Privacy policy

Who we are

SUPERBIO LABS LLC (“Clinvio”) provides software for medical clinics and pharmaceutical-ingredient suppliers: marketing-claim review, a public compound-status tracker, supplier verification and clinic communication tools. This policy explains what we collect through our website and services and how we use it.

Information we collect

• Account information: name, work email, organization, role, and security settings such as two-factor authentication status.
• Business records you enter: clinic setup (services, hours, booking link, staff contacts), supplier facilities, listings and certificates of analysis.
• Claim Guard and newsletter: the email you give with consent, the marketing text or public web page you ask us to review, and a one-way keyed hash of your network address used only for rate limiting. We do not store the raw address.
• Messages handled for clinics: when a clinic uses our messaging features, we process inquiries and text messages on the clinic’s behalf as its service provider (a “business associate” under HIPAA), under a written agreement with that clinic. The clinic’s own privacy notice governs that information.
• Technical data: sign-in session cookies needed to keep you logged in, a saved light or dark theme preference in your browser, and server error reports that record the page route and error type but no personal information.

How we use information

• To provide, secure and support the services, including fraud and abuse prevention and rate limits.
• To review submitted documents: uploaded files are scanned for malware before storage and are visible only to the uploading organization and authorized Clinvio reviewers.
• To send service messages you or your clinic requested. We do not sell personal information and do not use clinic patient information for our own marketing.

Text messaging

Text messages are sent only to people who agreed to receive them from a specific clinic. Message frequency varies; message and data rates may apply. Reply STOP (or tell us in any reasonable way) to opt out, and HELP for help. Mobile numbers and text-messaging consent are never shared with or sold to third parties or affiliates for their marketing. We share them only with the service providers that deliver the messages.

Service providers

We use selected providers for hosting, database and authentication, text messaging, email, payments (Stripe) and, where enabled, AI processing. They may process information only to provide services to us, under contract. Where a provider handles protected health information, a business associate agreement is in place before any such information is sent.

Retention and security

We keep information for as long as your account is active and as needed for legal, security and audit purposes; short-lived records such as rate-limit counters and expired invitations are deleted automatically. Data is encrypted in transit, organization data is isolated at the database level, and administrative access requires two-factor authentication.

Your choices and rights

You can access, correct or delete your account information, or ask questions about this policy, by contacting us. If your information was provided to us by a clinic, contact that clinic first; we will help it respond. Depending on where you live, you may have additional rights under state privacy laws.

Children

Our services are for businesses and are not directed to children under 13.

Changes

We will post updates here and change the effective date. Material changes will be communicated to account owners.