Privacy Policy
How CaliberRx collects, uses, shares, and protects personal information.
Effective Date: April 24, 2026
Entity: CaliberRx LLC
Website: caliberrx.co
1. Scope and Relationship to HIPAA
This Privacy Policy describes how CaliberRx LLC (“CaliberRx,” “we,” or “us”) collects, uses, shares, and protects
personal information when you visit caliberrx.co, interact with our marketing, create an account, or use our non-clinical
coordination services.
This Privacy Policy does not cover Protected Health Information (PHI) maintained under the Health Insurance
Portability and Accountability Act (HIPAA). PHI that you share with, or that is generated by, the CaliberRx-affiliated
Provider Group in the course of your clinical care is governed by the separate Notice of Privacy Practices issued by the
Provider Group. If you are looking for information about how your clinical records are handled, please consult the Notice
of Privacy Practices.
2. Acting on Behalf of Another Person
If you are using the services on behalf of another person (for example, as an authorized agent, guardian, or caregiver),
you represent that you are authorized to act on that person’s behalf and that the individual has accepted this Privacy
Policy. You agree that the information you provide is accurate and complete.
3. Information We Collect
We collect information in the following categories:
- Identifiers and contact information — name, email address, phone number, mailing and billing address, date of birth, and account credentials.
- Demographic information — gender, ZIP code, and similar attributes you choose to provide.
- Eligibility information — self-reported health history, medication history, and eligibility responses you submit through intake questionnaires. (Clinical intake responses you submit during a consultation are governed by HIPAA and the Provider Group’s Notice of Privacy Practices.)
- Payment information — payment method details handled by our payment processors (currently Stripe, Inc. and GreenPay). We do not store full credit or debit card numbers on our own servers.
- Device and usage information — IP address, device identifiers, operating system, browser type, referring and exit URLs, pages viewed, time spent, interactions with features, and diagnostic or performance data.
- Location information — general geographic location inferred from IP address, and (with your permission) more precise location from your mobile device.
- Communications — messages you send us by email, chat, or phone; customer-support tickets; and recordings of support calls where permitted and disclosed.
- Marketing and advertising data — information about how you interact with our advertising on third-party platforms and how you arrive at our website.
4. How We Collect Information
- Directly from you — when you complete a form, create an account, contact support, or provide information during intake.
- From your device — automatically, through cookies, pixels, software development kits, and similar technologies described in Section 8.
- From service providers — such as our payment processor, email delivery service, analytics providers, and advertising platforms.
- From the Provider Group — limited information (such as prescription status or billing allocations) necessary for CaliberRx’s administrative coordination role.
5. How We Use Information
- To operate, maintain, and improve the CaliberRx platform and services.
- To verify your identity and eligibility and to administer your account.
- To coordinate your access to the Provider Group and the dispensing pharmacy.
- To process payments, billing, and refunds through our payment processor.
- To communicate with you about your account, appointments, orders, and the services you have requested.
- To send you marketing and promotional communications where permitted, with an opt-out in each message.
- To measure and improve the performance of our website, marketing, and advertising.
- To prevent fraud, misuse, and security incidents and to enforce our Terms of Service.
- To comply with applicable law and respond to lawful requests from government authorities.
6. Artificial Intelligence and Automated Processing
We use artificial intelligence and other automated technologies to process administrative and operational data. Typical
applications include support-ticket routing, fraud and abuse detection, marketing performance analysis, spam filtering,
and the generation of internal summaries or analytics from de-identified data. AI tools used by CaliberRx are deployed
with configurations intended to prevent the training of third-party models on our customers’ personal information. Clinical
decision-making is performed by licensed clinicians; any use of AI by the Provider Group in connection with clinical care
is described in that group’s Notice of Privacy Practices.
7. How We Share Information
We share personal information only in the following circumstances:
- With the Provider Group and the dispensing Pharmacy — to the extent necessary to coordinate your access to clinical care and prescription fulfillment.
- With service providers — including cloud hosting, software infrastructure, email delivery, customer support tooling, analytics, advertising platforms, and our payment processors Stripe, Inc. and GreenPay. Service providers are contractually required to use information only for the purposes we authorize.
