Privacy Policy

1. Information we collect

About people who use the Platform (administrators, dispatchers, pharmacy staff and drivers):

• Account details: name, email address, phone number, role, the pharmacy you belong to, and, for drivers, a profile photo and assigned zones.
• Sign-in information: your password (stored only in protected form), verification codes sent to your email, and tokens that keep you signed in or let us recognize a trusted device.
• Device and technical information: IP address, browser or device type, a device identifier and push-notification token for the Driver App, and crash and error reports.
• Activity records: what you do on the Platform, such as creating or updating deliveries, assigning drivers and changing accounts, with times, kept as an audit trail.
• Driver location: the location of a driver's device while working and when a delivery attempt is recorded, including accuracy and time.

About deliveries and the people who receive them:

• Recipient and patient name, delivery address, phone number and delivery instructions.
• Prescription and package details such as tracking and prescription numbers, item counts, time windows and handling requirements.
• Proof of delivery: signatures, photos, the name and relationship of the person who received the package, and the time and location of the attempt.
• Messages sent to recipients and their delivery status.

2. How we use information

• To run the Platform: create, assign, route and track deliveries and show each person the information their role needs.
• To verify and document deliveries and keep a record of who did what and when.
• To keep accounts and patient information secure, and to detect and prevent misuse.
• To send operational messages: account emails and sign-in codes, push notifications to drivers, and delivery updates and signature links to recipients.
• To maintain, troubleshoot and improve the Platform, and to meet legal and contractual obligations.

3. Patient health information

Prescription and patient details are handled under our agreements with the pharmacies that own them and under applicable health-privacy laws, including HIPAA where it applies. We limit access to what is needed to arrange and complete a delivery, we log access to it, and everyone who uses the Platform is bound by the confidentiality rules in our Terms & Conditions.

4. Who we share it with

We do not sell personal information. We share it only as needed to operate the service:

• The pharmacy that owns a delivery, and our administrators and dispatchers, who see the delivery details and its activity, and the assigned driver's name and, during a delivery, location.
• The driver assigned to a delivery, who sees the recipient's name, address, phone and handling requirements needed to complete it.
• Service providers that help us run the Platform, such as cloud hosting and storage, text and email messaging, maps and address search, route planning, push notifications, real-time updates and error monitoring. They may process information only to provide their service to us.
• Authorities or other parties when the law requires it, or to protect people, property or our rights.

5. Cookies and local storage

The web applications store a session token and basic profile details in your browser's local storage so you stay signed in, and may set a secure cookie that remembers a trusted device so you are not asked for a verification code every time. The Driver App stores its session token in the device's secure storage. We do not use advertising or cross-site tracking cookies.

6. Permissions in the Driver App

Drivers can turn any permission off in their device settings, but some features will then stop working.

• Location: to plan and verify deliveries, used while the app is in use.
• Camera and photo library: to capture proof of delivery, scan barcodes and set a profile photo.
• Notifications: to alert drivers to new or changed deliveries.

7. How long we keep information

We keep information for as long as it is needed to provide the service, keep required delivery and audit records, resolve disputes and meet legal and contractual requirements. After that we delete or anonymize it. Retention for patient information also follows our agreements with each pharmacy.

8. Security

We protect information with measures such as encrypted connections, hashed passwords, verification codes at sign-in, access limited by role, secure storage of tokens, and audit logging. No system is perfectly secure, so please also protect your devices and passwords.

9. Your choices and rights

You can ask to see, correct or delete the personal information we hold about you, subject to records we must keep. You can update your name, email, phone and photo from your profile where available. Recipients and patients should contact the pharmacy that arranged their delivery, or write to us at trevor@myrxdash.com.

10. Children

The Platform is for working adults and is not directed to children under 18, and we do not knowingly collect their information. Deliveries of medication for minors are arranged by the pharmacy.

11. Changes to this policy

We may update this policy from time to time. When we do, we will change the date at the top, and where required we will tell you through the Platform.

12. Contact

Questions or requests about privacy: RXDash, trevor@myrxdash.com.