Privacy policy
Effective Date: May 16, 2026·Last Updated: May 16, 2026
This Privacy Policy explains how AminoCatalog (“AminoCatalog,” “we,” “us,” or “our”) collects, uses, shares, retains, and protects information when you access or use AminoCatalog, including our website, peptide encyclopedia, vendor directory, vendor profiles, product catalog listings, reviews, account features, vendor dashboard, emails, and related services (collectively, the “Service”).
This Privacy Policy is incorporated into our Terms of Service. By using AminoCatalog, you acknowledge that you have read this Privacy Policy.
1. Information We Collect
We collect information in several ways: information you provide directly, information collected automatically, information submitted by vendors, information generated through your use of the Service, and information from third parties.
1.1 Information You Provide Directly
We may collect information you provide when you:
- Create an account.
- Sign in or authenticate (including via Google OAuth).
- Submit a review, rating, comment, report, or feedback.
- Save peptides, vendors, searches, filters, or preferences.
- Contact us for support.
- Subscribe to emails or updates.
- Apply for or manage a vendor profile.
- Submit vendor business information, product listings, certificates of analysis, lab reports, catalog details, pricing, stock status, shipping regions, or related documentation.
- Participate in surveys, waitlists, beta tests, promotions, or research.
- Request deletion, access, correction, opt-out, or other privacy rights.
This information may include:
- Name.
- Email address.
- Username, display name, avatar, or profile information.
- Password or authentication credentials, stored through our authentication provider (we never see your plaintext password).
- Account settings and preferences.
- Review text, ratings, photos, attachments, reports, and moderation history.
- Vendor business name, owner or representative name, role, business email, business phone number, website, shipping regions, product catalog information, testing documents, vendor application information, and dashboard activity.
- Support messages and communications with us.
- Any other information you choose to provide.
Do not submit sensitive personal information unless it is necessary for your interaction with us. In particular, do not include medical conditions, diagnoses, prescriptions, lab results, government identification numbers, financial account numbers, precise home address, or private health details in reviews or public profile fields.
1.2 Information Collected Automatically
When you use AminoCatalog, we and our service providers may automatically collect information such as:
- IP address (which, for some analytics and abuse-prevention purposes, we hash with a salt before storing rather than retaining in raw form).
- Device identifiers.
- Browser type and version.
- Operating system.
- Device type.
- Referring and exit pages.
- Pages viewed.
- Search queries on the Service.
- Peptide pages, vendor pages, and product listings viewed.
- Filters, sorts, clicks, saved items, and outbound vendor clicks.
- Date and time of visits.
- Approximate location inferred from IP address.
- Cookie identifiers and similar tracking identifiers.
- Log data, diagnostic data, crash data, performance data, and security events.
We use this information to operate the Service, understand usage, improve content, prevent fraud and abuse, measure vendor listing performance, secure the platform, debug technical issues, and analyze traffic.
Outbound vendor clicks. When you click through from a vendor listing on AminoCatalog to a vendor’s own website, we record the click so we can show vendors aggregate referral counts and improve the directory. Once you arrive on the vendor’s website, the vendor’s own privacy practices apply.
1.4 Information From Third Parties
We may receive information from third parties, including:
- Authentication providers (such as Google when you choose to sign in with Google).
- Email service providers.
- Analytics providers.
- Hosting, database, storage, and security providers.
- Payment processors, if and when paid vendor features are enabled.
- Vendors or vendor representatives.
- Users who submit reports, complaints, or review disputes.
- Publicly available sources, such as vendor websites, public product pages, public lab reports, public social profiles, regulatory databases, or research publications.
- Fraud-prevention, security, and abuse-detection providers.
We may combine information from these sources with information we collect directly or automatically.
2. How We Use Information
We use information for the following purposes:
- To provide, operate, maintain, and improve AminoCatalog.
- To create and manage user accounts.
- To authenticate users and secure accounts.
- To publish, moderate, analyze, and manage reviews, ratings, reports, and other user-generated content.
- To operate the vendor directory, vendor profiles, vendor dashboards, product catalog listings, stock status, shipping filters, and outbound click tracking.
- To review, approve, reject, verify, suspend, or remove vendor accounts, listings, badges, or claims.
