Privacy Policy
Privacy Policy
This OptimizeRx Corporation (“OptimizeRx”, “we”, “our”) PrivacyPolicy applies to our website, www.optimizerx.com (the "Website"), to our digital advertising services delivered through electronic health record and electronic prescribing platforms, to our direct-to-consumer ("DTC")advertising services, and to our marketing and advertising activities involving business contacts, customers, prospects, and healthcare professionals.
"You" refers to you, our website visitor, a healthcare professional and/or organization that has access to the services offered through our Website and our EHR network, an individual who may be served advertising through our DTC advertising services, or our business contact. “You does not refer to patients.”
OptimizeRx’s Website, EHR- and e-prescribing-delivered advertising services, direct-to-consumer ("DTC") advertising services, and marketing activities are directed to healthcare professionals, business contacts, customers, prospective customers, and, in the case of ourDTC advertising services, consumers who may be served relevant advertising based on de-identified and aggregated information. OptimizeRx does not knowingly collect Personal Information directly from patients, and does not collect, process, or store Protected Health Information (PHI) as defined under applicable law. Any health-related information used in connection with our DTC advertising services is received by OptimizeRx in de-identified or aggregated form from third-party data suppliers, and is not collected directly from patients.
We understand that your privacy is a very personal matter, and we want you to feel as comfortable as possible when visiting our Website and using our services. We urge you to read this Privacy Policy carefully so that you understand clearly how we may collect and use information. We collect and use personal information only to the extent necessary for the purposes described in this Privacy Policy. We may change this Privacy Policy at any time by posting revisions to our Website.
INFORMATION THAT WE COLLECT AND THE PURPOSE OF COLLECTION
The table below states the categories of PersonalInformation we collect, from where the Personal Information is collected, how we use the Personal Information, and with whom the Personal Information is shared:
COOKIES AND SIMILAR TECHNOLOGIES
We use cookies, pixels, tags, software development kits(SDKs), and similar technologies provided by us and our service providers and advertising partners to automatically collect information when you visit our website, interact with our content, or engage with our digital communications.
We use TrustArc’s Cookie Consent Manager to manage cookie preferences on our website. You can review and adjust your cookie preference at any time by clicking the “Cookie Preferences” link in the footer of our website.
We use the following categories of cookies and tracking technologies:
• Strictly Necessary: required for the website to function and cannot be disabled. They include session management, security, and basic functionality.
• Functional/Preference: remember your settings and preferences to improve your experience (for example, language or region).
• Analytics/Performance: help us understand how visitors use our website so we can measure and improve performance. These may be set by us or by third-party analytics providers.
• Advertising/Targeting: used to deliver advertisements relevant to you, measure campaign effectiveness, enable audience matching and retargeting, and support conversion tracking. These include technologies such as the LinkedIn Insight Tag. You may opt out of this category through ourCookie Preferences center.
These technologies may collect information such as:
• IP address;
• browser type and settings;
• device characteristics;
• pages visited;
• URLs visited before and after our website;
• date and time of access;
• interactions with our website and content; and
• advertising and conversion-related information.
We may use technologies such as the LinkedIn Insight Tag and similar tools to understand website activity, measure advertising effectiveness, createretargeting audiences, perform conversion tracking, and support business-to-business marketing activities.
Some of these technologies are set by third parties, including LinkedIn and our analytics and advertising partners, who may collect information about your online activity across different websites and services.Those third parties’ collection and use of information is subject to their own privacy policies. You can opt out of LinkedIn’s use of your data for advertising purposes through LinkedIn’s advertising settings atlinkedin.com/psettings/advertising.
We honor browser-based opt-out signals, including GlobalPrivacy Control (GPC). If your browser or device sends a GPC signal, we will treat it as a request to opt out of the sharing of your personal information for cross-context behavioral advertising. California residents may also opt out of the sharing of their personal information for cross-context behavioral advertising at any time through our Cookie Preferences center or by submitting a request through our website.
