Last updated October 6, 2026

Privacy & Cookies

Your membership interest and your analytics preference are separate choices.

This notice covers joinbios.com, the waitlist website for BIOS—the Biopharma Innovation and Opportunity Society. Questions or requests about your information can be sent to info@arsenal-advisors.com.

Information you give us

When you join the waitlist, we collect your name, email address, any company and role you choose to provide, the submission time, and your agreement to receive BIOS membership updates. We also record campaign labels from the link you followed, when present, to understand which outreach generated interest.

We use these details to manage the waitlist, assess relevant membership interest, and contact you about BIOS and membership availability. Joining the list does not create a paid membership, submit a membership application, or guarantee admission. Please do not submit confidential employer information or patient information.

The waitlist is stored outside the public website folder on our hosting account. It is not published as a directory. Access is intended for the people and service providers who support BIOS’s waitlist and communications. We do not sell the waitlist or use it for cross-context behavioral advertising.

For VIP invitations, we may use your name and public LinkedIn profile URL from our professional network to personalize a private invitation. The link uses an opaque invitation code rather than putting your profile details in the URL. Codes normally expire after 90 days. You can review and edit prefilled details before submitting. We store VIP interest details privately, including first and last name, LinkedIn profile URL, email address, submission time, invitation status, page source and the exact email consent you provide. Existing waitlist subscribers may also have a separate VIP interest record. Priority review does not guarantee membership acceptance.

Essential cookies and security

The waitlist form uses an essential session cookie named bios_waitlist; the VIP form uses bios_vip. It helps associate your form with a security token and protect submissions. This is a session cookie rather than a permanent analytics identifier. It is marked Secure, HttpOnly and SameSite=Strict. Browser session restoration can affect when session cookies are cleared.

Our server also keeps short-window abuse-prevention records based on a hashed network address. Stale rate-limit records are pruned during later submission attempts. Hosting infrastructure may retain ordinary access and error logs needed to operate and secure the website. Your browser sends network information, including an IP address, when requesting website resources.

Optional Rybbit analytics

The VIP invitation page does not load optional analytics. We use Rybbit on the general waitlist pages to understand site usage and identify technical problems. On this website, its script is not loaded until you allow optional analytics. Declining analytics does not prevent you from viewing the video or joining the waitlist.

If you allow it, analytics can include pages and titles viewed, referring pages, URL and campaign parameters, browser and device information, approximate location, performance and error information, button clicks, outbound links, copied page text, and form activity. Copy events can include up to 500 characters of selected page text. Form activity describes the form and fields rather than their entered values. Error information can include messages and stack traces.

We do not add waitlist names or email addresses to custom analytics events, and we do not call Rybbit’s user-identification function. Avoid putting personal or confidential information in URLs. Session replay is disabled in the configuration checked for this release.

Rybbit’s current script can create a random rybbit-visitor-id in your browser’s local storage. The vendor’s script does not give that stored value an automatic expiry. Our site removes it when you decline analytics or withdraw consent. Analytics requests disclose network information to Rybbit and its delivery infrastructure. Rybbit’s collection and retention also depend on service settings and its applicable plan; contact us for current retention details.

Provider information: Rybbit privacy policy.

Your choices

Open privacy settings to allow or decline optional analytics. We honor a preference saved in local storage under bios_analytics_consent for 180 days and clear it when a later visit detects expiry. Local storage itself does not expire automatically. Clearing browser storage can reset your choice. If browser storage is unavailable, optional analytics stays off.

Withdrawing consent reloads the page to stop existing analytics listeners; submit any in-progress form before changing this setting. Withdrawal stops future collection on this browser but does not automatically delete data already received by Rybbit. We keep optional analytics off when the browser sends a Global Privacy Control or Do Not Track signal.

You can request access to, correction of, or removal of your waitlist information, VIP interest record and invitation profile, or ask us to stop membership emails, by contacting info@arsenal-advisors.com. We may need to verify that the request concerns your information. Blocking essential cookies may stop the waitlist form from working; you may contact us by email instead.

Retention and service providers

We use Resend to send an internal notification to the BIOS administrator when you join the waitlist. It includes your name, email address, optional company and role, signup time, and recorded email consent. VIP notifications also include the submitted LinkedIn profile URL, VIP page source, invitation status and whether the email was already on the waitlist. These details are also stored in the administrator’s email account. We also use Resend to send a confirmation email for new waitlist requests. BIOS applications and membership updates require you to confirm your email address. Confirmed contacts are stored in Resend in a BIOS-specific group and subscription topic. The confirmation email includes a link to cancel or unsubscribe from BIOS. Existing account-wide and BIOS opt-outs are respected; ambiguous prior preferences may require manual review.

We keep waitlist information while it is needed to manage membership interest and related communications, or until an applicable removal request is fulfilled, subject to records we need to retain for legal or security reasons. Backup removal may follow a separate retention cycle. Contact us if you need a specific retention or deletion answer for your details.

Website hosting is provided through Spaceship. Rybbit receives analytics only after your permission through this website. Service providers may process data in locations different from where you live. Additional rights may apply depending on your location and applicable law.

Changes to this notice

We may update this notice when the website, analytics configuration, or membership process changes. The date above identifies this version. An expanded membership service may have additional privacy terms.