- To detect and prevent spam, fake reviews, vendor manipulation, fraud, scraping, abuse, security incidents, and policy violations.
- To personalize your experience, such as saved peptides, saved vendors, preferences, filters, and account settings.
- To analyze traffic, search behavior, content performance, vendor performance, conversion patterns, and product usage.
- To communicate with you about your account, support requests, reviews, vendor applications, policy updates, security alerts, and administrative messages.
- To send newsletters, product updates, marketing messages, or other optional communications you have asked to receive.
- To process payments for paid vendor features, if and when paid features are enabled.
- To enforce our Terms of Service, vendor rules, review policies, and other agreements.
- To comply with legal obligations, regulatory inquiries, law enforcement requests, subpoenas, court orders, and dispute-resolution obligations.
- To protect the rights, safety, property, and integrity of AminoCatalog, users, vendors, and the public.
- To create aggregated, de-identified, or statistical information.
We do not use AminoCatalog account activity to provide medical advice, diagnose conditions, prescribe treatment, determine eligibility for healthcare, or make decisions about insurance, employment, credit, housing, education, or similar eligibility matters.
3. Public and Semi-Public Information
Some areas of AminoCatalog are public or may become public. Reviews, ratings, display names, profile photos, review metadata, vendor responses, and other user-generated content may be visible to other users, vendors, search engines, or the general public depending on the feature and your settings. Do not post anything that you do not want to be public.
Vendor profiles, vendor descriptions, product listings, stock status, pricing, shipping regions, testing claims, certificates of analysis, vendor responses, and related vendor-submitted information may be visible to users, search engines, or the general public.
What vendors see about reviewers. When you publish a review of a vendor, that vendor can see your public display name, review text, rating, attached photos, and the date of your review. We do not share your account email, real name (if different from your display name), IP address, or other private account details with vendors except where we are required to in order to investigate fraud or review manipulation, resolve a dispute, or comply with law.
We may preserve reviews, moderation history, abuse reports, vendor responses, and dispute records even after account deletion where reasonably necessary for platform integrity, legal compliance, dispute resolution, fraud prevention, or enforcement.
5. Subprocessors at Launch
We use the following third-party service providers to operate AminoCatalog at launch. We update this list as our infrastructure changes.
| Provider | Purpose | Data categories | Location |
|---|---|---|---|
| Supabase, Inc. | Managed Postgres database, authentication, file storage, and serverless functions | Account info, profile data, reviews, vendor records, session tokens, uploaded files | United States |
| Vercel, Inc. | Application hosting, edge network, deployment infrastructure | Request logs, IP address, request metadata; no application database contents stored long-term | United States (global edge) |
| Cloudflare, Inc. | DNS, DDoS protection, edge security | Request metadata, IP address | Global |
| Resend, Inc. | Transactional and notification email delivery | Email address, message contents, delivery and engagement metadata (open/click events) | United States |
| Google LLC | Optional sign-in via Google OAuth | OAuth profile (name, email, account ID) only when you choose to use Google sign-in | United States |
| Sentry (Functional Software, Inc.) | Error and performance monitoring (when enabled) | Stack traces, request metadata, browser context, redacted user identifiers | United States |
6. Payments
The MVP does not process payments for peptide sales. AminoCatalog does not sell peptides or research chemicals directly to users.
If we enable paid vendor subscriptions, featured placements, verification programs, advertising, or other paid features, payments will be processed by a third-party payment processor. We do not intend to store full payment card numbers on our own servers. Payment processors may collect payment details, billing information, tax information, transaction records, fraud signals, and related information according to their own terms and privacy policies. We will update this Privacy Policy and the subprocessor list in Section 5 before enabling paid features.
7. Email and Communications
We may send you administrative messages, security alerts, account notices, review notices, vendor application updates, policy updates, and support responses. These are transactional communications, and you cannot opt out of them while maintaining an account.
Transactional emails may include open and click tracking through our email service provider so we can measure deliverability and improve notification quality. You can generally disable image loading in your email client to limit open tracking.
If you subscribe to marketing emails, newsletters, product updates, or similar optional communications, you can unsubscribe using the link in the email or by contacting us. We will still send non-marketing administrative messages.
