Privacy Policy

Effective: May 18, 2026

VitaRelay, Inc. ("VitaRelay", "we", "us") respects your privacy. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using vitarelay.com or any VitaRelay service, you agree to this Policy.

1. Information we collect

Account information: name, email, password (hashed), role, organization, and contact details you provide during registration.
Mobile information: your mobile phone number if you opt in to SMS messaging.
Business and licensing information: for pharmacy, practice, and affiliate users — license numbers, NPI, DEA, addresses, and accreditations.
Health information: for patient and provider use, prescription and order data necessary to fulfill orders. This is treated as Protected Health Information (PHI) under HIPAA.
Usage data: IP address, device and browser data, pages viewed, and timestamps.
Cookies: session cookies required for authentication; analytics cookies if you consent.

2. How we use information

To create and operate your account, fulfill orders, and provide support.
To send 2FA codes, account-security alerts, order updates, refill reminders, and (if you opt in) occasional service announcements by SMS.
To comply with legal, regulatory, and HIPAA obligations.
To detect, prevent, and investigate fraud or abuse.
To improve the security, performance, and features of the platform.

3. SMS messaging & mobile information

If you opt in to SMS messaging by checking the SMS consent box during registration or in your account settings and providing your mobile number, VitaRelay will send you recurring automated text messages related to your account: 2FA verification codes, security alerts, order and prescription updates, and occasional service announcements. Message frequency varies and is typically fewer than 10 messages per user per month. Message and data rates may apply. You may reply HELP for help or STOP at any time to unsubscribe.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing to subcontractors supporting our messaging program — for example our SMS delivery provider, Twilio — is permitted only to operate the messaging service itself. All other categories of personal information exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

For a full description of our messaging program, sample messages, and consent disclosures, see our SMS Messaging & A2P 10DLC Compliance page.

4. Sharing of information

We share information only as follows:

Service providers who process information on our behalf under written agreements (cloud hosting, payment processing, SMS delivery, email delivery, analytics).
Pharmacies, practices, and prescribers as required to fulfill an order or render care, governed by HIPAA Business Associate Agreements where applicable.
Legal and safety disclosures when required by law, subpoena, or to protect the rights, property, or safety of VitaRelay, our users, or the public.
Business transfers in connection with a merger, acquisition, or sale of assets — successor entities are bound by this Policy.

We do not sell personal information. We do not share mobile information or SMS opt-in data with third parties for marketing.

5. Data security

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit (TLS) and at rest, role-based access control, audit logging, and HIPAA-aligned security controls. No method of transmission or storage is 100% secure.

6. Data retention

We retain personal information for as long as your account is active and for additional periods required by law, regulation, or our legitimate business needs (for example, prescription records retained per state and federal law). SMS opt-in records are retained for the lifetime of the account plus 24 months.

7. Your choices and rights

Update or correct your account information in your settings.
Opt out of SMS by replying STOP to any message or disabling SMS in your settings.
Request access, correction, or deletion of personal information by emailing info@vitarelay.com (subject to legal retention requirements).
California, Colorado, Virginia, and other state residents have additional rights under applicable state privacy laws.

8. Children

VitaRelay is not directed to children under 13. We do not knowingly collect personal information from children under 13.

9. Changes to this Policy

We may update this Policy from time to time. Material changes will be communicated by posting a new effective date and, where appropriate, by email or in-product notice.

10. Contact us

Questions about this Policy? Email info@vitarelay.com or call 1 (844) 252-5233, or write to VitaRelay, Inc., Privacy Office.