Privacy Policy
This Policy explains how PeptideMed Plus (the “Platform”) collects, uses, shares and protects your personal data, in line with the GDPR and Brazil’s LGPD.
1. Data we collect
- Account data: name, email, and (optionally) WhatsApp number;
- Authentication data: password (stored hashed) or Google sign-in identifiers;
- Payment data: processed by our payment providers; we receive transaction status and identifiers, not full card numbers;
- Usage data: pages viewed, affiliate-link clicks, device and approximate technical data;
- Cookies: session, language preference and essential operation cookies.
2. How we use your data
- To provide and maintain your account and the PRO subscription;
- To process payments and prevent fraud;
- To improve content and the experience;
- To send service messages and, where permitted, updates about new protocols and offers.
3. Legal bases
We process data based on: performance of a contract (your account/subscription), legitimate interest (security and improvement), legal obligation, and consent (e.g. marketing messages), which you may withdraw at any time.
4. Sharing with third parties
We share the minimum necessary data with:
- payment providers (Stripe, Asaas) to process transactions;
- authentication providers (Google) when you choose social login;
- infrastructure providers (hosting and database) that operate the Platform.
We do not sell your personal data.
5. International transfers
As the Platform serves users in multiple countries, your data may be processed on servers outside your country, always under adequate safeguards required by applicable law.
6. Cookies
We use essential cookies (session, security) and a language-preference cookie. You can manage cookies in your browser; disabling essential cookies may break core features.
7. Your rights
Subject to applicable law, you may request: access, correction, deletion, portability, restriction or objection to processing, and withdrawal of consent.
To exercise your rights, contact contato@peptidemedplus.com.
8. Data retention
We keep personal data only as long as needed for the purposes above or to comply with legal obligations. Deleted accounts are removed or anonymized within a reasonable period.
9. Security
We apply technical and organizational measures to protect your data (encryption in transit, hashed passwords, access controls). No method is 100% secure, but we work to minimize risks.
10. Changes to this Policy
We may update this Policy. The “last updated” date reflects the current version. Material changes will be communicated through the Platform.
11. Contact
Data controller contact: contato@peptidemedplus.com.