Skip to main content

Privacy policy

Effective Date: May 16, 2026·Last Updated: May 16, 2026

This Privacy Policy explains how AminoCatalog (“AminoCatalog,” “we,” “us,” or “our”) collects, uses, shares, retains, and protects information when you access or use AminoCatalog, including our website, peptide encyclopedia, vendor directory, vendor profiles, product catalog listings, reviews, account features, vendor dashboard, emails, and related services (collectively, the “Service”).

This Privacy Policy is incorporated into our Terms of Service. By using AminoCatalog, you acknowledge that you have read this Privacy Policy.

About sensitive information. AminoCatalog is an informational platform and vendor directory. We are not a healthcare provider, pharmacy, telehealth provider, laboratory, manufacturer, or seller of peptides or research chemicals. We do not intentionally collect medical records, protected health information, prescriptions, treatment records, diagnoses, or physician–patient communications. However, your use of AminoCatalog may reveal interests in peptides, research compounds, vendors, performance, longevity, weight loss, recovery, or related subjects. We treat this context carefully, but you should avoid posting private medical, health, or identifying information in reviews, comments, profile fields, or other public areas.

1. Information We Collect

We collect information in several ways: information you provide directly, information collected automatically, information submitted by vendors, information generated through your use of the Service, and information from third parties.

1.1 Information You Provide Directly

We may collect information you provide when you:

  1. Create an account.
  2. Sign in or authenticate (including via Google OAuth).
  3. Submit a review, rating, comment, report, or feedback.
  4. Save peptides, vendors, searches, filters, or preferences.
  5. Contact us for support.
  6. Subscribe to emails or updates.
  7. Apply for or manage a vendor profile.
  8. Submit vendor business information, product listings, certificates of analysis, lab reports, catalog details, pricing, stock status, shipping regions, or related documentation.
  9. Participate in surveys, waitlists, beta tests, promotions, or research.
  10. Request deletion, access, correction, opt-out, or other privacy rights.

This information may include:

  1. Name.
  2. Email address.
  3. Username, display name, avatar, or profile information.
  4. Password or authentication credentials, stored through our authentication provider (we never see your plaintext password).
  5. Account settings and preferences.
  6. Review text, ratings, photos, attachments, reports, and moderation history.
  7. Vendor business name, owner or representative name, role, business email, business phone number, website, shipping regions, product catalog information, testing documents, vendor application information, and dashboard activity.
  8. Support messages and communications with us.
  9. Any other information you choose to provide.

Do not submit sensitive personal information unless it is necessary for your interaction with us. In particular, do not include medical conditions, diagnoses, prescriptions, lab results, government identification numbers, financial account numbers, precise home address, or private health details in reviews or public profile fields.

1.2 Information Collected Automatically

When you use AminoCatalog, we and our service providers may automatically collect information such as:

  1. IP address (which, for some analytics and abuse-prevention purposes, we hash with a salt before storing rather than retaining in raw form).
  2. Device identifiers.
  3. Browser type and version.
  4. Operating system.
  5. Device type.
  6. Referring and exit pages.
  7. Pages viewed.
  8. Search queries on the Service.
  9. Peptide pages, vendor pages, and product listings viewed.
  10. Filters, sorts, clicks, saved items, and outbound vendor clicks.
  11. Date and time of visits.
  12. Approximate location inferred from IP address.
  13. Cookie identifiers and similar tracking identifiers.
  14. Log data, diagnostic data, crash data, performance data, and security events.

We use this information to operate the Service, understand usage, improve content, prevent fraud and abuse, measure vendor listing performance, secure the platform, debug technical issues, and analyze traffic.

Outbound vendor clicks. When you click through from a vendor listing on AminoCatalog to a vendor’s own website, we record the click so we can show vendors aggregate referral counts and improve the directory. Once you arrive on the vendor’s website, the vendor’s own privacy practices apply.

1.3 Cookies and Similar Technologies

We may use cookies, local storage, pixels, tags, software development kits, and similar technologies to:

  1. Keep you signed in.
  2. Remember preferences and saved items.
  3. Secure the Service and prevent fraud or review manipulation.
  4. Measure traffic and product usage.
  5. Understand which pages, vendors, products, and filters are useful so we can improve the directory.
  6. Measure outbound clicks to vendor websites.

