GDPR and data processing

Last updated 7 September 2026

Data-protection roles

For the personal data processed through the service, you are the Data Controller and Peptora is the Data Processor.

Data collected

• Account information, including email address and IP address;
• uploaded COAs; and
• usage logs.

Purpose of processing

We process this data for verification, fraud detection, and platform security.

COA storage

• COAs are stored securely with encryption.
• They are retained only as necessary.
• They are deleted or anonymized upon request or after the retention period.

Your rights

You may request access to, correction, deletion, or export of your personal data.

Security

We use encryption, access controls, and monitoring systems to protect data.

International transfers

International data transfers are handled through approved safeguards, such as Standard Contractual Clauses.

Contact

For privacy or data-processing requests, email privacy@peptoraai.com.