Information We Collect

Clara Rx collects information necessary to provide, operate, maintain, and secure our services.

We collect information directly from customers, authorized users, healthcare organizations, patients, integrated healthcare systems, and third-party service providers involved in healthcare workflows. The information we process may include names, contact information, login credentials, organizational details, prescription information, dispensing records, provider information, insurance-related operational information, healthcare documentation, fulfillment information, and other information necessary to support specialty pharmacy and healthcare operations.

Certain prescription and patient demographic information may be received from third-party healthcare integrations, prescribing systems, prescription transmission services, healthcare communication providers, and related operational workflows authorized by our customers.

Because Clara Rx supports healthcare operational workflows, we may process Protected Health Information (“PHI”) in connection with services provided to specialty pharmacies and healthcare organizations.

Clara Rx does not store complete payment card information within its systems. Where payment-related functionality is utilized, payment information is processed directly by authorized third-party payment processors. Refer to our subprocessor page for more information.

Clara Rx does not use visitor analytics platforms, advertising technologies, behavioral tracking systems, or marketing profiling tools on its public-facing website. Our public-facing website is informational in nature and is not designed to collect visitor analytics or advertising-related information.

Within our SaaS platform, Clara Rx utilizes operational cookies, session technologies, local storage, and temporary caching mechanisms necessary to maintain authenticated sessions, platform functionality, workflow continuity, security controls, and operational reliability. These technologies are used solely for functional and operational purposes associated with the services.

We may also collect limited technical and operational information associated with use of the platform, including authentication events, device information, browser type, IP addresses, timestamps, audit logs, usage telemetry, and related system activity information necessary for security, compliance, troubleshooting, and operational administration.

Information From Third-Party Sources

Clara Rx may receive information from healthcare organizations, pharmacies, prescribing systems, healthcare communication networks, integrated vendors, identity providers, and other authorized third parties in connection with the services we provide.

This information may include prescription information, patient demographic information, provider information, healthcare workflow data, authentication information, and related operational information necessary to facilitate healthcare and pharmacy services on behalf of our customers.

Information received from third-party sources is processed in accordance with applicable agreements, healthcare operational requirements, and applicable laws and regulations.

How We Use Information

Clara Rx uses information for legitimate business, healthcare, security, operational, and compliance purposes associated with providing and supporting our services.

We may use information to provide and maintain the platform, facilitate prescription and dispensing workflows, authenticate users, manage accounts, maintain audit records, process operational transactions, provide customer support, communicate regarding services, improve platform performance, monitor infrastructure, detect and prevent unauthorized activity, investigate security incidents, comply with legal obligations, enforce contractual rights, and support internal reporting and operational analytics.

Information may also be used to maintain the integrity, availability, confidentiality, and security of our systems and services.

Clara Rx may monitor systems, infrastructure, authentication activity, platform usage, and related operational events as necessary to maintain security, operational integrity, compliance, service reliability, and protection of the services.

Clara Rx does not sell personal information to third parties. We do not use Protected Health Information for advertising purposes, consumer profiling, or behavioral marketing activities.

Cookies and Similar Technologies

Clara Rx uses limited cookies and related technologies necessary for operation of the SaaS platform and associated services. These technologies support authenticated sessions, security controls, user preferences, workflow continuity, and operational functionality.

We do not utilize advertising cookies, behavioral advertising technologies, or third-party marketing trackers within our SaaS application.

Users who disable required cookies or session technologies may experience reduced functionality or inability to access portions of the services.

Disclosure of Information

Clara Rx may disclose information to customers, healthcare organizations, authorized users, service providers, contractors, communications providers, infrastructure providers, payment processors, and other third parties as necessary to provide, maintain, secure, and support the services.

Service providers supporting our operations may include infrastructure, hosting, communications, authentication, database, security, and payment processing providers such as Fly.io, Xata, Amazon Web Services (AWS), Cloudflare, Twilio, and Stripe. For a full list, see our Subprocessors page.

