Privacy Policy

Introduction

Wellness MD Group PC DBA PeRx ("PeRx," "we," "us," or "our"), operates the website located at perxpeptides.com and related services (collectively, the "Platform"). We provide provider-supervised peptide therapy services through licensed telehealth providers.

This Privacy Policy describes how we collect, use, disclose, and protect your personal information, including health information, when you use our Platform. By using PeRx, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Personal Information

When you create an account or use our services, we may collect:

• Full name
• Email address
• Date of birth
• Biological sex
• Phone number
• Shipping address
• Payment information (processed securely by our payment provider)

Health Information

To provide personalized peptide therapy recommendations, we collect health-related information including:

• Health assessment responses (medical history, current conditions, symptoms, lifestyle factors)
• Health domain scores and PeRx wellness scores
• Injection logs and treatment tracking data
• Monthly check-in responses and progress notes

Usage Information

We automatically collect certain information when you use our Platform, including:

• IP address and approximate location
• Browser type and operating system
• Pages viewed and features used
• Device information

How We Use Your Information

We use your information to:

• Facilitate telehealth consultations with licensed providers
• Process prescriptions and deliver peptide therapy products
• Generate personalized health assessments and wellness scores
• Provide AI-assisted monthly check-ins to track your progress
• Process payments and fulfill orders
• Communicate with you about your treatment, orders, and account
• Improve our Platform, services, and user experience
• Comply with legal and regulatory requirements

AI-Assisted Services

PeRx uses artificial intelligence (Anthropic's Claude API) to enhance certain features of our Platform. Only de-identified data is sent to the Claude API — no personally identifiable information (such as your name, email, date of birth, or account details) is ever transmitted.

Specifically, the following de-identified data may be sent to generate personalized insights and monthly check-in questions:

• Computed health domain scores (numerical values derived from your assessment)
• Age (calculated from date of birth — your actual date of birth is not sent)
• Biological sex
• Active peptide protocol details and injection adherence data
• A record of which check-in questions were previously asked (to ensure variety)

Your original assessment responses remain stored only in our database and are not transmitted to any third party. Anthropic does not use data submitted through its commercial API to train its AI models, and inputs and outputs are automatically deleted from Anthropic's systems within 30 days.

AI-generated content is used to support, not replace, clinical decision-making. All treatment decisions are made by licensed healthcare providers. AI outputs are not medical diagnoses or prescriptions.

How We Share Your Information

We do not sell your personal information. We share your information only in the following circumstances:

Telehealth Provider

Your health information is shared with Decoda Health, our telehealth provider partner, to facilitate medical consultations, provider evaluations, and prescription services. Decoda Health operates under its own privacy policy and is responsible for maintaining the confidentiality of your medical records in accordance with applicable law.

Service Providers

We work with trusted third-party service providers who assist us in operating our Platform:

• Supabase — Database hosting and user authentication
• Vercel — Website hosting and delivery
• Rainforest — Payment processing
• Anthropic — AI processing for check-in features (de-identified data only, no PII transmitted)
• Sentry — Error monitoring and application stability (personal identifiers such as email and IP address are scrubbed before transmission)
• Omnisend — Email marketing and transactional communications (email address and name are shared to deliver order updates and, with your consent, promotional content; you may unsubscribe from marketing emails at any time)
• PostHog — Product analytics and session replay (anonymous page-view, navigation, and session replay data are collected to understand user behavior and improve the experience; no personal health information is transmitted and form inputs are masked in recordings)
• Meta (Facebook) Pixel — Advertising measurement and conversion tracking. With your consent, Meta Pixel collects commerce-related data such as page views and purchase activity to measure advertising performance. A hashed version of your email address may be sent to Meta for ad attribution when you are logged in ("Advanced Matching"). You can opt out of Meta Pixel tracking at any time through our "Do Not Sell or Share My Personal Information" link or by adjusting your cookie preferences.
• Vercel Analytics — Anonymous web performance analytics (page load times, visitor counts; no personal identifiers transmitted)

These providers are contractually obligated to protect your information and may only use it to perform services on our behalf.

Legal Requirements

We may disclose your information if required by law, subpoena, court order, or government request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal information. These include encrypted data transmission (TLS/SSL), secure database storage with row-level security policies, authenticated API access, and rate limiting to prevent abuse.

No method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Cookies & Tracking Technologies

We use cookies, local storage, and similar technologies to operate our Platform and improve your experience. These include:

• Essential cookies — Required for authentication, session management, and security. These cannot be disabled without breaking core Platform functionality (e.g., Supabase authentication tokens).
• Analytics cookies — We use PostHog to collect anonymous page-view, navigation, and session replay data to understand how users interact with our Platform and improve the experience. Session recordings capture page interactions (clicks, scrolls, page content) but mask form inputs. No personal health information is transmitted to PostHog.
• Marketing cookies — With your consent, Omnisend may place cookies and tracking pixels to measure email campaign performance and deliver relevant content. You can opt out of marketing communications at any time through your Profile settings or by clicking the unsubscribe link in any marketing email.
• Advertising cookies — With your consent, Meta (Facebook) Pixel may place cookies to measure advertising conversion and campaign performance. You may opt out at any time using the "Do Not Sell or Share My Personal Information" link in our footer.

Most web browsers allow you to control cookies through their settings. Disabling certain cookies may limit your ability to use some features of the Platform.

Data Retention

We retain your personal and health information for as long as your account is active or as needed to provide you with our services. We may also retain certain information as required by law or for legitimate business purposes, such as resolving disputes or enforcing our agreements.

If you wish to delete your account and associated data, please contact us at the address below. Certain information may be retained as required by applicable healthcare record retention laws.

Your Rights

Depending on your state of residence, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Opt out of certain data processing activities
• Receive a copy of your data in a portable format

To exercise any of these rights, please contact us using the information provided below. We will respond to your request within the timeframe required by applicable law.

California Residents

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA/CPRA), including the right to know what personal information we collect, the right to delete your information, and the right to opt out of the sale or sharing of personal information.

We do not sell personal information for monetary consideration. However, our use of advertising cookies (such as Meta Pixel) may constitute "sharing" of personal information for cross-context behavioral advertising under CCPA. You may opt out of this sharing at any time by clicking the "Do Not Sell or Share My Personal Information" link in our website footer. When you opt out, advertising cookies and Advanced Matching will be disabled for your account.

Children's Privacy

Our Platform is not intended for individuals under the age of 21. We do not knowingly collect personal information from anyone under 21 years of age. If we learn that we have collected information from a minor, we will take steps to delete that information promptly.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes by posting the updated policy on our Platform with a revised "Last updated" date. Your continued use of the Platform after any changes constitutes acceptance of the updated policy.

Do Not Sell or Share My Personal Information

To opt out of the sharing of your personal information for advertising purposes, visit our Do Not Sell or Share page.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: