Privacy Policy
Last updated: January 20, 2026
TheRxOS ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal and health information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.
1. Information We Collect
We collect information that you provide directly to us, including:
- Account Information: Name, email address, phone number, pharmacy name, NPI, and NCPDP numbers
- Prescription Data: De-identified or limited prescription claims data uploaded by your pharmacy for analysis
- Protected Health Information (PHI): Patient information necessary for identifying clinical opportunities, handled in accordance with HIPAA requirements
- Usage Data: Information about how you interact with our platform
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our services
- Analyze prescription data to identify clinical and financial opportunities
- Generate reports and analytics for your pharmacy
- Communicate with you about your account and our services
- Ensure compliance with legal and regulatory requirements
3. HIPAA Compliance
TheRxOS operates as a Business Associate under HIPAA. We:
- Enter into Business Associate Agreements (BAA) with all covered entity clients
- Implement administrative, physical, and technical safeguards to protect PHI
- Train our workforce on HIPAA requirements
- Report any breaches as required by law
- Only use and disclose PHI as permitted by our BAA and HIPAA regulations
4. Data Security
We implement industry-standard security measures including:
- Encryption of data in transit and at rest
- Secure cloud infrastructure with SOC 2 compliant providers
- Role-based access controls
- Regular security assessments and monitoring
- Audit logging of all data access
5. Data Sharing and Disclosure
We do not sell your personal information or PHI. We may share information:
- With service providers who assist in operating our platform (under appropriate agreements)
- To comply with legal obligations or valid legal processes
- To protect our rights, privacy, safety, or property
- With your consent or at your direction
6. Data Retention
We retain your information for as long as your account is active or as needed to provide services. We also retain information as necessary to comply with legal obligations, resolve disputes, and enforce agreements.
7. Your Rights
You have the right to:
- Access your personal information
- Request correction of inaccurate data
- Request deletion of your data (subject to legal retention requirements)
- Export your data in a portable format
- Withdraw consent where processing is based on consent
8. Third-Party Services
Our platform may integrate with third-party services such as:
- Google APIs for email functionality (subject to Google's Privacy Policy)
- Payment processors for billing
- Analytics providers
These services have their own privacy policies governing their use of your information.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.
10. Contact Us
If you have questions about this Privacy Policy or our privacy practices, please contact us at:
TheRxOS
Email: privacy@therxos.com
Website: therxos.com