Privacy Policy
Last Updated: May 4, 2026
This Privacy Policy ("Privacy Notice" or "Policy") for PeptRally, Inc. ("PeptRally," "we," "us," or "our") describes how and why we collect, store, use, and share your personal information when you use our services ("Services").
Questions or concerns? Contact us at privacy@peptrally.com.
Important: PeptRally is a marketing and lead generation platform. We are not a healthcare provider, clinic, pharmacy, or medical practice. We do not collect health records, medical histories, diagnoses, or clinical information. The only health-related data we collect is your stated wellness interests and compound preferences, which are used solely for provider matching and are never shared with providers or third parties.
Table of Contents
- What information do we collect?
- How do we process your information?
- What legal bases do we rely on?
- When and with whom do we share your information?
- Do we use cookies and tracking technologies?
- How long do we keep your information?
- How do we keep your information safe?
- Do we collect information from minors?
- What are your privacy rights?
- Controls for do-not-track features
- United States residents — specific privacy rights
- Healthcare disclaimer and HIPAA notice
- Provider matching and lead delivery
- Pricing and rate information
- We do not sell your personal information
- Affiliate and referral programs
- Updates to this notice
- How to contact us
- How to review, update, or delete your data
1. What information do we collect?
Personal information you disclose to us
We collect the following categories of personal information through our intake process and other interactions:
- Name (first and last)
- Email address
- Phone number (mobile)
- State of residence
- Wellness goals (e.g., weight loss, recovery, performance, longevity) — used for internal matching only, never shared
- Compound interests (e.g., semaglutide, tirzepatide, BPC-157) — used for provider matching
- SMS consent status
- Communications with our support or legal team
Sensitive information. We do not process sensitive personal information such as medical records, health diagnoses, racial or ethnic origins, sexual orientation, religious beliefs, financial account information, or biometric data.
Information automatically collected
We automatically collect certain technical information when you visit the Services, including log and usage data (IP address, browser type, pages viewed, timestamps), device data, and approximate location derived from your IP address (city or region level only). We do not collect precise GPS-level location.
Information we do not collect
PeptRally does not collect and explicitly prohibits the submission of: medical records, diagnoses, or treatment histories; prescription information; health insurance information; government identification numbers; payment card or bank account numbers; biometric data; or information about minors under 18 years of age.
2. How do we process your information?
We process your personal information for the following purposes:
- To deliver provider matching — We process your name, email, phone number, state, and compound interests to match you with licensed healthcare providers
- To deliver lead information to your selected provider — We share your contact information with the specific provider you select
- To issue and deliver rate certificates — We process your email address and matching results to generate and deliver your rate certificate
- To send SMS confirmations — With your express consent, we send transactional SMS messages confirming your provider match
- To respond to your inquiries — We process your information to respond to questions and support requests
- To protect our Services — We process information as part of our fraud monitoring and prevention efforts
- To identify usage trends — We process aggregated and anonymized usage data via PostHog
- To comply with legal obligations — We may process your information where required by applicable law
3. What legal bases do we rely on?
- Performance of a contract / provision of services — We process your information to deliver the provider matching and lead delivery services you requested
- Consent — We rely on your consent to send SMS messages. You may withdraw your consent at any time by replying STOP
- Legitimate interests — We process certain information based on our legitimate business interests, including platform security, fraud prevention, and analytics
- Legal obligations — We may process your information where required to comply with applicable law
4. When and with whom do we share your information?
Your selected healthcare provider
When you complete our intake process and select a provider, we share the following information with that specific provider: your name, email address, phone number, state of residence, compound(s) of interest, and your rate code and displayed starting rate.
We do not share with your provider: your stated wellness goals, your budget range, any other providers you viewed, your browsing behavior, or any other preference or behavioral data.
Third-party service providers
| Vendor | Purpose | Data received |
|---|---|---|
| Twilio | SMS delivery | Phone number, message content |
| Resend | Transactional email | Name, email address |
| PostHog | Product analytics | Usage data, IP address, anonymized events |
| Sentry | Error monitoring | Error logs, IP address, browser data |
| Vercel | Website hosting | Server logs, IP address |
| Stripe | Provider billing (not consumer billing) | Provider payment data only |
| Google Ads / Meta Ads | Advertising (when campaigns active) | Cookie/pixel data per cookie policy |
Legal disclosures
We may disclose your information where required by law, regulation, legal process, or governmental request, or to protect the rights, property, and safety of PeptRally, our users, and the public.
5. Do we use cookies and tracking technologies?
We use cookies, web beacons, pixels, and similar tracking technologies to gather information about how you interact with the Services. We permit certain third-party analytics and advertising providers to use tracking technologies on our Services, including PostHog and, when advertising campaigns are active, Google Ads and Meta Ads.
For detailed information about the specific cookies we use, their purposes, and how to manage your cookie preferences, please see our Cookie Policy at peptrally.com/Legal/Cookie-Policy.
6. How long do we keep your information?
We retain personal information for as long as necessary to deliver the lead matching service, resolve disputes, enforce our agreements, and comply with applicable law. In practice:
- Intake data is retained for a minimum of 2 years to support dispute resolution and legal compliance
- Rate certificate records are retained for 2 years from issuance
- Server and error logs are retained for up to 90 days
- Email correspondence is retained for up to 3 years
You may request deletion of your personal information at any time by contacting privacy@peptrally.com.
7. How do we keep your information safe?
We have implemented reasonable technical and organizational security measures including: encryption of data in transit using TLS/HTTPS; encryption of personally identifiable information at rest; rate code architecture that decouples your identity from your pricing record; access controls limiting who can access personal information; regular security monitoring through Sentry; and separation of consumer data from provider data.
