Privacy Policy

Depending on how you use PeppermintProfile, we may collect:

• Account information, such as your display name, username, email address, password hash, account role, and account dates.
• Profile and business information you choose to provide, such as biography, location, website and social links, photographs, business details, team information, events, listings, inventory, and other operational records.
• Content and communications, such as messages, attachments, reports, support communications, and other content you submit through available features.
• Activity and technical information, such as IP or network information, browser and device information, requested pages, timestamps, session and security events, and preferences stored in cookies or browser storage.
• Information supplied by other users when they interact with you, invite you to a team, communicate with you, or create records involving your account.

We use personal data to:

• Create, authenticate, and maintain accounts.
• Provide profiles, business tools, events, communications, and other available services.
• Display information according to publication choices and available visibility settings.
• Support users, operate and troubleshoot the service, and improve reliability.
• Detect, investigate, and prevent fraud, abuse, security incidents, and policy violations.
• Administer teams and permissions, preserve relevant audit records, and resolve disputes.
• Comply with law and protect the rights, safety, and integrity of users, PeppermintProfile, and others.

Information you publish on a public profile, business page, event, listing, or other public surface may be visible to anyone. Information you send in a message or provide in a team or transaction context is disclosed to the intended participants or authorized team members as needed to provide that feature.

Review your content and available visibility settings before publishing. Copies may remain with recipients or in lawful records after you change or remove the original.

We may disclose personal data:

• To hosting, storage, database, security, communications, and other service providers that help us operate PeppermintProfile, subject to appropriate restrictions.
• To the people or businesses you direct us to interact with, including message recipients, transaction participants, and authorized team members.
• When reasonably necessary to comply with law or legal process, enforce our rules, investigate misuse, protect safety or rights, or secure the service.
• With your consent or at your direction.

The current service also loads certain external resources, including Google Fonts, which may cause the provider to receive ordinary request information such as an IP address, browser information, and the requested resource.

PeppermintProfile does not sell personal data. We do not exchange users’ personal data for money.

The current live service does not share personal data for cross-context behavioral advertising and does not use third-party behavioral-advertising or analytics trackers. This commitment does not prevent the limited disclosures described in this Policy that are needed to operate the service, follow the law, protect safety and security, complete user-directed interactions, or work with service providers subject to appropriate restrictions.

PeppermintProfile uses a session cookie to keep users signed in and protect authenticated sessions. The authentication cookie is configured as Secure, HttpOnly, and SameSite=Lax and normally expires when the browser session ends.

We also use browser storage for limited preferences and interface state, such as theme choices and restoring a page position. The current service does not use advertising cookies.

We retain personal data only for as long as reasonably necessary to provide the service, maintain security and audit records, resolve disputes, meet legal obligations, and support the purposes described in this Policy. Retention varies by the type of data and the reason it is held.

When data is no longer needed, we delete or deidentify it where reasonably feasible, subject to lawful exceptions and limited operational records.

You can change certain account, profile, publication, visibility, and communication choices through available settings. To request access to, correction of, or deletion of personal data associated with your account, email privacy@peppermintprofile.com. We may need to verify your identity and may retain or deny a request where permitted or required by law, including for security, fraud prevention, disputes, or legal obligations.

Depending on where you live, you may have additional privacy rights. PeppermintProfile will not unlawfully discriminate against you for exercising an applicable privacy right.

We use reasonable administrative, technical, and organizational safeguards designed to protect personal data. Current controls include password hashing, protected session cookies, access controls, and security logging.

No internet service or storage system can guarantee absolute security.

PeppermintProfile accounts are available only to people who are at least 16 years old. If you are 16 or 17, you may create and use an account only with permission from a parent or legal guardian. Users under 16 may not create or use an account.

If you believe a person under 16 has provided personal data to PeppermintProfile, email privacy@peppermintprofile.com so we can review the matter and take appropriate action.

We may update this Policy as PeppermintProfile changes. We will post the revised Policy and update its effective date. When required, we will provide additional notice before a material change takes effect.

PeppermintProfile is an unincorporated business operating from Florida, United States. Privacy questions and requests may be sent to privacy@peppermintprofile.com.