Privacy Policy

Medsender, Inc. ("Medsender" or "we" or "us") provides this Privacy Policy to inform you of our policies and procedures regarding the collection, use, and disclosure of personal information we receive from our website at https://medsender.com, including the Signals pages at https://signals.medsender.com, or through our mobile app (together, the "Site"), and through the services we offer on them (the "Services"). By using the Site or the Services, you consent to the collection, transfer, processing, storage, disclosure, and other uses described in this Privacy Policy, except where the law requires us to ask for your consent separately, in which case we ask before we rely on it. This Privacy Policy may be updated from time to time. We will notify you of any material changes by posting the new Privacy Policy on the Site. You are advised to consult this policy regularly for any changes.

As used in this policy, the terms "using" and "processing" information include using cookies on a computer, subjecting the information to statistical or other analysis and using or handling information in any way, including, but not limited to collecting, storing, evaluating, modifying, deleting, using, combining, disclosing and transferring information within our organization or among our affiliates.

THE CONTENTS OF THIS SITE ARE FOR INFORMATION PURPOSES ONLY. IF YOU THINK YOU MAY HAVE A MEDICAL EMERGENCY, CALL YOUR DOCTOR OR 911 IMMEDIATELY.

The Site may contain health- or medical-related information which is not intended to be a substitute for professional medical advice, diagnosis, or treatment. Always seek the advice of your physician or other qualified health provider with any questions you may have regarding a medical condition.

How We Collect and Use Personal Information

1. Who Runs the Site. Medsender runs the Site. Some pages, including the Signals pages, are built and hosted for us by service providers. Any information collected on any page of the Site is collected by or for Medsender and handled under this Privacy Policy. For more information about Medsender, visit https://medsender.com.

2. Information About You. You can browse the Site without registering or telling us who you are. Even so, we and our partners collect information about your visit automatically, as described in Log Data, Cookies and Tracking Technologies, and Visitor Identification below, and some of that information may identify you or be linked to you. When you register with us on the Site to create an account ("Account") and become a registered user ("Member"), you will need to provide us with certain personally identifiable information to complete the registration, including information that can be used to contact or identify you ("Personal Information"). Personal Information that we may ask you to provide includes your name, email address, and other contact information. When you fill in a form on the Site, such as a demo request or the work email form on a Signals page, we collect the information you enter. We use this Personal Information mainly to respond to you regarding the reason you contacted us. We also use such information to identify data, resources, and other content on the Site that may be relevant to you. Information you give us through the form on a Signals page is the exception. We use it only to respond to your request.

3. Information We Collect from Third-Party Sources (B2B Leads). We may purchase or otherwise acquire professional and business contact information from third-party lead providers and data brokers. This information typically includes names, job titles, business email addresses, and workplace phone numbers of healthcare professionals. We also receive information about some visitors to the Site from visitor identification partners, as described in Visitor Identification below.

4. Protected Health Information. It is important for you to understand that information collected by this Site or disclosed by you through your use of this website may be protected by the Health Insurance Portability and Accountability Act ("HIPAA"). If our HIPAA compliance obligations or any commitments with healthcare providers conflict with this Policy, those HIPAA obligations will apply. Please do not send us information about patients through forms on the Site.

5. Log Data. When you visit the Site, whether as a member or a non-registered user, our servers automatically record information that your browser sends whenever you visit a website ("Log Data"). This Log Data may include information such as your computer’s Internet Protocol ("IP") address, browser type, operating system, the webpage you were visiting before you came to our Site, pages of our Site that you visit, the time spent on those pages, access times and dates, and other statistics.

