RXBids.com ("RXBids," "we," "us," or "our") is a technology marketplace that connects patients with licensed pharmacies for non-controlled prescription medications through a reverse-auction process. We are headquartered in Arizona, United States.
This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our website, mobile application, or any related services (collectively, the "Platform").
By using RXBids.com you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Platform.
| Information | Who provides it | Why we collect it |
|---|---|---|
| Full name | Patients and pharmacies | Account identification and communication |
| Email address | Patients and pharmacies | Account access, notifications, and correspondence |
| Phone number | Patients and pharmacies | SMS notifications and two-factor authentication |
| Shipping address | Patients | Determining eligible pharmacies by state and medication delivery |
| Pharmacy business name | Pharmacies | Account identification and auction display |
| Pharmacy license number | Pharmacies | Mandatory license verification against state board |
| NPI number | Pharmacies | National provider identification and verification |
| DEA number | Pharmacies | Regulatory compliance verification |
| Pharmacist-in-charge name | Pharmacies | Account accountability and compliance |
| Bank account details | Pharmacies | Payout setup — stored exclusively by Stripe, not by RXBids |
RXBids does not collect, store, or transmit any of the following: prescription documents or images, medical records or diagnoses, health insurance information, protected health information (PHI) as defined by HIPAA, or controlled substance information of any kind. Medication details entered during an auction request (drug name, strength, quantity, form) are treated as product specifications for marketplace purposes only — not as medical records.
All payment processing is handled exclusively by Stripe, Inc., a PCI-DSS Level 1 certified payment processor. When you enter your credit or debit card information, it is transmitted directly to Stripe using encrypted connections. RXBids never receives, stores, or has access to your full card number, CVV, or expiry date. We receive only a tokenized reference that allows us to initiate charges on your behalf. Similarly, pharmacy banking details entered for Stripe Connect payouts are stored and processed exclusively by Stripe.
When you use the Platform we may automatically collect: IP address, browser type and version, device type and operating system, pages visited and time spent, referring website, and general geographic location (city/state level based on IP address). This information is used for platform security, analytics, and improving user experience. It is not sold or shared with third parties for marketing purposes.
We use essential cookies required for the Platform to function (session management, authentication). We may also use analytics cookies to understand how users interact with the Platform. You can disable non-essential cookies in your browser settings. Disabling essential cookies may affect Platform functionality.
During the auction period your identity is completely anonymous to all pharmacies. Only after you accept a bid and payment is confirmed do we share your name, phone number, and shipping address with the winning pharmacy. This sharing is limited to the winning pharmacy only — all other bidding pharmacies receive no patient information whatsoever.
We share data with the following third-party service providers who help us operate the Platform:
| Provider | Purpose | Data shared |
|---|---|---|
| Stripe, Inc. | Payment processing and pharmacy payouts | Payment tokenization data only |
| Firebase (Google LLC) | Authentication, database, and cloud functions | Account data, auction data |
| GoHighLevel | SMS and email notifications, CRM | Name, email, phone for communication only |
| Arizona State Board of Pharmacy | License verification (automated query) | Pharmacy license number and state |
All service providers are contractually required to use your data only to provide services to RXBids and to protect it appropriately.
We may disclose your information to law enforcement, regulatory bodies, or other government authorities when required by law, court order, or legal process. We will also share information when we believe in good faith that disclosure is necessary to: prevent fraud or criminal activity, protect the safety of users or the public, comply with our legal obligations, or respond to a verified government request. In particular, confirmed cases of prescription fraud will be reported to the DEA and the Arizona State Board of Pharmacy as required by law and as disclosed in our Terms of Service.
We do not sell, rent, or trade your personal information to advertisers, data brokers, or any third party for marketing purposes. RXBids products are ad-free. We do not allow third parties to use your data for their own advertising or marketing purposes.
We retain your account information for as long as your account is active. If you delete your account we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal, regulatory, or fraud-prevention purposes (such as records related to a fraud investigation or law enforcement request).
Auction and transaction records may be retained for up to 7 years for accounting, tax, and legal compliance purposes. Retained records are anonymized where possible.
We take reasonable technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These measures include encrypted data transmission (HTTPS/TLS), encrypted data storage, role-based access controls, and regular security reviews.
No system is perfectly secure. In the event of a data breach that affects your personal information we will notify you as required by applicable law.
Depending on your location you may have the following rights regarding your personal information:
To exercise any of these rights contact us at [email protected]. We will respond within 30 days.
RXBids is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information please contact us at [email protected] and we will delete it promptly.
The Platform may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party sites you visit.
We may update this Privacy Policy from time to time. When we make material changes we will notify you by email or by posting a prominent notice on the Platform at least 14 days before the changes take effect. Your continued use of the Platform after the effective date constitutes acceptance of the updated policy.
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: