Privacy policy

Who this covers

This policy explains how INSURASAFE LLC doing business as Rxuracy ("Rxuracy", "we", "us") handles information about two groups of people: licensed insurance agents who use Rxuracy, and clients whose records an agent requests.

What we collect

• Agent account details: name, email, cell number, National Producer Number (NPN) and resident state.
• Client details the agent enters: name, date of birth, gender, cell number, zip code, Social Security number, and, if given, street address and prior last name.
• Prescription and pharmacy records returned for an authorized request.
• Consent and signature records: when the code was sent; when the agent submits the code, the time, the versions of the authorization and consent script, and the agent's IP address; and the time the client opens the link.
• Essential cookies needed to keep agents signed in. We use no advertising or analytics cookies.

Social Security numbers

A Social Security number is used only to match records for that one request. We never store it. We keep only the last 4 digits.

How we use information

Only to:

• fulfill requests the client has authorized
• verify agents' licenses
• secure accounts
• bill agents
• keep the records we are required to keep
• meet our legal obligations

Text messages

We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes.

A client's mobile number is used only to send the code they agreed to receive. See our text message program page.

Who we share information with

• A consumer reporting agency and its data suppliers, to fulfill the request.
• The licensed agent who made the request.
• Service providers for hosting, database, text message delivery, email and invoicing, who must keep it confidential.
• A public government registry, to find prescribers' NPI numbers. We send only the prescriber's name and state, never anything about the client.
• Authorities, when the law requires it.

We do not sell personal information.

How long we keep it

• Prescription and pharmacy results: deleted within 31 days of the request.
• Authorization, consent and audit records: kept for 6 years.
• Agent account details: kept while the account is active and afterward as the law requires.

Security

We encrypt information in transit and at rest, and encrypt results separately before storing them. Agents must use two-factor sign in. Access is limited to what each person needs, and access to records is logged. No method of protecting information is perfect, so we cannot guarantee absolute security.

Your rights as a client

• Revoke an authorization: email revoke@rxuracy.com or mail INSURASAFE LLC doing business as Rxuracy, 400 S Kansas STE 100, Topeka, KS 66603. See revoke an authorization. Revoking stops future use but does not undo requests made before we received your notice.
• Get a copy of the authorization you signed: use the link in your text message while it works. After that, email support@rxuracy.com for a copy.
• Dispute the accuracy of your records: email support@rxuracy.com. We will send your dispute to the data source.
• Other rights under your state's law: email support@rxuracy.com.

Children

Rxuracy is not for anyone under 18. We do not knowingly request records for anyone under 18.

Changes to this policy

We may change this policy. We will post the new version here with a new effective date and version number, and email agents about material changes.

Contact

INSURASAFE LLC doing business as Rxuracy, 400 S Kansas STE 100, Topeka, KS 66603. Email support@rxuracy.com.