Your information.
Handled plainly.

Information you provide.

Partner inquiries include your name, work email, business, region, expected volume, goals and research interests. Portal accounts include your name, email, password hash, assigned business and access role. Workspace users can save business contacts, inquiry notes and follow-ups. Please do not enter patient information or medical records into these forms.

How the services work.

Cloudflare hosts the website and stores account, session, invitation and business-access records in D1. Twenty stores business CRM records. We use this information to manage access, respond to partnership inquiries, keep business records and provide the dashboard. Access depends on your assigned role and business. Internal inquiry notes are restricted to the Peptilane team.

Clinical operations.

The administrator view retrieves medication catalog information and aggregate order counts from the connected Asher account. Patient details returned by Asher are discarded by the server and are not shown in this view or saved to Twenty. Patient intake, clinical orders, renewals, payments and care communication take place in Asher, under its own notices and account requirements.

Cookies and retention.

The portal uses an essential sign-in cookie, with sessions lasting up to 12 hours. Invitations expire after seven days and password reset links after one hour. This site does not install advertising cookies or marketing analytics. Hosting providers process network information needed to deliver and secure the service. Business and account records are retained for workspace operation; there is currently no automatic deletion schedule for those records.

Your requests.

Use the contact form to ask about access, corrections, deletion or this notice. State that your inquiry concerns privacy, and include the account email involved. We may need to verify your identity before acting. Do not include patient details in the request.

External websites.

Research links and the Asher portal open separate services with their own privacy practices. The research library does not assess individual patients.