Privacy Policy

Who is responsible

BIBIUS is operated by Areg Galstyan, based in New York, NY, USA. For privacy questions and requests, use the contact options below.

Information we process

• Account details: your email address and, when supplied, name, username and profile image; basic information authorized through Google sign-in.
• Information you choose to publish: profiles, biographies, languages, approximate areas, posts, prices, photos, business details, service areas, and optional public phone numbers or business email addresses.
• Private activity: messages, connection requests, responses, appointments or business requests, saved items, notification settings, reports and blocks.
• Location and technical information: approximate coordinates, city and country, IP-related location estimates, browser/device and security information, and notification subscription details. Location permission is optional; device GPS can be used to calculate an approximate location.
• Support requests: your contact email, selected topic, message, supplied link, request reference and handling status.
• Invitation records: recipient contact addresses, delivery history and opt-out records. Contact addresses may come from publicly published advertisements/business pages or contact lists provided to us. You can ask about the source of your address and decline further invitations.

Why we use information

We use information to provide accounts, publish and find relevant posts and businesses, enable communication, show approximate distances, handle business requests, deliver service notifications and, where permitted, platform invitations with opt-out handling, remember preferences, answer support and privacy requests, prevent abuse, moderate content, and protect the service.

Where applicable data-protection law requires a legal basis, providing requested account and communication features is based on performing the service you request; security, proportionate moderation and service reliability rely on legitimate interests, subject to your rights; legally required processing relies on a legal obligation. Features that require consent, such as optional device location or browser push permissions, use that consent. You can withdraw optional permissions through your browser/device and relevant settings. These grounds are applied only where available under the law that governs the processing.

Public and private information

Published posts, public profile/business information, images and any contact details you include may be viewed, shared or indexed by search engines. Do not put information in a public post that you intend to keep private. Your account email is not automatically added to a public listing or business contact.

Messages are available to the relevant conversation participants. Authorized administrators may process information needed to investigate reports, enforce rules or comply with legal obligations. Support requests and reports are not public posts.

Providers and international processing

We use Supabase for account/database/storage services; the current main project is configured in the US East region in the United States. We also use Google sign-in, our website hosting provider, location services including BigDataCloud, email delivery including Resend, and browser push delivery providers as needed for the features you use.

Information may be processed in the United States and other countries where these providers operate. Different data-protection rules can apply. Contact us for information about the providers and transfer arrangements relevant to your request.

We may disclose information when legally required or reasonably necessary to protect people, investigate abuse or enforce the service rules. We do not sell personal information.

Browser storage and notifications

Cookies or similar browser storage may support sign-in, sessions, interface language, preferences, drafts and security. Necessary storage supports requested features, including your chosen language and location, drafts, security and notification controls. Two extra presentation counters — feed rotation (bibius_home_feed_turn) and desktop-helper frequency (bibius_desktop_bibi_visits_v5) — use persistent browser storage only after you allow extra display preferences. Until then they stay only in the open page’s memory. Refusing or withdrawing permission removes these saved counters without signing you out or deleting your drafts. No advertising or analytics tracker is enabled by this choice. Clearing storage can sign you out or remove unsent local drafts. A temporary support-form draft is kept in your browser session so you can change language or retry a failed request. Use Cookie settings in the footer or account settings to change your choice. The choice itself (bibius_browser_storage_choice_v1) is stored for up to 180 days in this browser, then we ask again. If storage is unavailable, the choice applies only while the page remains open. Desktop-helper counters reset by day; the feed counter is capped. Neither contains your account ID, messages or location.

Browser push notifications use limited notification information rather than private message text. Service emails may identify the relevant sender or business, listing, request, status or unread-message count. Marketing invitations and service notifications are different; use the invitation unsubscribe option or applicable account preferences where available. Some account, security or legally required notices may still be necessary.

How long we keep information

We keep account and published information while needed to provide the service and according to your choices. Stopping a post does not by itself delete the account or all stored records. Messages, support requests, security/moderation records and delivery logs may be retained as needed to handle the request, protect users, resolve disputes or meet legal obligations. Retention depends on the record, purpose and applicable law; contact us for information about a particular record.

Deletion may be subject to lawful exceptions, backup cycles and the rights of other people. We will explain applicable limitations in response to your request rather than promise that every copy is erased immediately.

Your choices and privacy requests

You can browse without an account, edit available profile/listing fields, stop posts, change available notification/visibility settings, refuse or withdraw optional browser permissions, and report or block users.

Signed-in users can download a JSON copy through Settings → My data. It covers their own content, sent messages and account-linked records. Received message bodies, original media files, other people’s profiles/reports and internal security records are outside this self-service copy. Request additional data through Support for a separate review. Downloaded files contain personal information and should be kept on a trusted device.

Depending on applicable law, you may request access, correction, deletion, a portable copy, restriction of processing or object to certain processing, and withdraw consent where processing relies on consent. You may also complain to a competent data-protection authority. These rights and their exceptions depend on your circumstances.

Send a request using the private help form or email below. State what you want us to do and identify the relevant account or content. We may ask for proportionate verification before disclosing, changing or deleting data. Do not send passwords, sign-in codes, payment details or identity documents with the initial request. We respond within applicable legal time limits; submitting a request does not automatically delete an account or send a data export.

Children and changes to this policy

BIBIUS is not directed to children under 13. If you believe a child has provided information contrary to applicable law, contact us so we can investigate. Users must meet applicable age and authorization requirements; this notice does not replace local rules for children.

We may update this policy as the service or legal requirements change. We display the revision date and provide additional notice when required.