Privacy Policy

1. About this policy

“PEPCLUB” refers to the website and membership service operated by PepClub.me in New Zealand. This shared policy covers the global and regional public websites, member accounts, research content, peptide favourites, protocols, schedules and associated membership services.

PEPCLUB provides educational information and organisation tools, not healthcare or a clinical record system. The Terms of Service explain the intended use of the service.

2. Information used by the service

• Account information: your name, email address, account identifiers, selected region, settings and authentication records. Password-based accounts use password hashes rather than storing the password as plain text.
• Google sign-in information: account identifiers and the profile information needed to authenticate or link your account, such as your name, email and email-verification status.
• Member content: saved favourites, protocol definitions, schedules, administration records, notes and preferences you choose to enter. Depending on what you submit, this may include health-related or other sensitive information.
• Membership information: your plan, billing status, payment and subscription identifiers, and relevant transaction metadata. Card payments are handled by Stripe; the application does not collect your full card number in its own forms.
• Technical information: requests, IP addresses and other security or operational logs, session identifiers, browser information and information needed to troubleshoot errors.

Please avoid entering unnecessary personal or sensitive information in free-text fields. Only submit information that you are entitled to provide.

3. Why information is used

Information is used to create and secure accounts, verify email addresses, provide requested member features, save your preferences and records, process membership payments, send account communications, maintain the service and investigate abuse or errors.

Information may also be used where necessary to comply with applicable legal obligations or respond to lawful requests. PEPCLUB does not use additional advertising or marketing tracking beyond the service processing described in this policy.

4. Service providers and external websites

PEPCLUB uses the following services to operate the application. No additional processors or tracking services have been identified by the operator.

• Replit — hosting and infrastructure: application infrastructure processes information needed to host and operate the service, including stored application data and operational requests. Replit Privacy Policy.
• Google — optional sign-in: Google processes your authentication request and provides account information needed for the sign-in or account-linking flow. Google Privacy Policy.
• Stripe — payments and billing: Stripe processes payment details, billing information and transactions. PEPCLUB uses the resulting membership status and transaction records. Stripe Privacy Policy.
• Resend — email delivery: email addresses and necessary message content are processed to deliver account verification, password reset and other service emails. Resend Privacy Policy.
• OpenAI through Replit AI Integrations — AI processing: feature inputs and relevant research or protocol material may be processed to produce requested AI-assisted output. OpenAI Privacy Policy.

Original research links lead to external publishers and databases. If you open them, their own policies apply. Provider privacy policies do not replace the operator's responsibility to explain its own processing.

5. AI-assisted features

AI features may process submitted instructions, protocol parameters and research material to create requested suggestions, analyses or explanations. Information supplied in free text may be included in those inputs. Do not include unnecessary identifying or sensitive details.

AI output may be inaccurate and is not medical advice. Provider processing, including retention and any use of inputs, depends on the applicable service terms, agreements and settings. PEPCLUB does not promise that AI inputs are never retained or never used for training. Contact admin@pepclub.co.nz with questions about the processing of a particular request.

6. Cookies and browser storage

Cookies and browser storage support authentication, security, region selection and preferences. Some features may keep local drafts or interface state in your browser. External services may also use their own cookies when you interact with their features.

You can manage cookies and stored site data through your browser. Removing essential cookies may sign you out or prevent features from working. PEPCLUB does not use additional analytics, advertising or non-essential tracking beyond the services described above. External websites you choose to visit apply their own cookie and privacy policies.

7. Retention and security

PEPCLUB stores only information needed to provide the service and meet necessary operational or legal requirements. Billing, fraud-prevention and legal records may need to be retained after an account is closed for as long as those requirements apply.

The operator administers an inactivity policy for accounts with no login for six months. After six months without a login, users receive an email notification. If no further login occurs following that notification, the account is deleted. This policy does not specify a fixed post-notification grace period or promise an automated deletion facility. Inactivity handling must respect paid membership access and existing purchase commitments; it does not cancel a paid subscription or erase purchased Lifetime access rights.

You may request removal of your information at any time by emailing admin@pepclub.co.nz. Requests are subject to identity verification where necessary and applicable legal retention requirements. Removal from the account does not necessarily mean immediate removal from legally retained records, provider systems or backups. Their handling depends on applicable retention requirements and provider processes; contact the operator for the scope and status of your request. No fixed deletion turnaround or backup-expiry period is promised by this policy.

Account access controls, password hashing and session security are used to protect accounts. No internet service can guarantee absolute security. Keep your account credentials private and report suspected unauthorised access to admin@pepclub.co.nz.

8. International processing

Service providers may process information outside your country. Selecting a regional homepage or currency does not guarantee that your data stays in that region. The provider policies linked above describe their processing; applicable requirements and service arrangements also apply. Contact admin@pepclub.co.nz with questions about international processing of your information. This policy does not promise that all information is hosted in New Zealand or in your selected region.

9. Your privacy rights

Depending on your location and applicable law, you may have rights to access, correct, delete or receive a copy of your information, restrict processing, object to certain uses, or withdraw consent where processing relies on consent.

To make a privacy request, including a request for access, correction or removal, email admin@pepclub.co.nz. Requests may require identity verification and may be subject to legal exceptions, including records that must be retained. You may also have a right to complain to the relevant privacy regulator. Requests are handled through the operator contact, not an automated export or deletion facility described by this policy.

10. Children and membership eligibility

Membership is for people aged 18 or older. Do not register or use member features if you are under 18 or otherwise not legally eligible to do so. If you believe information about a person under 18 has been submitted, contact admin@pepclub.co.nz so the operator can address it.

11. Changes to this policy

This policy takes effect on 11 October 2026. Updates will be published here with a revised effective date. Material changes will be communicated through the service or account email where appropriate, with any notice or consent required by applicable law. Publication of a policy or a footer link does not itself establish your consent to new processing.

12. Operator and privacy contact

Operator: PepClub.me. Country: New Zealand. Public privacy and legal contact: admin@pepclub.co.nz.

Use this contact for privacy questions, removal requests, concerns about information handling or questions about this policy.