Privacy Policy — PepFulfill

1. Who We Are

PepFulfill ("we," "us," "our") operates the website pepfulfill.com and provides white-label fulfillment services for research peptide businesses. This Privacy Policy explains how we collect, use, and protect information when you use our platform — both as a PepFulfill client (merchant) and as an end customer whose order a client sends to us for fulfillment.

2. Information We Collect

From PepFulfill clients (merchants)

Business name, email address, and password when you create an account
Phone number (optional)
Account balance and transaction history
Return address and account settings

From end customers (orders our clients send us to fulfill)

Name, email address, phone number, and shipping address
Order contents (payment is collected by the merchant on their own site — PepFulfill never receives or stores payment card information)
Order status and tracking information

3. How We Use Your Information

To create and manage your PepFulfill account
To fulfill orders — including printing shipping labels, packing slips, and coordinating with our warehouse
To send transactional emails: order confirmations, shipping notifications, low-balance alerts
To process balance top-ups and track fulfillment charges
To provide order tracking via our tracking page
To respond to support inquiries
To maintain the security and integrity of our platform

We do not sell your information to third parties. We do not use customer data for advertising.

4. Data Sharing

We share data only as necessary to operate the service:

Shipping carriers (USPS, UPS, FedEx) — name and shipping address to generate labels
EasyPost — our shipping label provider
Resend — our transactional email provider
Supabase — our database and authentication provider

5. Data Retention

We retain order and account data for a minimum of 3 years to comply with financial recordkeeping requirements. You may request deletion of your account and associated data by contacting us at support@pepfulfill.com. Note that order records associated with completed transactions cannot be fully erased due to financial compliance obligations.

6. Cookies

We use cookies solely for authentication — specifically to maintain your logged-in session on the dashboard. We do not use tracking or advertising cookies. We do not use third-party analytics that track individual users.

7. Security

We use industry-standard measures to protect your data: HTTPS for all connections, encrypted storage for sensitive credentials, and row-level security on our database. No system is 100% secure; if you suspect unauthorized access to your account, contact us immediately.

8. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by emailing support@pepfulfill.com. We will respond within 30 days.

9. Children

Our services are not directed to individuals under the age of 18. We do not knowingly collect information from minors. Our clients are required to restrict sales to customers who confirm they are 18 or older.

10. Changes to This Policy

We may update this policy from time to time. We will post the updated date at the top of this page. Continued use of PepFulfill after a policy update constitutes acceptance of the revised terms.

11. Contact

Questions about this policy? Email us at support@pepfulfill.com.