Privacy Policy

Covalent Research Labs (“Covalent”, “we”, “us”) supplies third-party tested research compounds to laboratories, research clinics and qualified investigators. This policy explains what information we collect through covalent-research.com, how we use it, who we share it with, and the choices you have. It applies to the website, the account system, the storefront and the on-site AI assistant.

We collect only what we need to operate accounts and fulfil research orders:

• Account information — name, email address and password credentials, or the basic profile fields Google returns if you sign in with Google.
• Order information — the items ordered, order totals, order history and the shipping address and contact details you provide.
• Payment information — handled by our payment processor. Card numbers and full payment credentials are never transmitted to or stored on our systems; we receive only a transaction reference and status.
• AI assistant messages — the questions you type into the on-site assistant, together with the responses generated, so we can operate and improve the feature.
• Technical and usage data — IP address, browser and device type, pages viewed and referring pages, collected automatically by our hosting and analytics infrastructure.

We do not ask for and do not want health information, diagnoses, treatment details or any other clinical data about an individual. Please do not send it to us or type it into the AI assistant.

If you choose to sign in with Google, Google shares a limited set of profile information with us: your name, your email address, your Google account identifier and your profile picture if one is set. We use that information for one purpose only — to create and authenticate your Covalent account and to associate your orders with it.

We do not request access to your Gmail, Drive, Contacts, Calendar or any other Google service, we do not use Google account data for advertising or profiling, and we do not sell or transfer it to third parties for those purposes. You can disconnect Covalent from your Google account at any time in your Google account security settings; if you do, use email and password sign-in or contact us to keep access to your order history.

• To create, authenticate and secure your account.
• To process, fulfil, ship and support your orders.
• To respond to enquiries and provide customer and technical support.
• To operate the AI assistant and the site itself, including diagnosing errors and preventing abuse or fraud.
• To meet legal, tax, recordkeeping and research-use compliance obligations.
• To send transactional messages about your account and orders. We only send marketing email if you have asked us to, and every marketing message has an unsubscribe link.

We do not sell personal information and we do not share it for cross-context behavioural advertising. We disclose information only to service providers who process it on our behalf, under contract and only for the purpose we engaged them for:

• Our payment processor, to authorise and settle transactions.
• Shipping carriers and fulfilment partners, to deliver your order.
• Our hosting, database, authentication and email infrastructure providers.
• The AI model provider that generates assistant responses.
• Professional advisers, and law enforcement or regulators where we are legally required to disclose, or where disclosure is necessary to protect our rights or a person's safety.

We use a small number of strictly functional cookies and browser storage entries: an authentication session token so you stay signed in, your shopping cart contents, and a record that you acknowledged the research-use notice so it is not shown on every visit. We may also use privacy-conscious aggregate analytics to understand site performance. We do not run third-party advertising trackers. Blocking these cookies will break sign-in and checkout.

We keep account and order records for as long as your account is active and thereafter for the period required by tax, accounting and product-traceability obligations. AI assistant transcripts and technical logs are kept for a short operational period and then discarded or aggregated.

Data is transmitted over TLS, stored on managed infrastructure with access controls and row-level authorisation so that account holders can read only their own records, and passwords are stored only as salted hashes. No system is perfectly secure, but we work to protect your information in line with the sensitivity of what we hold.

You may request access to the personal information we hold about you, correction of inaccurate information, deletion of your account and its associated personal data, or a copy of your data in a portable format. You may also object to or withdraw consent for any processing that relies on consent.

Email support@covalent-research.com from the address on your account and we will verify the request and act on it within the period applicable law requires. We will not discriminate against you for exercising these rights. Some order records must be retained for regulatory reasons even after an account is closed.

This site is restricted to persons 21 years of age or older. It is not directed to children and we do not knowingly collect personal information from anyone under 21. If we learn that we have, we will delete the account and its data.

We operate from the United States and our infrastructure providers process data in the United States. If you access the site from elsewhere, you understand your information will be transferred to and processed in the United States, where data-protection law may differ from the law of your jurisdiction.

We may update this policy as the site, our providers or the law change. The “last updated” date above always reflects the current version, and material changes will be highlighted on the site. Questions about this policy can be sent to support@covalent-research.com.