Privacy policy

Who We Are

This Privacy Policy applies to RxERP, Inc. (“RxERP,” “we,” “us,” or “our”), located at 491 North Bluff Street, Suite 106, St. George, UT 84770. It governs personal information we collect through our website (rxerp.com) and at a high level addresses our software product (the “RxERP Product”). This Policy works alongside our Terms of Service (rxerp.com/terms-of-service) and any customer agreements you have with us.

For questions, contact privacy@rxerp.com or legal@rxerp.com.

Effective Date

This policy was last updated June 2026.

Our Commitment to Candor

Although disclosure of a privacy policy is not required of all businesses, we value transparency. The primary purpose of this Policy is to describe how and when we collect, store, use, and share your information.

Our Commitment to the Law

We strive to understand and abide by all applicable privacy laws – including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and other state privacy laws as they become applicable – in how we collect, store, use, and share your information. If any part of our Policy is unlawful, it is inadvertent and void.

Usage Indicates Consent

No one is required to rxerp.com. By visiting our website, you consent to our Privacy Policy. Please do not use our website if you disagree with any parts of this Policy.

How We Collect Information about You

Information You Provide

When you interact with our website, you may provide personal information through web forms – for example, when you request a demo, contact us, or subscribe to our newsletter. The information we collect through these forms typically includes:

Your Name
Your Business Email
Your Phone Number (if provided)
Your Company name and Job Title
Any message or information you chose to include in the form.

Information Collected Automatically

When you visit our website, we and our service providers automatically collect certain information about your visit, including:

Your IP address
Browser type and version
Operating system
Referring URL (the website you came from)
Pages you visit and how you interact with them
Date and time of your visit
Approximate geographic location (city/region) based on IP

We collect this information using cookies, web beacons, pixels, and similar technologies. You can disable cookies via your browser settings or use our consent management tool, though doing so may limit certain site functionality.

Information from Third Parties

We may receive information about you from third-party data providers, business partners, and publicly available sources to help us understand and reach potential customers in our industry.

Third-Party Services and Tracking Technologies

We use third-party services on rxerp.com for the following purposes:

Analytics — to understand how visitors use our website

Advertising and marketing — for ad measurement, retargeting, and visitor identification

Call tracking — for marketing attribution of inbound phone calls

Infrastructure — website hosting, security, content delivery, and tag management

Embedded content — embedded video and similar interactive content

A complete and current list of the specific third-party services we use, along with the cookies they set and their retention periods, is maintained in our Cookie Policy at rxerp.com/cookie-policy-us/. The Cookie Policy is automatically updated as our service stack changes.

How We Use Your Information

We use the personal information we collect for the following purposes:

Responding to Your Inquires

When you submit a form or contact us, we use your information to respond to your request, schedule demos, answer questions, and provide information about RxERP.

Marketing and Communications

We may send you marketing emails about RxERP products, services, events, and industry insights. You can unsubscribe at any time using the link in any marketing email, or by emailing privacy@rxerp.com. SMS consent is not shared with third parties.

Operational and Customer Service Communications

If you become a customer or are in active discussion with us, we may contact you by email, phone or text message regarding your account, scheduled meetings, demos, support requests, or other operational matters. These communications are not marketing – they relate directly to services you have requested or are receiving.

Analytics and Site Improvement

We use information about how visitors interact with our site to improve user experience, troubleshoot issues, and measure the effectiveness of our content and marketing.

Advertising and Retargeting

We use tracking technologies to display advertising to you on third-party platforms and to measure the effectiveness of those campaigns. You can opt out of this tracking at any time using the “Do Not Sell or Share my Personal Information” link in our footer or via our consent management banner.

Legal Compliance and Protection

We may access, retain, and disclose information when reasonably necessary to comply with applicable law, respond to legal process, protect the safety of any person, investigate potential violations on our terms or policies, or protect our rights and property.

The RxERP Product

This section provides a high-level summary of how personal information is handled in the RxERP software product. Detailed terms governing customer use of the Product are set forth in the applicable customer agreement.

Our Role

RxERP provides software-as-a-service (SaaS) to pharmaceutical wholesalers and distributors, pharmacies, 3PL providers, and similar organizations in the pharmaceutical supply chain. When customers use the Product, the customer is the owner and controller of the data processed within it, and RxERP acts as a service provider on the customer’s behalf.

Personal Information Within the Product

The personal information processed within the Product is limited to business contact information for the customer’s authorized users (such as names, business email addresses, and access credentials). This information is processed solely to enable the customer’s use of the Product.

End-User Privacy Requests

If you have a privacy request related to information processed in the RxERP Product, you can submit it using our Data Request form at rxerp.com/data-request/ or by emailing privacy@rxerp.com. We may coordinate with your customer organization to fulfill verified requests, consistent with applicable law and our customer agreements.

For More Detail

Customers and prospective customers with questions about our data practices can contact their account representative or email privacy@rxerp.com.

How We Share Your Information

Service Providers

We share information with vendors and service providers who perform functions on our behalf – such as hosting, analytics, advertising platforms, email delivery, and CRM systems. These providers are contractually obligated to use information only as needed to perform services for us and to protect it appropriately.

Corporate Affiliates

We may share information with corporate affiliates for purposes consistent with this Policy.