ADVERTISING, AUDIENCE MATCHING, AND MARKETING ANALYTICS
We use advertising, analytics, and marketing partners to help us promote our products and services, understand the effectiveness of our marketing activities, and provide relevant content and advertisements to business professionals and healthcare industry stakeholders.
These activities may include the use of customer relationship management (CRM) data, website interaction information, conversion tracking technologies, audience matching services, retargeting services, and advertising networks.
For example, we may use platforms such as LinkedIn to:
• create and manage custom audience segments using information from our CRM systems;
• match business contacts and prospects with accounts on advertising platforms;
• measure the effectiveness of advertising campaigns;
• create lookalike or similar audiences based on characteristics of our existing contacts and customers;
• retarget visitors who have interacted with our Website or other digital properties;
• optimize advertising delivery and campaign performance; and
• attribute business opportunities, leads, or conversions to prior advertising activity.
DIRECT-TO-CONSUMER (DTC) ADVERTISING SERVICES
We provide direct-to-consumer ("DTC") advertising services on behalf of pharmaceutical brand customers. These services use de-identified and aggregated information derived from third-party healthcare data suppliers and consumer data sources to create geographically and demographically defined audience segments. We do not receive or use this information in a form that identifies specific patients, and any health-related information used in connection with these services is de-identified before we receive or use it.
To deliver advertisements to these audience segments, we work with identity resolution and audience onboarding partners and with advertising delivery partners (including demand-side and sell-side advertising platforms).In providing these services, our identity resolution and advertising delivery partners may process online or device identifiers (such as IP addresses, deviceIDs, or similar proprietary identifiers) as necessary to deliver and measure advertisements; we receive aggregated performance reporting (such as the number of advertisements delivered) rather than identifier-level data from these partners.
CALL RECORDING AND CONVERSATIONAL INTELLIGENCE
We use Chorus.ai, a conversational intelligence platform operated by ZoomInfo Technologies, to automatically record, transcribe, and analyze customer-facing calls and meetings. Chorus joins calls as a note-taking participant. All call participants are notified that recording is taking place before or at the start of each call, and recording proceeds only where legally permitted and where required consents have been obtained.
Recordings are retained for up to 180 days and may be deleted sooner upon request.
PERSONAL INFORMATION FROM OTHER SOURCES
We may receive Personal Information about you from other sources with which you have registered, companies who we have partnered with(collectively "Partners") or other third parties. We may associate this information with the other Personal Information we have collected about you. We also receive call activity and contact information synced from our conversational intelligence platform (Chorus.ai) into our CRM systems.
We also obtain business and professional contact information(such as name, business email address, job title, and seniority or management level) about business contacts, prospects, and healthcare professionals from third-party B2B data enrichment and marketing intelligence providers, such asZoomInfo. In addition, we obtain company-level firmographic, market, and media-intelligence information about the organizations we engage with from third-party industry data providers, such as Evaluate Pharma and MediaRadar. We use this information to enrich and prioritize records in our customer relationship management (CRM) systems for sales, marketing, and business development purposes, consistent with the purposes described in this PrivacyPolicy.
DISCLOSURE TO LINKED SITES
There may be links to websites operated by companies other than us (each a "Third Party Website" and, collectively, "ThirdParty Websites") that are not contractors who provide content or services through our Website. These links may be found in advertisements, referenced within content, or placed beside the names or logos of sponsors. We do not disclose your Personal Information to these Third Party Websites without obtaining your consent. We do not endorse and are not responsible for the privacy practices of Third Party Websites. If you choose to link to a ThirdParty Website, you should review the privacy policy posted on that Third PartyWebsite to understand how it collects and uses your Personal Information.
DISCLOSURE OF AGGREGATE INFORMATION
We may provide to third parties non-personal information about you that does not allow you to be identified or contacted and that is combined with the non-personal information of other users ("AggregateInformation"). For example, we might inform third parties regarding the number of users of our Website and the activities they conduct while on ourWebsite. Depending on the circumstances, we may or may not charge third parties for this Aggregate Information. We also may not limit the third parties’ use of the Aggregate Information, except that we do require third parties to whom we disclose Aggregate Information to agree that they will not attempt to make this information personally identifiable by combining it with other databases or performing similar actions. OptimizeRx likewise commits to not re-identifying any Aggregate or de-identified information and will not use or disclose it in a manner that could reasonably be used to identify an individual.
We restrict access to your Personal Information to those employees with a need to know it in order to carry out their job functions. We require each of our employees, consultants, and independent contractors to sign confidentiality and nondisclosure agreements. We also instructs them on how to secure your Personal Information properly. We may also share PersonalInformation with our advisors, including our attorneys and accountants, or in connection with a potential merger, acquisition, or sale of all or substantially all of its assets, in all cases subject to confidentiality and nondisclosure restrictions. We require all third-party service providers and data processors who handle Personal Information on our behalf to do so underwritten contracts that impose data protection obligations consistent with thisPrivacy Policy and applicable law.
Please be advised, however, that the confidentiality of any communication or material transmitted to or from us via the Website, e-mail, and text message cannot be guaranteed. Accordingly, we are not responsible for the security of information transmitted via the Internet. Instead of communicating with us via e-mail, text messaging, or the Internet, you can contact us by mail, phone, or facsimile at the address or numbers set forth at the end of this Privacy Policy.
DATA RETENTION
We retain Personal Information only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our intended retention periods by category are:
• CRM contact and professional information: 5 years from last interaction or account closure.
• Website cookies: 13 months from collection, subject to cookie consent preferences.
• Website analytics: 24 months from collection.
• Advertising and LinkedIn campaign data: 24 months from collection.
• Conversion tracking data: 24 months from collection.
• Email and newsletter engagement data: 24 months from the date of the communication.
• Chorus.ai call recordings: up to 180 days from recording date, or until deleted upon request.
• Chorus.ai call transcripts: up to 180 days from recording date, or until deleted upon request.
• Security and audit logs: 60 months from creation.
• Suppression and opt-out records: retained for as long as necessary to honor the individual’s preferences and comply with applicable law.
Where a legal hold, dispute, or regulatory obligation requires longer retention, we will retain the relevant information for the duration of that obligation.
CHILDREN’S PRIVACY
Our website and services are not directed at children under the age of 13, and we do not knowingly collect Personal Information from children under 13. If we become aware that we have inadvertently collectedPersonal Information from a child under 13, we will promptly delete it. If you believe we may have collected information from a child under 13, please contact us at privacy@optimizerx.com.
UPDATING PERSONAL INFORMATION AND CONTACTING OPTIMIZERX
You can always contact us in order to: (1) delete yourPersonal Information from our systems, (2) update the Personal Information that you have provided to us, and (3) change your preferences with respect to marketing contacts or other activities, by e-mailing us atprivacy@optimizerx.com. Such changes will not have any effect on other information that OptimizeRx maintains. We try to answer every e-mail in a timely manner but might not always be able to do so.
You should be aware that it is not technologically possible to remove each and every record of the information you have provided toOptimizeRx from our servers. The need to back up our systems to protect information from inadvertent loss means that a copy of your PersonalInformation may exist in a non-erasable form that will be difficult or impossible for us to locate. Nevertheless, we promise that upon receiving your request, all Personal Information stored in the databases we actively use for research and daily business activities, and other readily searchable media, will be deleted.
YOUR U.S. STATE PRIVACY RIGHTS
Residents of certain U.S. states, including California,Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland,Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island,Tennessee, Texas, Utah, Virginia, and others, have rights under applicable state privacy laws with respect to their Personal Information. This section describes those rights, how to exercise them, and any state-specific additions.Not all rights apply in every state; whether a right applies to you depends on the laws of your state of residence.
The right to know and access. You have the right to request that we disclose what categories of Personal Information we have collected about you, the sources of that information, the purposes for collection, and the categories of third parties with whom we have shared it.
The right to data portability. You have the right to obtain a copy of the specific pieces of Personal Information we hold about you in a portable, readily usable format, where technically feasible.
The right to delete. You have the right to request that we delete Personal Information we have collected from you, subject to certain exceptions permitted by applicable law (for example, where we are required to retain information to comply with a legal obligation or to complete a transaction).
The right to correct. You have the right to request that we correct inaccurate Personal Information we maintain about you, taking into account the nature of the information and the purposes for which it is processed.
The right to opt out of targeted advertising, sale, and profiling. You have the right to opt out of: (a) the sale of your PersonalInformation; (b) the sharing or processing of your Personal Information for targeted or cross-context behavioral advertising; and (c) profiling in furtherance of decisions that produce legal or similarly significant effects.We do share certain business contact and professional information with advertising partners, including LinkedIn, for targeted advertising purposes. To opt out, you may use our Cookie Preferences center (accessible via the “CookiePreferences” link in the footer of our website), enable a Global PrivacyControl (GPC) signal in your browser, email us at privacy@optimizerx.com, callus at 877-568-3840, or visit https://www.optimizerx.com/contact-optimizerx.
Non-discrimination. We will not discriminate against you for exercising any of your privacy rights. Exercising your rights will have no adverse effect on the price or quality of our goods or services.
How to submit a request. To exercise any of the rights above, you may email us at privacy@optimizerx.com, call us at877-568-3840, or visit https://www.optimizerx.com/contact-optimizerx. We will respond to verifiable requests within 45 days. If we require additional time (up to a further 45 days), we will notify you of the extension within the initial 45-day period. We are required to honor requests to know up to twice per 12-month period. Requests to delete, correct, or opt out may be submitted at any time.
Verification and authorized agents. When you submit a request, we will verify your identity by asking for your email address, telephone number, and/or information about your account with OptimizeRx. We may also use a third-party verification provider. You may designate an authorized agent to submit a request on your behalf; we will require written proof of the agent’s authorization and may verify your identity directly.
Right to appeal (non-California residents). If we decline to take action on your request, you may appeal our decision by emailingprivacy@optimizerx.com with the subject line “Privacy Request Appeal” and a description of your original request. We will respond to your appeal within 45days and will inform you of any further appeal options available under your state’s law.
Additional rights for California residents. In addition to the rights above, California residents have the following rights under the California Consumer Privacy Act as amended by the California PrivacyRights Act (CCPA/CPRA): The right to limit use of sensitive personal information. OptimizeRx does not knowingly collect or process sensitive personal information as defined under applicable state law, with the exception of voice biometric data addressed separately below. To the extent OptimizeRx collects sensitive personal information as defined under the CPRA, you have the right to request that we limit its use and disclosure to purposes necessary to provide our services. Submit requests to privacy@optimizerx.com. Voice biometric data (voiceprints) is classified as sensitive personal information under the CPRA. OptimizeRx does not enable voiceprint collection in its use ofChorus.ai; biometric voice data is not collected without explicit consent.
Global Privacy Control. We honor GPC signals sent by your browser as a valid opt-out of sharing your Personal Information for cross-context behavioral advertising.
OptimizeRx does not sell Personal Information and has no plans to do so. We share certain information with advertising partners as described in this policy, and you may opt out of that sharing at any time using the methods described above.
CONTACT US
OptimizeRx Corp.
Attn: OptimizeRx Privacy Team
privacy@optimizerx.com
260 Charles Street, Suite 302
Waltham, MA 02453
ThisPrivacy Policy was last updated on August 13, 2026. We review and update thisPrivacy Policy at least annually.