This Privacy Policy describes how GraphiteRx Inc. ("we," "us," or "GraphiteRx") collects, uses, stores, and shares personal information obtained from users ("you" or "users") of our website, applications, products, and services (collectively referred to as the "Services").
 

1.  Information Collection

 

We collect certain personal information from users of both sellers and buyers to provide our Services. The types of personal information we collect may include:

 

• Sellers: Name, contact information, business details, financial information, and any other information necessary for account management and order processing.

• Buyers: Name, contact information, shipping address, payment details, and any other information necessary for order fulfillment and communication.

• Contact Information: Such as your name, email address, phone number, and mailing address when you provide it to us voluntarily.

• Log Data: Information automatically collected when you access or use our Services, including your IP address, browser type, referring/exit pages, and operating system.

• Cookies and Similar Technologies: We may use cookies, web beacons, and similar technologies on our platform to enhance the user experience, track usage patterns, and collect information for analytics and marketing purposes. By using our platform, you consent to the use of these technologies.

• Third-Party Integrations: If you choose to integrate our Services with third-party platforms or services, we may collect information from those platforms in accordance with their privacy policies.

 

2. Use of Personal Information

 

We use the personal information we collect from users for the following purposes:

 

• Sellers: Account management, order processing, payment settlements, communication regarding sales and promotions, and any other necessary business-related activities.

• Buyers: Order fulfillment, payment processing, customer support, communication about products and promotions, and any other necessary activities to enhance the buyer experience.

• To provide and improve our Services, respond to inquiries, and fulfill your requests.

• To personalize your experience and provide you with tailored content and advertisements.

• To communicate with you about our products, services, updates, and promotions.

• To analyze and understand how our Services are used, monitor usage patterns, and measure the effectiveness of our marketing campaigns.

• To protect our legal rights, investigate potential violations, and comply with applicable laws and regulations.

 

3.  Data Sharing and Disclosure

 

We may share your personal information in the following circumstances:

 

• Third-Party Service Providers: We may engage trusted third-party service providers to assist us in various aspects of our business, including payment processing, financial services, license verification, platform operations, marketing, and analytics. These providers may have access to personal information as necessary to perform their functions on our behalf and are subject to their own privacy policies.

• We use Balance Payments for financial services, Stripe for payment processing and Plaid to facilitate the linking of your bank account(s) or other financial institutions with our Services. Please review their respective privacy policies for information on how they handle personal information.

• We use MedPro for license verification purposes. Please review their privacy policies to understand how your information will be handled during the verification process.

• Other Users: We may share personal information with other users on our platform as necessary to facilitate transactions and provide our services. For example:

• We may share a buyer's shipping address with a seller to facilitate order fulfillment.

• We may provide a seller's contact information to a buyer for communication regarding an order.

• Platform Partners: if we are powering an ordering platform together with a platform partner, we may share personal information with that platform partner.

• Business Transfers: If we are involved in a merger, acquisition, or sale of assets, your personal information may be transferred as part of that transaction.

• Legal Requirements: We may disclose your personal information if required to do so by law or in response to valid requests from governmental authorities.

 

4.  Data Retention

 

We retain personal information from users for as long as necessary to fulfill the purposes outlined in this Privacy Policy. The specific retention periods may vary based on legal requirements, order history, or customer support purposes.

​

5.  Data Security

 

We implement reasonable security measures to protect personal information from unauthorized access, use, or disclosure. These measures include encryption, secure payment processing, and other industry-standard protocols. However, please note that no method of transmission over the internet or electronic storage is completely secure.

 

6.  Data Transfers

 

We may transfer personal information to entities with operations in other countries for the purposes outlined in this Privacy Policy. We take steps to ensure the protection of personal information during such transfers in accordance with applicable data protection laws.

 

7.  Third-Party Websites and Services

 

Our Services may contain links to third-party websites or services that are not operated or controlled by us. This Privacy Policy does not apply to such third-party websites or services, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of these third parties before providing any personal information.

 

8.  Your Choices and Rights

 

You have certain rights and choices regarding your personal information. You may:

• Update, correct, or delete your account information.

• Opt-out of receiving marketing communications.

• Exercise any other rights granted to you by applicable data protection laws.

To exercise these rights or make any requests, please contact us using the information provided at the end of this Privacy Policy.

 

9.  Children's Privacy

 

Our Services are not intended for children under the age of 13. We do not knowingly collect personal information from children under the age of 13. If you believe that we have collected personal information from a child under the age of 13, please contact us immediately, and we will take appropriate measures to remove the information.

 

10.  State-Specific Requirements

 

For users located in specific states that have additional privacy requirements, such as California, we comply with the relevant state laws. Please refer to the California Privacy Addendum at the end of this Privacy Policy for more details about your rights and how we handle your personal information.

 

11. Updates to the Privacy Policy

​

We may update this Privacy Policy from time to time. Any changes will be posted on this page, and the "Last Updated" date at the top will indicate the effective date of the revised policy. We encourage you to review this Privacy Policy periodically.

 

12. Contact Us

​

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at privacy@GraphiteRx.com.

​

 

 

California Privacy Addendum

Last Updated: September 15, 2023

 

This California Privacy Addendum ("Addendum") supplements the information provided in our Privacy Policy and applies solely to individuals residing in the State of California ("consumers" or "you") in accordance with the California Consumer Privacy Act of 2018 (CCPA). This Addendum sets forth additional disclosures, rights, and obligations regarding the collection, use, disclosure, and sale of personal information.

 

1. Categories of Personal Information Collected

 

In addition to the categories of personal information mentioned in our Privacy Policy, we may have collected the following categories of personal information about consumers in the preceding 12 months:

• Identifiers (such as name, address, email address, and IP address).

• Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) (such as contact information, employment information, and financial information).

• Commercial information (such as records of products or services purchased or considered).

• Internet or other electronic network activity information (such as browsing history and interactions with our platform).

• Geolocation data.

• Professional or employment-related information.

• Inferences drawn from any of the above to create a profile about a consumer.

 

2. Sources of Personal Information

 

We collect personal information from various sources, including directly from consumers, our website or platform, our affiliates, third-party service providers, and publicly available sources.

 

3. Use of Personal Information

 

We may use the personal information we collect for the business purposes outlined in our Privacy Policy. These purposes may include providing and improving our services, processing transactions, managing accounts, personalizing user experiences, and marketing our products or services.

 

4. Sharing of Personal Information

 

We may disclose personal information to certain categories of third parties as described in our Privacy Policy. The categories of third parties may include service providers, affiliates, business partners, and entities as required or permitted by law.

 

5. Sale of Personal Information

 

We do not sell personal information, as defined under the CCPA, to third parties.

 

6. Consumer Rights

 

As a California resident, you have certain rights regarding your personal information under the CCPA. These rights may include:

• The right to request access to or deletion of your personal information.

• The right to opt-out of the sale of your personal information, if applicable.

• The right to know the categories and specific pieces of personal information collected about you.

• The right to know the categories of sources from which your personal information is collected.

• The right to know the business or commercial purposes for collecting or selling personal information.

• The right to request information about the disclosure of your personal information to third parties for their direct marketing purposes.

• The right to non-discrimination for exercising your CCPA rights.

​

7. Authorized Agent

 

You may designate an authorized agent to make requests on your behalf. To do so, please provide written authorization to your authorized agent, and we may require verification of the agent's identity and authorization.

 

8. Contact Us

 

If you have any questions, requests, or concerns regarding this Addendum or our privacy practices, please contact us using the information provided in our Privacy Policy.