The short version
Apothify collects the minimum amount of personal information needed to fulfill your order, communicate with you about it, and meet legal recordkeeping requirements. We do not sell or share your personal information for cross context behavioral advertising. We do not run ads. Email opt ins are voluntary and only used for the research and product updates you signed up for. You can request access, correction, or deletion of your data at any time by emailing support@apothify.com.
Who we are
apothify.com is operated by Apothify LLC, a Wyoming limited liability company with its registered office at 30 N Gould St., Sheridan, WY 82801, United States. In this Privacy Policy, "Apothify," "we," "us," and "our" refer to Apothify LLC. Apothify LLC is the data controller for the personal information described below.
Who this applies to
This Privacy Policy applies to your interactions with apothify.com, with any pages, forms, and emails operated under the apothify.com domain, and with any direct communication you have with Apothify staff. It does not apply to third party services we link to.
Information we collect
Information you give us. Your name, email address, shipping address, phone number (if you choose to provide one), order contents, any notes you include at checkout, the research use acknowledgments you accept, and any messages you send to support@apothify.com.
Information from your payment. Card payments are processed by our payment processor and Apothify receives only the masked card last four, the transaction identifier, the payment status, and the authorization timestamp. We never see, store, or transmit your full card number, expiration date, or security code. ACH, Cash App, crypto, and check or money order payments produce a payment reference and confirmation only.
Information collected automatically. Your IP address, browser user agent, request timestamps, the pages you visit, the items you view, and the actions you take on the Site. We use this information to operate the Site, protect against abuse, debug problems, and improve the experience.
Information from cookies. See the Cookie Policy for the full list. We use a small set of strictly necessary cookies plus a privacy preserving analytics setup.
We do not collect biometric information. We do not collect government identifiers. We do not collect health information. We do not collect information about minors. We do not knowingly collect personal information from anyone under the age of 21.
How we use information
We use the information we collect to:
- Process, fulfill, and ship your order
- Send you transactional emails about your order (placed, payment received, shipped, delivery tracking)
- Respond to your questions and provide customer support
- Verify identity, prevent fraud, and protect against abuse of the Site
- Meet tax, accounting, anti money laundering, and other legal recordkeeping requirements
- Improve the Site, the catalog, and our internal operations through aggregated analytics
- If you opt in, send research and product updates through our email delivery provider
- Defend ourselves in legal disputes and respond to lawful requests from authorities
Who we share information with
We share personal information only with the service providers that help us operate the business, and only to the extent each provider needs the information to do its job:
- Cloudflare for hosting, content delivery, edge security, and DNS
- Resend for transactional and (if you opt in) marketing email delivery
- Bankful and other listed payment processors for payment authorization, settlement, and chargeback handling
- The carrier you select at checkout (USPS, UPS, etc.) for shipment and delivery
- Google Analytics 4 for privacy preserving usage analytics
- Our accountants, auditors, and outside counsel when we need their professional services
Each provider is bound by its own privacy commitments and is only allowed to use your information on our behalf for the purposes above.
We may disclose information in response to a valid subpoena, court order, or lawful government request, or where we believe disclosure is necessary to investigate or prevent harm, fraud, or violations of these terms. We may also transfer information to a successor entity in connection with a merger, acquisition, financing, or sale of assets, in which case we will require the successor to honor the commitments in this policy.
We do not sell or share your personal information for cross context behavioral advertising. We do not transfer your information to data brokers. We do not enable advertising features on Google Analytics.
Cookies and analytics
Apothify uses three strictly necessary cookies to operate the Site:
APOTHIFY_CSRFprotects forms from cross site request forgeryAPOTHIFY_CARTremembers your cart between pages and is signed so it cannot be tampered withAPOTHIFY_ENTRYremembers your research use acknowledgment so you do not have to accept it on every page
We also use Google Analytics 4 with the measurement identifier G-7NBVXGZ1D3. Google Analytics sets _ga and _ga_* cookies and processes your IP address with anonymization enabled. We have not enabled Google Signals, advertising features, or cross device tracking. The data is used in aggregate to understand how the Site is used. You can opt out by enabling Do Not Track in your browser, by installing the Google Analytics Opt out Browser Add on, or by blocking these cookies in your browser settings. The Cookie Policy has additional detail.
Marketing email
If you opt in to research and product updates, we add your email to a list we operate through our email delivery provider. Every marketing email includes an unsubscribe link. You can also unsubscribe by emailing support@apothify.com. Transactional email about your order is not marketing and is not subject to unsubscribe.
Your rights
You have the right to ask Apothify to tell you what information we hold about you, to give you a copy, to correct it, and to delete it (subject to records we are required by law to keep, such as tax records). You can exercise any of these rights by emailing support@apothify.com from the email address on your account. We will respond within the timeframes required by applicable law (typically 30 to 45 days). For California residents, additional rights and the process for exercising them are described in the Do Not Sell or Share My Personal Information notice.
You will not be discriminated against for exercising any of these rights.
Retention
We retain order, payment, and acceptance records for as long as required by applicable tax, accounting, and consumer protection laws (typically a minimum of seven years for financial records) and for so long as we may need them to defend or pursue a claim. Marketing email subscriptions are retained until you unsubscribe. Support email threads are retained for two years after the last message and then deleted on a rolling basis. Server logs used for operations and security are retained for ninety days unless they are part of an ongoing investigation.
Security
Apothify uses commercially reasonable administrative, physical, and technical measures to protect personal information, including HTTPS in transit, encryption at rest for sensitive fields, the principle of least privilege for staff access, signed and HMAC verified cart and authentication cookies, CSRF protection on every mutating endpoint, and rate limiting on public endpoints. No system is perfectly secure. If we become aware of a breach that affects you, we will notify you in the manner and timeframe required by applicable law.
Children
Apothify is not directed to children. We do not knowingly collect personal information from anyone under the age of 21. If you believe a person under 21 has provided personal information to Apothify, contact support@apothify.com and we will delete it.
Geographic scope
Apothify ships only to addresses within the United States. We do not market to, solicit, or accept orders from users in the European Union, the United Kingdom, Canada, or other jurisdictions outside the United States. If you choose to access the Site from outside the United States, you do so on your own initiative and you are responsible for compliance with local laws.
International data transfer
Apothify is based in the United States and processes information in the United States. By using the Site, you understand that your information will be transferred to and processed in the United States, which may not provide the same level of legal protection as the laws of your country.
Third party links
The Site may link to pages operated by third parties (for example a manufacturer's data sheet or a published research paper). Apothify does not control those sites and is not responsible for their privacy practices. Review the privacy policy of any third party site before submitting personal information to it.
Changes to this Privacy Policy
Apothify may update this Privacy Policy from time to time. The version stamp at the top of this page reflects the current version. When a material change is made, the version is incremented. Continued use of the Site after a change indicates acceptance of the updated Privacy Policy.
Contact
Privacy questions should be directed to support@apothify.com. For California residents, the Do Not Sell or Share My Personal Information notice has additional detail about your CCPA and CPRA rights.
Written privacy requests may be sent to:
Apothify LLC
30 N Gould St.
Sheridan, WY 82801
NoteThis page is provided for information only. It is not legal advice. If you have a specific legal question, consult an attorney licensed in your jurisdiction.