We may also disclose information where required to comply with applicable law, regulation, legal process, governmental request, healthcare compliance obligations, or where we believe disclosure is necessary to protect the rights, property, integrity, security, or safety of Clara Rx, our customers, patients, users, or others.

In connection with a merger, acquisition, financing transaction, corporate reorganization, or sale of assets, information may be transferred as part of the applicable business transaction subject to appropriate confidentiality protections.

HIPAA and Healthcare Information

Clara Rx provides services intended to support healthcare and pharmacy operations that may involve the processing of Protected Health Information regulated under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”).

Where applicable, Clara Rx may act as a service provider or business associate on behalf of healthcare organizations and specialty pharmacies using our services. We maintain administrative, technical, and organizational safeguards designed to support the confidentiality, integrity, and availability of healthcare-related information processed through our systems. For more detail, see our Security & Compliance page.

Customers remain responsible for determining the appropriateness of their use of the services, managing authorized user access to their environments, obtaining any required authorizations or consents, and complying with applicable healthcare laws and regulations. Customers are also responsible for managing user provisioning, permissions, and timely removal of access for former personnel or unauthorized users.

Communications

Clara Rx may send operational, administrative, authentication, support, security-related, and service communications necessary for the provision, maintenance, and protection of the services. Such communications may include account notifications, login verification messages, security alerts, platform updates, support responses, and other service-related communications.

Information Retention

Clara Rx retains information for as long as necessary to provide services, maintain healthcare and operational records, comply with legal and regulatory obligations, support security and audit requirements, resolve disputes, enforce agreements, and satisfy legitimate business and operational needs. For more detail, see our Data Retention page.

Retention periods may vary depending on the nature of the information, customer requirements, applicable laws, contractual obligations, healthcare compliance requirements, and operational considerations.

When information is no longer required, Clara Rx may delete, anonymize, archive, or otherwise dispose of information in accordance with applicable legal, contractual, operational, and security requirements.

Security

Clara Rx maintains administrative, technical, organizational, and physical safeguards designed to protect information from unauthorized access, disclosure, misuse, alteration, or destruction. Our security practices may include authentication controls, encryption technologies, role-based permissions, audit logging, infrastructure monitoring, incident response procedures, security reviews, and operational safeguards designed to support healthcare and SaaS security requirements.

Our operational and security practices are informed by industry standards and frameworks commonly utilized within healthcare and software environments, including practices aligned with HIPAA and SOC 2-oriented operational controls. Learn more on our Security & Compliance page.

Although we take steps to secure your information, we cannot and do not promise or warrant that your information or communications will always remain secure. No method of electronic transmission, storage, or processing is completely secure, and Clara Rx cannot guarantee absolute security.

Service Availability

While Clara Rx strives to maintain reliable and secure services, we do not guarantee that the services will always be available, uninterrupted, timely, secure, or error-free. Access to the services may be interrupted due to maintenance, system failures, third-party service interruptions, security events, internet outages, or other operational circumstances beyond our control.

Third-Party Services

Our services may contain integrations, links, or connections to third-party systems, services, or platforms not operated or controlled by Clara Rx. Third-party providers operate under their own terms, privacy policies, and practices, and Clara Rx is not responsible for the privacy, security, availability, or content of third-party services.

Visitors Outside the United States

Clara Rx operates primarily within the United States and our services are intended for use by U.S. based healthcare organizations and specialty pharmacies. If you access our services from outside the United States, you understand that your information may be transferred to, processed, stored, and maintained in the United States and other jurisdictions where our service providers operate.

By using the services, you acknowledge and consent to such transfer, processing, and storage of information in accordance with this Privacy Policy and applicable law.

Privacy Policy Updates and Revisions

Clara Rx may revise or update this Privacy Policy from time to time to reflect changes in our services, technologies, legal obligations, operational practices, or business activities. Any updates will be posted on our website with a revised effective date.

Your continued use of the services following the posting of an updated Privacy Policy constitutes acknowledgment of the revised terms to the extent permitted by applicable law.

Contact Information

Questions regarding this Privacy Policy or Clara Rx’s privacy and security practices may be directed to:

Clara Rx
clararx.com
Email: [email protected]