At launch, AminoCatalog uses only essential and functional first-party cookies. We do not currently use advertising, retargeting, or cross-context behavioral advertising technologies. If we introduce optional tracking in the future we will provide notice, update this Privacy Policy, and where required provide consent or opt-out controls before activating it.

You can usually control cookies through your browser settings. Blocking essential cookies will prevent account login, saved preferences, review submission, and vendor dashboard features from working.

1.4 Information From Third Parties

We may receive information from third parties, including:

  1. Authentication providers (such as Google when you choose to sign in with Google).
  2. Email service providers.
  3. Analytics providers.
  4. Hosting, database, storage, and security providers.
  5. Payment processors, if and when paid vendor features are enabled.
  6. Vendors or vendor representatives.
  7. Users who submit reports, complaints, or review disputes.
  8. Publicly available sources, such as vendor websites, public product pages, public lab reports, public social profiles, regulatory databases, or research publications.
  9. Fraud-prevention, security, and abuse-detection providers.

We may combine information from these sources with information we collect directly or automatically.

2. How We Use Information

We use information for the following purposes:

  1. To provide, operate, maintain, and improve AminoCatalog.
  2. To create and manage user accounts.
  3. To authenticate users and secure accounts.
  4. To publish, moderate, analyze, and manage reviews, ratings, reports, and other user-generated content.
  5. To operate the vendor directory, vendor profiles, vendor dashboards, product catalog listings, stock status, shipping filters, and outbound click tracking.
  6. To review, approve, reject, verify, suspend, or remove vendor accounts, listings, badges, or claims.
  7. To detect and prevent spam, fake reviews, vendor manipulation, fraud, scraping, abuse, security incidents, and policy violations.
  8. To personalize your experience, such as saved peptides, saved vendors, preferences, filters, and account settings.
  9. To analyze traffic, search behavior, content performance, vendor performance, conversion patterns, and product usage.
  10. To communicate with you about your account, support requests, reviews, vendor applications, policy updates, security alerts, and administrative messages.
  11. To send newsletters, product updates, marketing messages, or other optional communications you have asked to receive.
  12. To process payments for paid vendor features, if and when paid features are enabled.
  13. To enforce our Terms of Service, vendor rules, review policies, and other agreements.
  14. To comply with legal obligations, regulatory inquiries, law enforcement requests, subpoenas, court orders, and dispute-resolution obligations.
  15. To protect the rights, safety, property, and integrity of AminoCatalog, users, vendors, and the public.
  16. To create aggregated, de-identified, or statistical information.

We do not use AminoCatalog account activity to provide medical advice, diagnose conditions, prescribe treatment, determine eligibility for healthcare, or make decisions about insurance, employment, credit, housing, education, or similar eligibility matters.

3. Public and Semi-Public Information

Some areas of AminoCatalog are public or may become public. Reviews, ratings, display names, profile photos, review metadata, vendor responses, and other user-generated content may be visible to other users, vendors, search engines, or the general public depending on the feature and your settings. Do not post anything that you do not want to be public.

Vendor profiles, vendor descriptions, product listings, stock status, pricing, shipping regions, testing claims, certificates of analysis, vendor responses, and related vendor-submitted information may be visible to users, search engines, or the general public.

What vendors see about reviewers. When you publish a review of a vendor, that vendor can see your public display name, review text, rating, attached photos, and the date of your review. We do not share your account email, real name (if different from your display name), IP address, or other private account details with vendors except where we are required to in order to investigate fraud or review manipulation, resolve a dispute, or comply with law.

We may preserve reviews, moderation history, abuse reports, vendor responses, and dispute records even after account deletion where reasonably necessary for platform integrity, legal compliance, dispute resolution, fraud prevention, or enforcement.

4. How We Share Information

We may share information in the following circumstances.

4.1 Service Providers and Subprocessors

We share information with vendors, contractors, and service providers that help us operate the Service under contractual obligations to protect the information they process. These providers may act as processors on our behalf or as independent controllers depending on the service and applicable law. The current list of named subprocessors is in Section 5.

