// Legal

Privacy Policy

Effective date: [DATE] · The Pep Tester, LLC

⚠ DRAFT — for attorney review before launch. State-privacy-law addenda (CCPA/TDPSA etc.) to be confirmed by counsel.

1. The Short Version

We collect the minimum needed to run a membership: your email, your subscription status, and your in-app activity (votes, watchlists). Payments are processed by Stripe — we never see or store your card number. We do not sell personal information, we do not share member lists with anyone, and vendors never receive information about who our members are.

2. What We Collect

  • Account: email address, password hash (via Firebase Authentication), subscription status.
  • Billing: handled by Stripe; we store only your Stripe customer ID and subscription state.
  • Activity: votes, watchlists, notification preferences, and basic usage logs (for security and abuse prevention).
  • Marketing (optional): if you download free resources or opt in, your email and engagement with our messages.

3. What We Don't Do

  • We do not sell or rent personal information — to anyone, ever.
  • We do not share member identities or lists with vendors, labs, advertisers, or data brokers.
  • We do not require your legal name for a standard membership.
  • We do not use third-party advertising trackers on member pages.

4. Service Providers

We use a small set of processors to run the service: Stripe (payments), Google Firebase (authentication, database, hosting), SendGrid (transactional email), and our CRM (email/SMS you've opted into). Each receives only what it needs to perform its function and is bound by its own data-protection terms.

5. Retention & Deletion

Account data is kept while your account is active. You can delete your account from the account page (or by emailing us); deletion removes your personal data from our systems and propagates removal requests to our processors, except records we must keep for tax, accounting, or fraud-prevention purposes.

6. Security

Data is encrypted in transit and at rest, access is restricted by role, admin actions are logged, and membership entitlements are enforced server-side. No system is perfectly secure; if a breach affects your data, we will notify you as required by law.

7. Your Rights

Depending on your state, you may have rights to access, correct, delete, or port your personal information, and to opt out of certain processing. Contact support@thepeptester.com; we honor verified requests without discrimination. [State-specific addenda — attorney to confirm.]

8. Children

The service is for adults 18+. We do not knowingly collect information from minors.

9. Changes & Contact

Material changes will be announced by email before they take effect. Questions: The Pep Tester, LLC · [ADDRESS] · support@thepeptester.com

Become a Member