Privacy Policy

We collect the following categories of personal information:

• Identity & Contact Information: Name, email address, shipping address, and billing address.
• Purchase Information: Order history, products purchased, payment confirmation (we do not store full payment card details).
• Build My Stack Quiz Inputs: Research goals, experience level, budget range, and cycle length preferences entered into our research tool. These inputs are treated as sensitive data (see Section 6).
• Technical Data: IP address, browser type, device information, and pages visited (collected automatically via cookies/analytics).
• Communications: Emails, support requests, and any information you voluntarily provide.

• Process and fulfill your orders
• Send order confirmations, shipping updates, and receipts
• Provide customer support
• Improve our website and services
• Comply with legal obligations
• Prevent fraud and unauthorized transactions

We share your personal data with the following third-party service providers who process data on our behalf:

• Supabase: Database hosting and user authentication. Data stored in the United States.
• Resend: Transactional email delivery (order confirmations, shipping updates).
• PayPal: Payment processing. PayPal handles all payment data directly and is PCI-DSS compliant. We do not store your payment information.
• Vercel: Website hosting and analytics.

We do not sell your personal data to any third party.

If you are a Texas resident, you have the following rights under the Texas Data Privacy and Security Act (effective July 1, 2024):

• Right to Access: You may request confirmation of whether we are processing your personal data and obtain a copy of that data.
• Right to Correct: You may request correction of inaccurate personal data.
• Right to Delete: You may request deletion of your personal data.
• Right to Data Portability: You may request a portable copy of your personal data in a commonly used format.
• Right to Opt Out: You may opt out of the sale of your personal data, targeted advertising, or profiling.

To exercise any of these rights, contact us at privacy@aeterionpeptides.com. We will respond within 45 days.

Note: The TDPSA does not provide a private right of action. Enforcement is conducted exclusively by the Texas Attorney General.

If you are a California resident, you have additional rights under the CCPA:

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to Delete: You may request deletion of your personal information.
• Right to Opt Out of Sale: We do not sell personal information. If this changes, we will provide a "Do Not Sell My Personal Information" link.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise these rights, contact us at privacy@aeterionpeptides.com.

Inputs provided to our Build My Stack research tool (including research goals, experience level, and protocol preferences) are treated as sensitive data. This data is used solely to generate compound recommendations within the tool and is never sold to third parties. We do not use this data for advertising, profiling, or any purpose other than providing the research tool functionality.

We use Vercel Speed Insights to collect anonymized performance data about page load times and user experience. We do not use third-party advertising cookies or tracking pixels. Your browser may store functional cookies necessary for the operation of the site (e.g., cart state, age verification preference). You can disable cookies in your browser settings, though this may affect site functionality.

We retain your personal data for as long as necessary to fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Order records are retained for a minimum of 7 years for tax and legal compliance. You may request deletion of your account data at any time by contacting us; we will delete or anonymize your data within 45 days, except where retention is required by law.

We implement appropriate technical and organizational measures to protect your personal data, including encrypted connections (HTTPS/TLS), secure database access controls, and PCI-compliant payment processing through PayPal. No method of electronic storage is 100% secure, and we cannot guarantee absolute security.

For any privacy-related questions, data access requests, or to exercise your rights under the TDPSA or CCPA, contact us at:

Aeterion Labs
Email: privacy@aeterionpeptides.com