8. Analytics, Advertising, Affiliate Links, and Attribution
We use first-party analytics to understand how users find and use AminoCatalog. Analytics help us measure page views, search behavior, vendor profile views, outbound vendor clicks, saved items, review submissions, traffic sources, device information, and general engagement.
We may use affiliate links, sponsored links, referral parameters, or attribution tools to measure traffic sent to vendor websites. This helps us report aggregate performance to vendors and improve the directory. Where a link is sponsored or commercially influenced, we will identify it as such in line with our Terms of Service.
At launch, we do not use third-party advertising, retargeting, or cross-context behavioral advertising. If that changes, we will update this Privacy Policy, provide opt-out controls, and (in California) make the required disclosures in Section 12.
9. Data Retention
We retain information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to operate the Service, maintain accounts, provide vendor features, preserve reviews, enforce policies, resolve disputes, comply with law, prevent fraud, detect abuse, maintain security, and keep business records.
Indicative retention windows at launch:
| Category | Typical retention |
|---|---|
| Active user account information | Until the account is deleted |
| Published reviews, ratings, vendor responses, and moderation history | Indefinite (preserved for platform integrity even after account deletion, where lawful) |
| Vendor application records, profile history, product listing history, and verification records | Up to 7 years after a vendor relationship ends, for tax, regulatory, and compliance purposes |
| Security, access, and audit logs | 90–365 days, longer if needed for an active investigation |
| Email delivery and engagement logs | 12 months from send |
| Aggregated or de-identified data | Indefinite |
| Hashed IP addresses used for abuse prevention | Up to 18 months |
You may request deletion as described in Section 11, but some information may be retained where permitted or required by law.
10. Security and Breach Notification
We use reasonable administrative, technical, and organizational measures designed to protect information. These include access controls, encryption in transit, password hashing (we never store plaintext passwords), authentication tokens, logging, monitoring, backups, security reviews, and limits on internal access. Row-level security in our database restricts each user’s queries to records they are authorized to read.
No website, database, transmission, or storage system is completely secure. We cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your login credentials and for using a strong, unique password.
Breach notification. If we determine that a security incident has affected your personal information in a way that triggers notice under applicable law, we will notify you and the relevant authorities within the timeframes required by that law.
If you believe your account or information has been compromised, contact us at security@aminocatalog.com.
11. Your Privacy Choices and Rights
Depending on where you live, you may have rights to:
- Access the personal information we have about you.
- Receive a copy of certain personal information in a portable format.
- Correct inaccurate personal information.
- Delete certain personal information.
- Object to or restrict certain processing.
- Opt out of certain uses of cookies, targeted advertising, sale, sharing, or profiling.
- Withdraw consent where processing is based on consent.
- Appeal a decision we make about a privacy request, where applicable.
- Lodge a complaint with a privacy or data protection authority.
To make a request, contact us at privacy@aminocatalog.com or use any privacy request tools we make available in your account settings. We aim to respond to verified requests within 30 days. We may extend this period as permitted by applicable law and will notify you if we need additional time.
We may need to verify your identity before responding, typically by confirming information associated with your account. We may deny or limit requests where permitted by law, such as when we need to retain information for security, fraud prevention, legal compliance, dispute resolution, free expression, public information, or platform integrity. If we deny your request you may appeal by replying to our response with the word “appeal” in the subject line.
If you have an account, you may also access, correct, or delete some information directly through account settings.
12. California Privacy Notice
This Section applies to California residents to the extent the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, “CCPA”), applies to AminoCatalog.
12.1 Notice at Collection
We may collect the categories of personal information listed below for the purposes described in Section 2.
