About this policy
This policy describes Pharmetrix 1.0, its public website and the pharmacy reporting workspace. For privacy questions or account requests, contact the Pharmetrix team at coronaheightsrx@gmail.com.
Information we handle
The service handles account identity, pharmacy membership and permissions; billing and vendor report data; drug classifications, watch lists, pharmacy cost overrides, settings and saved vendor contacts. Report data can include drug identifiers and descriptions, dates, quantities, costs, payment amounts, payer and vendor names, and import diagnostics. Public website contact links open your email application; this website does not have a contact form.
Imports and patient information
Pharmetrix 1.0 is designed for drug-level reporting, not patient record management. Its import process selects supported reporting fields and removes unsupported patient fields from the saved report workspace. Where prescription identifiers are used for duplicate checking, they are replaced with pharmacy-scoped hashed claim tokens. These tokens are pseudonymous, not a promise of legal anonymization. Do not intentionally provide patient names, dates of birth, addresses, or other unnecessary patient information, including in Nova messages. Certain supporting files, such as uploaded Abbarent source PDFs, may be archived privately; do not assume every original file is discarded.
How information is used
We use information to authenticate accounts, apply pharmacy permissions, save and restore workspaces, map and validate imports, calculate reports, maintain watch lists and monitoring, provide exports, troubleshoot problems, and operate the requested features. Authorized platform administrators can access pharmacy reports for account management and support. Other pharmacy accounts are not entitled to your workspace data.
Google account and Gmail access
Connecting Gmail is optional. Pharmetrix 1.0 requests identity and email information and the Gmail send permission (gmail.send). It uses your verified Google email and Google account identifier to identify the connected account, and stores an encrypted refresh token for that pharmacy so it can obtain access tokens server-side. It does not request permission to read your inbox or import email attachments through this connection. Vendor contacts and report request drafts are used to prepare messages. You review the recipient, dates and message and confirm before sending through Gmail. Message content and recipients are sent to Google to perform that action. Google credentials are not supplied to Nova.
Pharmetrix’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements. Google user data is used to provide these user-facing connection and sending features, not sold or used for advertising.
Disconnecting Google
Use Disconnect in the pharmacy’s Gmail settings to remove the active stored Gmail credential for that pharmacy. Disconnecting does not automatically revoke the Google account’s entire authorization grant, because the account may be connected to another pharmacy. You can revoke Pharmetrix access in your Google account connections. Previously sent email remains subject to Google’s mailbox settings and retention. Contact support for questions about stored connection information.
Nova AI processing
Nova sends your question, current section and bounded recent conversation context to the OpenAI API to generate an answer. If you enable saved-report access, it can request pharmacy-scoped calculations from saved reports, reference lists and monitoring data. Computed summaries, totals, limited drug/payer/vendor groupings and import diagnostic headings are then supplied to the AI, rather than entire billing or vendor files. Optional on-screen context can also be included when selected. Do not paste patient information or credentials into a question. AI answers can be inaccurate or incomplete; check the displayed sources and underlying reports.
Service providers and access
Pharmetrix uses hosted infrastructure for authentication, application execution, database and file storage, including OpenAI Sites and Cloudflare services. OpenAI API processes Nova requests; Google processes Google sign-in and approved Gmail actions. These providers may process operational information under their own terms. Information may also be accessed when needed for authorized support, security, legal obligations or service operation. We do not sell Google user data or use it for advertising.
Storage and retention
Saved workspaces, recovery copies, reference settings and connection records are stored to provide the service. Annual accounts do not automatically receive the monthly deletion policy. If an account opts into rolling monthly mode, billing and vendor rows are retained for the current calendar month and the previous 11 calendar months in America/New_York. Expired rows are removed from saved workspaces and recovery copies by the retention process. Drug reference lists and monitoring history have separate purposes and are not automatically removed by that row-retention policy. User-downloaded files and messages already sent through Google are outside this cleanup. Ask support about deletion of account or other retained information; do not send sensitive report data in a support email unless a suitable process has been arranged.
Security and your choices
The service uses HTTPS, authenticated access controls and pharmacy-bound encrypted Gmail refresh tokens. No service can guarantee absolute security. Protect account access, check staff permissions, limit uploads to necessary data and review exports before sharing them. You may choose not to connect Google or use Nova, disconnect Google, and contact support to request access, correction or deletion assistance. Operational or legal requirements may affect what can be removed.
Website operation and changes
The public information website does not include advertising or analytics scripts. Hosting and authentication services may use technical logs, cookies or similar mechanisms needed for delivery, security or sign-in. This policy may change as the product changes; the updated date appears below. Contact the Pharmetrix team with any questions.