block or delete cookies, but doing so may affect the functionality of the services. We currently do not respond to "Do Not Track" browser signals, which are not uniform across browsers; we do, however, honor Global Privacy Control (GPC) signals and other state-mandated opt-out mechanisms where required by law.

9De-Identified Information

We may de-identify or aggregate personal information so that it no longer reasonably identifies an individual. We may use, retain, and share de-identified and aggregated information for any lawful purpose, including research, analytics, and product improvement. We will not attempt to re-identify de-identified information except to test the effectiveness of our de-identification practices.

10Your Choices and Rights

• Account updates. You may update your contact information, communication preferences, and other account details at any time through your account portal.
• Marketing opt-out. Every marketing email includes an unsubscribe link. You can also email support@biobyltlabs.com to be removed from all marketing lists. Service-related messages (receipts, appointment confirmations, important notices) may continue.
• SMS opt-out. Reply STOP to any text message you receive from us. See the SMS Terms of Service for details.
• Access, correction, deletion, and other state-law rights. Residents of states with comprehensive privacy laws have the rights described in our State Privacy Law Addendum. Submit requests to support@biobyltlabs.com.

11Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, and disclosure. No system is perfectly secure. You are responsible for maintaining the confidentiality of your account credentials and for promptly notifying us at support@biobyltlabs.com if you suspect your account has been compromised.

12Data Retention

We retain personal information for as long as necessary to provide the services, comply with our legal obligations, resolve disputes, and enforce our agreements. Retention periods vary based on the type of information and the purpose for which it was collected. When information is no longer needed, we take reasonable steps to delete or de-identify it.

13Children

The services are directed to adults eighteen (18) years of age or older. We do not knowingly collect personal information from individuals under 18. If you believe we have collected information from a minor, please contact us immediately at support@biobyltlabs.com. Procedure to remove information about a minor. If you are a minor under eighteen (18) or a parent or legal guardian of a minor who believes information about the minor has been collected by BioBylt Labs, you may request removal by emailing support@biobyltlabs.com with the subject line "Removal of Minor Information." The request should include:

• A clear description of the information to be removed.
• Where applicable, the URL or location on the platform at which the information appears.
• The minor's name and, if applicable, account email address.
• The full name, mailing address, and email address of the person submitting the request, and the requester's relationship to the minor.

We will act on verified requests within a reasonable time, consistent with applicable law. We may be unable to remove information in certain circumstances, including where retention is required by law, where the information is maintained as part of a clinical record, or where the information has already been de-identified.

14United States Only

The services are intended for use by residents of the United States and are delivered from the United States. If you access the services from outside the United States, you do so at your own initiative and are responsible for compliance with local law.

15Changes to This Policy

We may update this Privacy Policy from time to time. The "Effective Date" at the top of the policy indicates the date of the most recent update. Material changes will be communicated to you by email or through the platform. Your continued use of the services after the update constitutes acceptance of the revised policy.

16Contact

Questions about this Privacy Policy may be directed to support@biobyltlabs.com. Written correspondence may be sent to BioBylt Labs LLC at the mailing address published at biobyltlabs.com.