Privacy Policy

This Privacy Policy applies to our website, www.optimizerx.com (the "Website"), to our digital advertising services delivered through electronic health record and electronic prescribing platforms, to our direct-to-consumer ("DTC") advertising services, to our advertising services delivered to healthcare professionals outside of electronic health record and electronic prescribing platforms, and to our marketing and advertising activities involving business contacts, customers, prospects, and healthcare professionals. The words "we" and "our" refer to OptimizeRx.

"You" refers to you, our website visitor, a health care professional and/or organization that has access to the services offered through our Website and our EHR network, an individual who may be served advertising through our DTC advertising services, a healthcare professional who may be served advertising through our healthcare professional advertising services, or our business contact. By using our Website you agree to be bound by the terms of this Privacy Policy.

OptimizeRx’s Website, EHR- and e-prescribing-delivered advertising services, direct-to-consumer ("DTC") advertising services, healthcare professional advertising services, and marketing activities are directed to healthcare professionals, business contacts, customers, prospective customers, and, in the case of our DTC advertising services, consumers who may be served relevant advertising based on de-identified and aggregated information. OptimizeRx does not knowingly collect Personal Information directly from patients, and does not collect, process, or store Protected Health Information (PHI) as defined under applicable law. Any health-related information used in connection with our DTC advertising services is received by OptimizeRx in de-identified or aggregated form from third-party data suppliers, and not collected directly from patients. References to “you” throughout this Privacy Policy mean the healthcare professional, business contact, website visitor, consumer served DTC advertising, or other individual described above, and do not refer to patients.

We understand that your privacy is a very personal matter, and we want you to feel as comfortable as possible when visiting our Website and using our services. We urge you to read this Privacy Policy carefully so that you understand clearly how we may collect and use information. We collect and use personal information only to the extent necessary for the purposes described in this Privacy Policy. We may change this Privacy Policy at any time by posting revisions to our Website. For material changes, we will provide at least 30 days’ advance notice by posting a prominent notice on our website and, where we hold your email address, by notifying you directly before the changes take effect.

INFORMATION THAT WE COLLECT AND THE PURPOSE OF COLLECTION

For the 12-month period prior to the date of this Privacy Policy, we explain here what categories of Personal Information we have collected, where we got it from, what we do with it, and with whom we have shared it:

Cookies and Similar Technologies

We use cookies, pixels, tags, software development kits (SDKs), and similar technologies provided by us and our service providers and advertising partners to automatically collect information when you visit our website, interact with our content, or engage with our digital communications.

We use TrustArc’s Cookie Consent Manager to manage cookie preferences on our website. You can review and adjust your cookie preferences at any time by clicking the “Cookie Preferences” link in the footer of our website.

We use the following categories of cookies and tracking technologies:

• Strictly Necessary: required for the website to function and cannot be disabled. They include session management, security, and basic functionality.
• Functional/Preference: remember your settings and preferences to improve your experience (for example, language or region).
• Analytics/Performance: help us understand how visitors use our website so we can measure and improve performance. These may be set by us or by third-party analytics providers.
• Advertising/Targeting: used to deliver advertisements relevant to you, measure campaign effectiveness, enable audience matching and retargeting, and support conversion tracking. These include technologies such as the LinkedIn Insight Tag. You may opt out of this category through our Cookie Preferences center.

These technologies may collect information such as:

• IP address;
• browser type and settings;
• device characteristics;
• pages visited;
• URLs visited before and after our website;
• date and time of access;
• interactions with our website and content; and
• advertising and conversion-related information.

We may use technologies such as the LinkedIn Insight Tag and similar tools to understand website activity, measure advertising effectiveness, create retargeting audiences, perform conversion tracking, and support business-to-business marketing activities.

Some of these technologies are set by third parties, including LinkedIn and our analytics and advertising partners, who may collect information about your online activity across different websites and services. Those third parties’ collection and use of information is subject to their own privacy policies. You can opt out of LinkedIn’s use of your data for advertising purposes through LinkedIn’s advertising settings at linkedin.com/psettings/advertising.

We honor browser-based opt-out signals, including Global Privacy Control (GPC). If your browser or device sends a GPC signal, we will treat it as a request to opt out of the sharing of your personal information for cross-context behavioral advertising. California residents may also opt out of the sharing of their personal information for cross-context behavioral advertising at any time through our Cookie Preferences center or by submitting a request through our website.

