Privacy Policy
This Privacy Policy explains how Compounded Technologies (“Compounded,” “we,” “us”) collects, uses, shares and protects information when you visit compounded.app or use the Compounded platform, including pharmacy portals hosted at addresses such as yourpharmacy.compounded.app (together, the “Service”).
Who we are and our role
Compounded provides software that lets compounding pharmacies (“Pharmacies”) work with their partner clinics and prescribers (“Clinics”). Each Pharmacy operates its own portal on the Service.
When Pharmacies and Clinics use the Service to handle patient information, we process that information on their behalf and under their instructions. For protected health information (“PHI”) covered by the Health Insurance Portability and Accountability Act (“HIPAA”), we act as a business associate and handle PHI as described in our business associate agreements. If you are a patient, the Pharmacy and your prescriber are responsible for your health information, and their own privacy notices apply.
Information we collect
Account information
When a Pharmacy or Clinic user creates an account or is invited to one, we collect details such as name, email address, phone number, job role, organization name, practice address, and professional identifiers such as an NPI or DEA number where needed to process prescriptions.
Information from Google sign-in
If you choose to sign in with Google, we receive your name, email address and profile picture from your Google account. We use this only to create and authenticate your account. We do not request access to your Gmail, Google Drive, contacts, calendar or other Google data.
Patient and prescription information
Clinic users may enter patient details (such as name, date of birth, contact and shipping address, allergies and medical information relevant to a prescription) and prescription details. This information is entered by and belongs to the Pharmacy and Clinic, and we process it only to provide the Service.
Usage and technical information
We automatically collect limited technical data such as IP address, browser type, device information, pages visited and timestamps. We use this for security, troubleshooting and improving the Service.
Cookies
We use cookies and similar technologies that are necessary to keep you signed in and to secure the Service. We do not use advertising cookies.
How we use information
- To provide the Service, including authenticating users, routing prescriptions to the correct Pharmacy and showing order status and shipping details.
- To keep the Service secure, detect and prevent fraud or abuse, and maintain audit logs.
- To communicate with you about your account, service updates and support requests.
- To maintain and improve the Service.
- To comply with legal obligations.
We do not sell personal information or PHI, and we do not use it for advertising.
Google user data
Compounded’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Specifically:
- We use Google user data only to provide sign-in and account features you can see in the Service.
- We do not transfer Google user data to others except as needed to provide the Service, to comply with law, or as part of a merger or acquisition with notice to you.
- We do not use Google user data for advertising, and we do not sell it.
- We do not allow humans to read Google user data except with your consent, for security purposes, to comply with law, or when the data has been aggregated and anonymized.
- We do not use Google user data to develop, improve or train generalized artificial intelligence or machine learning models.
How we share information
- Within your portal. Information is shared between a Pharmacy and the Clinics it works with as needed to fulfill prescriptions. One Pharmacy cannot see another Pharmacy’s data.
- Service providers. We use vendors, such as cloud hosting (Amazon Web Services) and email delivery, who process data for us under contracts that require them to protect it, including business associate agreements where PHI is involved.
- Shipping carriers. Pharmacies may share shipping information with carriers to deliver orders.
- Legal reasons. We may disclose information if required by law, subpoena or court order, or to protect the rights, safety and security of our users or the public.
- Business transfers. If Compounded is involved in a merger, acquisition or sale of assets, information may be transferred, subject to this policy.
Data security
We use administrative, technical and physical safeguards designed to protect information, including encryption in transit and at rest, role-based access controls, separation of each Pharmacy’s data, and logging of access to sensitive records. No system is perfectly secure, and we will notify affected parties of a breach as required by law and our agreements.
Data retention
We keep account information while your account is active and as needed afterward for legal, security and record-keeping purposes. Prescription and patient records are retained according to the instructions of the Pharmacy and applicable pharmacy and healthcare record-keeping laws.
Your choices and rights
You can review and update your account information in the Service. You may request access to, correction of, or deletion of your personal information by emailing info@compounded.app. If you signed in with Google, you can also remove Compounded’s access at any time from your Google account permissions page. Patients who want to access or correct their health information should contact their Pharmacy or prescriber, and we will assist them as required.
Depending on where you live, you may have additional rights under state privacy laws. We will honor those rights as required.
Children’s privacy
The Service is intended for healthcare professionals and their staff. It is not directed to children, and we do not knowingly collect personal information directly from children under 13. Patient information about minors may be entered by a Clinic as part of a prescription and is handled as PHI on the Clinic’s and Pharmacy’s behalf.
Changes to this policy
We may update this policy from time to time. We will post the updated version on this page with a new effective date and, for material changes, notify account holders by email or in the Service.
Contact us
Questions about this policy or our privacy practices can be sent to info@compounded.app.
Compounded Technologies