6. Cookies and Tracking Technologies. Like many websites, we use "cookies" and similar technologies, such as pixels, tags and scripts, to collect information. A cookie is a small data file that we transfer to your computer’s hard disk for record-keeping purposes. Some are set by us and some by the third parties described below. We use cookies for these purposes:

• • Persistent Cookies: To save your login information for future logins to the Services.
  • Session ID Cookies: To enable certain features of the Services, better understand how you interact with the Services, and monitor aggregate usage and web traffic routing.
  • Analytics and Session Recording Cookies: To understand which pages visitors read, how they find them and how they move through a page, so we can improve the Site. We use Google Analytics, Microsoft Clarity and Hotjar for this. Clarity and Hotjar can record how you scroll, click and move on a page, as session replays and heatmaps.
  • Advertising Cookies: To measure how our advertising performs and to show Medsender ads on other websites. Advertising partners such as Google, Meta, LinkedIn and Microsoft may set their own cookies or pixels when you visit the Site.
  • Visitor Identification Cookies: To identify the businesses, and in some cases the business professionals, that visit the Site. See Visitor Identification below.

To learn how Google uses information from sites that use its services, visit https://policies.google.com/technologies/partner-sites. Microsoft describes how it uses Clarity data in the Microsoft Privacy Statement at https://privacy.microsoft.com/privacystatement.

Where the law requires consent, including in the European Economic Area, the United Kingdom and Switzerland, we use analytics, advertising and visitor identification cookies only with your consent.

You can refuse or delete cookies in your browser settings. The public pages of the Site still work without them, though you may need to log in again each time you use the Services.

Global Privacy Control (GPC) and Universal Opt-Out Signals: Our website is configured to automatically detect and honor Global Privacy Control (GPC) signals sent by your browser or device. GPC is a universal opt-out preference signal that communicates your choice to opt out of the "sale" or "sharing" of your personal information and targeted advertising. If our system detects a valid GPC signal, we will treat it as a request to opt out for that browser or device, and the Site, including the Signals pages, will not load analytics, advertising or visitor identification technologies for that browser or device. We may display a confirmation message on the Site stating "Opt-Out Request Honored." You do not need to take further action for your preference to be recognized for that specific browser session. We treat a Do Not Track signal from your browser the same way.

7. Clear Gifs (Web Beacons/Web Bugs). We or third-party analytics and advertising providers may employ clear gifs to help us manage content, measure advertising and track online movements. These are embedded invisibly on Web pages.

Visitor Identification

Some pages of the Site, including the Signals pages, use RB2B, a visitor identification service. RB2B uses cookies and similar technologies to recognize some visitors and match the visit to business information that it or others already hold, such as a name, job title, employer, business email address and professional networking profile. It then tells us which pages of the Site that person viewed. We use this to understand which organizations are interested in Medsender, and to follow up with business contacts by email or through professional networking sites.

When you visit our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email or online profiles. We (or service providers on our behalf) may then send communications and marketing to these emails or profiles. You may opt out of receiving this advertising by visiting RB2B’s opt-out page.

California residents can also opt out of the sale or sharing of their personal information on RB2B’s Do Not Sell or Share page.

You can also stop visitor identification by turning on GPC in your browser, by blocking or deleting cookies, or by emailing privacy@medsender.com. You can unsubscribe from our marketing emails at any time using the link in the email.

Information Sharing and Disclosure

Medsender does not rent personal information about you, and does not sell it for money. We disclose personal information to other people or non-affiliated companies only to your healthcare provider per your instructions or to provide services you’ve requested, when we have your permission, or under the following circumstances:

1. Service Providers. We may employ third-party companies to facilitate our Services (e.g., hosting, maintenance, database management, web analytics, and handling form submissions). These third parties have access to your Personal Information only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
2. Compliance with Laws and Law Enforcement. We cooperate with government and law enforcement officials to enforce and comply with the law.
3. Business Transfers. We may share your Personal Information in connection with a merger, acquisition, or sale of assets.
4. Advertising, Analytics and Visitor Identification Partners. The partners described in Cookies and Tracking Technologies and in Visitor Identification collect information about your visit directly from the Site. Some of them use it for their own purposes as well as ours. Under California law and the laws of some other states, this can count as a "sale" of personal information or as "sharing" it for cross-context behavioral advertising. You can opt out at any time, as described in Your Privacy Rights below.
5. Commitment to the California Delete Act & DROP: We only partner with third-party lead providers and visitor identification partners who attest to being registered with the California Privacy Protection Agency (CPPA) as data brokers. Beginning August 1, 2026, we ensure that deletion requests submitted via the Delete Request and Opt-Out Platform (DROP) are honored throughout our internal databases as "downstream" requests.

