Privacy Policy.

ScriptsXO operates the ScriptsXO platform. This Privacy Policy describes how we collect, use, disclose, and protect your information when you use our platform at scriptsxo.com. By using ScriptsXO, you agree to the practices described in this policy.

We collect the following categories of information:

• Identity information: Full name, date of birth, and government-issued ID for identity verification.
• Contact information: Email address and, if provided, phone number.
• Health information: Symptoms, medical history, current medications, allergies, and other information you provide during intake.
• Video recordings: Async video responses you record in response to provider questions during a consultation.
• Payment information: Billing details processed securely through our payment processor. We do not store full card numbers.
• Device and usage data: Browser type, IP address, pages visited, and access timestamps, collected automatically.

We use your information to:

• Facilitate medical consultations with licensed providers
• Process and transmit prescription requests to pharmacies
• Verify your identity and maintain account security
• Process payments for our subscription service
• Communicate service updates and notifications
• Comply with applicable legal and regulatory requirements
• Improve our platform and detect fraudulent activity

ScriptsXO is a Covered Entity under the Health Insurance Portability and Accountability Act (HIPAA). Your Protected Health Information (PHI) is handled in accordance with HIPAA Privacy and Security Rules.

For a complete description of your HIPAA rights, see our HIPAA Notice of Privacy Practices.

• Video recordings: Deleted 90 days after your consultation is completed, unless retention is required by law.
• Medical records: Retained for the period required by applicable law (minimum 5 years for adult patients).
• Account data: Retained while your account is active and for up to 3 years after closure.
• Payment records: Retained as required for tax and legal compliance purposes.

We share your information only as described below:

• Licensed providers: Providers on our platform receive your intake information and video to conduct consultations.
• Pharmacies: Prescription details are transmitted to your chosen pharmacy for fulfillment.
• Service providers: We use third-party vendors for payment processing, cloud infrastructure, and communications, all bound by confidentiality agreements.
• Legal requirements: We may disclose information when required by law, court order, or to protect safety.

We do not sell your personal or health information.

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and associated data
• Opt out of non-essential communications
• Lodge a complaint with the applicable regulatory authority

We implement industry-standard security measures including encryption in transit (TLS) and at rest, access controls, and regular security reviews.

For privacy-related questions, contact us at privacy@scriptsxo.com