Privacy Notice

1. Who we are and what this notice covers

Gunnar BioTechnology LLC (“Gunnar BioTech,” “we,” “us,” or “our”) is a Florida limited liability company. This notice applies to the Gunnar BioTech website, the Fluxion desktop application, the Fluxion licensing and commerce services, software updates, and support, bug-report, and crash-report features (collectively, the “Services”).

Fluxion is offered for sale only within the United States. The Services and their information are hosted and processed in the United States.

2. Information we collect

Website and network information

When you visit or use the Services, our infrastructure and security providers may process your IP address, approximate location derived from IP address, browser or application type, device type, operating system, requested pages or endpoints, timestamps, referral information, and security or rate-limit events. The website stores your cell-animation preference in local browser storage.

Purchases and customer records

When you purchase Fluxion, Stripe collects your payment information. We receive and retain information needed to fulfill and administer the purchase, such as your name, email address, Stripe customer and transaction identifiers, order and refund information, receipt link, billing city, state, postal code and country, any phone number supplied at checkout, and limited payment-method details such as card brand, last four digits, funding type, and wallet type. We do not receive or store your complete payment-card number or card security code.

Licensing and device information

To activate and validate Fluxion, the application sends your license key, a device identifier, device name, operating system, application version, and a machine fingerprint derived from device and system attributes. The licensing service stores a cryptographic hash of the machine fingerprint, along with activation status and timestamps such as when the device was activated, validated, or last seen. It also stores the version and timestamps of legal documents you affirmatively accept for an activated device.

Support and bug reports

If you contact us or submit a bug report, we collect the information you choose to provide, such as your email address, message, problem description, and optional diagnostics. Optional diagnostics may include the Fluxion version, operating system, Python runtime version, screen dimensions, and whether a simulation is running or paused. Bug-report security systems also process your IP address and activation proof.

Crash reports

Fluxion may offer to create or send a diagnostic report after an unexpected error. Depending on the options you select, a report may contain the error message and traceback, your comments, application logs, operating-system and hardware information, screen dimensions and locale, current simulation state, device information, and an optional screenshot of the Fluxion window. Screenshots are off by default. Crash reports do not intentionally include your license key, passwords, or files from other applications.

Information from service providers

We receive transaction, refund, dispute, fraud-prevention, email-delivery, hosting, security, and service-status information from providers that help us operate the Services.

3. Please do not submit sensitive or patient information

Fluxion does not require patient records, protected health information, government identification numbers, account passwords, or other highly sensitive personal information. Do not place that information in support messages, bug reports, crash-report comments, screenshots, simulation notes, or other submissions. Fluxion is not designed as a HIPAA-regulated patient-record service.

4. How we use information

We use information to:

• provide the website, checkout, software downloads, updates, licensing, and customer support;
• process purchases, issue and administer licenses, deliver transactional email, and handle refunds or disputes;
• authenticate devices, enforce license limits, prevent abuse and fraud, and protect the Services;
• diagnose crashes and defects, respond to reports, maintain reliability, and improve Fluxion;
• keep accounting, tax, audit, and business records; and
• comply with law, enforce our agreements, and establish, exercise, or defend legal claims.

5. How we disclose information

We disclose information only as needed for the purposes described above:

We may also disclose information to professional advisers, accountants, insurers, regulators, law enforcement, courts, or a successor in a merger, financing, acquisition, reorganization, or sale of assets, when reasonably necessary and permitted by law.

We do not sell personal information, share it for cross-context behavioral advertising, or use it for targeted advertising.

6. Cookies, local storage, and third-party content

The website uses local browser storage to remember whether you paused the decorative cell animation. Cloudflare and protected download areas may use cookies or similar technologies that are necessary for security, access control, and service delivery.

Pages containing embedded YouTube content may allow Google to receive technical and interaction information and to use cookies or similar technologies under Google's own policies. Links to Stripe, GitHub, YouTube, and other third-party services take you to services governed by their own privacy notices.

Our Services do not currently respond to browser “Do Not Track” signals because there is no uniform industry standard for those signals. Because we do not sell personal information or share it for targeted advertising, a Global Privacy Control signal does not change those practices.

7. Retention

We use the following retention guidelines, subject to legal holds, disputes, security investigations, and other legal or operational requirements:

• Purchase, payment, refund, tax, and accounting records: seven years after the transaction.
• Customer, license, device, and legal-acceptance records: while the license is active and for three years after expiration, termination, or deactivation.
• Support messages, bug reports, and crash reports: ordinarily up to 180 days after submission. Server-held crash reports and support-note content are regularly deleted under this schedule. Bug reports and support messages delivered by email are reviewed at least monthly and deleted from company-controlled mailboxes once they exceed 180 days. We may retain a de-identified description of a defect and its resolution for product-development records.
• Security and rate-limit data: only as long as reasonably necessary to prevent abuse, investigate incidents, and protect the Services.
• Local browser preferences: until you clear site data or change the preference.

Information may remain in restricted backups until those backups are overwritten or expire through the normal backup cycle.

8. Security

We use administrative, technical, and physical safeguards designed for the nature of the information we process. These include encrypted network connections, access controls, hashed device fingerprints, signed activation records, request-size limits, rate limiting, restricted administrative systems, and backup and recovery procedures. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your privacy choices and rights

You may ask us to provide access to, correct, or delete personal information associated with you. You may also ask questions about our processing or appeal a decision on a privacy request. Email support@gunnar-biotech.com with the subject “Privacy Request.”

We may need to verify your identity before acting. We may deny or limit a request when permitted by law, including when information must be retained for taxes, accounting, fraud prevention, security, license administration, disputes, or legal claims. We will not discriminate against you for exercising an applicable privacy right.

10. Children’s privacy

The Services are intended for users age 13 and older and are not directed to children under 13. We do not knowingly collect personal information online from a child under 13. If you believe a child under 13 provided personal information to us, contact us so we can investigate and delete it as appropriate.

Parents, guardians, schools, and educators should not direct a child under 13 to purchase, activate, or submit information through Fluxion without first contacting us and establishing an appropriate legally compliant arrangement.

11. Changes to this notice

We may update this notice as the Services or applicable requirements change. We will post the revised notice here and update the effective date. If a change materially affects how we use information already collected, we will provide additional notice when required by law.

12. Contact us