Privacy Policy

Effective Date: May 11, 2026

Your privacy is important to us. This Privacy Policy explains what information PeptideVetter collects, how we use it, and your rights with respect to that information.

1. About PeptideVetter

PeptideVetter ("we," "our," or "us") operates the website located at peptidevetter.com (the "Site"). We provide educational research tools for the peptide and research compound community. This Privacy Policy applies to all personal information collected through the Site and its associated services.

2. Information We Collect

We collect the following categories of information:

a. Information You Provide Directly

• Email address (when you sign up for early access, newsletters, or create an account)
• Name (optional, when provided in account creation or contact forms)
• Payment information (processed directly by Stripe; we do not store full card numbers)
• COA documents and files uploaded to the COA Vetter tool
• Communications you send to us via email or contact forms

b. Information Collected Automatically

• IP address and approximate geographic location
• Browser type, operating system, and device type
• Pages visited, time spent on pages, and navigation patterns
• Referring URLs and exit pages
• Cookies and similar tracking technologies (see Section 6)

c. Information from Third-Party Services

• Payment metadata from Stripe (transaction identifiers, last four digits of card, billing country)
• Authentication data if you use a supported single sign-on (SSO) provider

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, and improve the Site and Services
• To process and deliver COA analysis reports and other paid services
• To send you early access notifications, product updates, and newsletters (only with your consent)
• To process payments and maintain billing records
• To respond to your inquiries and provide customer support
• To detect, investigate, and prevent fraudulent or unauthorized activity
• To comply with legal obligations
• To analyze usage patterns and improve tool performance and accuracy

We do not use your information for automated decision-making that produces legal or similarly significant effects without human review.

4. COA Documents and Uploaded Files

When you upload a COA document to the COA Vetter tool, that document is transmitted to a third-party AI API (Anthropic) for analysis. Please review Anthropic's privacy policy at anthropic.com before uploading sensitive documents.

We do not permanently store uploaded COA documents beyond the period necessary to deliver your analysis report, unless you explicitly opt in to batch history features. Uploaded documents are processed in memory and are not used to train AI models without your consent.

You should not upload COA documents or other files that contain personally identifiable health information, financial data, or other sensitive personal data unrelated to the document being analyzed.

5. Email Communications

If you provide your email address, we may send you:

• Early access notifications and launch updates
• Product announcements and new tool releases
• Educational content related to peptide research and COA evaluation
• Transactional emails related to report purchases and account activity

You may unsubscribe from non-transactional communications at any time by clicking the unsubscribe link in any email or contacting us directly. Unsubscribing from marketing emails does not affect receipt of transactional communications related to active purchases.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Remember your preferences and settings
• Maintain your session state across pages
• Record your acknowledgment of the site disclaimer modal
• Analyze site traffic and usage via analytics tools

Types of cookies we use:

• Essential cookies: required for core Site functionality, including disclaimer acknowledgment and session management
• Analytics cookies: used to understand how visitors interact with the Site (e.g., page views, tool usage)
• Preference cookies: remember user settings such as unit toggles (mg/mcg)

You can control cookie settings through your browser preferences. Disabling essential cookies may affect Site functionality. We do not use advertising or third-party behavioral tracking cookies.

7. Payment Processing

Payment processing is handled by Stripe, Inc. When you make a purchase on PeptideVetter, your payment information is collected and processed directly by Stripe. PeptideVetter does not receive or store your full credit card number, CVV, or banking credentials.

Stripe's handling of your payment data is governed by Stripe's Privacy Policy, available at stripe.com/privacy. By making a purchase, you also agree to Stripe's terms of service.

We retain transaction records including amount, date, and a masked payment method identifier for accounting and fraud prevention purposes.

8. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

We share information only in the following limited circumstances:

• Service providers: We share information with vendors who assist in operating the Site, including Stripe (payments), Anthropic (AI API), email service providers, and analytics platforms. These providers are contractually required to protect your information and use it only for the specified purpose.
• Legal requirements: We may disclose information if required by law, subpoena, court order, or to protect the rights, safety, or property of PeptideVetter or others.
• Business transfers: In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of that transaction. We will notify you via email or prominent notice on the Site before your information becomes subject to a different privacy policy.
• With your consent: We may share information for other purposes with your explicit consent.

9. Data Retention

We retain your personal information for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods:

• Email addresses: Retained until you unsubscribe or request deletion
• Account information: Retained for the life of your account plus 12 months after closure
• Transaction records: Retained for 7 years for tax and accounting compliance
• Uploaded COA documents: Deleted within 30 days of report delivery unless batch history is enabled
• Analytics data: Retained in aggregated, anonymized form indefinitely

10. Security

We implement reasonable technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These include:

• Encrypted data transmission via HTTPS/TLS
• Access controls limiting employee and contractor access to user data
• Secure cloud infrastructure with industry-standard security configurations
• Regular security reviews of third-party service providers

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

11. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights with respect to your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information, subject to legal retention requirements
• Opt-out: Unsubscribe from marketing communications at any time
• Portability: Request your data in a structured, machine-readable format

To exercise any of these rights, contact us at the address in Section 14. We will respond to verified requests within 30 days.

12. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including:

• The right to know what personal information is collected, used, shared, or sold
• The right to delete personal information held by us and our service providers
• The right to opt out of the sale or sharing of personal information (we do not sell personal information)
• The right to non-discrimination for exercising your privacy rights
• The right to correct inaccurate personal information
• The right to limit use of sensitive personal information

California residents may submit requests by emailing privacy@peptidevetter.com with the subject line "California Privacy Request." We do not discriminate against users who exercise their privacy rights.

13. Children's Privacy

The Site is not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will delete it promptly. If you believe a child has provided us with their information, please contact us immediately.

Users must be at least 18 years of age to use the Site. See Section 6 of our Terms of Use.

14. Third-Party Links

The Site may contain links to third-party websites, including vendor sites and external resources. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party site you visit.

15. International Users

PeptideVetter is operated from the United States. If you access the Site from outside the United States, your information will be transferred to and processed in the United States, where privacy laws may differ from those in your country. By using the Site, you consent to this transfer.

16. Changes to This Privacy Policy

We may update this Privacy Policy periodically. When we make material changes, we will post the revised policy on this page with an updated effective date and, where appropriate, notify registered users by email. Your continued use of the Site after changes are posted constitutes your acceptance of the revised policy.

17. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us.