Privacy policy

RxReady ("we") helps compounding pharmacies keep the records a board of pharmacy inspector asks for. We don't sell your data and we don't show ads.

What we store

• Your account: your email address and a securely hashed password, handled by Amazon Cognito.
• Your pharmacy's records: each location's name, state, pharmacy license number and expiry, and DEA registration expiry; equipment and rooms with their certification records; cleaning, temperature, humidity and pressure readings; environmental samples, their results and corrective actions; the inspection checklist; amendments; team roles and locations; and a history of who changed what and when.
• Staff and credentials: each staff member's name, work email, job type and optional NABP e-Profile ID, and for each credential its type, number, issue and expiry dates and who verified it. We don't ask for dates of birth, Social Security numbers or patient information. Don't enter patient data in RxReady.
• Attachments: copies of licenses and certificates, vendor certification reports and checklist evidence, stored privately in Amazon S3 and shown only through short-lived signed links.
• Page-view analytics: the page visited, referring site, browser user agent, rough location when available, and a one-way hash of the IP address that changes daily. We never store the raw IP address.
• Feedback you send, with your email if you give it.
• Billing: Stripe processes payments. We store Stripe customer and subscription IDs and your plan, never your card number.

Inspector links

The owner or pharmacist-in-charge can create a read-only link to one location's inspection binder, including its attachments. Anyone with the link can open it without signing in, so share it only with the inspector or auditor who needs it. Turning the link off stops it working at once.

Email

We send sign-in codes, invites, and reminder emails when a license, credential, pharmacy registration or equipment certification is coming due or overdue: to the owner and the location's pharmacist-in-charge, and to a staff member with a login about their own credentials.

Cookies

We use first-party cookies to keep you signed in and random IDs to count visits and sessions. We do not use third-party advertising cookies.

Who processes your data

Amazon Web Services provides hosting, database, file storage, and sign-in; Stripe processes payments; and Resend sends email. Each processes data only to provide its service to us.

How long we keep it

Your pharmacy's records stay until you ask us to close the account; boards and USP chapters require compounding records to be kept for years, so the app doesn't delete them on its own. Analytics are kept in aggregate form for as long as they remain useful.

Your choices

You can export your staff roster, logs, monitoring records and other records as CSV. To get a copy of everything, correct personal information, or delete your account and pharmacy data, contact us.

Contact

Questions about privacy: use the feedback form.