Privacy Policy

Information you give us.

• Account details: first and last name, email address, researcher type, company or institution (optional) and your password (stored only as a secure hash by our authentication provider).
• Your confirmation that you are 21 or older and buy for research use only, with the time you confirmed it.
• Your communication choices: whether you opted in to marketing emails (at sign-up) and to order-update or marketing texts (at checkout), and when you did.
• If you sign up for offers and restocks on our home page: your email address and when you signed up. To stop abuse of that form we also keep a one-way coded version of your network (IP) address, not the address itself.
• Order details: shipping name, address and phone number (we also save the phone number to your account for future orders), the products you order, the payment method you choose and any note you add.
• Reviews you submit, including the display name, rating, text and order number you enter.
• Messages you send us by email.

Payment information. We do not collect or store card or bank account numbers on this website. When you pay through an app such as Cash App, Zelle, Venmo or a Bitcoin wallet, that provider processes the payment under its own privacy policy, and we receive only what it shows us to confirm your payment (for example the sender name or handle, amount and note).

Information collected automatically. When you visit the site, our hosting and database providers record standard technical data such as IP address, browser and device type, pages requested, the referring page and the date and time. We use this to run, secure and troubleshoot the site.

If you choose "Continue with Google", Google asks for your permission and then shares your name, email address and profile picture with us. We request only these basic profile scopes. We never receive your Google password and we do not access your Gmail, contacts, calendar, Drive or any other Google data.

We use this information only to create and sign in to your Vitamino account and to identify you on your orders. We do not use it for advertising, we do not sell it, and we do not share it except with the service providers that run the site as described below.

Vitamino's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect Vitamino from your Google account at any time at myaccount.google.com/connections, and you can ask us to delete your account and this information by emailing vitaminousa@gmail.com.

• To create and manage your account and sign you in.
• To process, ship and support your orders, including order and shipping updates.
• To confirm research-use eligibility and enforce our Terms of Service.
• To show verified-purchase reviews and moderate submitted reviews.
• To answer your questions and requests.
• To send marketing emails or texts, only if you opted in.
• To prevent fraud, abuse and security incidents, and to keep the site working.
• To meet legal, tax and accounting obligations.

If you opt in at checkout, we send text messages to the phone number on your order about your orders and/or offers and restocks, depending on the boxes you ticked. Message frequency varies. Message and data rates may apply. Reply STOP to cancel at any time or HELP for help. Consent to receive texts is not a condition of any purchase.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent are never shared with or sold to third parties. Information may be shared only with the messaging providers that deliver our texts on our behalf.

Program details are in the text message terms.

We send account and order emails (such as sign-up confirmation, password reset and order updates) to everyone with an account, because they are needed to provide the service. Marketing emails are sent only if you opted in, and every marketing email includes an unsubscribe link. You can also unsubscribe by emailing vitaminousa@gmail.com.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share it only as follows:

• Service providers that run the site for us under contract: website hosting (Vercel), database and authentication (Supabase), Google sign-in (Google), email and text-message delivery providers, and shipping carriers. They may use the information only to provide their service to us.
• Payment providers you choose to pay with, which process your payment under their own terms.
• Legal and safety: when required by law, subpoena or court order, or when reasonably necessary to protect the rights, safety or property of Vitamino, our customers or others, including to investigate misuse of research products.
• Business transfers: if Vitamino is involved in a merger, acquisition or sale of assets, information may transfer as part of that transaction, subject to this policy.

Analytics. We use Vercel Web Analytics, provided by our hosting company Vercel, to count page views and see which pages are visited. It uses no cookies and stores nothing in your browser. For each page view it records the page address, the referring website, your country, and your browser, operating system and device type. Visitors are told apart with an anonymous identifier that changes every day, so it can't be used to follow you from day to day or across other websites. Before anything is sent, we remove everything after the page path (such as order numbers, search terms and sign-in links), except campaign tags (utm_ codes) on links we share. The sign-in page and the store's admin pages are never recorded.

Advertising. This site does not use advertising pixels, tracking tags or advertising cookies, and we do not upload customer lists to advertising platforms. If we start, we will update this policy first, describe what is shared and with whom, and give you a way to opt out.

We use only what the site needs to work:

• Sign-in session data kept in your browser's local storage so you stay logged in.
• A session cookie used when you untick "Remember me", so you are signed out when the browser closes.
• Your cart contents and a few display preferences, stored in your browser.

You can clear this data in your browser settings at any time; you will be signed out and your cart emptied.

We keep account information while your account is open. We keep order records for as long as tax, accounting and consumer-protection laws require (generally up to seven years). Marketing preferences are kept until you change them, and we keep a record of opt-outs so we honor them. Server logs are kept for a limited period by our hosting providers. When information is no longer needed, we delete or anonymize it.

We use encrypted connections (HTTPS), hashed passwords, access controls that limit each customer to their own data, and restricted administrative access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please use a unique password and contact us right away if you think your account has been compromised.

You can view and update most account details in My account. Depending on where you live (including California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon and other U.S. states, and the EEA and UK), you may also have the right to:

• know what personal information we hold about you and receive a copy;
• correct inaccurate information;
• delete your information, subject to legal record-keeping requirements;
• opt out of marketing, and of any sale, sharing or targeted advertising (we do none of these today);
• appeal a decision we make about your request.

To make a request, email vitaminousa@gmail.com from the address on your account. We will verify your identity, respond within 45 days, and will not discriminate against you for exercising your rights. You may use an authorized agent with your written permission. If we deny your request you can appeal by replying to our decision; if you remain unsatisfied you may contact your state attorney general or local data-protection authority.

This site and our products are only for adults aged 21 or older. We do not knowingly collect information from anyone under 21. If you believe someone under 21 has given us information, email vitaminousa@gmail.com and we will delete it.

Vitamino is based in the United States and sells only within the United States. Information is processed and stored in the United States by us and our service providers.

We may update this policy. We will change the "Last updated" date above and, for material changes, notify account holders by email or on the site before the change takes effect.

Questions or requests about privacy: vitaminousa@gmail.com. Vitamino, Wyoming, United States.