Privacy Policy
Effective and last updated: October 3, 2026
December 1 launch signup and inquiries
If you consent to launch updates, we store your email address, optional first name, signup source, consent wording/version, and consent time. Resend processes the confirmation email and unsubscribe link. You may unsubscribe without an account. We do not collect medication information for launch signup. Partnership inquiries are stored in our protected administrative inbox and sent through Resend to our team; they do not enroll you in marketing.
Who we are and what this policy covers
OctivRx is operated by Octiv Health, Inc., a Pennsylvania company in the United States (“OctivRx,” “we,” “us,” or “our”). This Privacy Policy explains how we handle information in connection with the OctivRx website, medication and pharmacy searches, card previews, and business inquiries.
Questions or privacy requests may be sent to support@octivrx.com. This policy does not replace the privacy notices of a pharmacy, healthcare provider, or third-party service you choose to use.
Information we collect
We collect information only for the functions described here. You do not need to create an account to search medications, find pharmacies, or view a card.
Information typed into a form is not the same as a completed submission. The partner form sends its fields to our server only when you submit it. When you request a card email, we send your email address and any selected medication and pharmacy details shown in that form to Resend to fulfill your one-time request. We do not save card-email requests in our application database or enroll recipients in marketing. Physical-card requests and text-card delivery remain unavailable.
- Business inquiries: partner type, name, organization, email, optional phone number, message, and your confirmation that you are 18 or older and accept the terms. When delivery is available, these details are sent to our business inbox through our email provider.
- Optional OctivRx updates: when you separately choose to sign up, we store your email address, any ZIP code or adult age range you choose to provide, the partner page where you signed up, your language, and a record of your consent in our application database. Signing up is not required to search medications or obtain a prescription savings card. This information is not linked to medication searches or card requests.
- Medication searches: the words you search and the medication details you select, such as name, strength, form, and quantity, are used to display relevant information. Medication queries are sent through our backend to the National Library of Medicine catalog. Public catalog results may be cached briefly in server memory; search terms are not included in backend request logs or owner-dashboard metrics.
- Location searches: a ZIP code, address, city, or coordinates are sent to Mapbox to find locations, nearby pharmacies, maps, and estimated driving distances. Device location is requested through your browser’s permission controls; you may enter a location manually instead.
- Technical information: hosting and connected services may receive IP addresses, browser/device information, request paths, timestamps, and security or diagnostic information. A medication identifier in a page address may reveal a health-related interest.
- Browser preferences: your selected pharmacy, recent search location, and privacy choices may be stored locally on your device, as explained below.
Health-related searches and sensitive information
Medication names and location searches can reveal sensitive interests. Use only the information needed for a search. Do not include diagnoses, medical records, insurance identifiers, payment information, Social Security numbers, or other patient information in a partner inquiry or support email.
We do not send partner contact information to the medication catalog or Mapbox as part of a search. Those providers still receive the search inputs and the connection information needed to answer the request. This website is not a medical-record portal or a substitute for communications with your pharmacist or clinician.
How we use information
We use information to perform your requested search, display a card preview, remember your selected pharmacy and location, respond to inquiries, deliver business correspondence when available, operate the website, prevent abuse, diagnose problems, and meet applicable legal obligations.
A business inquiry does not enroll you in a newsletter, advertising audience, or recurring text-message program. We do not use medication searches or precise location to build advertising profiles.
We use separately submitted updates signup information for OctivRx updates and announcements, not for prescription eligibility or pharmacy pricing. You may ask us to remove your updates signup by contacting support@octivrx.com.
Service providers and external services
Services receive information needed for their particular function. Some requests occur directly between your browser and the provider, and the provider’s own privacy policy applies to that interaction.
- National Library of Medicine (NLM/NIH): medication catalog search terms and connection metadata needed to return medication information.
- Mapbox: entered places, coordinates, pharmacy queries, routing inputs, map requests, and connection metadata needed for search, maps, and distance estimates.
- Resend: business inquiry content, card-email recipient addresses, selected medication and pharmacy details included in a card-email request, sender/reply-to addresses, and delivery metadata when you submit an email request. A failed attempt may reach provider infrastructure even if no email is accepted. Resend may retain email content and delivery records under its own policies.
- Google: Google Fonts receives ordinary connection metadata when fonts load. If you choose a Google Maps directions link, its URL may include the starting and destination coordinates.
