Privacy Policy

AsiaBio.Link ("we", "our", "us") operates the URL shortening and link management platform at asiabio.link. This Privacy Policy explains what personal data we collect, why we collect it, and your choices and rights regarding that data. By using AsiaBio.Link you agree to this policy. If you do not agree, please discontinue use of the service.

1. Data We Collect

1.1 Account Data

When you register for an account we collect your name, email address, and a hashed password. You may also optionally provide a profile avatar. For paid subscribers we additionally collect billing name and payment method details (processed securely by our payment gateway — we do not store full card numbers on our servers).

1.2 Link & Content Data

We store the destination URLs, short codes, titles, notes, scheduling settings, passwords (bcrypt-hashed), UTM parameters, cloaking metadata, and any targeting rules you configure for your links.

1.3 Click Analytics Data

Every time someone clicks one of your short links we automatically record:

schedule Timestamp of the click

public Country and city (geo-IP lookup)

devices Device type, OS, and browser (from User-Agent)

link Referrer URL and referrer domain

fingerprint SHA-256 hash of IP + server secret (non-reversible)

location_on Raw IP address (stored for 24 hours, then replaced with hash)

info Raw IP addresses are automatically purged after 24 hours and replaced with a one-way hash that cannot be reversed to recover the original address.

1.4 Technical & Usage Data

We collect standard server logs (request URL, response code, timestamp) and, if you enable Google Analytics or Tag Manager via your account settings, those tools may collect additional behavioral data governed by Google's own privacy policy.

2. How We Use Your Data

check_circle Provide, operate, and maintain the AsiaBio.Link platform

check_circle Display click analytics and geographic breakdowns in your dashboard

check_circle Process payments and manage your subscription

check_circle Send transactional emails (account confirmation, password reset, billing receipts)

check_circle Enforce our Terms of Service and prevent abuse, spam, and phishing

check_circle Resolve disputes and troubleshoot technical issues

check_circle Improve and develop new features of the service

check_circle Comply with legal obligations

We do not sell, rent, or trade your personal data to third parties for their own marketing purposes.

3. Tracking Pixels

AsiaBio.Link allows users to attach third-party retargeting pixels (e.g. Facebook Pixel, Google Analytics, LinkedIn Insight Tag, Pinterest Tag, Twitter Pixel, Quora Pixel, Google Tag Manager) to their short links. When a visitor clicks a link with pixels attached, those pixels fire in the visitor's browser and data is sent directly to the respective third-party platform by the visitor's browser — not by us.

Notice for link visitors:

If you follow a short link created on AsiaBio.Link, the link owner may have configured tracking pixels. These pixels collect data under the respective platform's own privacy policies (Facebook, Google, LinkedIn, etc.). AsiaBio.Link has no control over, and is not responsible for, data collected by those third-party pixels.

Link creators are solely responsible for obtaining any required consents from their link visitors before deploying retargeting pixels, in accordance with applicable privacy laws (GDPR, CCPA, PDPA, etc.).

4. Data Sharing

4.1 Service Providers

We work with trusted sub-processors to operate AsiaBio.Link, including cloud hosting, email delivery, payment processing, and error monitoring. All processors are contractually required to handle your data only as instructed by us and to maintain appropriate security standards.

4.2 Legal Requirements

We may disclose personal data if required to do so by law, subpoena, court order, or regulatory authority, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

4.3 Business Transfers

If AsiaBio.Link is acquired, merged, or substantially all of its assets are transferred, user data may be transferred as part of that transaction. You will be notified via email and/or a prominent notice on the site prior to data being transferred and becoming subject to a different privacy policy.

5. Cookies

AsiaBio.Link uses only essential, functional cookies required to operate the service. We do not use third-party advertising or behavioural tracking cookies on our own pages.

Cookie Name Purpose Expiry

asiabio_session Maintains your authenticated session Browser close / 2 hours idle

XSRF-TOKEN Prevents cross-site request forgery (CSRF) Browser close

remember_web_* Persistent "remember me" login token (optional) 30 days

You can control cookies through your browser settings. Disabling essential cookies will prevent you from logging in to AsiaBio.Link.

6. Data Retention

Account & link data

Retained while your account is active. Deleted within 30 days of account closure unless legally required to retain.

Click analytics

Raw IP addresses purged after 24 hours. Anonymized analytics retained for 24 months.

Payment records

Retained for 7 years to comply with accounting and tax regulations.

Server logs

Automatically purged after 90 days.

Deleted links (soft)

Soft-deleted links are permanently purged after 30 days.

7. Security

We implement industry-standard security measures to protect your data:

shield All data transmitted over HTTPS / TLS 1.2+
shield Passwords stored using bcrypt (one-way hashing — not reversible)
shield API tokens are stored as SHA-256 hashes — plain-text tokens shown only once at generation
shield IP addresses replaced with non-reversible SHA-256 hashes after 24 hours
shield Regular server-level security patching and firewall rules
shield Admin panel and user dashboard require authentication for all operations

No system is 100% secure. If you discover a security vulnerability please disclose it responsibly to security@asiabio.link.

8. Your Rights

Depending on your location you may have the following rights regarding your personal data. To exercise any of these rights, email privacy@asiabio.link from your registered address. We will respond within 30 days.

Access

Request a copy of the personal data we hold about you.

Correction

Request correction of inaccurate or incomplete data.

Erasure

Request deletion of your personal data ("right to be forgotten").

Portability

Receive your data in a structured, machine-readable format (JSON/CSV).

Objection

Object to processing based on legitimate interests.

Restriction

Request that we restrict processing of your data in certain circumstances.

Withdraw consent

Where processing is based on consent, you may withdraw it at any time without affecting prior processing.

If you are a resident of the European Economic Area (EEA) or UK you also have the right to lodge a complaint with your local data protection authority.

9. Children's Privacy

AsiaBio.Link is not directed to children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at privacy@asiabio.link and we will delete that data promptly.

10. International Data Transfers

AsiaBio.Link is operated globally. Your data may be stored and processed in countries other than your own. Where we transfer data from the EEA/UK to a country not deemed adequate by the European Commission, we use appropriate safeguards such as Standard Contractual Clauses (SCCs) or rely on an adequacy decision. By using the service you consent to these transfers.

11. Policy Changes

We may update this Privacy Policy periodically. If we make material changes we will notify you by email (to your registered address) and post a prominent notice on the site at least 14 days before the changes take effect. The "Last updated" date at the top of this page reflects when the policy was last revised. Continued use of AsiaBio.Link after the effective date constitutes acceptance of the updated policy.

12. Contact Us

For any privacy-related questions, data requests, or complaints, reach our privacy team:

mail privacy@asiabio.link

security security@asiabio.link (security vulnerabilities only)

language asiabio.link

We aim to respond to all privacy requests within 30 calendar days.