Peptavo ("Peptavo," "we," "us," or "our") is operated by THE STACK SOURCE LLC. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit peptavo.com, enroll in or complete our peptide therapy training and certification course (the "Course"), or otherwise interact with our services (collectively, the "Services"). By accessing or using the Services in any manner, you acknowledge that you have read and understood this Privacy Policy and you agree to the collection, use, and disclosure of information as described here. If you do not agree, you must not access or use the Services. This Privacy Policy is incorporated into, and forms part of, our Terms of Service.
1. Information We Collect
We collect information you provide directly to us and information collected automatically through your use of the Services. Direct information includes account information such as your name, email address, telephone number, password, and profile details; professional credentialing information such as license type, license number, issuing state or board, and any supporting documentation you submit to verify eligibility for clinical training content and certification; payment information such as billing name and address, collected and processed on our behalf by our third-party payment processor, Stripe, without our servers ever storing your full card number; course activity such as quiz responses, module progress, assessment scores, and certificates issued, all of which we retain as the authoritative record of completion; and any communications you send us through support channels, contact forms, surveys, or email, including the full content of those communications. We also collect information automatically, including device and usage data such as IP address, browser type, operating system, referring and exit URLs, pages viewed, links clicked, and timestamps of activity, as well as information collected through cookies and similar technologies described in our Cookie Policy. Separately, we record first-party marketing attribution: the domain that referred you (hostname only, never the full referring URL), the utm_source, utm_medium, utm_campaign, utm_content and utm_termvalues in the link you arrived on, the name of any advertising click parameter on that link, the path of the page you landed on, any referral code in that link, and a broad device category (mobile, desktop, or tablet) derived from your browser's user agent. Two first-party cookies hold the first and most recent such visit; when you create an account or request a resource, those two visits are copied onto that record. We do not use this for advertising, do not sell the data, and do not store IP addresses, payment card numbers, professional profile fields, or health information in attribution records. Our Cookie Policy names both cookies and their lifetimes. Separately, where our third-party analytics tags run, a completed purchase may send those providers the order reference Stripe assigned to the payment, the amount paid, the currency, and, for Google Analytics, whether a partner or gift discount applied and the partner code where one did, so that we can tell which marketing channels lead to enrollments; they do not send your name, email address, or anything about your account, your progress, your certification, or any health or clinical information. We may also receive information about you from third parties, including identity-verification vendors, licensing and accreditation bodies, and professional or employer organizations that sponsor or reimburse your enrollment, and we may combine that information with information we collect directly. You are solely responsible for the accuracy of any information you submit, and we are entitled to rely on it without independent verification unless we choose, in our sole discretion, to verify it.
2. How We Use Information
We use the information we collect for any business purpose we determine, including to create, administer, and secure your account and course enrollment; to verify professional licensure eligibility for clinical training content and to deny, suspend, or revoke access where eligibility cannot be confirmed to our satisfaction; to deliver course content, track progress, grade assessments, and issue, withhold, or revoke certificates of completion; to process payments, subscriptions, refunds, and chargebacks and to pursue collection of amounts owed; to respond to support requests and to communicate with you about your account, the Course, security notices, or changes to our policies; to send administrative, transactional, and, where permitted, marketing communications; to monitor, secure, audit, and improve the Services, including diagnosing technical issues, testing new features, measuring signup and purchase conversion through our first-party enrollment funnel, training and improving models or systems we use, and detecting, investigating, and preventing fraud, abuse, credential misrepresentation, academic dishonesty, or violations of our Terms of Service; to enforce our agreements and protect our legal rights and the rights, property, and safety of Peptavo, our users, and the public; and to comply with legal, regulatory, tax, audit, insurance, and accreditation obligations. We may create aggregated, de-identified, or anonymized data from the information we collect, and we may use, disclose, publish, and commercially exploit such data for any purpose, in our sole discretion, without restriction and without further notice or compensation to you, because such data does not identify you.
3. How We Share Information
We do not sell personal information for money. We do, however, share information as we determine is necessary or appropriate, including with service providers and vendors who process data on our behalf, such as Supabase for database and authentication infrastructure, Stripe for payment processing, email and communication providers, hosting and infrastructure providers, identity- and license-verification vendors, and analytics and advertising measurement providers, including Google and Meta, each of which is authorized to use your information only to perform services for us; with accreditation, licensing, and continuing-education bodies where we determine disclosure is appropriate to verify eligibility or report course completion; with professional advisors such as attorneys, accountants, and insurers where reasonably necessary; with any party, including law enforcement or regulators, where we believe in our sole discretion that disclosure is necessary or advisable to comply with any actual or asserted legal obligation, subpoena, or government request, to enforce our agreements, to protect the rights, property, or safety of Peptavo, our personnel, our users, or any third party, or to investigate or prevent fraud, security incidents, or other misconduct, in each case whether or not disclosure is strictly required by law; and with any acquirer, successor, or assignee in connection with a merger, acquisition, reorganization, financing, bankruptcy, or sale of some or all of our assets, in which case your information may be among the assets transferred. We are not responsible for the privacy or security practices of any third party, including third-party service providers, and this Privacy Policy does not apply to information you provide to any third party directly.
