Privacy Policy

1. Introduction

BioCanvas Studio ("we", "us", or "our") operates the scientific diagramming application available at https://biocanvasstudio.com and through the Microsoft Windows Store. This Privacy Policy details our practices concerning data collection, usage, and protection when you use our platform.

2. Information We Collect

• Google Authentication (OAuth 2.0): When you sign in using your Google account, we collect your verified name, email address, and profile picture avatar. We do not request, access, or store your Google account password.
• User-Generated Scientific Diagrams: Diagram components, canvas layouts, vector configurations, and project metadata are saved in your user account to allow seamless work across sessions.
• Payment and Billing Details: Paid subscriptions for BioCanvas Studio are handled directly by certified, PCI-DSS Level 1 compliant payment gateways (Dodo Payments, Razorpay, and Microsoft Store). We never receive or store your raw payment card numbers, bank credentials, or UPI PINs.
• Technical Telemetry: Standard non-identifying telemetry including browser type, operating system version, and IP-derived country code is used strictly for regional pricing localization and server performance.

3. Google API Services User Data Policy Compliance

BioCanvas Studio's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• We strictly use your Google user data to provide authentication and personalize your workspace.
• We do not transfer or sell Google user data to third-party data brokers, advertising platforms, or external AI model training datasets.

4. How We Use and Protect Your Information

• Intellectual Property Confidentiality: Your diagrams, biological pathways, and research visualizations are treated as proprietary scientific work. We do not inspect or publish your canvas data.
• Database Security: User records and project files are secured using modern Row-Level Security (RLS) policies and encrypted at rest and in transit via TLS 1.3.

5. Data Retention & Account Deletion

You have the right to request full deletion of your account and associated project data at any time. Upon receiving your verified request, all associated project records and account metadata will be permanently purged from our databases within 30 days.

6. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please contact our privacy and engineering team at:

Email: support@biocanvasstudio.com
Website: https://biocanvasstudio.com