Privacy Policy

We collect information in three ways:

• Account information — when you create an account, we (via our authentication provider, Supabase) store your email address and, if you sign in with Google, the basic profile information Google shares with us (name, profile picture).
• Order information — when you place an order, we store your email address, the items and totals of your order, your chosen payment method, and the order's payment status. We do not store full payment card numbers or wallet private keys — those are handled entirely by our payment processors.
• Protocol dashboard data — if you use the protocol tracking dashboard, the compound names, amounts, schedules, dose logs, and notes you enter are stored against your account so you can access them later. This data is private to your account — see "How We Protect Your Data" below.

• To create and maintain your account, and to let you sign in
• To process, fulfill, and communicate with you about your orders
• To notify you if a product you've asked to be alerted about comes back in stock
• To operate the protocol tracking dashboard and Premium subscription features
• To respond to support requests sent through our Contact page
• To maintain the security and integrity of our platform

We do not sell your personal information to third parties, and we do not use your dashboard data (protocols, dose logs, notes) for advertising or share it with anyone outside of operating the dashboard itself.

We use a small number of trusted third-party services to operate the platform. Each only receives the information it needs to perform its specific function:

• Supabase — authentication and database hosting (account info, orders, protocols, dose logs)
• NOWPayments — cryptocurrency payment processing for crypto orders
• Resend — transactional emails (order confirmations, restock notifications)
• WhatsApp — if you choose to order or contact us via WhatsApp, that conversation is subject to WhatsApp's own privacy practices
• Chatway — live chat support; if you start a chat, the messages and basic session details you provide are processed by Chatway under its own privacy practices
• Vercel — site hosting, performance monitoring (Speed Insights), and aggregate, privacy-respecting traffic analytics

For manual payment methods (Apple Pay, CashApp, Zelle), any information you share to complete payment is handled directly between you and that payment platform — we only see what you choose to send us to confirm the order.

We use essential cookies to keep you signed in and to remember items in your cart. We also use privacy-respecting analytics (Vercel Analytics and Speed Insights) to understand, in aggregate, how the site is used and performing — this does not involve tracking you individually across other websites.

Your account and dashboard data are protected by row-level security at the database level — meaning the system itself enforces that you can only ever read or modify your own protocols, dose logs, and order history, not anyone else's. Passwords are never stored by us in plain text; authentication is handled entirely by Supabase Auth using industry-standard hashing and session management.

• You can review and update your account details at any time while signed in
• You can delete individual protocols and dose log entries directly from your dashboard
• You can request a copy of your data, or request that your account and associated data be deleted, by contacting us — see below
• You can unsubscribe from restock notification emails at any time

BioPeptide.online is not directed at, and is not intended for use by, anyone under the age of 18. We do not knowingly collect personal information from minors.

We may update this policy from time to time as the platform evolves. The "Last Updated" date at the top of this page reflects the most recent revision. Material changes will be reflected here with an updated date.

For any questions about this policy, or to exercise any of the rights described above, please reach out via our Contact page.