Privacy Policy

SCRIPTABLE PRIVACY POLICY

Last Updated: June 10, 2026

This Privacy Policy describes how Scriptable LLC (“Scriptable,” “we,” “us,” or “our”) collects, uses, shares, and protects information about you when you use our website (scriptable.co), mobile applications, and related services (collectively, the “Services”).

Please also review our Consumer Health Data Privacy Notice, which provides additional disclosures regarding the collection and use of consumer health data under applicable state laws.

1. INFORMATION WE COLLECT

We collect information you provide directly to us, information we collect automatically, and information from third parties.

Information you provide:

• Account registration information (name, email address, password, date of birth)

• Health and medical information you submit in intake forms and questionnaires

• Government-issued identification documents submitted for identity verification

• Payment information (processed by our payment processor; we do not store full card numbers)

• Shipping address and delivery preferences

• Communications you send to us, including customer support inquiries

• Photos and reviews you submit

Information we collect automatically:

• Log data (IP address, browser type, pages visited, time and date of visits)

• Device identifiers and operating system information

• Cookies and similar tracking technologies (see Section 6)

• Usage data and interaction patterns within the Services

Information from third parties:

• Identity verification data from verification service providers

• Payment fraud and risk data from payment processors

• Analytics data from third-party analytics providers

2. HOW WE USE YOUR INFORMATION

We use the information we collect to:

• Create and manage your account

• Facilitate telehealth consultations between you and independent Providers

• Process and fulfill prescription orders through our partner pharmacy

• Process payments and prevent fraud

• Send transactional communications about your account, orders, and prescriptions

• Send renewal reminders and subscription management communications

• Send marketing communications where you have opted in

• Comply with legal obligations

• Improve and develop the Services

• Enforce our Terms and Conditions and other agreements

3. HOW WE SHARE YOUR INFORMATION

We do not sell your personal information. We share your information in the following circumstances:

With healthcare providers and the affiliated Medical Entity: We share your intake information and health data with the independent Providers and the affiliated Medical Entity to facilitate clinical consultations and, where appropriate, prescription issuance.

With our Telehealth Partner: We share information with our telehealth infrastructure partner, which provides the technology platform through which consultations occur. This partner processes information as a business associate and is bound by appropriate data protection agreements.

With our partner pharmacy: We share your prescription information and shipping details with our licensed partner pharmacy to fulfill prescription orders.

With service providers: We share information with third-party vendors who assist us in operating the Services, including payment processors, shipping carriers, email and SMS service providers, customer support platforms, identity verification providers, and analytics providers. These vendors are contractually prohibited from using your information for purposes other than providing services to us.

For legal compliance: We may disclose information if required by law, subpoena, court order, or government request, or if we believe disclosure is necessary to protect the rights, property, or safety of Scriptable, our users, or others.

In connection with a business transaction: If Scriptable is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any material change in ownership or use of your personal information.

4. HEALTH INFORMATION

We treat health information you provide with heightened care. Health information collected in connection with telehealth consultations is shared only with the affiliated Medical Entity, independent Providers, our Telehealth Partner, and our partner pharmacy for purposes of providing care and fulfilling prescriptions. We do not use your health information for marketing purposes without your separate, explicit consent. For additional information about how consumer health data is handled, please review our Consumer Health Data Privacy Notice.

5. SMS COMMUNICATIONS

By providing your mobile phone number, you consent to receive transactional SMS messages related to your account, orders, and subscription. Marketing SMS messages require a separate opt-in at the time of account creation or through your account settings. You may opt out of marketing SMS messages at any time by replying STOP. Message frequency varies. Standard message and data rates may apply. Opting out of marketing messages does not affect transactional messages necessary to complete your care.

6. COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar tracking technologies to operate and improve the Services, analyze usage, and support marketing. We use:

• Strictly necessary cookies: Required to operate the Services and cannot be disabled

• Analytics cookies: Help us understand how users interact with the Services

• Marketing cookies: Used to deliver relevant advertising on our site and third-party platforms

You can manage cookie preferences through our cookie consent tool. You may also opt out of certain data sharing for targeted advertising by using the Do Not Sell or Share My Personal Information link in our footer. We honor Global Privacy Control (GPC) signals where required by applicable law.

We do not allow advertising pixels to fire on pages where you are completing health intake questionnaires or providing medical information.

7. DATA RETENTION

We retain personal information for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. Health information shared with the affiliated Medical Entity is retained in accordance with that entity’s medical records retention obligations under applicable state and federal law, which is separate from Scriptable’s own retention practices.

8. DATA SECURITY

We implement reasonable administrative, technical, and physical security measures to protect your information. However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee the absolute security of your information. If you believe your account has been compromised, contact us immediately at support@scriptable.co.

9. CHILDREN’S PRIVACY

The Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we learn that we have collected information from a minor, we will promptly delete it. If you believe a minor has provided us with personal information, contact us at privacy@scriptable.co.

10. CALIFORNIA RESIDENTS

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), including the right to know, delete, correct, opt out of sale or sharing, and limit use of sensitive personal information. To exercise these rights, email privacy@scriptable.co. We will not discriminate against you for exercising your privacy rights.

11. OTHER STATE PRIVACY RIGHTS

11.1 Washington, Nevada, Connecticut, and Other States

Residents of certain states, including Washington, Nevada, and Connecticut, have additional privacy rights regarding consumer health data and general personal information under applicable state laws. Please review our Consumer Health Data Privacy Notice for disclosures specific to consumer health data. To exercise rights under applicable state law, email privacy@scriptable.co. We will respond within the timeframe required by applicable law (generally 45 days, with a possible extension).

11.2 How to Submit a Request

To submit a privacy rights request, email privacy@scriptable.co. We may need to verify your identity before processing your request. Authorized agents may submit requests on your behalf with appropriate documentation.

12. DO NOT TRACK

Some browsers transmit Do Not Track (DNT) signals. We honor Global Privacy Control (GPC) signals as required by applicable law. Our cookie consent tool allows you to manage tracking preferences.

13. THIRD-PARTY LINKS

The Services may contain links to third-party websites or services. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.

14. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a prominent notice on the Services. Your continued use of the Services after the effective date of any changes constitutes acceptance of the updated Privacy Policy.