Privacy Policy

1. Information We Collect

Account Information: Phone number, name (optional). We do not collect email addresses, social security numbers, or financial information.

Review Data: Pharmacy ratings (stock availability, wait time, service quality), optional written comments, and caregiver status. Reviews are public and associated with your display name.

Usage Data: Pages visited, actions taken within the app, device type, and browser information for analytics and fraud prevention.

Location Data: With your permission, approximate location for finding nearby pharmacies. We do not store precise GPS coordinates.

IP-Based Location: When you visit our site without signing in, we may use your IP address to estimate your general location (city or ZIP code) so we can show pharmacies near you. We never persist the IP address itself — only the resolved general location, cached for 24 hours and keyed by an opaque hash. IP-derived location is never shared with third parties.

2. How We Use Your Information

• Verify your identity via phone number (SMS verification)
• Display pharmacy reviews to the community
• Calculate stock confidence and service ratings
• Prevent fraud, fake reviews, and abuse
• Comply with legal obligations

3. Information Sharing

We do not sell your personal information. We share data only with:

• Service providers: SMS verification (Twilio), hosting, analytics
• Legal requirements: When required by law, court order, or regulatory authority
• Public reviews: Your reviews (with display name) are publicly visible to promote pharmacy transparency

4. Health Information (PHI) Disclaimer

PharmacyPulse is not a healthcare provider and is not subject to HIPAA. However, we take reasonable steps to prevent accidental disclosure of personal health information in reviews. Our content moderation system screens for medication names and medical conditions. Do not include specific medication names, diagnoses, or other health details in your reviews.

5. Your Rights (CCPA/CPRA)

California residents have the right to:

• Know what personal data we collect and how it is used
• Access your personal data (export available in Account settings)
• Delete your personal data (request via Account settings, processed within 45 days)
• Opt out of sale of personal information (we do not sell data)
• Non-discrimination for exercising your privacy rights

6. Do Not Sell My Personal Information

We do not sell, rent, or trade your personal information to third parties for monetary or other valuable consideration. This policy applies to all users regardless of location.

7. Data Retention

We retain your account data for as long as your account is active. Reviews remain public even after account deletion (anonymized as "Deleted User"). You may request full data deletion via the CCPA process.

8. Security

We use industry-standard security measures including encryption in transit (TLS), encrypted sessions, rate limiting, and brute-force protection.

9. Contact Us

For privacy inquiries or to exercise your rights, contact: privacy@beyondrx.com