4.2 Vendors Listed on AminoCatalog

If you submit a review, rating, report, dispute, or other content related to a vendor, we may share relevant information with that vendor when needed to operate review features, allow vendor responses, investigate disputes, prevent fraud, verify authenticity, or enforce policies. We limit what we share to protect user privacy, platform integrity, and safety.

If you click from AminoCatalog to a vendor website, the vendor may receive information such as referral URL, browser information, IP address, and any information you provide directly to the vendor on its own website. The vendor’s own privacy policy governs its collection and use of information after you leave AminoCatalog.

4.3 Public Content

Information you choose to post publicly, such as reviews, ratings, comments, display names, vendor responses, and vendor profile information, may be visible to other users, vendors, search engines, and the public.

4.4 Legal, Safety, and Compliance

We may disclose information if we believe disclosure is reasonably necessary to:

  1. Comply with law, regulation, legal process, subpoena, court order, or government request.
  2. Enforce our Terms of Service, vendor rules, or other agreements.
  3. Investigate fraud, review manipulation, platform abuse, security incidents, or unlawful activity.
  4. Protect the rights, safety, property, and integrity of AminoCatalog, users, vendors, or others.
  5. Respond to disputes, chargebacks, complaints, regulatory inquiries, or claims.

4.5 Business Transfers

We may disclose or transfer information in connection with a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, due diligence process, or similar business transaction. We will notify you of any such transaction that materially affects how your information is handled, where required by law.

4.6 Aggregated or De-Identified Information

We may share aggregated, de-identified, or statistical information that does not reasonably identify you. For example, we may publish aggregate traffic trends, vendor category trends, review averages, outbound click counts, or search popularity metrics.

4.7 With Your Consent

We may share information with your consent or at your direction.

4.8 No Sale of Personal Information

We do not sell personal information for money. See Section 12 for California-specific disclosures regarding “sale” and “sharing” as those terms are defined under California law.

5. Subprocessors at Launch

We use the following third-party service providers to operate AminoCatalog at launch. We update this list as our infrastructure changes.

Named subprocessors as of the effective date. We do not sell data to any of these providers.
ProviderPurposeData categoriesLocation
Supabase, Inc.Managed Postgres database, authentication, file storage, and serverless functionsAccount info, profile data, reviews, vendor records, session tokens, uploaded filesUnited States
Vercel, Inc.Application hosting, edge network, deployment infrastructureRequest logs, IP address, request metadata; no application database contents stored long-termUnited States (global edge)
Cloudflare, Inc.DNS, DDoS protection, edge securityRequest metadata, IP addressGlobal
Resend, Inc.Transactional and notification email deliveryEmail address, message contents, delivery and engagement metadata (open/click events)United States
Google LLCOptional sign-in via Google OAuthOAuth profile (name, email, account ID) only when you choose to use Google sign-inUnited States
Sentry (Functional Software, Inc.)Error and performance monitoring (when enabled)Stack traces, request metadata, browser context, redacted user identifiersUnited States

6. Payments

The MVP does not process payments for peptide sales. AminoCatalog does not sell peptides or research chemicals directly to users.

If we enable paid vendor subscriptions, featured placements, verification programs, advertising, or other paid features, payments will be processed by a third-party payment processor. We do not intend to store full payment card numbers on our own servers. Payment processors may collect payment details, billing information, tax information, transaction records, fraud signals, and related information according to their own terms and privacy policies. We will update this Privacy Policy and the subprocessor list in Section 5 before enabling paid features.

7. Email and Communications

We may send you administrative messages, security alerts, account notices, review notices, vendor application updates, policy updates, and support responses. These are transactional communications, and you cannot opt out of them while maintaining an account.

Transactional emails may include open and click tracking through our email service provider so we can measure deliverability and improve notification quality. You can generally disable image loading in your email client to limit open tracking.

If you subscribe to marketing emails, newsletters, product updates, or similar optional communications, you can unsubscribe using the link in the email or by contacting us. We will still send non-marketing administrative messages.

