Privacy & data practices

Privacy Policy

This policy describes the categories of information Qelivra handles, why it is used, and the service providers involved in operating the storefront and Nexus-backed order workflows.

Effective August 24, 2026Version 2026-08-24.1
Privacy first: Qelivra does not receive full card numbers or CVC values from Stripe Checkout. Please do not submit personal health information through order support.

1. Scope and categories of information

Qelivra may collect information you provide or that is generated through use of the site, including name, email, shipping address, order identifiers, order contents, payment status and Stripe references, support messages, fulfillment and tracking information, policy/checkout acceptance records, and limited operational analytics identifiers.

2. Payment information

Payments are processed through Stripe-hosted Checkout. Qelivra does not receive or store full payment-card numbers or CVC values. Qelivra may store transaction references, payment status, amount, currency, customer contact information, and shipping information needed to operate and support an order.

3. Browser storage and operational analytics

Qelivra uses browser storage for functions such as the saved cart, research-access acknowledgment, order/support session tokens, and a random analytics session identifier. Current storefront analytics are used for operational product and workflow measurement and are not designed to include payment-card data, shipping addresses, support-message text, or personal health information.

4. Support communications

Order-linked support may store the conversation, timestamps, order identifiers, and account/contact information needed to verify and respond to the requester. Do not submit passwords, full card numbers, Stripe credentials, medical records, diagnoses, dosing histories, or other unnecessary health information through support.

5. Service providers

Qelivra uses service providers to operate the site and orders, including Cloudflare for website delivery/security, Supabase for database/authentication/storage and server functions, Stripe for payment processing, and transactional-email providers such as Resend. These providers process information under their own terms and privacy practices and only as needed for the services they provide to Qelivra.

6. How information is used

  • Process, verify, fulfill, cancel, refund, and support orders.
  • Operate research-use, fraud, security, and compliance controls.
  • Provide order status, tracking, support, and transactional messages.
  • Maintain records, audit system activity, troubleshoot failures, and protect Qelivra and its users.
  • Comply with legal, regulatory, tax, accounting, payment-network, and law-enforcement obligations when applicable.

7. Disclosure and sale of personal information

Qelivra may disclose information to service providers, professional advisers, payment/fraud partners, carriers, authorities, or counterparties when reasonably necessary for the purposes above or required by law. Based on the current Qelivra architecture, Qelivra does not sell personal information or use it for third-party cross-context behavioral advertising.

8. Retention and security

Qelivra retains information for as long as reasonably necessary for the purpose collected, order/support operations, fraud prevention, dispute resolution, accounting, security, legal compliance, and legitimate business records. Qelivra uses access controls and server-side authorization, but no online service can guarantee absolute security.

9. Privacy requests and applicable rights

Depending on applicable law and eligibility, you may have rights regarding access, correction, deletion, portability, restriction, or appeal. Requests can be submitted through Qelivra Support. Qelivra may need to verify identity and may retain information where permitted or required by law.

10. Children and age restrictions

Qelivra is not directed to children. Catalog purchase is limited to people who are at least 18 years old or the age of majority in their jurisdiction.

11. Policy changes

Qelivra may update this Privacy Policy when data practices, service providers, legal requirements, or site functionality change. Material changes will be reflected by a new effective date/version.

Nothing in this policy waives rights or obligations that cannot lawfully be waived. Qelivra may update this policy when operations or legal requirements change; the version shown at checkout controls the transaction for which it was accepted.