However, no electronic transmission over the Internet can be guaranteed 100% secure. You should only access the Services within a secure environment.
8. Do we collect information from minors?
We do not knowingly collect data from or market to children under 18 years of age. By using the Services, you represent that you are at least 18 years old. If we learn that personal information from users under 18 has been collected, we will take reasonable measures to promptly delete such data. Contact us at privacy@peptrally.com if you believe we may have collected information from anyone under 18.
9. What are your privacy rights?
Depending on your state of residence or jurisdiction, you may have the following rights:
- Right to know whether we are processing your personal information
- Right to access a copy of the personal information we hold about you
- Right to correct inaccuracies in your personal information
- Right to request deletion of your personal information
- Right to data portability
- Right to opt out of the sale or sharing of your personal information (we do not sell or share personal information)
- Right to non-discrimination for exercising your privacy rights
To exercise any of these rights, contact us at privacy@peptrally.com. We will respond within 45 days.
SMS opt-out: No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. To opt out, reply STOP to any SMS message from PeptRally. Standard message and data rates may apply.
10. Controls for do-not-track features
Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature. We do not currently respond to DNT browser signals as no uniform technology standard for recognizing and implementing DNT signals has been finalized.
For Global Privacy Control (GPC) signals: PeptRally's consent management platform is configured to honor GPC signals from supported browsers by suppressing non-essential tracking cookies for users who have enabled GPC in their browser.
11. United States residents — specific privacy rights
If you are a resident of California, Colorado, Connecticut, Delaware, Florida, or other US states with comprehensive privacy laws, you may have specific privacy rights in addition to those described in Section 9.
Categories of personal information we collect
| Category | Examples | Collected |
|---|---|---|
| A. Identifiers | Real name, email address, phone number, IP address | Yes |
| B. Personal information | Name, contact information | Yes |
| C. Protected classification | Age verification (18+ only) | No |
| D. Commercial information | Transaction or purchase history | No |
| E. Biometric information | Fingerprints, voiceprints | No |
| F. Internet/network activity | Browsing history on other websites | No |
| G. Geolocation data | IP-based approximate location; state of residence | Yes (approximate only) |
| H. Audio, electronic, sensory | Call recordings, images, video | No |
| I. Professional information | Job title, work history | No |
| J. Education information | Student records | No |
| K. Inferences | Profiles or summaries of preferences | No |
| L. Sensitive personal information | Health data, SSN, biometric data | No |
We have not sold or shared personal information for cross-context behavioral advertising in the preceding 12 months, and we do not intend to do so.
To exercise your privacy rights, contact privacy@peptrally.com. We will respond within 45 days. If your appeal is denied, you may submit a complaint to your state attorney general.
12. Healthcare disclaimer and HIPAA notice
PeptRally is a marketing and lead generation platform. We are not a healthcare provider, clinic, pharmacy, medical practice, or any other type of healthcare organization. We do not provide medical advice, diagnoses, prescriptions, or clinical recommendations.
PeptRally is not a HIPAA covered entity or business associate as defined under HIPAA. PeptRally does not collect, store, or transmit Protected Health Information (PHI). Information collected through our Services — including name, email, phone, state of residence, and stated compound interests — does not constitute PHI in the context in which we collect it.
All clinical health information shared between you and your selected provider is governed exclusively by that provider's own HIPAA-compliant privacy practices.
13. Provider matching and lead delivery
When you complete our intake process and select a provider, the following information will be shared with your selected provider: your name, email address, phone number, state of residence, compound(s) of interest, rate code, and displayed starting rate.
The following information is used internally for matching purposes only and is never shared with providers or any other third party: your stated wellness goals, your budget preferences, other providers you viewed during your session, and any other preference or behavioral data.
14. Pricing and rate information
Rate certificates issued by PeptRally are informational documents valid for 30 days from issuance. They do not constitute a binding contract and do not guarantee that a provider will honor the displayed rate. Rate codes are designed to contain no personally identifiable information — they map only to a pricing record and not to your name, contact information, or any other identifying data.
15. We do not sell your personal information
PeptRally does not sell, rent, trade, license, or otherwise transfer your personal information to any third party for monetary compensation. The only third party that receives your contact information is the specific licensed healthcare provider you select during our intake process, and this transfer is made solely to facilitate your requested consultation.
16. Affiliate and referral programs
PeptRally operates an affiliate and influencer referral program. Third parties who refer users to PeptRally via tracked referral links may receive compensation. Affiliate partners do not receive any user personal information as part of the referral arrangement. All affiliate and influencer partners promoting PeptRally are contractually required to disclose their material connection to PeptRally in accordance with FTC endorsement guidelines.
17. Updates to this notice
We may update this Privacy Notice from time to time. The updated version will be indicated by an updated "Last Updated" date at the top of this Notice. If we make material changes, we may notify you either by prominently posting a notice on the Services or by sending a notification to the email address we have on file.
18. How to contact us
PeptRally, Inc.
Privacy inquiries: privacy@peptrally.com
Legal inquiries: legal@peptrally.com
Website: www.peptrally.com
19. How to review, update, or delete your data
To submit a request to review, update, or delete your personal information: email us at privacy@peptrally.com with your name, the email address associated with your PeptRally interaction, and a description of your request. Include in the subject line: "Privacy request — [request type]" (e.g., "Privacy request — deletion").
We will acknowledge your request within 10 business days and will complete our response within 45 days.
© 2026 PeptRally, Inc. All rights reserved.