8. Analytics, Advertising, Affiliate Links, and Attribution

We use first-party analytics to understand how users find and use AminoCatalog. Analytics help us measure page views, search behavior, vendor profile views, outbound vendor clicks, saved items, review submissions, traffic sources, device information, and general engagement.

We may use affiliate links, sponsored links, referral parameters, or attribution tools to measure traffic sent to vendor websites. This helps us report aggregate performance to vendors and improve the directory. Where a link is sponsored or commercially influenced, we will identify it as such in line with our Terms of Service.

At launch, we do not use third-party advertising, retargeting, or cross-context behavioral advertising. If that changes, we will update this Privacy Policy, provide opt-out controls, and (in California) make the required disclosures in Section 12.

9. Data Retention

We retain information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to operate the Service, maintain accounts, provide vendor features, preserve reviews, enforce policies, resolve disputes, comply with law, prevent fraud, detect abuse, maintain security, and keep business records.

Indicative retention windows at launch:

CategoryTypical retention
Active user account informationUntil the account is deleted
Published reviews, ratings, vendor responses, and moderation historyIndefinite (preserved for platform integrity even after account deletion, where lawful)
Vendor application records, profile history, product listing history, and verification recordsUp to 7 years after a vendor relationship ends, for tax, regulatory, and compliance purposes
Security, access, and audit logs90–365 days, longer if needed for an active investigation
Email delivery and engagement logs12 months from send
Aggregated or de-identified dataIndefinite
Hashed IP addresses used for abuse preventionUp to 18 months

You may request deletion as described in Section 11, but some information may be retained where permitted or required by law.

10. Security and Breach Notification

We use reasonable administrative, technical, and organizational measures designed to protect information. These include access controls, encryption in transit, password hashing (we never store plaintext passwords), authentication tokens, logging, monitoring, backups, security reviews, and limits on internal access. Row-level security in our database restricts each user’s queries to records they are authorized to read.

No website, database, transmission, or storage system is completely secure. We cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your login credentials and for using a strong, unique password.

Breach notification. If we determine that a security incident has affected your personal information in a way that triggers notice under applicable law, we will notify you and the relevant authorities within the timeframes required by that law.

If you believe your account or information has been compromised, contact us at security@aminocatalog.com.

11. Your Privacy Choices and Rights

Depending on where you live, you may have rights to:

  1. Access the personal information we have about you.
  2. Receive a copy of certain personal information in a portable format.
  3. Correct inaccurate personal information.
  4. Delete certain personal information.
  5. Object to or restrict certain processing.
  6. Opt out of certain uses of cookies, targeted advertising, sale, sharing, or profiling.
  7. Withdraw consent where processing is based on consent.
  8. Appeal a decision we make about a privacy request, where applicable.
  9. Lodge a complaint with a privacy or data protection authority.

To make a request, contact us at privacy@aminocatalog.com or use any privacy request tools we make available in your account settings. We aim to respond to verified requests within 30 days. We may extend this period as permitted by applicable law and will notify you if we need additional time.

We may need to verify your identity before responding, typically by confirming information associated with your account. We may deny or limit requests where permitted by law, such as when we need to retain information for security, fraud prevention, legal compliance, dispute resolution, free expression, public information, or platform integrity. If we deny your request you may appeal by replying to our response with the word “appeal” in the subject line.

If you have an account, you may also access, correct, or delete some information directly through account settings.

12. California Privacy Notice

This Section applies to California residents to the extent the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, “CCPA”), applies to AminoCatalog.

12.1 Notice at Collection

We may collect the categories of personal information listed below for the purposes described in Section 2.

