Privacy Policy
Learn how Peptaura protects your order information, limits access, and keeps merchants focused solely on fulfilling the requests you place through our marketplace.
Why we collect data
Peptaura collects order data to fulfill orders and protect the marketplace from fraud and abuse. This includes the products you choose, shipping addresses, and instructions you share so that vendors can prepare and deliver what you purchased.
How your data is used
Order information powers order confirmations, tracking updates, vendor fulfillment workflows, and fraud and abuse prevention. It is never repurposed for advertising or resale.
Checkout fraud and abuse prevention
When you use checkout, Peptaura uses a signed device identifier, a one-way browser fingerprint hash, and keyed IP-address hashes to detect attempts to bypass an existing customer blacklist. Raw IP addresses and browser fingerprint components are not retained in this system. A previously signed device can cause a new order attempt to be blocked and its new email address to be added to the blacklist. A browser fingerprint can do this only when it is corroborated by the same recent exact network address; fingerprint-only, IP-only, and broader network-prefix matches are recorded for review and do not block by themselves. If you believe a decision is incorrect, contact support and request a manual review.
Optional address autocomplete
When checkout address suggestions are enabled, the address text you type and a short-lived session token are sent to Google Maps Platform solely to return suggestions and the selected address details. You can always continue with manual address entry. Use of this optional feature is subject to the Google Maps Platform Terms; Google Privacy Policy.
Merchant access
Merchants on the platform only have access to customer data for the orders they received. They cannot browse broader customer lists or view other merchants’ transactions, keeping your details tied to a single purchase at a time.
Strict access policy controls
All data is protected by strict access policy controls. Internal staff and systems must pass authentication, logging, and need-to-know reviews before viewing order data, and every access is monitored for compliance.
No data sales
No data is sold. Your order history, contact information, and fulfillment details are never monetized or shared with advertisers or brokers. Peptaura shares information only with service providers needed for a feature you request, including merchants fulfilling an order and Google Maps Platform when you use address suggestions.
Retention & removal
Order records are retained only as long as required for fulfillment, ticket resolution, and regulatory obligations. Unflagged device intelligence, including a false-positive suppression marker, review signals, and email-to-device observations are deleted after 90 days without use. Enforcement records remain while the source email is blacklisted. Removing that blacklist entry clears or reassigns linked device flags and removes eligible automatically created entries; remaining inactive enforcement evidence is deleted after 30 days. Administrative recovery audit events are retained for 400 days.
Questions or requests?
We're happy to clarify how your information is handled or honor removal requests. Contact our team any time.