1. Introduction
This Privacy Policy describes how Tailored Peptides LLC ("Tailored Peptides," "we," "us," or "our") handles information in connection with the Tailored Peptides Protocol Builder, related websites, practitioner accounts, subscription services, and associated features (collectively, the "Platform").
By accessing or using the Platform, you acknowledge the practices described in this Privacy Policy.
This Privacy Policy should be read together with the Practitioner Terms of Use and Clinical Disclaimer.
2. Information We Collect
The information collected through the Platform depends on how you interact with it.
Account Information
When you create a practitioner account, information associated with your account may include:
- Email address.
- First and last name.
- Practitioner type.
- National Provider Identifier ("NPI").
- NPI verification status and verification date.
- Account creation and update timestamps.
- Information reflecting completion of required practitioner onboarding.
Practitioner Consents and Attestations
We may maintain records showing that you accepted required practitioner terms, clinical disclaimers, attestations, or other notices.
These records may include the type and version of the document accepted and the date and time of acceptance.
Communication Preferences
If you choose to receive optional Protocol Builder updates, clinical education, feature announcements, resources, or other marketing communications, we may maintain information about that preference.
This may include your current marketing opt-in status and timestamps associated with changes to that preference.
You may change your optional marketing preference as described in the Communications section below.
Subscription and Billing Information
If you purchase a subscription, information associated with your subscription may include:
- Subscription status.
- Selected plan and billing interval.
- Subscription renewal or expiration information.
- Cancellation status.
- Payment-platform customer and subscription identifiers.
Payment card information is processed through our payment processor. Tailored Peptides LLC does not need to directly store complete payment card numbers within the Protocol Builder application in order to process subscriptions.
Authentication and Security Information
The Platform processes information necessary to authenticate users and protect restricted practitioner areas.
This may include authentication tokens, session information, security cookies, login status, password-reset activity, and related account-security information.
Passwords are handled through the Platform's authentication provider and are not displayed to Tailored Peptides LLC through the ordinary account interface.
Technical and Usage Information
When you access the Platform, our hosting, security, and technology providers may automatically process technical information such as:
- Internet Protocol ("IP") address.
- Browser and device information.
- Request timestamps.
- Pages or resources requested.
- Error and diagnostic information.
- Security and access logs.
3. Information Entered Into the Protocol Builder
The Protocol Builder is a practitioner-facing clinical decision-support tool.
Practitioners may enter information into the builder interface in order to evaluate potential protocol considerations.
The current version of the Protocol Builder is designed so that this information does not need to be saved as a persistent cloud-based patient record within the Platform in order for the practitioner to use the protocol-building functionality.
Instead, the Platform may generate a rebuild code or similar mechanism that the practitioner can retain independently and use to reconstruct information later.
Practitioners are responsible for deciding what information is appropriate to enter into the Platform and for maintaining any required clinical records through systems appropriate for their own practice.
You should avoid entering information that is not reasonably necessary for the feature you are using.
4. Rebuild Codes and Local Information
The Protocol Builder may generate a code or other portable information that allows a practitioner to reconstruct a prior builder configuration.
When you save a rebuild code on your own computer, device, practice system, note, document, or other location, you are responsible for protecting that information.
Tailored Peptides LLC does not control the security of locations where you independently copy, download, store, transmit, or retain rebuild codes or other information outside the Platform.
5. NPI Verification
The Platform may verify a submitted National Provider Identifier using the National Plan and Provider Enumeration System ("NPPES") or related publicly available provider information.
Your submitted NPI may therefore be transmitted to an external provider directory or public verification service for the purpose of determining whether the NPI exists.
NPI verification does not constitute verification of licensure, specialty, professional standing, credentials, disciplinary status, or prescribing authority.
6. How We Use Information
We may use information processed through the Platform to:
- Create and maintain practitioner accounts.
- Authenticate users.
- Verify NPI information.
- Determine whether required practitioner onboarding has been completed.
- Provide access to subscription features.
- Process and manage subscriptions.
- Provide account-management and billing tools.
- Send account verification, password-reset, transactional, security, and service-related communications.
- Record and manage optional marketing communication preferences.
- Send optional Protocol Builder updates, educational communications, resources, and related marketing communications when you have elected to receive them.
- Maintain records of practitioner acknowledgments and consents.
- Protect the security and integrity of the Platform.
- Detect misuse, fraud, unauthorized access, or technical problems.
- Troubleshoot errors and improve Platform performance.
- Comply with legal, regulatory, contractual, or security obligations.
- Enforce our agreements and policies.
7. Service Providers
Tailored Peptides LLC uses third-party infrastructure and service providers to operate the Platform.
These providers may process information on our behalf or in connection with services they provide.
Supabase
Supabase is used in connection with practitioner authentication, account information, database functionality, and related Platform services.
Stripe
Stripe is used to process subscription payments and provide billing and subscription-management functionality.
Payment information provided during checkout is subject to Stripe's own privacy and security practices.
Netlify
Netlify is used in connection with hosting, delivery of the Platform, server-side functions, access controls, and related technical infrastructure.
SendGrid
SendGrid is used to deliver certain transactional and account-related emails, such as email verification, password-reset, and account-security communications.
FluentCRM
FluentCRM is used to manage certain optional email communications and subscriber preferences.
If you elect to receive optional Protocol Builder communications, information such as your name, email address, source attribution, and applicable subscription-list membership may be maintained in FluentCRM for those purposes.
NPPES
The Platform may query the National Plan and Provider Enumeration System to determine whether a submitted NPI exists.
Other Providers
We may also use other vendors for security, domain services, diagnostics, support, analytics, communications, or other operational functions as the Platform evolves.