CategoryExamplesSourcesPurposesDisclosures
IdentifiersName, email address, username, IP address, account ID, device identifiersYou, your device, service providers, authentication providersAccount creation, authentication, support, security, communications, fraud preventionService providers, legal recipients, vendors where needed for disputes or review features
Customer records informationBusiness contact details, billing details if paid features are enabled, support recordsYou, vendors, payment processorsVendor accounts, billing, support, compliance, recordsService providers, payment processors, legal recipients
Commercial informationVendor subscriptions, vendor listings, outbound vendor clicks, saved vendors, saved peptides, product listing interactionsYou, your device, vendors, service providersService operation, analytics, vendor reporting, fraud preventionService providers, vendors in aggregate or as needed, legal recipients
Internet or network activityPages viewed, search queries, filters, clicks, logs, cookie identifiers, referral URLsYour device, cookies, analytics providersAnalytics, security, personalization, debugging, attributionService providers, analytics providers
Geolocation informationApproximate location inferred from IP addressYour device, service providersSecurity, analytics, localization, fraud preventionService providers
Professional or employment-related informationVendor representative role, business affiliationYou, vendor entity, public sourcesVendor application, verification, directory management, complianceService providers, public users if included in vendor profile, legal recipients
User-generated contentReviews, ratings, comments, reports, photos, vendor responsesYou, vendorsPublishing, moderation, review integrity, dispute resolutionPublic users, vendors, service providers, legal recipients
InferencesPreferences, saved items, vendor interests, peptide interests, likely content interestsYour activity, cookies, analyticsPersonalization, analytics, fraud prevention, content improvementService providers
Sensitive personal informationAccount login credentials and approximate location. Browsing and saved items may also imply health- or research-compound-related interests depending on your activity.You, your device, authentication providersAccount security, service operation, legal compliance, fraud preventionService providers, legal recipients

We do not intentionally collect medical records, diagnoses, prescriptions, treatment records, or physician–patient communications.

12.2 Sale or Sharing of Personal Information

We do not sell personal information for money. At launch we also do not “share” personal information for cross-context behavioral advertising as those terms are defined under California law. We do not use third-party advertising, retargeting, or measurement cookies.

If that changes, we will update this Privacy Policy, provide a clearly labeled “Do Not Sell or Share My Personal Information” control on the site, and honor Global Privacy Control signals from your browser. In the meantime, you may submit any opt-out preference to privacy@aminocatalog.com and we will record it on your account.

12.3 Sensitive Personal Information

We do not use or disclose sensitive personal information for purposes that require a right to limit under California law. Because AminoCatalog concerns peptides and research compounds, your browsing, searching, saved items, or reviews may imply health, performance, longevity, or research interests. Avoid posting sensitive personal details publicly.

12.4 California Rights

California residents may have the right to:

  1. Know what personal information we collect, use, disclose, sell, or share.
  2. Access personal information.
  3. Delete personal information, subject to exceptions.
  4. Correct inaccurate personal information.
  5. Opt out of sale or sharing.
  6. Limit certain uses of sensitive personal information, where applicable.
  7. Not be discriminated against for exercising privacy rights.
  8. Appeal a denial of any of the above.

To exercise these rights, contact us at privacy@aminocatalog.com. You may use an authorized agent to submit a request where allowed by law. We may require proof of authorization and verification of your identity.

12.5 Shine the Light

California Civil Code section 1798.83 permits California residents to request information about disclosures of personal information to third parties for those parties’ direct marketing purposes. We do not currently disclose personal information to third parties for their own direct marketing purposes.

13. Other U.S. State Privacy Rights

Residents of certain other U.S. states — including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, New Hampshire, New Jersey, Tennessee, Minnesota, and Maryland — may have rights similar to those described in Section 11, including the right to access, correct, delete, obtain a copy of, and opt out of certain processing of their personal information, and (where applicable) to appeal a denial. To exercise these rights, contact us at privacy@aminocatalog.com. Specific rights, deadlines, and exceptions vary by state; we will respond consistent with the law of the state where you reside.

We do not engage in “targeted advertising,” “profiling in furtherance of decisions that produce legal or similarly significant effects,” or the “sale” of personal data as those terms are defined under those laws. If that changes, we will update this Privacy Policy and provide the required opt-out controls.

14. EEA, UK, and Swiss Privacy Rights

If you are located in the European Economic Area, United Kingdom, or Switzerland, this Section applies where relevant law applies to our processing.

14.1 Controller

The controller of your personal data is the AminoCatalog team, operating from the State of Nevada, United States. You can reach the controller at privacy@aminocatalog.com. The formal legal entity name and registered mailing address will be published in this Section once the entity is incorporated; in the meantime, you may request them by email.

