Privacy Policy

1. Introduction

Welcome to Peptides.SO ("Peptides Supplier Offers"). This Privacy Policy explains how Peptides.SO ("we," "us," or "our") collects, uses, discloses, and safeguards your information when you visit our website at peptides.so (the "Platform"), including any related services, features, and content offered through the Platform.

By accessing or using the Platform, you agree to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Platform.

2. Information We Collect

2.1 Personal Information You Provide

We may collect personal information that you voluntarily provide when you:

• Create an account (name, email address, password, account type)
• Register as a supplier (business name, contact details, business address, tax identification information)
• Subscribe to a paid plan (payment information processed securely via Stripe)
• Submit reviews or ratings of suppliers
• Contact us via email or through support channels
• Sign up for newsletters or promotional communications
• Set up price alerts, saved favorites, or research stacks

2.2 Information Collected Automatically

When you access the Platform, we automatically collect certain information, including:

• Device Information: Browser type, operating system, device type, screen resolution, and unique device identifiers
• Log Data: IP address, access times, pages viewed, referring URLs, and actions taken on the Platform
• Usage Data: Search queries, peptide comparisons performed, supplier pages visited, and feature interactions
• Location Information: Approximate geographic location based on your IP address, used to display relevant suppliers and pricing in your region

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment processors (Stripe) for transaction verification and subscription management
• Analytics providers for aggregated usage statistics
• Public databases to verify supplier business information

3. How We Use Your Information

We use the information we collect for the following purposes:

• Providing and improving the Platform: Operating the marketplace, displaying supplier listings, enabling price comparisons, and personalizing your experience
• Account management: Creating and managing your user or supplier account, processing subscriptions, and authenticating access
• Payment processing: Processing supplier subscription payments through Stripe, managing billing, and handling refund requests
• Communications: Sending transactional emails (account verification, password resets, subscription confirmations), price alerts, and optional marketing communications
• Analytics and research: Analyzing usage patterns to improve our platform, understand market trends, and develop new features
• Safety and security: Detecting and preventing fraud, abuse, and unauthorized access to the Platform
• Legal compliance: Fulfilling our legal obligations and enforcing our Terms of Service
• Supplier verification: Verifying supplier credentials, business information, and product quality claims to maintain marketplace integrity

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and store information about your interactions with the Platform.

4.1 Types of Cookies We Use

• Essential Cookies: Required for the Platform to function properly. These include session cookies for authentication, security tokens, and preference settings.
• Functional Cookies: Remember your preferences such as saved searches, comparison history, and display settings.
• Analytics Cookies: Help us understand how visitors interact with the Platform, including pages visited, time spent, and navigation patterns. We may use services like Google Analytics or similar providers.
• Marketing Cookies: Used to deliver relevant advertisements and track the effectiveness of marketing campaigns. These are only set with your consent.

4.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies. However, disabling essential cookies may affect the functionality of the Platform. Please refer to your browser's help documentation for instructions on managing cookies.

5. Third-Party Services

We integrate with and may share information with the following third-party services:

5.1 Stripe (Payment Processing)

We use Stripe to process subscription payments for suppliers. When you make a payment, your payment information (credit card number, billing address) is transmitted directly to Stripe and is not stored on our servers. Stripe's use of your information is governed by the Stripe Privacy Policy.

5.2 Analytics Providers

We may use analytics services (such as Google Analytics) to help us understand usage patterns on the Platform. These services may collect information such as your IP address, browser type, and pages visited. This data is aggregated and anonymized where possible.

5.3 Hosting and Infrastructure

The Platform is hosted on Cloudflare infrastructure. Our database services are provided by Google Cloud (AlloyDB/PostgreSQL). These providers may process data as part of delivering their services, subject to their respective privacy policies.

5.4 Email Services

We may use third-party email service providers to send transactional and marketing emails. These providers process your email address and related data solely for the purpose of delivering our communications.

6. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• With service providers: Third-party vendors who help us operate the Platform (payment processing, hosting, analytics, email delivery)
• Public profile information: If you are a supplier, your business name, product listings, ratings, and reviews are publicly visible on the Platform
• With your consent: When you explicitly authorize us to share your information with a third party
• Legal requirements: When required by law, regulation, legal process, or governmental request
• Protection of rights: When necessary to protect the rights, property, or safety of Peptides.SO, our users, or others
• Business transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction

7. Data Retention

We retain your personal information for as long as necessary to provide the services you have requested, or for other essential purposes such as complying with our legal obligations, resolving disputes, and enforcing our agreements. Specifically:

• Account data: Retained for as long as your account is active. You may request account deletion at any time.
• Transaction records: Retained for a minimum of 7 years to comply with financial and tax regulations.
• Usage logs: Aggregated and anonymized usage data may be retained indefinitely for analytics purposes. Personally identifiable log data is retained for up to 24 months.
• Reviews: Published reviews remain on the Platform unless the reviewer requests removal or the review violates our policies.
• Marketing preferences: Your opt-out preferences are retained indefinitely to ensure we respect your communication choices.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS/SSL
• Encryption of sensitive data at rest
• Regular security assessments and vulnerability testing
• Access controls limiting employee access to personal data on a need-to-know basis
• Secure password hashing using industry-standard algorithms
• Regular backups and disaster recovery procedures

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but will promptly notify affected users in the event of a data breach as required by applicable law.

9. Your Rights and Choices

Depending on your location and applicable data protection laws, you may have the following rights regarding your personal information:

• Right of access: Request a copy of the personal information we hold about you
• Right to rectification: Request correction of inaccurate or incomplete personal information
• Right to erasure: Request deletion of your personal information, subject to legal retention requirements
• Right to restrict processing: Request that we limit how we use your personal information
• Right to data portability: Request your personal information in a structured, commonly used, machine-readable format
• Right to object: Object to the processing of your personal information for direct marketing purposes
• Right to withdraw consent: Withdraw consent at any time where we rely on your consent to process personal information

To exercise any of these rights, please contact us at privacy@peptides.so. We will respond to your request within 30 days, or sooner as required by applicable law.

9.1 California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to delete personal information, and the right to opt out of the sale of personal information. We do not sell personal information as defined by the CCPA.

9.2 European Economic Area (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data based on legitimate interests, contract performance, consent, and legal obligations. You have the right to lodge a complaint with your local data protection authority if you believe your data is being processed unlawfully.

10. Children's Privacy

The Platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have inadvertently collected personal information from a child under 18, we will take steps to delete that information as soon as possible. If you believe that a child under 18 has provided us with personal information, please contact us at privacy@peptides.so.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy, including the use of standard contractual clauses approved by relevant authorities where required.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will notify you by posting the updated policy on this page with a revised "Last updated" date. We may also send email notifications for significant changes. We encourage you to review this Privacy Policy periodically.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: