Privacy Policy

Who we are

Prescripta is a product of Kontoku, LLC, doing business as Prescripta, at 6470 Way Point Boulevard, Saint Cloud, Florida 34773. This policy explains what information we collect when you use prescripta.com and your Prescripta account, how we use it, who we share it with, and the choices you have. Questions go to legal@prescripta.com.

What this policy covers, and what it does not

This policy covers account, billing, usage and other information that is not protected health information. It applies to the prescripta.com website, your Prescripta account, online ordering, billing, support, and the e-mails we send about them.

Patient information that a clinic puts into a Prescripta product is protected health information under HIPAA. We handle it only as the clinic's business associate, under the Business Associate Agreement and the Master Subscription Agreement, not under this policy. The clinic decides how that information is used and is responsible for its own privacy notice to patients.

Information we collect

Account information. Your name, e-mail address, phone number, the name of your practice or clinic, your role, and the password and authenticator settings you choose. We never see your password in plain text.

Orders and billing. The plan you chose, your order history, the amounts charged, and the dates of each charge. Card payments are handled by our payment processor, PayBright. The card form on our site is served by PayBright, and your card number never reaches our servers. We keep only the processor's reference numbers and, so we can show you which card is on file, the card type and its last four digits.

Agreements you accept. When you accept an agreement online we record which agreement and version you accepted, the time, your IP address and your browser type, and we e-mail you a copy. This is how we prove the agreement was made.

Support, contact and consult requests. What you write in a support ticket, the contact form, or a consult request, and the details you give us to reply. Please do not put patient information in a support ticket or a contact form; the agreements ask the same.

The support assistant and site chat. Questions you type into the support assistant or the site chat, and the answers you receive.

Sign-in and security records. The time and IP address of sign-ins, password changes and other account actions, kept so we can protect your account and investigate a problem.

Server logs. Like every website, our servers record the pages requested, the time, the IP address and the browser type.

How we use it

To create and run your account, take your order, charge the plan you chose, set up your clinic on the product you bought, answer your questions, send you the e-mails your account needs (sign-in, receipts, agreement copies, billing changes, the daily summary you turned on), keep the service secure, and meet our legal obligations.

We do not sell your information. We do not use it for advertising, and we do not share it with advertisers.

Who we share it with

We use a small number of service providers to run Prescripta, and we share only what each one needs:

• Amazon Web Services hosts the service and sends our e-mail. Our hosting runs under a Business Associate Agreement with Amazon.
• PayBright processes card payments and recurring charges.
• Google provides the language model behind the support assistant and the site chat. Messages are checked for personal details before they are sent, and we do not use them to train any model.
• Cal.com schedules consult meetings when you book one.
• Sanity stores the content of our website pages and help articles, not your account information.

We may also disclose information when the law requires it, to protect the rights and safety of Prescripta, our customers or others, or as part of a sale or merger of the business, in which case this policy continues to apply.

Cookies and browser storage

We use the cookies that keep you signed in and keep your session secure. We do not use advertising cookies, and we do not run third-party analytics scripts on prescripta.com. The site stores a small timestamp in your browser so it can sign you out after a period of no activity.

How long we keep it

Account and order records are kept while your account is open and for as long afterwards as we need them for billing, tax, legal and dispute purposes. Records of accepted agreements are kept for the life of the agreement and the retention period the law requires. Security and server logs are kept for a limited time and then deleted.

How we protect it

Data is encrypted in transit and at rest. Sign-in to our products requires an authenticator code. Access inside Prescripta is limited to the people who need it to do their job. Card data is handled by the payment processor, not by us.

Your choices

You can see and update your account information by signing in to your account. You can ask us to correct or delete information about you, or to tell you what we hold, by writing to legal@prescripta.com. We will confirm your identity first and reply within a reasonable time. Deleting an account may be limited by records we must keep for billing or legal reasons.

Children

Prescripta is for healthcare practices and their staff. It is not directed at children, and we do not knowingly collect information from anyone under 18.

Changes to this policy

When we change this policy we will post the new version here with a new date. If a change is significant we will tell account holders by e-mail.

Contact

Kontoku, LLC, doing business as Prescripta

6470 Way Point Boulevard, Saint Cloud, Florida 34773

legal@prescripta.com