Privacy Policy

1. Scope

This policy explains how EJ handles information for its public research-company pages, authenticated research account, private storefront, and no-payment checkout preview.

2. Accounts and security

Supabase processes account email, password-verification data, supported sign-in provider data, confirmation and recovery events, authentication cookies, and security logs. EJ uses that information to provide account access, prevent abuse, and support account requests.

Cloudflare Turnstile may process challenge and technical data during sign-in, registration, and recovery. The site is hosted on Vercel. Vercel may automatically process standard request and technical data needed to deliver and secure the site.

3. Cart and checkout preview

The private cart stores product identifiers and quantities in browser local storage under vjconnect:demo-cart:fda-compound-hold:v2. The no-payment checkout preview keeps contact fields in browser memory and does not send names, addresses, phone numbers, or payment-card data to EJ.

When compliance validation is requested, the same-origin endpoint receives only researcher status, the intended research purpose, the separate research-use confirmation, and cart product identifiers and quantities. It uses those values only to validate access and declarations; it does not persist the compliance submission, create an order, or contact a payment API.

No checkout confirmation is persisted. Do not enter payment-card data, government identifiers, health information, or other sensitive information.

4. Current limits and providers

The application has no payment API, completed-order system, shipment records, saved addresses, or saved payment methods. It has no application analytics or advertising trackers. EJ does not sell personal information or share it for behavioral advertising.

EJ may share limited information with Supabase, Cloudflare, Vercel, and their service providers to provide authentication, fraud and abuse controls, hosting, and security; with authorities when legally required; or with a successor operator subject to applicable law and this policy.

5. Retention and choices

Browser cart data remains until you clear it or browser storage. Saved-product records remain until removed or the account is deleted. Authentication and security records are retained according to EJ's account needs and applicable provider settings. Support emails are retained only as reasonably necessary to respond, document resolution, prevent abuse, and meet legal or operational obligations.

You may clear browser data, remove saved products, sign out, use account deletion when available, or request privacy assistance. Privacy inquiries or requests may be sent through Contact EJ.

6. Contact and changes

EJ publishes a support email address on Contact EJ. Do not email passwords, full payment-card numbers, bank details, government identifiers, or health information. EJ may update this policy when site practices change.