Privacy Policy

What we collect

• Account data — email address, display name, and password hash (for vendors only; buyers can check out without an account).
• Order data — shipping name, address, email, and cart contents needed to fulfill your order.
• Payment data — we do not store card numbers. Crypto payments are settled via NOWPayments and referenced by transaction ID.
• Messages — content of disputes and order-related messaging.
• Usage data — pages viewed, referrer, and device type via standard server logs.
• Cookies — session cookie for authentication, and a cart cookie to persist your cart across page loads.

What we do not collect

• We do not require a real name for buyers.
• We do not require a phone number.
• We do not sell, rent, or trade your personal data to third parties for marketing.

How we use your data

• To process and ship orders.
• To resolve disputes between buyers and vendors.
• To send transactional emails (order confirmations, shipping updates, dispute outcomes). We do not send marketing email by default.
• To detect and prevent fraud, abuse, and violations of our terms.
• To comply with legal obligations.

Who we share with

• Vendors receive the shipping name and address needed to fulfill your order. They do not see your email or phone.
• Payment processor (NOWPayments) receives the amount and crypto address. They do not receive your shipping info.
• Hosting & infrastructure (Vercel, Supabase) — encrypted in transit and at rest.
• Law enforcement — only when required by valid legal process.

Data retention

Order records are retained for at least 3 years for tax and dispute-resolution purposes. Account data is retained while your account is active. You can request deletion of your vendor account at any time; anonymized order records will be retained as above.

Your rights

You can request a copy of, or deletion of, your personal data by emailing privacy@peptshop.io. We respond within 30 days.

Contact

Questions about this policy? Email privacy@peptshop.io.