Privacy Policy

Overview

Peptide Merchant Services ("we," "our," or "us") operates the website peptidemerchantservices.com and provides a free payment-processing statement review service. This Privacy Policy explains what personal information we collect when you use our site or submit a statement for review, how we use it, and what rights you have over your data.

We take privacy seriously. Your submitted documents and personal details are used for one purpose only: preparing your statement review. We do not sell, rent, or broker your data to any third party.

Information We Collect

We collect only what is necessary to complete your review:

• Email address (required). Used to deliver your review and to follow up if we have questions about your submission.
• Phone number (optional). Provided at your discretion; used only if you prefer a phone call for your review delivery.
• Business website (optional). Helps us understand your business type and verify lawful-lane eligibility before we respond.
• Uploaded statements. PDF, spreadsheet, or image files you choose to upload. These are the primary input to your review and are stored encrypted in an access-controlled vault.
• Referral attribution (optional). If you arrived via a personalized link shared by one of our representatives, that representative's identifier is recorded alongside your submission so they can personally conduct your review.

We do not collect payment card numbers, bank account numbers, Social Security numbers, or government-issued identification. Any financial data we see exists only within the statement documents you choose to upload.

We may also automatically collect limited technical data (IP address, browser type, referring URL) through standard web server logs for security, fraud prevention, and analytics purposes. This data is not linked to your submission.

How We Use Your Information

We use collected information to:

• Prepare and deliver your free statement review;
• Follow up with you about the findings of your review;
• Assess whether your business falls within the lawful-lane merchant categories we support;
• Respond to questions or requests you send us;
• Maintain security logs and detect fraudulent or abusive activity.

We do not use your information for marketing to unrelated parties, do not serve you targeted advertising, and do not use your submitted documents to train machine-learning models.

Storage and Encryption

Uploaded documents are encrypted at rest using AES-256 and stored in private, access-controlled storage. All data transmitted between your browser and our servers is protected by TLS 1.3. Encryption keys are stored separately from the data they protect and rotated on a regular cadence.

Access to your submission is restricted on a strict need-to-know basis to the personnel responsible for your review. All such personnel are bound by confidentiality obligations.

Sharing and Disclosure

We do not sell, license, or share your personal information or uploaded documents with any third party, except in the following limited circumstances:

• With your consent. If you ask us to share your review findings with a third party, we will do so only at your explicit direction.
• Legal obligations. We may disclose information if required to do so by law, court order, or a governmental authority with valid legal process.
• Business continuity. In the event of a merger, acquisition, or sale of substantially all of our assets, your information may transfer to the successor entity under the same privacy commitments stated here.

In no case do we share your data with advertisers, data brokers, or analytics platforms beyond anonymized traffic-level data.

Sub-processors

We rely on a small number of vetted infrastructure providers (sub-processors) to operate this service. Each processes data only as needed to provide their service and under a data-processing agreement:

• Vercel — application hosting and content delivery.
• Supabase — database and encrypted document storage.
• Resend — transactional email delivery for review follow-ups.

We update this list when our sub-processors change. Your uploaded documents are stored encrypted and are accessible only to authorized underwriting staff.

Retention

We retain your submission — including uploaded files and contact information — only for as long as necessary to complete and deliver your review, and for a reasonable period thereafter in case you have follow-up questions. We do not retain documents indefinitely.

You may request deletion of your submission at any time. We will acknowledge deletion requests within five business days and complete the deletion within thirty days of acknowledgment.

Your Rights

Depending on your jurisdiction, you may have rights including: access to the personal information we hold about you; correction of inaccurate data; deletion of your data; and the right to object to or restrict certain processing. To exercise any of these rights, contact us at the address below. We will respond within the timeframe required by applicable law.

Cookies and Tracking

Our site uses minimal first-party cookies necessary for form security (including bot-detection challenges) and session continuity. We do not place third-party advertising or tracking cookies. You may disable cookies in your browser settings; doing so will not prevent you from submitting a statement, though some form-security features may be affected.

Children's Privacy

Our service is directed at business operators and is not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such information, please contact us immediately and we will delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Material changes will be communicated via a notice on our website prior to the change taking effect.

Contact

For privacy inquiries, deletion requests, or questions about this policy, contact us at: privacy@peptidemerchantservices.com.