Privacy Policy

Last updated 2026-10-16

HS Biopharmaceuticals, Inc. collects account details, contact and quote-request submissions, document download records, and basic site usage data. We use them to run this website, give customers access to product documents, and answer sales inquiries. This policy lists our service providers, cookies, and how to contact us.

Who we are

This website is operated by HS Biopharmaceuticals, Inc., 3141 Tiger Run Court, Suite 107, Carlsbad, CA 92010. In this policy, “we” and “us” mean HS Biopharmaceuticals, Inc..

Information we collect

  • Customer accounts. When you register or sign in, authentication is handled by Firebase Authentication, which processes your email address and credentials. When you sign in or create an API token, we also record the IP address and browser user agent in our audit logs. When you register, we record the date and version of the terms you accepted.
  • Profile data. Account profile information, such as your name, company, and role, is stored in Firestore.
  • Contact and lead forms. Information you submit through our contact or quote-request forms: your name, email address, company, phone number, product of interest, and message, plus the IP address and browser user agent from which the form was submitted.
  • Document download logs. When a signed-in customer downloads a gated document, we record which document was downloaded and by which account.
  • API tokens. Employees may create personal API tokens. We store only a SHA-256 hash of each token, plus a name and short prefix for display, and when it was created and last used.
  • Usage data. Our analytics and visitor-tracking providers (described below) collect technical information such as pages viewed, browser type, and approximate location derived from your IP address.

How we use it

  • To operate the website and authenticate customer accounts.
  • To provide access to product documents such as Certificates of Analysis.
  • To respond to inquiries and quote requests, and to follow up with sales contacts.
  • To keep a record of account activity for security and auditing.
  • To prevent spam and abuse, using the IP address and browser user agent recorded with form submissions, which are also kept in our audit records for security.
  • To understand how the site is used and to improve it.

Service providers

We use the following service providers to run the site. Each processes information on our behalf for the purpose described.

  • Google Firebase (Authentication, Firestore, and Cloud Storage) for accounts, application data, and stored documents.
  • Vercel for website hosting, and Vercel Analytics for aggregate site usage measurement.
  • WebTrax by Thomasnet for visitor tracking on our public pages.
  • Resend for sending email, such as notifications about form submissions.
  • Sanity for managing website content.
  • Anthropic for AI processing used to extract data from supplier Certificate of Analysis documents uploaded by HS staff.

We do not sell your personal information.

Cookies

When you sign in, we set a first-party __session cookie. It is HTTP-only, so it cannot be read by page scripts, and it is used to keep you signed in. It is removed when you sign out or when it expires. Our analytics and visitor-tracking providers (Vercel Analytics and WebTrax) may also collect usage data using cookies or similar technologies. You can block or delete cookies in your browser settings, though signing in will not work without the session cookie.

Retention

We keep information for as long as needed for the purposes described in this policy, or as required by law. To request deletion of your account or data, contact us at the address below.

Your rights

You may ask us to tell you what personal information we hold about you, to correct it, or to delete it. If you are a California resident, you may have additional rights under California law, including the right to know what personal information we collect, use, and disclose, to request deletion, and not to be discriminated against for exercising these rights. To make a request, email sales@hs-biopharma.com. We may need to verify your identity before acting on a request.

Security

We use reasonable measures to protect information, including sign-in through Firebase Authentication, HTTP-only session cookies, and storing API tokens only as hashes. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Children

This website is intended for business users and is not directed to children under 13. We do not knowingly collect personal information from children.

Changes

We may update this policy from time to time. The “Last updated” date above shows when it last changed.

Contact

Questions about this policy? Email sales@hs-biopharma.com or write to HS Biopharmaceuticals, Inc., 3141 Tiger Run Court, Suite 107, Carlsbad, CA 92010.