Privacy Policy

Only what it takes to run an account, ship an order, and get paid:

• Account details: your email address and, if you set one, a password (stored only as a salted scrypt hash, never in readable form).
• Order details: name, phone number, shipping address, the items ordered, and the payment method and reference you used (for example a Zelle confirmation or a blockchain transaction hash).
• Brand details: for brands that ship through us, the business information you give us during onboarding, your inventory, and your orders.
• Messages: anything you send to support@peptiport.com.

You can sign in to PeptiPort with your Google account (“Sign in with Google” on the dashboard login, “Continue with Google” on the customer account page). This section describes exactly what happens to Google user data when you do.

Data we access. We request only the openid and email scopes. From Google we receive your email address, whether Google has verified it, and a Google account identifier inside the sign-in token. We do not request or receive your name, profile photo, contacts, Gmail, Drive, Calendar, or any other Google data, and we never see your Google password.

How we use it. We use your email address for one purpose: to find your existing PeptiPort account, or create a customer account, and sign you in. For the brand dashboard, a Google address signs in only if a dashboard login for that address already exists; Google sign-in never creates dashboard access. We do not use Google user data for advertising, marketing, profiling, or to train any artificial-intelligence or machine-learning models, and we do not act on your Google account on your behalf.

How we store it. The only Google user data we keep is your email address, saved on your PeptiPort account record in our database together with the time it was verified. The sign-in token from Google is checked and then discarded; we do not store Google access tokens or refresh tokens. Data is encrypted in transit, and access is limited to the staff who run the service.

How we share it. We do not sell, rent, or transfer Google user data to anyone. Your email address is handled by our hosting and database providers only to run the service, and by our email provider only to send you account and order emails. It is disclosed otherwise only if the law requires it.

Retention and deletion. Your email address is kept while your account is open. To delete it, email support@peptiport.com from that address and we will delete your account within 30 days, keeping only order records that tax law requires. You can also remove PeptiPort’s access at any time from your Google Account permissions; once removed, we receive nothing further from Google.

PeptiPort’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• To sign you in and keep your session.
• To pack, label, and ship orders, and to send tracking and order emails.
• To match payments to invoices and orders.
• To answer support requests and prevent fraud or abuse.
• To meet legal, tax, and accounting obligations.

Only the service providers that run part of the job for us, and only what each one needs:

• Hosting and database providers that store the site and its records.
• Our email provider, to deliver account and order emails.
• Shipping label services and carriers, which receive the name, address, and phone on a package.
• Google, for sign-in (if you use it) and for address autocomplete at checkout.
• Our scheduling tool, if you book a call with us.

Payments sent by USDC or USDT are recorded on public blockchains, which we do not control. We may also disclose information when the law requires it, or to protect our rights or someone’s safety. If PeptiPort is sold or merged, records would move with the business under this same policy.

Client brands are confidential. We never name a brand that ships through us.

We set only the cookies the site needs to work: a session cookie that keeps you signed in, and a short-lived cookie that protects the Google sign-in step. Your theme choice may be saved in your browser. There are no advertising or cross-site tracking cookies.

Account details stay while your account is open. Order and payment records are kept as long as tax and accounting rules require, typically seven years. Support email is kept as long as it is useful for answering you.

You can update your details from your account page, or email support@peptiport.com to see, correct, or delete what we hold about you. We will delete it unless we are required to keep a record (for example, of a completed order). You can also revoke PeptiPort’s access at any time from your Google Account permissions.

Traffic to the site is encrypted, passwords are hashed, and sessions are signed. No system is perfectly secure, and we will tell affected people promptly if their information is exposed.

PeptiPort is for adults and businesses. We do not knowingly collect information from anyone under 18.

If this policy changes, we will update the date at the top of this page, and for meaningful changes we will email account holders.