| Category | Examples | Sources | Purposes | Disclosures |
|---|---|---|---|---|
| Identifiers | Name, email address, username, IP address, account ID, device identifiers | You, your device, service providers, authentication providers | Account creation, authentication, support, security, communications, fraud prevention | Service providers, legal recipients, vendors where needed for disputes or review features |
| Customer records information | Business contact details, billing details if paid features are enabled, support records | You, vendors, payment processors | Vendor accounts, billing, support, compliance, records | Service providers, payment processors, legal recipients |
| Commercial information | Vendor subscriptions, vendor listings, outbound vendor clicks, saved vendors, saved peptides, product listing interactions | You, your device, vendors, service providers | Service operation, analytics, vendor reporting, fraud prevention | Service providers, vendors in aggregate or as needed, legal recipients |
| Internet or network activity | Pages viewed, search queries, filters, clicks, logs, cookie identifiers, referral URLs | Your device, cookies, analytics providers | Analytics, security, personalization, debugging, attribution | Service providers, analytics providers |
| Geolocation information | Approximate location inferred from IP address | Your device, service providers | Security, analytics, localization, fraud prevention | Service providers |
| Professional or employment-related information | Vendor representative role, business affiliation | You, vendor entity, public sources | Vendor application, verification, directory management, compliance | Service providers, public users if included in vendor profile, legal recipients |
| User-generated content | Reviews, ratings, comments, reports, photos, vendor responses | You, vendors | Publishing, moderation, review integrity, dispute resolution | Public users, vendors, service providers, legal recipients |
| Inferences | Preferences, saved items, vendor interests, peptide interests, likely content interests | Your activity, cookies, analytics | Personalization, analytics, fraud prevention, content improvement | Service providers |
| Sensitive personal information | Account login credentials and approximate location. Browsing and saved items may also imply health- or research-compound-related interests depending on your activity. | You, your device, authentication providers | Account security, service operation, legal compliance, fraud prevention | Service providers, legal recipients |
We do not intentionally collect medical records, diagnoses, prescriptions, treatment records, or physician–patient communications.
12.2 Sale or Sharing of Personal Information
We do not sell personal information for money. At launch we also do not “share” personal information for cross-context behavioral advertising as those terms are defined under California law. We do not use third-party advertising, retargeting, or measurement cookies.
If that changes, we will update this Privacy Policy, provide a clearly labeled “Do Not Sell or Share My Personal Information” control on the site, and honor Global Privacy Control signals from your browser. In the meantime, you may submit any opt-out preference to privacy@aminocatalog.com and we will record it on your account.
12.3 Sensitive Personal Information
We do not use or disclose sensitive personal information for purposes that require a right to limit under California law. Because AminoCatalog concerns peptides and research compounds, your browsing, searching, saved items, or reviews may imply health, performance, longevity, or research interests. Avoid posting sensitive personal details publicly.
12.4 California Rights
California residents may have the right to:
- Know what personal information we collect, use, disclose, sell, or share.
- Access personal information.
- Delete personal information, subject to exceptions.
- Correct inaccurate personal information.
- Opt out of sale or sharing.
- Limit certain uses of sensitive personal information, where applicable.
- Not be discriminated against for exercising privacy rights.
- Appeal a denial of any of the above.
To exercise these rights, contact us at privacy@aminocatalog.com. You may use an authorized agent to submit a request where allowed by law. We may require proof of authorization and verification of your identity.
12.5 Shine the Light
California Civil Code section 1798.83 permits California residents to request information about disclosures of personal information to third parties for those parties’ direct marketing purposes. We do not currently disclose personal information to third parties for their own direct marketing purposes.
13. Other U.S. State Privacy Rights
Residents of certain other U.S. states — including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, New Hampshire, New Jersey, Tennessee, Minnesota, and Maryland — may have rights similar to those described in Section 11, including the right to access, correct, delete, obtain a copy of, and opt out of certain processing of their personal information, and (where applicable) to appeal a denial. To exercise these rights, contact us at privacy@aminocatalog.com. Specific rights, deadlines, and exceptions vary by state; we will respond consistent with the law of the state where you reside.
We do not engage in “targeted advertising,” “profiling in furtherance of decisions that produce legal or similarly significant effects,” or the “sale” of personal data as those terms are defined under those laws. If that changes, we will update this Privacy Policy and provide the required opt-out controls.
14. EEA, UK, and Swiss Privacy Rights
If you are located in the European Economic Area, United Kingdom, or Switzerland, this Section applies where relevant law applies to our processing.
14.1 Controller
The controller of your personal data is the AminoCatalog team, operating from the State of Nevada, United States. You can reach the controller at privacy@aminocatalog.com. The formal legal entity name and registered mailing address will be published in this Section once the entity is incorporated; in the meantime, you may request them by email.