Business Transfers

If RxERP is involved in a merger, acquisition, reorganization, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. This Policy will continue to apply to your transferred information, or you will be notified of any material changes.

At Your Direction

We share information at your direction, such as when you authorize an integration or third-party application.

Legal Requirements

We may share information if we believe in good faith that it is reasonably necessary to comply with a law, regulation, legal process, or governmental request; to protect the safety of any person; to address fraud or technical issues; or to protect our rights or property.

“Sale” or “Sharing” under CCPA

We do not sell personal information in the traditional sense (i.e., exchange for money). However, certain of our tracking and advertising activities – particularly those involving Meta Pixel, LinkedIn, Insight Tag, RB2B, and RetargetKit – may meet the broad definitions of “sale” or “sharing” under CCPA/ CPRA, because personal information is disclosed to those third parties for cross-context behavioral advertising purposes.

You have the right to opt out of this sharing. Use the “Do Not Sell or Share My Personal Information” link in our website footer or visit rxerp.com/opt-out-preferences/

Your Privacy Rights

California Residents (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):

Right to Know

You have the right to request that we disclose the categories of personal information we have collected about you, the categories of sources, the purposes for collecting it, the categories of third parties with whom we share it, and the specific pieces of personal information we hold about you.

Right to Delete

You have the right to request that we delete personal information we have collected from you, subject to certain exceptions (for example, where we need to retain information to complete a transaction, comply with legal obligations, or detect security incidents).

Right to Correct

You have the right to request that we correct inaccurate personal information we maintain about you.

Right to Opt Out of Sale or Sharing

You have the right to opt out of the sale or sharing of your personal information, including for cross-context behavioral advertising. You can exercise this right at any time by using the “Do Not Sell or Share My Personal Information” link in our website footer.

Right to Limit Use of Sensitive Personal Information

To the extent we collect sensitive personal information (as defined by CPRA), you have the right to limit our use of that information to certain permitted purposes.

Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. We will not deny you services, charge you different prices, or provide a different level of quality solely because you exercised your privacy rights.

How to Exercise Your Rights

You can submit a privacy request in one of two ways:

Use our online Data Request form at rxerp.com/data-request/
Email us at privacy@rxerp.com with your request

We will acknowledge receipt of your request within five (5) business days and respond within 45 days, as required by CCPA. If we need additional time, we will notify you and may extend the response period by up to an additional 45 days.

To protect your privacy, we will need to verify your identity before processing your request. We may ask you to provide information that matches what we have on file. You may also designate an authorized agent to make a request on your behalf, in which case we will require proof of authorization.

How We Store and Protect Your Information

Location of Storage

We store information in the United States in accordance with applicable U.S. laws. If you access our site from outside the U.S., you consent to the transfer of your information to and storage of your information in the United States.

Security Measures

We implement reasonable administrative, technical, and physical safeguards to protect personal information. Sensitive information transmitted to or from our website is encrypted using industry-standard protocols (such as TLS/SSL). However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Data Retention

We retain personal information for as long as needed to fulfill the purposes for which it was collected, including providing services, complying with legal obligations, resolving disputes, and enforcing agreements. Retention periods vary by data type and business purpose.

Security Breach Notification

If we become aware of a security breach affecting your personal information, we will investigate, take remedial action, notify law enforcement if appropriate, and notify you and applicable regulators as required by federal and state law.

External Links

Our website may contain links to other sites or applications We have no responsibility for the content or privacy practices of any third-party site or app. We encourage you to review the privacy policies of any third-party site you visit.

Children’s Privacy

Our website is directed to business audiences and is not intended for children under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child without parental consent, we will delete it. If you believe a child has provided us with personal information, please contact privacy@rxerp.com.

Assignments

We may assign this Policy, its duties, or its benefits at any time without notice. You may not assign this Policy, its duties, or its benefits without our prior written notice.

Disputes

Governing Law

This Policy is governed by the laws of the United States and the State of Utah, excluding its conflict of laws provisions.

Internal Resolution

If you have concerns or claims with respect to our Policy, email legal@rxerp.com or privacy@rxerp.com. We will investigate and attempt to promptly resolve any complaints.

Arbitration

If a complaint cannot be resolved through our internal process, you agree to resolve the complaint through binding arbitration. Arbitration will be conducted by telephone and email,and if necessary in person, in St. George, Utah. The arbitration will be conducted by an arbitrator from the American Arbitration Association, under its rules of commercial arbitration, to the extent not inconsistent with this Policy. Both parties will equally share the cost of arbitration. Attorney fees will be awarded to the prevailing party. All decisions of the arbitrator will be final, binding, and enforceable in any court of competent jurisdiction. For additional information you may visit www.ADR.org .

If arbitration is unenforceable, lawsuits must be brought before a court in the State of Utah. Attorney fees will be awarded to the prevailing party.

Severability

If any part of this Policy is found unenforceable by an arbitrator or court, all other parts will remain in force, and a valid provision that most closely approximates the intent and economic effect of the invalid provision will be substituted.

Updates to This Policy

We may revise this Policy at any time. If we make a material change, we will update this webpage and indicate the new effective date at the top. For significant changes, we may also notify you by email or other reasonable means. By continuing to use our website after changes become effective, you agree to be bound by the updated Policy.