Advertising, Audience Matching, and Marketing Analytics

We use advertising, analytics, and marketing partners to help us promote our products and services, understand the effectiveness of our marketing activities, and provide relevant content and advertisements to business professionals and healthcare industry stakeholders.

These activities may include the use of customer relationship management (CRM) data, website interaction information, conversion tracking technologies, audience matching services, retargeting services, and advertising networks.

For example, we may use platforms such as LinkedIn to:

• create and manage custom audience segments using information from our CRM systems;
• match business contacts and prospects with accounts on advertising platforms;
• measure the effectiveness of advertising campaigns;
• create lookalike or similar audiences based on characteristics of our existing contacts and customers;
• retarget visitors who have interacted with our Website or other digital properties;
• optimize advertising delivery and campaign performance; and
• attribute business opportunities, leads, or conversions to prior advertising activity.

Direct-to-Consumer (DTC) Advertising Services

OptimizeRx provides direct-to-consumer ("DTC") advertising services on behalf of pharmaceutical brand customers. These services use de-identified and aggregated information derived from third-party healthcare data suppliers and consumer data sources to create geographically and demographically defined audience segments. OptimizeRx does not receive or use this information in a form that identifies specific patients, and any health-related information used in connection with these services is de-identified before OptimizeRx receives or uses it.

To deliver advertisements to these audience segments, OptimizeRx works with identity resolution and audience onboarding partners and with advertising delivery partners (including demand-side and sell-side advertising platforms). In providing these services, our identity resolution and advertising delivery partners may process online or device identifiers (such as IP addresses, device IDs, or similar proprietary identifiers) as necessary to deliver and measure advertisements; OptimizeRx receives aggregated performance reporting (such as the number of advertisements delivered) rather than identifier-level data from these partners.

Healthcare Professional Advertising Services

OptimizeRx provides advertising services directed to healthcare professionals outside of electronic health record and electronic prescribing platforms, on behalf of pharmaceutical brand customers. These campaigns are directed to healthcare professionals identified by the pharmaceutical brand customer, or by the advertising agency acting for that customer, generally by National Provider Identifier (NPI), which is a publicly available federal identifier. OptimizeRx does not receive or use patient data in connection with these services, and does not collect, process, or store Protected Health Information (PHI) as defined under applicable law.

Advertisements are delivered through demand-side advertising platforms that bid into advertising exchanges. Publishers make their own advertising inventory available for sale through those exchanges, on their own terms and at their own discretion, and OptimizeRx bids on the inventory that is offered. OptimizeRx does not own or operate those websites and has no role in the privacy notices, consent interfaces, or opt-out controls that those websites present to their visitors. In delivering and measuring advertisements, our advertising delivery partners may process online or device identifiers, such as IP addresses, device identifiers, or similar proprietary identifiers.

OptimizeRx has no direct contact with the healthcare professionals reached through these services. We do not operate a registration, login, or consent interface for healthcare professionals in connection with these campaigns, and we do not issue advertising consent language to them. OptimizeRx processes the information described above on behalf of the pharmaceutical brand customer and for no purpose other than delivering and reporting on that customer’s campaign.

Target lists supplied by a pharmaceutical brand customer, and the campaign delivery records generated from them, are maintained separately from our customer relationship management and business-development systems. They are not used for the audience matching, lookalike audience, retargeting, or marketing analytics activities described above, and they are not used to market OptimizeRx’s own products or services.

Where a healthcare professional contacts OptimizeRx directly to exercise a privacy right in connection with these services, we acknowledge and handle the request as described in the section titled “Your U.S. State Privacy Rights” below. Where the request concerns information we process on behalf of a pharmaceutical brand customer, we coordinate with that customer and its advertising agency in order to give effect to the request.

Call Recording and Conversational Intelligence

OptimizeRx uses Chorus.ai, a conversational intelligence platform operated by ZoomInfo Technologies, to automatically record, transcribe, and analyze customer-facing calls and meetings. Chorus joins calls as a note-taking participant. All call participants are notified that recording is taking place before or at the start of each call, and recording proceeds only where legally permitted and where required consents have been obtained.

Recordings are retained for up to 180 days and may be deleted sooner upon request.

Personal Information from Other Sources

We may receive Personal Information about you from other sources with which you have registered, companies who we have partnered with (collectively "Partners") or other third parties. We may associate this information with the other Personal Information we have collected about you. We also receive call activity and contact information synced from our conversational intelligence platform (Chorus.ai) into our CRM systems.

