Privacy Policy

Covalent Research Labs LLC, a Texas limited liability company doing business as “Covalent Research Labs” (“Covalent”, “we”, “us”), supplies third-party tested research compounds to laboratories, research clinics and qualified investigators. This policy explains what information we collect through covalent-research.com, how we use it, who we share it with, and the choices you have. It applies to the website, the account system, the storefront and the on-site AI assistant.

We collect only what we need to operate accounts and fulfil research orders:

• Account information — your name, and the identifier you sign in with: an email address, a mobile phone number, or the basic profile fields Google returns if you use Google sign-in. If you sign in by phone we store that number; adding an email later is optional.
• Order information — the items ordered, order totals, order history and the shipping address and contact details you provide.
• Payment information — handled by our payment processor. Card numbers and full payment credentials are never transmitted to or stored on our systems; we receive only a transaction reference and status.
• AI assistant messages — the questions you type into the on-site assistant, together with the responses generated, so we can operate and improve the feature.
• Technical and usage data — IP address, browser and device type, pages viewed and referring pages, collected automatically by our hosting and analytics infrastructure.

We do not ask for and do not want health information, diagnoses, treatment details or any other clinical data about an individual. Please do not send it to us or type it into the AI assistant.

Covalent accounts are passwordless. You can sign in in one of three ways: with your mobile phone number, where we text you a one-time six-digit code; with your email address, where we send you a one-time sign-in link; or with Google. All three create the same kind of account — the only difference is the identifier we hold for you.

• Phone / SMS — we store your mobile number and send one-time verification codes and, where you have an order in progress, transactional order notifications. Message and data rates from your carrier may apply. Codes are delivered through our SMS provider, which processes the number solely to send the message. We never send marketing texts and you can reply STOP to opt out of order texts at any time.
• Email magic link — we store your email address and send one-time sign-in links plus transactional order email.
• Google — Google shares a limited set of profile information with us: your name, your email address, your Google account identifier and your profile picture if one is set. We use it only to create and authenticate your account and to associate your orders with it. We do not request access to Gmail, Drive, Contacts, Calendar or any other Google service, we do not use Google data for advertising or profiling, and we do not sell or transfer it to third parties for those purposes. You can disconnect Covalent in your Google account security settings and continue signing in by email or phone.

Because sign-in is passwordless we do not hold a password for your account. If you lose access to the phone number or email address on the account, contact us and we will verify your identity before restoring access to your order history.

If you use the contact form on covalent-research.com we collect the name, email address, topic, optional order reference and message content you submit, together with a hashed form of your IP address and your browser user-agent, which we use solely to rate-limit abuse of the form. Submissions are stored in our database so an enquiry is never lost, and we send two emails: an internal notification to our support team and a confirmation copy to the address you entered.

• We use this information only to answer your enquiry and to keep a support record of it. We do not add contact-form addresses to any marketing list.
• The form is protected by hCaptcha, an anti-bot service that receives your IP address and interaction signals to confirm you are human; it acts as our service provider for that purpose only.
• Contact submissions are retained for up to 24 months, then deleted, unless the enquiry relates to an order or a legal matter we are required to keep longer.
• Please do not submit health information, diagnoses, treatment details or dosing questions. We cannot answer them and will not retain clinical detail sent to us in error.

• To create, authenticate and secure your account.
• To process, fulfil, ship and support your orders.
• To respond to enquiries and provide customer and technical support.
• To operate the AI assistant and the site itself, including diagnosing errors and preventing abuse or fraud.
• To meet legal, tax, recordkeeping and research-use compliance obligations.
• To send transactional messages about your account and orders. We only send marketing email if you have asked us to, and every marketing message has an unsubscribe link.

We do not sell personal information and we do not share it for cross-context behavioural advertising. We disclose information only to service providers who process it on our behalf, under contract and only for the purpose we engaged them for:

• Our payment processor, to authorise and settle transactions.
• Shipping carriers and fulfilment partners, to deliver your order.
• Our hosting, database, authentication and email infrastructure providers.
• The AI model provider that generates assistant responses.
• Professional advisers, and law enforcement or regulators where we are legally required to disclose, or where disclosure is necessary to protect our rights or a person's safety.

We use a small number of strictly functional cookies and browser storage entries: an authentication session token so you stay signed in, your shopping cart contents, and a record that you acknowledged the research-use notice so it is not shown on every visit. We may also use privacy-conscious aggregate analytics to understand site performance. We do not run third-party advertising trackers. Blocking these cookies will break sign-in and checkout.

We keep account and order records for as long as your account is active and thereafter for the period required by tax, accounting and product-traceability obligations. AI assistant transcripts and technical logs are kept for a short operational period and then discarded or aggregated.

Data is transmitted over TLS and stored on managed infrastructure with access controls and row-level authorisation so that account holders can read only their own records. Sign-in is passwordless, so there are no passwords to store or breach; one-time codes and links are short-lived and single-use. No system is perfectly secure, but we work to protect your information in line with the sensitivity of what we hold.

You may request access to the personal information we hold about you, correction of inaccurate information, deletion of your account and its associated personal data, or a copy of your data in a portable format. You may also object to or withdraw consent for any processing that relies on consent.

Email support@covalent-research.com from the address on your account and we will verify the request and act on it within the period applicable law requires. We will not discriminate against you for exercising these rights. Some order records must be retained for regulatory reasons even after an account is closed.

This site is restricted to persons 21 years of age or older. It is not directed to children and we do not knowingly collect personal information from anyone under 21. If we learn that we have, we will delete the account and its data.

We operate from the United States and our infrastructure providers process data in the United States. If you access the site from elsewhere, you understand your information will be transferred to and processed in the United States, where data-protection law may differ from the law of your jurisdiction.

We may update this policy as the site, our providers or the law change. The “last updated” date above always reflects the current version, and material changes will be highlighted on the site. Questions about this policy can be sent to support@covalent-research.com.