Privacy Policy

Effective Date: 2026-05-19

BioVett, a product of Milou AI ("BioVett," "Milou AI," "we," "us," or "our"), respects your privacy. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using our website, products, or services (collectively, the "Service"), you agree to this Privacy Policy.

Heads up: The Service uses third-party artificial intelligence providers to generate analysis. Queries and certain inputs you submit are transmitted to these providers for processing. See "Third-Party AI Providers" below.

1. Information We Collect

We collect the following categories of information:

Account information: name, email address, password (hashed), and—if you sign in with Google—your Google profile identifier and email.
Usage information: tickers and other queries you submit, research history, notes you save, pages visited, features used, timestamps, and approximate frequency and duration of use.
Device and log data: IP address, browser type, operating system, referring/exit pages, and similar diagnostic information collected automatically by our servers and standard web technologies.
Cookies and similar technologies: used to keep you signed in, remember preferences, and measure usage.

2. How We Use Your Information

To provide, maintain, secure, and improve the Service;
To generate AI-powered research outputs in response to your queries;
To authenticate you and manage your account;
To communicate with you about your account, service updates, and security notices;
To analyze usage patterns and develop new features;
To comply with legal obligations and enforce our Terms of Service.

3. Third-Party AI Providers

The Service relies on third-party AI providers, which may include—but are not limited to—OpenAI, Google (Gemini), Anthropic (Claude), and xAI. When you submit queries (for example, a ticker or research prompt), the query and relevant contextual data may be transmitted to one or more of these providers for processing. These providers' use of data is governed by their own terms and privacy policies. We do not control and are not responsible for their practices. We do not knowingly send sensitive personal information (such as financial account numbers or health information) to these providers, and you should not submit such information through the Service.

4. Other Third-Party Services

We use third-party infrastructure and data providers to operate the Service, including:

Cloud hosting and authentication: Google Cloud Platform and Firebase (including Firebase Authentication and Firestore).
Market, news, and clinical data providers: public APIs and licensed data feeds used to populate research outputs.

These providers process data on our behalf under their own contractual and privacy obligations.

5. Information Sharing and Disclosure

We do not sell or rent your personal information. We may share information only as described in this Policy, including:

with service providers and AI providers as described above;
to comply with law, legal process, or governmental requests;
to investigate or prevent fraud, security issues, or violations of our Terms;
in connection with a merger, acquisition, financing, or sale of assets, subject to standard confidentiality protections.

6. Data Retention

We retain account information for as long as your account is active and as needed to provide the Service. We retain research history and saved notes until you delete them or your account is closed. We may retain certain information longer if required for legal, security, or fraud-prevention purposes.

7. Security

We use reasonable administrative, technical, and physical safeguards to protect your information, including encrypted transport (HTTPS) and managed authentication. However, no system is perfectly secure, and we cannot guarantee absolute security. You are responsible for safeguarding your account credentials and for restricting access to your devices.

8. Your Choices

You can update or delete information stored in your research history from within the Service.
You can request account deletion by contacting us at hello@biovett.com.
You can disable cookies in your browser, though parts of the Service may not function properly without them.

9. Children's Privacy

The Service is not directed to children under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

10. International Users

The Service is operated from the United States. If you access the Service from outside the United States, you understand that your information may be transferred to, stored in, and processed in the United States and other jurisdictions where our service providers operate.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the Effective Date above and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the revised Policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at hello@biovett.com.