- Your email service or a pharmacy’s website: if you follow an external link or email us directly, that service handles the information you provide under its own terms.
When information is disclosed
We do not sell personal information, share it for cross-context behavioral advertising, or run advertising pixels or session-recording tools on this website. Disclosures to the service providers above are for the requested website functions, not advertising enrollment.
We may disclose information when reasonably necessary to comply with applicable law or a valid legal request, protect people and the service, investigate abuse, or resolve a dispute. If a merger or transfer of the business affects personal information, we will provide any notice and choices required by applicable law.
Cookies, local storage, and your controls
The website uses browser storage for functional preferences. A recent pharmacy-search location is reused for up to 30 minutes within the browsing session. Your selected pharmacy remains in browser storage until you replace or clear it. Privacy preferences are stored on your device so the site can remember them.
The website currently uses no optional analytics or marketing trackers. The Your Privacy Choices control explains the necessary-only setting. Global Privacy Control signals do not result in advertising sharing because we do not engage in that activity.
Co-branded partner pages maintain first-party daily aggregate counts of QR-link visits, landing-page visits, and card-link opens, grouped by partner, page language, and QR or direct source. These counters do not store cookies, IP addresses, visitor identifiers, medication details, or individual browsing histories. Repeated visits are counted separately; card-link opens do not establish prescription fills or redeemed savings.
You can clear site data in your browser to remove saved preferences and locations, revoke location permission in browser/device settings, or enter a ZIP or city instead of allowing device location. Blocking necessary storage may prevent saved preferences from working. Independent providers may use their own technologies under their privacy policies.
How long information is retained
The application does not create a database archive of partner inquiries. Submitted correspondence may remain with the email-delivery provider and in our business mailbox. We retain business correspondence only as needed to answer an inquiry, manage a relationship, resolve disputes, and satisfy legal requirements; you may request deletion when those purposes no longer require it.
Separately requested updates signups are stored while needed to manage your opted-in communications. You may request removal by emailing support@octivrx.com.
Session search-location reuse expires as described above, although an expired storage entry may remain on the device until it is replaced or cleared. Other browser preferences remain until changed or cleared. Hosting/security records and provider backups may have separate retention periods controlled by those providers. We do not promise immediate deletion of backup copies or records that must legally be retained.
Security
We minimize collected fields, validate inquiry submissions, limit repeated submission attempts, and avoid including inquiry content or email addresses in application request logs. Credentials used for provider access are handled on the server, not supplied to visitors’ browsers. Requests to the external search and email services use HTTPS.
No internet service, email system, or device can be guaranteed completely secure. Do not send sensitive patient information through ordinary email or the business form. If you believe there has been a security or privacy issue, contact support@octivrx.com.
Privacy requests and applicable rights
You may contact support@octivrx.com to request access, correction, or deletion of information you provided to us, or to ask how it is used. Include enough information to identify your correspondence, but do not send identity documents or sensitive health information unless a secure verification process is specifically arranged.
Depending on your location and applicable law, you may also have rights to a copy of your information, restriction or objection to certain processing, an authorized-agent request, or an appeal of a denied request. We will evaluate requests and respond within the period required by applicable law, with proportionate identity verification and any legally permitted exceptions. We do not discriminate against you for exercising applicable privacy rights.
Information retained solely in your browser is most directly removed by clearing site data. Requests concerning a third-party service’s own records may also need to be directed to that provider.
Adults only
The website is intended for people age 18 or older. We do not knowingly seek information from people under 18. If you believe a minor has provided personal information to us, email support@octivrx.com so we can review and remove it where appropriate.
An adult may research a medication prescribed to someone in their care, but should not submit the patient’s identifying or medical information through a business inquiry.
Location of processing
Octiv Health, Inc. operates in the United States. Hosting, search, and email providers may process information in the United States or other locations described in their policies. Legal protections can differ by location. This policy does not claim that every international privacy law applies to every website interaction or that a particular certification has been obtained.
Changes and contact
We will update this page and its revision date when our practices change. Material changes, including the introduction of optional tracking or new uses of sensitive information, will receive any additional notice or consent required by applicable law before that activity begins.
For questions or requests, contact Octiv Health, Inc., operator of OctivRx, at support@octivrx.com.