4. Mobile Information and SMS Privacy
If you choose to opt in to Peptavo's SMS messaging program, we collect your mobile telephone number, your separate transactional and/or marketing consent selections, and information associated with those selections, such as the form or source through which you opted in and the date and time of consent. We use this information to send only the categories of text messages you selected, which may include appointment reminders, account notices, service updates, course information, and related promotional offers; to provide customer support; to honor opt-out requests; and to operate, secure, and document compliance for our messaging program. Providing a telephone number alone does not constitute consent to receive SMS messages. Consent to marketing messages is optional, is collected separately from non-marketing consent, and is not a condition of booking, purchasing, or receiving our Services.
You may withdraw SMS consent at any time by replying STOP to any Peptavo text message. After we process your request, we may send one final message confirming that you have been unsubscribed. Reply HELP for assistance, email support@peptavo.com, or call (512) 827-8158. Opting out of SMS does not affect your other privacy choices or prevent you from using the Services.
No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
5. Data Retention
We retain personal information for as long as we determine it is necessary or useful, including for as long as your account is active, for as long as needed to provide the Services, to maintain business records and proof of certification, to comply with legal, tax, and accreditation recordkeeping obligations, to resolve disputes, to enforce our agreements, and to defend against or bring legal claims, which in many cases will extend well beyond the closure of your account. Attribution records linked to an account are retained with other account analytics until deleted in response to a valid privacy request or our broader retention schedules, and are deleted with the account. We may retain residual copies of information in backups, archives, and logs for an additional period consistent with our standard retention and deletion schedules, even after we delete information from active systems. We are under no obligation to retain information for your benefit and may delete information at any time, including after account closure, subject to our own recordkeeping needs.
6. Data Security
We use administrative, technical, and physical safeguards that we consider reasonable under the circumstances to protect personal information, including encryption in transit, access controls, and the use of reputable infrastructure providers. No method of transmission over the internet or method of electronic storage is completely secure, and we make no representation or warranty, express or implied, that any information you provide is or will remain secure. You provide information to us at your own risk. TO THE FULLEST EXTENT PERMITTED BY LAW, WE DISCLAIM ALL LIABILITY FOR ANY UNAUTHORIZED ACCESS TO, ALTERATION OF, OR LOSS, MISUSE, OR DISCLOSURE OF INFORMATION, INCLUDING ANY RESULTING FROM THIRD-PARTY CRIMINAL CONDUCT, A BREACH AT ANY SERVICE PROVIDER, OR ANY OTHER CIRCUMSTANCE, AND WE DISCLAIM ALL LIABILITY FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES ARISING FROM ANY DATA INCIDENT. You are responsible for maintaining the confidentiality of your account credentials and for all activity under your account.
7. Your Rights and Choices
Depending on where you live, applicable law may give you certain rights with respect to your personal information, which may include the right to request access to, correction of, or deletion of personal information we hold about you, to object to or request restriction of certain processing, to request a portable copy of certain information, to withdraw consent for marketing communications at any time by using the unsubscribe link in any marketing email or by contacting us, and to lodge a complaint with a supervisory or regulatory authority in your jurisdiction. These rights are not absolute and are subject to exceptions and limitations under applicable law, including our need to retain information to comply with legal obligations, maintain certification and audit records, resolve disputes, prevent fraud, and enforce our agreements, and we may decline a request to the extent permitted by law. To submit a request, contact us at privacy@peptavo.com. We may require you to verify your identity before fulfilling any request, may charge a fee where permitted by law, and may take a reasonable period of time to respond.
8. Children's Privacy
The Services are intended solely for licensed medical professionals and are not directed to, marketed to, or intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children, and if we become aware that we have done so, we will take steps to delete such information. By using the Services, you represent and warrant that you are at least 18 years old.
9. International Data Transfers
We are based in the United States, and information we collect is processed and stored primarily on servers located in the United States and other jurisdictions where our service providers operate. If you access the Services from outside the United States, you understand and agree that your information will be transferred to, stored, and processed in the United States and other jurisdictions whose data protection laws may differ from, and may be less protective than, the laws of your home jurisdiction, and you consent to that transfer, storage, and processing by using the Services.
10. No Liability for Third-Party Conduct
The Services may contain links to, or integrate with, third-party websites, applications, or services that we do not own or control, including payment, identity-verification, and communication providers. We are not responsible for the privacy practices, content, or security of any third party, and your interactions with any third party, including any information you provide to them, are governed solely by that third party's own terms and policies. You access and use any third-party service at your own risk, and to the fullest extent permitted by law we disclaim any liability arising from your use of, or reliance on, any third-party service.
All liability arising out of or relating to this Privacy Policy or our handling of information is subject in all respects to the disclaimers, releases, exclusions, aggregate liability cap, time limit on claims, and dispute resolution provisions set out in our Terms of Service, which are incorporated into this Privacy Policy by reference and apply to every claim under it.
11. Changes to This Policy
We may update this Privacy Policy at any time and in our sole discretion, for any reason, including to reflect changes in our practices, technology, legal requirements, or the Services. We will post the updated policy on this page, and, for material changes, we may provide additional notice such as email, but we are under no obligation to do so beyond posting the updated policy. Your continued access to or use of the Services after any update constitutes your acceptance of the revised policy, and it is your responsibility to review this page periodically.
12. Contact Us
If you have questions about this Privacy Policy or our data practices, contact us at privacy@peptavo.com or hello@peptavo.com, or write to:
THE STACK SOURCE LLC, doing business as Peptavo
1908 East 11th Street
Austin, Texas 78702