8. Cookies and Browser Storage
The Platform uses cookies and browser-based storage where necessary to provide authentication, maintain sessions, protect restricted content, and support Platform functionality.
For example, the Platform may use:
- Authentication session information used by the account system.
- A secure HTTP-only access cookie used to protect restricted Protocol Builder pages.
- Browser storage used by authentication technology to maintain a signed-in session.
Disabling necessary cookies or browser storage may prevent portions of the Platform from functioning properly.
9. When Information May Be Disclosed
Information may be disclosed when reasonably necessary:
- To service providers supporting the operation of the Platform.
- To process payments or manage subscriptions.
- To authenticate users or secure the Platform.
- To deliver transactional, service-related, or optional marketing communications consistent with your preferences.
- To investigate fraud, misuse, security incidents, or violations of our agreements.
- To comply with a subpoena, court order, legal process, law, regulation, or governmental request.
- To protect the rights, property, safety, or security of Tailored Peptides LLC, practitioners, patients, users, service providers, or others.
- In connection with a merger, acquisition, financing, restructuring, sale of assets, or similar business transaction, subject to applicable law.
10. Data Security
Tailored Peptides LLC uses administrative, technical, and organizational measures intended to protect Platform information against unauthorized access, misuse, loss, alteration, or disclosure.
Security measures may include authenticated access, role-based database controls, restricted server credentials, encrypted connections, secure session mechanisms, and third-party infrastructure designed to support secure application delivery.
No internet-based system, software application, transmission method, or storage environment can be guaranteed to be completely secure.
Practitioners are also responsible for protecting their passwords, devices, networks, rebuild codes, and any information they retain outside the Platform.
11. Healthcare Privacy and Practitioner Responsibility
The Platform is intended for use by qualified practitioners, but use of a healthcare-related software product does not by itself determine the privacy or regulatory obligations that apply to a practitioner's individual practice.
Practitioners are responsible for determining their own obligations concerning patient privacy, professional confidentiality, medical records, security, data handling, and applicable federal or state healthcare privacy laws.
Nothing in this Privacy Policy should be interpreted as a representation or warranty that the Platform is HIPAA compliant for every use case or that use of the Platform automatically satisfies HIPAA or any other healthcare privacy requirement.
12. Data Retention
We may retain practitioner account, consent, subscription, communication-preference, security, and transaction-related information for as long as reasonably necessary to:
- Provide and administer the Platform.
- Maintain account and subscription records.
- Maintain records of communication preferences and consents.
- Comply with legal or financial recordkeeping obligations.
- Resolve disputes.
- Prevent fraud or misuse.
- Protect Platform security.
- Enforce agreements.
Different categories of information may be subject to different retention periods.
13. Account Closure
Practitioners may contact Tailored Peptides LLC regarding account closure or information associated with their practitioner account.
Closing an account may not require immediate deletion of every record. Certain records may be retained where reasonably necessary for billing, fraud prevention, security, recordkeeping, dispute resolution, legal compliance, or other legitimate operational requirements.
Account-closure requests may be sent to support@tailoredpeptides.com .
14. Your Privacy Rights
Depending on where you reside and the laws applicable to your information, you may have rights concerning certain personal information, such as the right to request access, correction, deletion, or other information about how your personal information is handled.
These rights may be subject to exceptions, verification requirements, and limitations under applicable law.
Privacy-related requests may be submitted to support@tailoredpeptides.com .
15. Children
The Platform is intended for qualified adult healthcare practitioners and is not directed to children.
Individuals under the age of 18 are not permitted to create practitioner accounts.
16. Communications
Service and Account Communications
We may send service-related communications necessary to operate and secure your account, including:
- Email verification messages.
- Password-reset messages.
- Account-security notifications.
- Subscription and billing communications.
- Material changes affecting your account or Platform access.
Certain transactional, administrative, or security communications are necessary for operation of the Platform and are separate from optional marketing communications.
Optional Marketing and Educational Communications
You may separately choose to receive optional Protocol Builder updates, educational information, feature announcements, resources, and related communications.
Your decision whether to receive optional marketing communications does not determine your eligibility to maintain a Protocol Builder account or paid subscription.
If you opt in, your contact information and communication preference may be synchronized with our email-management system for purposes of delivering and managing those communications.
You may change your marketing preference through available account settings, email preference-management tools, or other unsubscribe or preference mechanisms provided in applicable communications.
We may retain source-attribution information indicating that a contact originated through the Protocol Builder even after that contact elects not to receive optional Protocol Builder marketing communications. Such source information is used for internal attribution, administration, and recordkeeping and does not by itself indicate current marketing consent.
17. External Websites and Services
The Platform may contain links to or interact with third-party websites, services, databases, or applications.
This Privacy Policy does not control the independent privacy practices of third parties.
Practitioners should review the privacy policies of third-party services when appropriate.
18. Changes to This Privacy Policy
Tailored Peptides LLC may update this Privacy Policy as the Platform, technology, business practices, or applicable legal requirements change.
The effective date and document version displayed at the top of this page identify the current version of this Privacy Policy.
When material changes are made, notice may be provided through the Platform, by email, or through another reasonable method.
19. Contact
Questions, concerns, account requests, or privacy-related requests may be directed to:
Tailored Peptides LLC
Email:
support@tailoredpeptides.com
Practitioner Privacy Reminder
The Protocol Builder is a decision-support tool, not a replacement for your practice's medical record, privacy, security, or documentation systems.
Practitioners remain responsible for determining what patient information is appropriate to enter, how information retained outside the Platform is protected, and what privacy and security requirements apply to their own practice.