Privacy Policy

Last updated: 2026-06-04

1. Who We Are

PharmasTrack operates pharmastrack.com, providing automated drug, vaccine and supply expiry alerts for nursing homes, pharmacies and medical clinics. Contact: info@pharmastrack.com

2. Data We Collect

• Contact: name, email, facility name, phone (via Tally.so forms)
• Inventory: product names, batch numbers, expiry dates (dashboard/CSV)
• Usage: login timestamps, features accessed, error logs
• Payment: processed via Stripe (we never see full card numbers)

3. How We Use Data

• Expiry alerts and audit reports
• Account, billing, support communications
• Service improvement (aggregate, anonymized)
• Legal compliance including CMS and DSCSA requirements

4. Storage & Third Parties

Your data is stored on: Vercel (hosting, USA), Tally.so (forms, Belgium/EU), Stripe (payments, Global), Google Workspace (email, USA). We do NOT sell or share your data with advertisers.

5. Your Rights (GDPR & CCPA)

• Access: request a copy of your data
• Rectification: correct inaccurate data
• Erasure: request deletion
• Portability: receive data in machine-readable format

Email info@pharmastrack.com. Response within 30 days.

6. Retention

Inventory data: while account active + 90 days post-cancellation. Payment records: 7 years (IRS).

7. Security

HTTPS TLS 1.3. AES-256 at rest. MFA required for admin access.