Privacy Notice

For agent and agency accounts we act as the data controller of account and usage information. For the client information an agent collects through RxPlanMatch — names, contact details, prescriptions, pharmacies and current plans — the agent or agency decides why and how that information is used, and we process it on their behalf to provide the service.

• Account details (name, business name, email address, login credentials) — to create and secure your account, and to contact you about the service. Basis: performance of our contract with you.
• Client intake information (name, contact details, ZIP code, prescription drugs with strengths and dosages, pharmacy preference, current plan, uploaded documents or photos) — to read the drug list and produce plan comparisons, and to email results to the client and the agent. Basis: performance of the contract and, for the health-related details, the client's explicit consent given when they submit the form.
• Support messages and tickets — to answer questions and resolve issues. Basis: performance of the contract and our legitimate interest in supporting customers.
• Usage and technical data (pages viewed, actions taken, comparison counts, device identifiers, IP address, log data) — to run and secure the service, enforce plan limits, prevent fraud and abuse, and improve the product. Basis: legitimate interests and legal obligation.
• Marketing preferences — to send product updates where you have asked for them. Basis: consent, which you can withdraw at any time.

Card and billing details are collected and handled by our payment provider, Paddle, not by us.

• Service providers who help us run the service, such as hosting and database providers, email delivery providers, and AI processing providers used to read submitted drug lists. They act on our instructions under contract.
• Paddle.com, our Merchant of Record, for the sale of subscriptions, subscription management, payments, tax compliance and invoicing.
• The agent or agency a client was invited by, who receives the client's intake details and results.
• Professional advisers such as legal and accounting firms where needed.
• Authorities or other parties where we are required to do so by law, or to protect our rights or someone's safety.

We do not sell personal information.

Account information is kept while your account is active and for up to 7 years afterwards where we need it for tax and legal records. Client intake records and comparisons are kept while the agent's account is active, so past recommendations can be explained later, and are deleted or anonymised on request or when no longer needed. Support messages are kept for up to 3 years. Technical logs are kept for a short period, normally under 12 months.

Depending on where you live, you can ask us to give you a copy of your information, correct it, delete it, restrict or object to how we use it, or provide it in a portable format, and you can withdraw consent at any time. Clients who submitted information through an intake link can contact their agent or us directly. We answer requests within one month. You also have the right to complain to your local data protection or privacy authority.

We are based in the United States and our providers may process information there. Where information is transferred out of the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

We use appropriate technical and organisational measures to protect personal information, including encryption in transit, encrypted storage, row-level access rules so agents only see their own clients, single-use secure intake links, and restricted administrative access. No system is completely secure, so please tell us straight away if you think an account has been compromised.

We use cookies and similar storage that are strictly necessary to run the site: keeping you signed in, remembering your session, and securing forms and checkout. We do not use advertising cookies. If we add analytics or marketing cookies we will ask for your consent first and give you a way to change your choice. You can also clear or block cookies in your browser, though signing in may stop working.

The service is intended for licensed insurance professionals and the Medicare-eligible clients they serve. It is not directed at children.

We will post any update to this notice on this page and, where the change is significant, tell you by email. For any privacy question or request, email fuller413@proton.me.