Privacy Policy

Last Updated: 2026-04-20

SubQFusion respects your privacy. This policy explains what we collect, why, and what we do with it. No legalese padding — just the facts.

1. Data We Collect

When you place an order:

Name, email address, phone number
Shipping address (street, city, state, zip)
Order details (products, quantities, payment method selected)
Payment reference IDs (we do not store raw card numbers, bank account numbers, or Venmo/Cash App credentials — only transaction reference identifiers)

When you verify your age at the site gate:

Attestation confirmation (boolean — you confirmed or you didn't)
Timestamp of attestation
Role selection (optional — academic, independent researcher, clinician, lab buyer, other)
We do NOT store your date of birth. The age check runs client-side and only a pass/fail result persists in your browser's localStorage.

Automatically when you browse:

IP address, browser type, device type
Pages visited, time on site
Referral source (how you found us)
Cookies for session management and analytics

2. How We Use Your Data

Order fulfillment — processing, shipping, and delivering your research materials
Customer communication — order confirmations, shipping updates, support responses
Legal compliance — maintaining records required by tax and business law
Fraud prevention — identifying suspicious orders or payment activity
Site analytics — understanding how visitors use the site to improve it

3. Who We Share Data With

Payment processors — Venmo, Cash App, Solana blockchain (for crypto payments), and future card/ACH processors as added
Shipping carriers — FedEx (name + shipping address for delivery)
Cloud hosting — DigitalOcean (server infrastructure), Vercel (website hosting)
Email providers — Resend via Amazon SES (outbound transactional email), ImprovMX (inbound email routing)
Legal/compliance — law enforcement or regulatory bodies if required by valid legal process

We never sell your data to third parties for marketing. Period.

4. Data Retention

Order and customer records: Retained for a minimum of 7 years (tax and business compliance requirement)
Analytics and browsing data: Retained for 26 months, then purged
Chat/support conversations: Retained for 2 years for service quality and dispute resolution

5. Security

All data transmitted to and from subqfusion.com is encrypted via TLS/SSL. Customer data is stored on encrypted infrastructure with access limited to authorized personnel. We follow industry-standard security practices but cannot guarantee absolute security — no one can.

6. Your Rights

California residents (CCPA):

Right to know what personal information we collect and how it's used
Right to delete your personal information (subject to legal retention requirements)
Right to opt out of sale of personal information (we don't sell it, but the right is yours)
Right to non-discrimination for exercising these rights

EU/EEA residents (GDPR):

Right of access to your personal data
Right to rectification of inaccurate data
Right to erasure ("right to be forgotten")
Right to data portability
Right to restrict or object to processing

To exercise any of these rights, email us at the address below. We'll respond within 30 days.

7. Contact

Privacy questions, data requests, or concerns: info@subqfusion.com