PaceBio

Beta version, October 26, 2026. These texts are still under legal review. They apply to customers outside Brazil who pay in US dollars. In Brazil, see the Termos de uso.

Privacy

This notice explains what personal data PaceBio collects, why, and what you can do about it. The controller of your data is the Brazilian company that operates PaceBio (its legal name, CNPJ registration number and address will be listed here before payments in US dollars open). Contact for privacy matters: @pacebio.app on Instagram (Direct message).

What we collect and why

• Account: email, name and your password, stored encrypted (no one can read it). To let you sign in; legal basis: performance of our contract with you. If you sign in with Google, we receive only your name, email and an identifier of your Google account, never your Google password. Your Instagram handle, if you give it: it becomes the Instagram button on your page and is how we may contact you by Direct message. How you heard about PaceBio, if you answer: used only to learn where runners come from (legitimate interest).
• Your page: what you choose to publish (photo, bio, races, personal bests, medals, links, gear, media kit). Everything on your page is public; legal basis: contract.
• Photos: re-saved without the hidden file data (EXIF), which may include where the photo was taken.
• Page stats: visits and clicks per day, the time and which network they came from, so you can see your numbers. We don't store visitors' IP addresses and runner pages don't set cookies; legal basis: legitimate interest.
• PaceBio's own site analytics: on PaceBio's own pages (home, race reviews, legal pages and the app) we use Google Analytics to count visits, sign-ups and subscriptions. It doesn't receive your name, your email or your page content. Runner pages don't use Google Analytics. You can block these cookies in your browser without losing any feature.
• Marketing emails: only if you agree (the box at sign-up is unchecked). Then PaceBio and Baixa Pace, companies of the same group, use your name and email to send news, running tips and offers. We record when you accepted or declined; legal basis: consent, which you can withdraw at any time in the app (Account › Communications) or through the unsubscribe link. Account messages (sign-in codes, payments) don't depend on this.
• Teams (running clubs): when you accept a club's invite, the club's page shows your name, photo, upcoming races and races you've run (already public on your page), and your page shows "Trains with". You can leave whenever you want, and the club can remove you.
• Import my links: when you use it, PaceBio reads the public link page you pointed to (Linktree and others) and keeps only what you choose to bring. The reading is deleted within 1 day.
• Onboarding missions: to confirm that your PaceBio link is on your Instagram profile, we check your public profile through Meta's official API (business and creator accounts), or, if you send a screenshot of your profile, an AI model from Anthropic reads it. The screenshot is deleted right after the check; we keep only the result.
• Brand proposals: name, company, email and message from whoever writes through a media kit, to deliver to the runner.
• Payments: Paddle, our Merchant of Record, collects your payment details and billing address and processes them as an independent controller under its own privacy policy. Paddle tells us the status, amount, plan, country and date of each payment and a customer code, which we use to turn on your Premium and for our accounting. We never see your card details.

Cookies

In the app and on PaceBio's own pages: the cookie that keeps you signed in; Google Analytics measurement cookies (_ga); and our own cookies, each lasting 30 days: pb_origem (where you came from: the link, campaign or site), pb_ref and pb_porta (which runner's page brought you, for the referral program) and pb_idioma (the language of the home page you visited, so your new page starts in it). People who only visit a runner's page get no cookies.

Who we share data with

• Paddle: our Merchant of Record, for payments, taxes, receipts and refunds.
• Hosting: the server provider where PaceBio runs.
• Amazon Web Services: sends our emails (such as sign-in codes).
• Google: sign-in with Google, when you choose it, and Google Analytics on PaceBio's own pages.
• Meta: the Instagram API used in the onboarding missions (we send only your Instagram handle).
• Anthropic: reads the profile screenshot, if you send one in the missions.
• YouTube: when a runner adds a video, the page shows only the thumbnail; the video, in YouTube's privacy-enhanced mode, loads only when the visitor taps to watch.
• Professional advisers (such as accountants and lawyers) and public authorities, when the law requires it.
• We don't sell data and we don't use your data for advertising. We don't access your Strava or Instagram accounts.

International transfers

PaceBio is operated from Brazil, so your data is processed in Brazil and by our providers in other countries, such as the United States. Where the law requires it, these providers use contractual safeguards such as the European Commission's Standard Contractual Clauses.

How long we keep data

For as long as your account exists. When you delete your account, we delete your page, photos, stats and proposals right away; backup copies disappear within 60 days. Payment records are kept for as long as tax laws require.

Security

We use HTTPS everywhere, store passwords encrypted, collect only what PaceBio needs, limit access to the data and back it up every day.

Your rights

Depending on where you live (for example, the GDPR in the European Union and the United Kingdom, or the LGPD in Brazil), you have the right to:

• access and download everything we keep: app › Account › Download my data;
• correct your data: edit it in the app whenever you want;
• delete your account: app › Account › Delete my account;
• object to or restrict some uses, ask for portability and withdraw your consent at any time;
• complain to your data protection authority (in Brazil, the ANPD).

For any request, contact us at @pacebio.app on Instagram (Direct message). We answer within one month.

Age

PaceBio is for people aged 18 or over.

Changes

If we change this notice in a relevant way, we will tell you in the app before the change takes effect.