LEGAL + TRUST

Privacy Policy

This policy explains the information CLR RX may collect through its public website and platform, why it is used, how it may be shared, and the choices available to users. A customer-specific agreement and, when applicable, a business associate agreement govern production platform data.

Last updated August 12, 2026 · Draft for counsel and operational review before commercial launch.
01

Information we collect

Website and demo interactions may include contact and organization details submitted through forms, device and security information, and records intentionally created in a customer workspace. Production services may process account, patient, provider, order, fulfillment, inventory, laboratory, payment, claims, communication, and audit information as configured by the customer.

02

How information is used

We use information to provide, secure, support, improve, and administer the service; respond to requests; maintain records; prevent misuse; meet contractual duties; and comply with law. We do not sell protected health information. We do not use protected health information for independent advertising.

03

Health information

When CLR RX processes protected health information for a covered entity or another business associate, CLR RX will do so only as permitted by the applicable agreement and law. The customer determines the lawful basis, permissions, notices, and authorizations for its use of the platform.

04

Sharing

Information may be disclosed to authorized customer users, configured transaction participants, contracted service providers, legal or regulatory authorities when required, and successors in a permitted business transaction. Access is intended to be limited to the purpose and minimum information appropriate to the workflow.

05

Retention and security

Records are retained according to applicable agreements, legal requirements, documented retention schedules, and operational need. Security measures are risk-based and evolve with the production environment; no system can guarantee absolute security.

06

Choices and requests

Depending on the relationship and applicable law, individuals may request access, correction, restriction, deletion, or other privacy assistance. Patient record requests should generally be directed to the clinic or organization that controls the record.

07

Contact

Privacy and security contact details will be published before commercial launch. Until then, use the Request Access form and select Privacy or Security in your message.

Legal review required

This working policy framework is designed to make the company's intended position visible and actionable. It should be finalized against the actual legal entity, contracts, data flows, vendors, states, insurance model, products, and production controls before reliance or launch.