How Long We Keep Information

We keep personal information only as long as we need it for the purposes described in this policy, or longer where the law requires it. We keep Account information while your Account is open, and afterward as needed for legal, billing and security purposes. We keep information you submit through a form, and business contact information, while we have a business relationship with you or your organization or a reasonable prospect of one. Analytics, session recording, advertising and visitor identification data is kept for the retention period set in each provider’s service, which we choose based on how long we need it to improve the Site and follow up with interested businesses.

Your Privacy Rights (Including Special Information for California Consumers)

Right to Know and Access Your Personal Information

You have the right to request that we disclose certain information to you about our collection and use of your personal information. Once we confirm your verifiable request, we will disclose:

• The categories of personal information collected and the sources of that information.
• Our business purpose for collecting, selling, or sharing that information.
• The specific pieces of personal information we collected.
• Historical Data (Unlimited Lookback): For California residents, this right is not limited to the preceding 12 months. You may request access to all personal information collected and maintained about you dating back to January 1, 2022, unless providing it proves impossible or involves disproportionate effort.

Honoring Downstream Deletion Requests (DROP Compliance)

As of August 1, 2026, our systems act upon "downstream" deletion requests. If a California resident submits a centralized deletion request via the Delete Request and Opt-Out Platform (DROP), and our data providers notify us of a match, we will automatically:

1. Purge the record: Remove your information from active marketing and sales databases.
2. Suppress future collection: Place your identifiers on a permanent suppression list to ensure your data is not re-acquired. We process these notifications within 45 days of receipt from our data partners.

Global Privacy Control (GPC) Opt-Out

If you use a GPC-enabled browser, we will treat that signal as a valid request to opt-out of the sale and sharing of your personal information. You do not need to take further action for your preference to be recognized for that specific browser session.

Other Ways to Opt Out of Sale or Sharing

Besides GPC, you can opt out of the sale or sharing of your personal information, including for targeted advertising and visitor identification, by using RB2B’s opt-out page and Do Not Sell or Share page linked in Visitor Identification above, or by emailing privacy@medsender.com with "Do Not Sell or Share" in the subject line. A GPC signal applies only to the browser or device that sends it, so turn it on in each browser you use.

Other Rights

Depending on where you live, you may also have the right to correct or delete personal information we hold about you, and to withdraw any consent you have given. We will not discriminate against you for exercising any of these rights.

Sensitive Personal Information

We use sensitive personal information, such as Account log-in credentials, only to provide the Services and keep them secure, and not to infer characteristics about you.

Personal Information We Collect Through the Site

The table below summarizes the categories of personal information we collect through the Site, where each comes from, and whether we sell or share it.

Contact for Rights Requests: California residents may exercise these rights or request a list of third parties to whom we disclosed information for marketing purposes by contacting us at: privacy@medsender.com.

Changing Or Deleting Your Information

All Members may review, update, or delete information on the Site. You may also delete your Account; we will use commercially reasonable efforts to honor your request, though we may retain a de-identified copy of records for legal purposes.

Security

We have implemented commercially reasonable precautions consistent with the HIPAA Security Rule to protect our Site and Services. This includes robust access controls to safeguard information systems. Please be aware that no data security measures can guarantee 100% security.

International Transfer

Your information may be transferred to and maintained on computers located in the United States. Your consent to this Privacy Policy represents your agreement to that transfer.

Links To Other Websites

Our Site may contain links to third-party websites. We do not exercise control over these websites or their privacy policies. We encourage you to read the privacy statements of every website you visit.

Children Under 13

We do not knowingly collect personal information from children under 13. If a parent becomes aware of such a collection, please contact us at privacy@medsender.com.

Changes To This Policy

When we make material changes to this Privacy Policy, we will post the changes on this page and update the Effective Date at the top.

Contacting Us

If you have any questions about this Privacy Policy, please contact us at privacy@medsender.com or write to Medsender, Inc., 447 Broadway, 2nd Floor, New York, NY 10013.