We also obtain business and professional contact information (such as name, business email address, job title, and seniority or management level) about business contacts, prospects, and healthcare professionals from third-party B2B data enrichment and marketing intelligence providers, such as ZoomInfo. In addition, we obtain company-level firmographic, market, and media-intelligence information about the organizations we engage with from third-party industry data providers, such as Evaluate Pharma and MediaRadar. We use this information to enrich and prioritize records in our customer relationship management (CRM) systems for sales, marketing, and business development purposes, consistent with the purposes described in this Privacy Policy.

Disclosure to Linked Sites

There may be links to Websites operated by companies other than us (each a "Third Party Website" and, collectively, "Third Party Websites") that are not contractors who provide content or services through our Websites. These links may be found in advertisements, referenced within content, or placed beside the names or logos of sponsors. We do not disclose your Personal Information to these Third Party Websites without obtaining your consent. We do not endorse and are not responsible for the privacy practices of Third Party Websites. If you choose to link to a Third Party Website, you should review the privacy policy posted on that Third Party Website to understand how it collects and uses your Personal Information.

Disclosure of Aggregate Information

We may provide to third parties non-personal information about you that does not allow you to be identified or contacted and that is combined with the non-personal information of other users ("Aggregate Information"). For example, we might inform third parties regarding the number of users of our Website and the activities they conduct while on our Website. Depending on the circumstances, we may or may not charge third parties for this Aggregate Information. We also may not limit the third parties’ use of the Aggregate Information, except that we do require third parties to whom we disclose Aggregate Information to agree that they will not attempt to make this information personally identifiable by combining it with other databases or performing similar actions. OptimizeRx likewise commits to not re-identifying any Aggregate or de-identified information and will not use or disclose it in a manner that could reasonably be used to identify an individual.

OptimizeRx restricts access to your Personal Information to those employees with a need to know it in order to carry out their job functions. OptimizeRx requires each of its employees, consultants, and independent contractors to sign confidentiality and nondisclosure agreements. OptimizeRx also instructs them on how to secure your Personal Information properly. OptimizeRx may also share Personal Information with its attorneys and accountants, or in connection with a potential merger, acquisition, or sale of all or substantially all of its assets, in all cases subject to confidentiality and nondisclosure restrictions. We require all third-party service providers and data processors who handle Personal Information on our behalf to do so under written contracts that impose data protection obligations consistent with this Privacy Policy and applicable law.

Please be advised, however, that the confidentiality of any communication or material transmitted to or from us via the Website, e-mail, and text message cannot be guaranteed. Accordingly, we are not responsible for the security of information transmitted via the Internet. Instead of communicating with us via e-mail, text messaging, or the Internet, you can contact us by mail, phone, or facsimile at the address or numbers set forth at the end of this Privacy Policy.

DATA RETENTION

We retain Personal Information only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our intended retention periods by category are:

• CRM contact and professional information: 5 years from last interaction or account closure.
• Website cookies: 13 months from collection, subject to cookie consent preferences.
• Website analytics: 24 months from collection.
• Advertising and LinkedIn campaign data: 24 months from collection.
• Healthcare professional target lists supplied by a pharmaceutical brand customer: retained for the term of the applicable customer agreement, and returned or deleted on expiry of that agreement in accordance with its terms.
• Healthcare professional advertising campaign delivery records: 24 months from collection, unless a shorter period is required by the applicable customer agreement.
• Conversion tracking data: 24 months from collection.
• Email and newsletter engagement data: 24 months from the date of the communication.
• Chorus.ai call recordings: up to 180 days from recording date, or until deleted upon request.
• Chorus.ai call transcripts: up to 180 days from recording date, or until deleted upon request.
• Security and audit logs: 60 months from creation.
• Suppression and opt-out records: retained for as long as necessary to honor the individual’s preferences and comply with applicable law.

Where a legal hold, dispute, or regulatory obligation requires longer retention, we will retain the relevant information for the duration of that obligation.

CHILDREN’S PRIVACY

Our website and services are not directed at children under the age of 13, and we do not knowingly collect Personal Information from children under 13. If we become aware that we have inadvertently collected Personal Information from a child under 13, we will promptly delete it. If you believe we may have collected information from a child under 13, please contact us at privacy@optimizerx.com.

UPDATING PERSONAL INFORMATION AND CONTACTING OPTIMIZERX

You can always contact us in order to: (1) delete your Personal Information from our systems, (2) update the Personal Information that you have provided to us, and (3) change your preferences with respect to marketing contacts or other activities, by e-mailing us at privacy@optimizerx.com. Such changes will not have any effect on other information that OptimizeRx maintains. We try to answer every e-mail in a timely manner but might not always be able to do so.