AminoCatalog is established in the United States. We have not yet appointed an Article 27 representative in the European Union or the United Kingdom. We will appoint a representative if and when our processing of EEA or UK residents’ data triggers a requirement to do so under applicable law.
14.2 Legal Bases
We process personal data under the following legal bases:
- Contract, to provide the Service, accounts, vendor features, reviews, and support.
- Legitimate interests, to secure the Service, prevent fraud, improve AminoCatalog, analyze usage, moderate content, enforce policies, and operate the vendor directory.
- Consent, where required for optional cookies, marketing emails, or certain processing.
- Legal obligation, to comply with applicable laws, legal process, and regulatory obligations.
14.3 International Transfers
We process and store information in the United States and other countries. These countries may have data-protection laws that differ from those in your location. Where required, we use appropriate safeguards for international transfers, such as the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, or another lawful transfer mechanism, including the EU–U.S. Data Privacy Framework where applicable.
14.4 Your Rights
Subject to applicable law, you may have the right to access, correct, delete, restrict, object to processing, receive a portable copy of your data, withdraw consent, and lodge a complaint with your local data-protection authority. To exercise rights, contact us at privacy@aminocatalog.com.
15. Children and Minors
AminoCatalog is not intended for children or minors. You must be at least 18 years old to use the Service. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected personal information from a person under 18, we will delete it.
If you believe a minor has provided us information, contact us at privacy@aminocatalog.com.
16. Research-Chemical and Health-Related Context
AminoCatalog discusses peptides and related compounds. Some users may visit the Service because of health, wellness, performance, recovery, weight loss, longevity, cosmetic, research, or personal interests.
We do not ask users to provide medical history, diagnoses, prescriptions, treatment plans, lab results, or other medical records. Do not include private medical details in reviews, comments, support messages, or public areas unless you intentionally choose to do so and understand the risks.
AminoCatalog is not a HIPAA covered entity or business associate solely because you use the Service. Information you submit to AminoCatalog generally is not protected health information under HIPAA. This does not limit any privacy obligations we may have under other applicable laws.
17. Vendor Privacy Responsibilities
Vendors are independent third parties. If you operate a vendor profile or interact with users through AminoCatalog, you are responsible for complying with privacy, consumer-protection, advertising, health, product, and data-protection laws that apply to your business.
Vendors may not use information obtained through AminoCatalog to spam users, harass reviewers, retaliate against reviewers, scrape data, create unauthorized profiles, conduct unlawful marketing, or circumvent platform privacy controls. Violations may result in suspension or removal from the directory.
If a user leaves AminoCatalog and interacts with a vendor website, the vendor’s own privacy policy and terms apply.
18. Automated Tools, Moderation, and Review Integrity
We use automated and manual tools to detect spam, fake reviews, duplicate activity, suspicious accounts, vendor manipulation, scraping, abuse, fraud, security threats, and policy violations.
These tools may consider account activity, hashed IP address, device information, review patterns, timing, text similarity, vendor relationships, reports, and other signals. We may use the results to moderate content, restrict accounts, review vendor activity, protect users, and enforce our policies.
We do not use automated tools to make decisions that produce legal or similarly significant effects about users, such as eligibility for credit, employment, housing, insurance, healthcare, or education.
19. Third-Party Links
AminoCatalog may link to vendor websites, research publications, regulatory sources, payment processors, social platforms, and other third-party websites or services. We are not responsible for the privacy practices of third parties. Review their privacy policies before providing information to them.
20. Do Not Track and Global Privacy Control
Some browsers offer “Do Not Track” signals. There is no common industry standard for responding to these signals, and we do not currently respond to them. Where legally required, we honor Global Privacy Control signals for applicable opt-out rights.
21. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we may notify you by posting the updated policy, changing the effective date, sending an email, displaying an in-product notice, or using another reasonable method.
Your continued use of AminoCatalog after the updated Privacy Policy becomes effective means you acknowledge the updated policy.
22. Contact Us
For privacy questions or requests, contact us at:
AminoCatalogPrivacy: privacy@aminocatalog.com
Support: support@aminocatalog.com
Security: security@aminocatalog.com