- With advertising and analytics partners — including Meta Platforms, Inc. (Facebook and Instagram) and Google LLC (Google Analytics and Google Ads), which may use cookies and pixels to measure campaign performance and deliver interest-based advertising. You may opt out of Meta targeting in your Facebook/Instagram ad settings, and out of Google targeting through Google’s ad settings.
- In response to legal process — such as a subpoena, court order, or other lawful request from a government authority.
- To protect rights and safety — where disclosure is necessary to prevent harm, investigate fraud, enforce our terms, or respond to a security incident.
- In a business transaction — such as a merger, acquisition, financing, or sale of assets, subject to reasonable notice and contractual protections.
- With your direction or consent — for any purpose you authorize.
CaliberRx does not sell personal information for monetary consideration. Certain advertising practices may qualify as a
“sale” or “share” under specific state privacy laws; see the State Privacy Law Addendum for your rights to opt out.
8. Cookies, Pixels, and Similar Technologies
We and our service providers use cookies, pixel tags, web beacons, software development kits, scripts, and similar
tracking technologies to operate our website, measure usage, remember your preferences, and deliver and measure
advertising. Most browsers allow you to block or delete cookies, but doing so may affect the functionality of the services.
We currently do not respond to “Do Not Track” browser signals, which are not uniform across browsers; we do, however,
honor Global Privacy Control (GPC) signals and other state-mandated opt-out mechanisms where required by law.
9. De-Identified Information
We may de-identify or aggregate personal information so that it no longer reasonably identifies an individual. We may
use, retain, and share de-identified and aggregated information for any lawful purpose, including research, analytics, and
product improvement. We will not attempt to re-identify de-identified information except to test the effectiveness of our deidentification
practices.
10. Your Choices and Rights
Questions about this Notice or about the handling of your PHI should be directed to the Privacy Officer of the Provider
Group, care of:
- Account updates. You may update your contact information, communication preferences, and other account details at any time through your account portal.
- Marketing opt-out. Every marketing email includes an unsubscribe link. You can also email privacy@caliberrx.co to be removed from all marketing lists. Service-related messages (receipts, appointment confirmations, important notices) may continue.
- SMS opt-out. Reply STOP to any text message you receive from us. See the SMS Terms of Service for details.
- Access, correction, deletion, and other state-law rights. Residents of states with comprehensive privacy laws have the rights described in our State Privacy Law Addendum. Submit requests to privacy@caliberrx.co.
11. Data Security
We use reasonable administrative, technical, and physical safeguards designed to protect personal information from
unauthorized access, use, and disclosure. No system is perfectly secure. You are responsible for maintaining the
confidentiality of your account credentials and for promptly notifying us at privacy@caliberrx.co if you suspect your
account has been compromised.
12. Data Retention
We use reasonable administrative, technical, and physical safeguards designed to protect personal information from
unauthorized access, use, and disclosure. No system is perfectly secure. You are responsible for maintaining the
confidentiality of your account credentials and for promptly notifying us at privacy@caliberrx.co if you suspect your
account has been compromised.
13. Children
The services are directed to adults eighteen (18) years of age or older. We do not knowingly collect personal information
from individuals under 18. If you believe we have collected information from a minor, please contact us immediately at
privacy@caliberrx.co.
Procedure to remove information about a minor
- A clear description of the information to be removed.
- Where applicable, the URL or location on the platform at which the information appears.
- The minor’s name and, if applicable, account email address.
- The full name, mailing address, and email address of the person submitting the request, and the requester’s relationship to the minor.
We will act on verified requests within a reasonable time, consistent with applicable law. We may be unable to remove
information in certain circumstances, including where retention is required by law, where the information is maintained as
part of a clinical record, or where the information has already been de-identified.
14. United States Only
The services are intended for use by residents of the United States and are delivered from the United States. If you
access the services from outside the United States, you do so at your own initiative and are responsible for compliance
with local law.
15. Changes to This Policy
We may update this Privacy Policy from time to time. The “Effective Date” at the top of the policy indicates the date of the
most recent update. Material changes will be communicated to you by email or through the platform. Your continued use
of the services after the update constitutes acceptance of the revised policy.
16. Contact
Questions about this Privacy Policy may be directed to privacy@caliberrx.co. Written correspondence may be sent to
CaliberRx LLC at the mailing address published at caliberrx.co.