1. Who we are
PeptideDx LLC confirm legal name ("PeptideDx," "we," "us," or "our") operates the website at peptide-dx.com and related services (the "Service"). Our registered address is [Company address] fill in. This Privacy Policy explains how we collect, use, disclose, and protect information when you use the Service.
2. Information we collect
Account information
When you create an account we collect your name, email address, and a password (stored in hashed form by our authentication provider). We may also record the date you accepted this policy and our Terms of Service.
Health and biomarker data you provide
To generate recommendations, you may upload or enter:
- Genomic data — raw genetic files (e.g., VCF, 23andMe/Ancestry exports) or individual variant (SNP) genotypes.
- Epigenomic data — epigenetic biomarker results, such as TruHealth EBP percentiles.
- Blood biomarker data — laboratory panel values (e.g., from Quest or other labs).
- Health goals, allergies, and screening answers you select in the advisor.
Some genetic files are parsed locally in your browser and only derived values are transmitted; where we store data, it is stored securely as described below.
Usage information
We and our infrastructure providers may collect standard technical data such as IP address, browser type, device information, and pages viewed, to operate and secure the Service.
3. How we use your information
- To create and manage your account and authenticate you.
- To generate your personalized, informational peptide insights.
- To save your analyses and pre-fill your inputs so you don't re-enter data on return visits.
- To secure, maintain, debug, and improve the Service.
- To communicate with you about your account or the Service.
- To comply with legal obligations.
We do not use your data to provide medical care or diagnosis, and the Service does not constitute medical advice. See our Terms of Service.
4. Genetic and health data — special protections
We treat genetic and health data as highly sensitive. Specifically:
- We do not sell, rent, or trade your genetic or health data.
- We do not disclose your genetic information to insurers, employers, or marketers, and we do not use it to make eligibility decisions.
- We process your genetic data only to provide the Service and only with your consent, which you may withdraw by deleting your data or closing your account.
- We support your rights under the Genetic Information Nondiscrimination Act (GINA) and applicable state genetic-privacy laws.
5. Legal bases and consent
We rely on your consent to collect and process the genetic, epigenetic, and blood-biomarker data you choose to provide, and on our legitimate interests in operating and securing the Service and on legal obligations where applicable. You provide consent by checking the consent box at sign-up and by uploading data. You may withdraw consent at any time as described in "Your rights."
6. How we share information
We share information only as follows:
- Service providers who process data on our behalf under contract — for example, our authentication, database, and hosting providers (such as Supabase and our static host). They may only use the data to provide services to us.
- Legal and safety — when required by law, subpoena, or to protect the rights, safety, or property of PeptideDx or others.
- Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy. We will notify you of any change in ownership or use of your data.
We do not share your data with third parties for their own marketing.
7. Storage and security
Your data is stored with our infrastructure providers and protected in transit (TLS) and at rest (encryption). Access is restricted so that each user can access only their own records (enforced by database row-level security). No method of transmission or storage is 100% secure, and we cannot guarantee absolute security, but we take reasonable measures to protect your data.
8. Your rights and choices
Depending on where you live, you may have rights to access, correct, delete, or export your personal data, and to withdraw consent. You can:
- Delete your saved data at any time using the "Delete my saved data" control on your dashboard.
- Request access, correction, deletion, or a copy of your data by contacting us (below).
- Close your account, which deletes associated data subject to legal retention needs.
If you are a California resident, you have rights under the CCPA/CPRA, including the right to know, delete, correct, and opt out of "sale"/"sharing" (we do not sell or share your personal information as those terms are defined). We will not discriminate against you for exercising these rights.
9. Data retention
We retain your account and analysis data while your account is active and as needed to provide the Service. When you delete data or close your account, we delete or de-identify it within a reasonable period, except where retention is required for legal, security, or accounting purposes.
10. Children's privacy
The Service is intended only for adults 18 and older. We do not knowingly collect data from anyone under 18. If you believe a minor has provided us data, contact us and we will delete it.
11. Changes to this Policy
We may update this Policy from time to time. We will post the updated version with a new "Last updated" date and, where appropriate, notify you. Your continued use after changes take effect constitutes acceptance.
12. Contact us
Questions or requests about this Policy or your data:
PeptideDx LLC — privacy@peptide-dx.com
[Company address] fill in