Privacy Policy

1. Introduction

InVitvo Pharmaceuticals Ltd. ("we," "our," or "us") is committed to protecting personal information and confidential research details submitted through our website. This Privacy Policy describes how we collect, use, disclose, retain, and safeguard information when you visit invitvo.com, submit a Request for Quotation (RFQ), or contact us. It is intended to align with applicable Canadian privacy requirements, including PIPEDA.

2. Information We Collect

We collect only the information needed to respond to inquiries, qualify RFQs, prepare quotes, and operate the website:

• RFQ information: Name, institutional email, optional phone number, institution or organization, optional department, optional principal investigator name, selected compound and quantity, intended research application, how you heard about us, optional notes, and required RUO, qualified researcher, and terms acknowledgements.
• Order information after quote acceptance: Shipping address, billing details, purchase order information, customs/import information, and correspondence needed to complete a confirmed order.
• Contact form information: Name, email, optional phone number, message content, and related correspondence.
• Technical and security data: IP address, user agent, submission timestamps, consent preferences, and limited website usage data used for security, abuse prevention, analytics, and troubleshooting.

We treat intended research applications and related RFQ details as confidential business information. We do not place customer names, email addresses, institutional affiliations, or research details in public URL parameters.

3. How We Use Your Information

We use the collected information for the following purposes:

• Processing, qualifying, and responding to product RFQs
• Documenting RUO qualification, intended research use, and required customer acknowledgements
• Communicating with you about your orders, inquiries, and our products
• Providing technical documentation and certificates of analysis
• Improving our website, products, and services
• Complying with legal obligations and regulatory requirements
• Preventing fraud and ensuring the security of our operations

4. Cookies and Tracking Technologies

We use a consent-based analytics preference on the website. Google Analytics is loaded only after you accept analytics. Analytics events are designed to measure activity such as RFQ submissions, contact submissions, phone clicks, email clicks, and product page views without sending names, email addresses, institutions, phone numbers, or research-use details to analytics. You may decline analytics without affecting your ability to submit an RFQ or contact us.

5. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information with:

• Website hosting: Vercel, used to host and secure the website and server-side RFQ/contact endpoints.
• Database storage: Supabase, used to store RFQ and contact submissions.
• Transactional email: Resend and Microsoft 365, used to send RFQ confirmations, internal RFQ notifications, and business correspondence.
• Analytics: Google Analytics, only after consent, and without customer names, emails, institutions, or research details.
• Shipping, customs, and payment providers: Used only after quote acceptance when needed to fulfill a confirmed order.
• Legal Compliance: When required by law, regulation, court order, sanctions/export review, customs process, or other legal process.
• Business Transfers: In connection with a merger, acquisition, or sale of assets

These providers may process or store information in Canada, the United States, or other jurisdictions where they or their subprocessors operate. Information may be subject to lawful access requests in those jurisdictions.

6. Data Security

Form submissions are transmitted over HTTPS. We use access controls, server-side validation, spam controls, rate limiting, and restricted server credentials to protect RFQ and contact records. However, no method of transmission over the Internet or electronic storage is 100% secure.

7. Data Retention

We retain RFQ, quote, order, compliance acknowledgement, and related business records for up to seven (7) years unless a longer period is required for accounting, tax, export, regulatory, dispute, or legal purposes. Contact-form messages that do not become RFQs or orders are generally retained for up to three (3) years. We may retain limited technical logs for security and abuse-prevention purposes.

8. Your Rights

Subject to applicable law, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Withdraw consent where processing is based on consent
• Object to certain processing activities

To exercise these rights or ask about cross-border processing, please contact us using the information provided below. We may need to verify your identity before responding.

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

10. Children's Privacy

Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.

12. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the Province of Alberta and the federal laws of Canada applicable therein.

13. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at: