Privacy Policy

RxVance (“RxVance,” “we,” “us,” or “our”) provides a regulatory intelligence and drug shortage monitoring platform for compounding pharmacies. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our website, application, and related services (collectively, the “Service”).

By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information You Provide

• Account information: name, work email address, pharmacy or organization name, role/title, and password (stored as a salted hash, never in plain text).
• Billing information: the Service is currently free; if paid plans are introduced in the future, billing contact and payment details will be processed by a third-party payment processor, and we will not store full payment card numbers on our servers.
• Watchlist and configuration data: ingredients, NDC codes, suppliers, and monitoring preferences you configure within the Service.
• Communications: any information you provide when contacting support or providing feedback.

1.2 Information Collected Automatically

• Usage data: pages visited, features used, timestamps, and general interaction data with the Service.
• Device and log data: IP address, browser type, operating system, and access times, collected for security and diagnostic purposes.
• Cookies and similar technologies: used for authentication (session persistence) and basic analytics. We do not use cookies for third-party advertising.

1.3 Information From Third-Party Sources

RxVance aggregates publicly available regulatory data — including FDA drug shortage records, the Federal Register, state pharmacy board notices, and related government sources — to power the Service. This public regulatory data is not personal information about you or your organization.

2. How We Use Information

We use collected information to:

• Provide, maintain, and improve the Service
• Authenticate your account and secure access to the platform
• Send regulatory alerts, compliance notifications, and account-related emails
• Respond to support requests and communicate with you about the Service
• Monitor for fraud, abuse, and security incidents
• Comply with legal obligations

We do not sell personal information to third parties, and we do not use your account or watchlist data to train third-party advertising models.

3. How We Share Information

We may share information with:

• Service providers who perform functions on our behalf (e.g., cloud hosting, email delivery, payment processing), under contractual confidentiality obligations
• Legal and safety purposes, where required by law, subpoena, or to protect the rights, property, or safety of RxVance, our users, or the public
• Business transfers, in connection with a merger, acquisition, or sale of assets, subject to standard notice requirements

We do not share your pharmacy’s watchlist, alert configuration, or compliance report data with other RxVance customers or unrelated third parties.

4. Data Security

We employ industry-standard safeguards to protect your information, including encryption in transit and at rest, role-based access controls, row-level security on stored data, and audit logging of access to sensitive records. No system is completely secure, and we cannot guarantee absolute security, but we continually work to protect your information against unauthorized access, alteration, disclosure, or destruction.

5. Data Retention

We retain account and usage information for as long as your account is active or as needed to provide the Service. Compliance reports and access audit trail records are retained in immutable form as required to support regulatory compliance documentation (e.g., USP <795>, <797>, <800> recordkeeping expectations), even after account closure, unless deletion is legally required.

6. Your Rights and Choices

Depending on your location, you may have the right to:

• Access, correct, or request deletion of your personal information
• Object to or restrict certain processing
• Request a copy of your data in a portable format

To exercise any of these rights, contact us at a.jalloh@rxvance.com. We will respond within a reasonable timeframe and in accordance with applicable law. Note that certain records (e.g., immutable compliance reports and audit trails) may be retained even after a deletion request where required for regulatory or legal purposes.

7. Children’s Privacy

The Service is intended for use by licensed pharmacy professionals and organizations. It is not directed at, and we do not knowingly collect information from, individuals under 18 years of age.

8. International Users

RxVance is operated from and hosted in the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last updated” date above. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Email: a.jalloh@rxvance.com

This Privacy Policy is provided as a general template and does not constitute legal advice. Organizations should have this document reviewed by qualified legal counsel before publication, particularly with respect to HIPAA, state pharmacy regulations, and any Business Associate Agreement obligations applicable to their use case.