You should be aware that it is not technologically possible to remove each and every record of the information you have provided to OptimizeRx from our servers. The need to back up our systems to protect information from inadvertent loss means that a copy of your Personal Information may exist in a non-erasable form that will be difficult or impossible for us to locate. Nevertheless, we promise that upon receiving your request, all Personal Information stored in the databases we actively use for research and daily business activities, and other readily searchable media, will be deleted.

YOUR U.S. STATE PRIVACY RIGHTS

Residents of certain U.S. states, including California, Virginia, Colorado, Connecticut, Texas, Oregon, Delaware, New Jersey, and others, have rights under applicable state privacy laws with respect to their Personal Information. This section describes those rights, how to exercise them, and any state-specific additions. Not all rights apply in every state; whether a right applies to you depends on the laws of your state of residence.

The right to know and access. You have the right to request that we disclose what categories of Personal Information we have collected about you, the sources of that information, the purposes for collection, and the categories of third parties with whom we have shared it.

The right to data portability. You have the right to obtain a copy of the specific pieces of Personal Information we hold about you in a portable, readily usable format, where technically feasible.

The right to delete. You have the right to request that we delete Personal Information we have collected from you, subject to certain exceptions permitted by applicable law (for example, where we are required to retain information to comply with a legal obligation or to complete a transaction).

The right to correct. You have the right to request that we correct inaccurate Personal Information we maintain about you, taking into account the nature of the information and the purposes for which it is processed.

The right to opt out of targeted advertising, sale, and profiling. You have the right to opt out of: (a) the sale of your Personal Information; (b) the sharing or processing of your Personal Information for targeted or cross-context behavioral advertising; and (c) profiling in furtherance of decisions that produce legal or similarly significant effects. We do share certain business contact and professional information with advertising partners, including LinkedIn, for targeted advertising purposes. To opt out, you may use our Cookie Preferences center (accessible via the “Cookie Preferences” link in the footer of our website), enable a Global Privacy Control (GPC) signal in your browser, email us at privacy@optimizerx.com, call us at 877-568-3840, or visit https://www.optimizerx.com/contact-optimizerx.

Non-discrimination. We will not discriminate against you for exercising any of your privacy rights. Exercising your rights will have no adverse effect on the price or quality of our goods or services.

How to submit a request. To exercise any of the rights above, you may email us at privacy@optimizerx.com, call us at 877-568-3840, or visit https://www.optimizerx.com/contact-optimizerx. We will respond to verifiable requests within 45 days. If we require additional time (up to a further 45 days), we will notify you of the extension within the initial 45-day period. We are required to honor requests to know up to twice per 12-month period. Requests to delete, correct, or opt out may be submitted at any time.

Verification and authorized agents. When you submit a request, we will verify your identity by asking for your email address, telephone number, and/or information about your account with OptimizeRx. We may also use a third-party verification provider. You may designate an authorized agent to submit a request on your behalf; we will require written proof of the agent’s authorization and may verify your identity directly.

Right to appeal (non-California residents). If we decline to take action on your request, you may appeal our decision by emailing privacy@optimizerx.com with the subject line “Privacy Request Appeal” and a description of your original request. We will respond to your appeal within 45 days and will inform you of any further appeal options available under your state’s law.

Additional rights for California residents

In addition to the rights above, California residents have the following rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA):

The right to limit use of sensitive personal information. OptimizeRx does not knowingly collect or process sensitive personal information as defined under applicable state law, with the exception of voice biometric data addressed separately below. To the extent OptimizeRx collects sensitive personal information as defined under the CPRA, you have the right to request that we limit its use and disclosure to purposes necessary to provide our services. Submit requests to privacy@optimizerx.com. Voice biometric data (voiceprints) is classified as sensitive personal information under the CPRA. OptimizeRx does not enable voiceprint collection in its use of Chorus.ai; biometric voice data is not collected without explicit consent.

Global Privacy Control. We honor GPC signals sent by your browser as a valid opt-out of sharing your Personal Information for cross-context behavioral advertising.

OptimizeRx does not sell Personal Information and has no plans to do so. We share certain information with advertising partners as described in this policy, and you may opt out of that sharing at any time using the methods described above.

CONTACT US

OptimizeRx Corp.
Attn: Privacy Officer
privacy@optimizerx.com
260 Charles Street
Suite 302
Waltham, MA 02453
US

This Privacy Policy was last updated on October 20, 2026. We review and update this Privacy Policy at least annually.