Privacy Policy

When you register a PivotOrder account, we collect the following information: • Basic account information: name, email address, password (hashed) • Personal biological information: birth year, biological sex, region • Health checkup report content: blood test values you upload We do not collect ID numbers, bank card information, or any data directly linking to your legal identity.

Collected information is used solely for: • Generating your personalized 10-Pillar metabolic analysis report • Storing your analysis history for trend tracking • Sending account-related notifications (e.g., subscription expiry reminders) • Improving algorithm models (using only de-identified, anonymized data) We do not use your personal data for advertising, third-party data sales, or model training beyond these purposes.

• All data is stored on protected servers with AES-256 encryption • Passwords are irreversibly hashed (bcrypt)—we cannot read your password • Data transmission uses TLS 1.3 encryption • We conduct regular security audits and promptly address known vulnerabilities In the event of a data security incident, we will notify affected users within 72 hours of discovery.

PivotOrder does not sell, rent, or share your personal data with third parties, except: • With your explicit authorization (e.g., if you choose to share a report with your doctor) • As required by law (e.g., court order or regulatory requirement) • As necessary to prevent fraud or protect system security Third-party service providers we use (e.g., cloud storage) access only the minimum data necessary and are bound by data processing agreements.

You have the following rights regarding your data: • Access: View all data we hold about you • Correction: Update inaccurate personal information • Deletion: Request permanent deletion of your account and all associated data • Portability: Export your analysis history in a structured format To exercise these rights, email privacy@pivotorder.com. We will respond within 30 days.

We use necessary functional cookies to maintain login state and language preferences. We do not use third-party tracking or advertising cookies. You can manage cookies in your browser settings, but disabling functional cookies may affect normal website usage.

We may update this Privacy Policy periodically to reflect service changes or regulatory requirements. Significant changes will be communicated to users via email or website announcement in advance. Continued use of PivotOrder services constitutes acceptance of the updated Privacy Policy.

For any privacy questions or concerns, please contact us: Email: privacy@pivotorder.com Address: Vancouver, BC, Canada