RxAgent provides software that helps Canadian pharmacies automate prescription intake. We are committed to protecting privacy in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), Ontario's Personal Health Information Protection Act (PHIPA), and other applicable provincial privacy legislation.
This policy covers two groups: (a) visitors to our website, including people who join our waitlist, and (b) pharmacies and their staff who use the RxAgent service.
When you join our waitlist or contact us, we collect the information you provide, which may include your name, email address, pharmacy name, and location. We also collect limited, privacy-respecting analytics about website usage (such as page views and referring sites) that do not identify you individually.
When a pharmacy uses RxAgent, the service processes information contained in incoming prescriptions and related documents. This may include personal health information about patients, such as name, date of birth, prescribed medication, dosage instructions, and prescriber details. Pharmacies determine what information is submitted to the service.
For personal health information processed through the RxAgent service, the pharmacy is the "health information custodian" under PHIPA, and RxAgent acts as a service provider (information manager / agent) processing that information on the pharmacy's behalf and under its instructions. RxAgent does not use personal health information for its own purposes.
We do not sell personal information, and we do not use patient health information for advertising or to train models for any party other than to provide the service to the pharmacy that submitted it.
RxAgent stores and processes service data, including personal health information and AI inference, on infrastructure located in Canada. Patient data is not transferred or processed outside of Canada in the ordinary course of providing the service. Limited website and communication data (for example, email delivery and privacy-respecting analytics) may be handled by service providers as described below.
We use a small number of third-party providers to operate our website and communications, for example email forwarding and waitlist form processing. These providers are bound by contractual confidentiality and security obligations and receive only the information necessary to perform their function. Patient health information processed by the RxAgent service is hosted on Canadian infrastructure and is not shared with website or marketing providers.
We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit and at rest, access controls, and detailed audit logging of actions taken within the service. No method of transmission or storage is completely secure, but we work to protect information using safeguards appropriate to its sensitivity.
We retain personal information only as long as necessary for the purposes described in this policy or as required by law. Personal health information processed for a pharmacy is retained and deleted according to that pharmacy's instructions and applicable record-keeping requirements. Waitlist information is kept until you ask us to remove it or it is no longer needed.
Subject to applicable law, you may request access to, correction of, or deletion of personal information we hold about you. Where the information is personal health information held on behalf of a pharmacy, please direct your request to that pharmacy as the custodian; we will support the pharmacy in responding. To make a request about website or waitlist information, contact privacy@rxagent.ca.
We may update this policy from time to time. We will post the updated version here and revise the "Last updated" date above. Material changes will be communicated where appropriate.
Questions or privacy requests can be sent to privacy@rxagent.ca. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada or your provincial privacy regulator.