AminoCatalog is established in the United States. We have not yet appointed an Article 27 representative in the European Union or the United Kingdom. We will appoint a representative if and when our processing of EEA or UK residents’ data triggers a requirement to do so under applicable law.

14.2 Legal Bases

We process personal data under the following legal bases:

  1. Contract, to provide the Service, accounts, vendor features, reviews, and support.
  2. Legitimate interests, to secure the Service, prevent fraud, improve AminoCatalog, analyze usage, moderate content, enforce policies, and operate the vendor directory.
  3. Consent, where required for optional cookies, marketing emails, or certain processing.
  4. Legal obligation, to comply with applicable laws, legal process, and regulatory obligations.

14.3 International Transfers

We process and store information in the United States and other countries. These countries may have data-protection laws that differ from those in your location. Where required, we use appropriate safeguards for international transfers, such as the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, or another lawful transfer mechanism, including the EU–U.S. Data Privacy Framework where applicable.

14.4 Your Rights

Subject to applicable law, you may have the right to access, correct, delete, restrict, object to processing, receive a portable copy of your data, withdraw consent, and lodge a complaint with your local data-protection authority. To exercise rights, contact us at privacy@aminocatalog.com.

15. Children and Minors

AminoCatalog is not intended for children or minors. You must be at least 18 years old to use the Service. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected personal information from a person under 18, we will delete it.

If you believe a minor has provided us information, contact us at privacy@aminocatalog.com.

16. Research-Chemical and Health-Related Context

AminoCatalog discusses peptides and related compounds. Some users may visit the Service because of health, wellness, performance, recovery, weight loss, longevity, cosmetic, research, or personal interests.

We do not ask users to provide medical history, diagnoses, prescriptions, treatment plans, lab results, or other medical records. Do not include private medical details in reviews, comments, support messages, or public areas unless you intentionally choose to do so and understand the risks.

AminoCatalog is not a HIPAA covered entity or business associate solely because you use the Service. Information you submit to AminoCatalog generally is not protected health information under HIPAA. This does not limit any privacy obligations we may have under other applicable laws.

17. Vendor Privacy Responsibilities

Vendors are independent third parties. If you operate a vendor profile or interact with users through AminoCatalog, you are responsible for complying with privacy, consumer-protection, advertising, health, product, and data-protection laws that apply to your business.

Vendors may not use information obtained through AminoCatalog to spam users, harass reviewers, retaliate against reviewers, scrape data, create unauthorized profiles, conduct unlawful marketing, or circumvent platform privacy controls. Violations may result in suspension or removal from the directory.

If a user leaves AminoCatalog and interacts with a vendor website, the vendor’s own privacy policy and terms apply.

18. Automated Tools, Moderation, and Review Integrity

We use automated and manual tools to detect spam, fake reviews, duplicate activity, suspicious accounts, vendor manipulation, scraping, abuse, fraud, security threats, and policy violations.

These tools may consider account activity, hashed IP address, device information, review patterns, timing, text similarity, vendor relationships, reports, and other signals. We may use the results to moderate content, restrict accounts, review vendor activity, protect users, and enforce our policies.

We do not use automated tools to make decisions that produce legal or similarly significant effects about users, such as eligibility for credit, employment, housing, insurance, healthcare, or education.

19. Third-Party Links

AminoCatalog may link to vendor websites, research publications, regulatory sources, payment processors, social platforms, and other third-party websites or services. We are not responsible for the privacy practices of third parties. Review their privacy policies before providing information to them.

20. Do Not Track and Global Privacy Control

Some browsers offer “Do Not Track” signals. There is no common industry standard for responding to these signals, and we do not currently respond to them. Where legally required, we honor Global Privacy Control signals for applicable opt-out rights.

21. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we may notify you by posting the updated policy, changing the effective date, sending an email, displaying an in-product notice, or using another reasonable method.

Your continued use of AminoCatalog after the updated Privacy Policy becomes effective means you acknowledge the updated policy.

22. Contact Us

For privacy questions or requests, contact us at:

AminoCatalog
Privacy: privacy@aminocatalog.com
Support: support@aminocatalog.com
Security: security@aminocatalog.com
Privacy policy · AminoCatalog