Privacy Policy

Last updated: 2 October 2026

In plain terms

We collect only what we need to run your account, take payment, run Chat 2.0 and answer your messages.
We don't sell your data and we don't run ads or tracking.
Your posts and questions go to Anthropic's Claude AI so we can screen posts and write AI answers.
Posts are kept indefinitely. You can ask us to export or permanently erase your data.
Chat 2.0 is public to members. Use a handle, not your real name.

Who is responsible

Dark Horse Capital Management LLC, c/o PGM, 6834 S University Blvd, Suite 226, Centennial, CO 80122, USA, runs BiotechHandbook.com and decides how your data is used.

What we collect

Account: your handle, your email address and your sign-in details, the date you joined, and which version of the guidelines you accepted.

Payment: our payment processor takes your card or other payment details. We don't see or store your full card number. We get your plan, payment status and payment dates.

What you post and ask: your Chat 2.0 posts (including any position disclosure you add), reports you make, and a record of when you ask an AI Expert and which one. AI answers may be stored so we can reuse them.

Moderation records: warnings, mutes, held posts and the reasons for them.

Contact form: your name, email, topic and message.

Technical data: your IP address and browser details are visible to our server and security tools. We use them to run the site, limit abuse and fix problems.

Why we use it

To provide the service you pay for, take payment, keep Chat 2.0 safe, answer you, meet legal and tax duties, and protect the site from abuse and fraud. We do not use your data for advertising or profiling, and we do not sell it or share it for advertising.

If you are in the EU or UK, our legal bases are: performing our contract with you (account, subscription, chat), our legitimate interests (security, moderation, abuse prevention, running the business), and legal obligations (tax and accounting records).

Who handles your data for us

Anthropic (Claude AI): we send your posts to screen them against the guidelines, and your questions plus the relevant list data and filings to write AI answers. Under Anthropic's current commercial terms it does not train its models on this data and normally deletes it within about 30 days.

Our payment processor: handles payments, billing records and receipts.

Our hosting provider: our servers and backups sit with them.

Our email provider: sends account, receipt and support emails. If you join an email list, it is sent through Kit.

Google Fonts: our pages load fonts from Google, so Google receives your IP address when a page loads.

We also disclose data if the law requires it, to protect people or the site, or if the business is sold. These providers may only use your data to serve us.

How long we keep it

Posts: kept indefinitely, including after you cancel, unless you ask us to erase them. Account data: kept while your account exists. Contact messages: kept indefinitely. Payment and tax records: kept as long as tax and accounting law requires. Moderation records: kept, with your name removed once you are erased.

Backups may keep a copy for a limited time after erasure.

Your choices and rights

You can ask us to give you a copy of your data, correct it, export it, or permanently erase it. Use the contact form with the topic "Privacy or legal", from the email on your account if you can, so we can check it's you. We reply within 30 days.

If we erase your account we delete your account details, your posts, your questions and the AI replies to them, your reports and warnings, and your contact messages. We keep an anonymous moderation log. Quotes of your posts inside other members' posts are not removed. Data held by our processors is deleted under their own schedules.

Depending on where you live (for example the EU, UK, California or Colorado), you may have further rights, such as objecting to our use of your data or complaining to your data protection authority. We give these rights to everyone through the same contact route. We do not sell or share personal information for advertising. AI screening can hold a post or lead to a short mute, but a person reviews held posts and only the owner can permanently ban a member.

Cookies

We use one cookie. It keeps you signed in (it lasts 7 days, only works on this site, and cannot be read by scripts). We use no advertising, tracking or analytics cookies. If that changes, we will update this page first.

Security

The site uses HTTPS, signed session cookies and limited access to stored data. No system is perfectly secure. If a breach affects you, we will tell you as the law requires.

Children

The service is for people 18 and over. We do not knowingly collect data from children, and we delete it if we find it.

Where your data goes

We are in the United States and your data is processed and stored here and by providers in the US and elsewhere. If you are outside the US, using the service means your data is transferred to the US.

Changes

We may update this policy. For changes that matter, we will email you or post a notice before they apply.

Contact

Use the contact form, or write to Dark Horse Capital Management LLC, c/o PGM, 6834 S University Blvd, Suite 226, Centennial, CO 80122, USA.