Data Collection Practices
Last Updated: April 2026
| Data Type | What We Collect | Why | Encrypted |
|---|---|---|---|
| Name | Full legal name | Account identification | Yes (AES-256) |
| Email address | Login, notifications | Yes (AES-256) | |
| Password | Account password | Authentication | Yes (bcrypt hash) |
| Phone | Phone number (providers) | Service coordination | Yes (AES-256) |
| Address | Physical address (providers) | Service location | Yes (AES-256) |
| License # | Professional license (providers) | Credential verification | Yes (AES-256) |
| Booking Notes | Appointment notes | Service delivery | Yes (AES-256) |
| Order History | Products purchased, amounts | Order fulfillment | Database-level |
| IP Address | Connection IP | Security, audit logging | Logged in audit trail |
| Commission Data | Earnings, team structure | Affiliate program | Database-level |
| Video Calls | Call metadata (not content) | Service facilitation | Peer-to-peer encrypted |
What We Do NOT Collect
We do not collect: payment card numbers (handled by payment processors); biometric data; social security numbers; detailed medical records; video call audio/video content; location tracking data.
Third-Party Data Sharing
Order data (name, items) is shared with our fulfillment partner for shipping purposes only. This data is encrypted in transit and signed with HMAC-SHA256. No data is sold to third parties.
Data Deletion
You may request complete deletion of your account and associated data by contacting privacy@peppyclub.com. Video call metadata is automatically deleted after 30 days.