Skip to content
PepCred

Independent evidence before payment.

Privacy

Privacy policy

We collect as little as possible and never sell your data.

What we collect

  • Email subscriptions — currently closed. This deployment does not accept or retain newsletter addresses.
  • Analytics — no analytics service is configured on this deployment.
  • Ask assistant — if you use it, your question is sent to Anthropic to generate an answer. Do not include names, contact details, diagnoses or other health information.
  • Company suggestions, experiences, corrections and rights of reply — if you submit a request, we retain the company URL, declared relationship, product and batch observations, your explanation, any public evidence link and the contact email you choose to provide so the request can be reviewed and answered. Contact email is optional and is not published.
  • Abuse prevention — the Ask endpoint holds an IP address in server memory for a 60-second rate-limit window. Expired entries are purged on the next request and are not written to the PepCred database.

What we don't do

  • We don't sell or rent personal data.
  • We don't place personal data in URLs.
  • We don't set non-essential cookies without consent.

Your choices

A controller identity and monitored privacy contact will be published before the site is made indexable.

Data processing

We process only the data described above. Ask questions are processed by Anthropic and may involve an international transfer under its service terms; PepCred does not intentionally request health or other special-category data. Do not submit prescriptions, medical records, patient names, addresses, payment or bank details, passwords, diagnoses or private order documents. Correction and evidence requests are stored until review is resolved. When inbox notification is configured, the submission and optional reply address are also sent through Resend to the private moderation inbox. Personal contact details, free text and non-essential evidence are then deleted or anonymised within 12 months unless a longer audit record is legally required. Analytics and marketing email delivery are not active on this deployment.