Privacy Policy

This Privacy Policy explains how Right To Try LLC, doing business as GetMyIVM ("GetMyIVM," "we," "us"), handles information collected through our website, applications, and services (the "Platform"). Health information you share with your care team is also addressed in our Notice of Privacy Practices.

1. Information we collect

Information you provide

• Identity and contact details: name, date of birth, sex, email, phone, state of residence, and shipping address.
• Health information: intake answers, medical history, medications, allergies, weight, and documents or photos you upload.
• Communications: messages you exchange with your care team.
• Payment information: processed by our payment processor; we store limited billing status and identifiers, not full card numbers.

Information collected automatically

• Device, log, and usage data, and cookies or similar technologies used to operate, secure, and improve the Platform.

We collect only what we need to operate the Platform and support safe care.

2. How we use your information

• To deliver care: intake, physician review, live audio or video visits where required, messaging, prescriptions, and shipping.
• To operate your account: orders, billing, and support.
• To keep the Platform safe: authentication, fraud prevention, and security monitoring.
• To improve the service and meet legal, regulatory, and recordkeeping obligations.

3. How AI is used

We use software, including artificial-intelligence tools, to organize and summarize intake information, draft communications for physician review, and flag items for the care team. These tools assist physicians; they do not make diagnoses or prescribing decisions. A licensed physician remains responsible for every clinical decision.

Our AI processing provider (Anthropic) operates under a data-protection agreement that prohibits using your information to train its models.

4. How we share information

We do not sell your personal or health information.

We share information only as needed to deliver the service or as permitted by law, including with:

• The licensed physicians who review your case and the pharmacies that fill and ship your prescriptions.
• Service providers that host, secure, or support the Platform — including Vercel (application hosting), Supabase (database hosting), Anthropic (AI processing), Resend (email delivery), and our payment processor — under data-protection and confidentiality agreements that limit their use of your data.
• Authorities or others when required by law, to comply with legal process, or to protect health or safety.
• A successor in the event of a merger, acquisition, or asset transfer, subject to this Policy and applicable law.

5. Cookies and tracking

We use cookies and similar technologies to keep you signed in, remember your preferences, secure the Platform, and understand how the Platform is used. You can control cookies through your browser settings. We do not use cookies for third-party advertising, and we do not sell your information. We honor Global Privacy Control (GPC) signals where required by law; because we do not sell or share data for cross-context advertising, "Do Not Track" signals do not change how we operate.

6. Data security

We use administrative, technical, and physical safeguards designed to protect your information, including encryption of data in transit and at rest, access controls, and activity logging. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

7. Data retention

We keep your medical and account records for as long as needed to provide care, operate the business, and meet legal obligations. Consistent with professional guidance, we retain adult patient records for at least ten (10) years after your most recent interaction, and records for patients who were minors until the patient reaches the age of majority plus the applicable limitations period. Where we provide care to residents of states with longer requirements, we retain records for the longest period any applicable state law requires.

8. Your choices and rights

You can review and update account information, request access to your records, and contact us with privacy questions. Rights to your health records are described in the Notice of Privacy Practices.

California residents. Under the CCPA/CPRA you have the right to know what personal information we collect and how we use and share it, to request deletion of personal information (subject to legal retention requirements for medical records), to correct inaccurate information, and not to be discriminated against for exercising these rights. We do not sell or share personal information for cross-context behavioral advertising. To exercise these rights, contact support@getmyivm.com.

9. Children

The Platform is for adults 18 and older. We do not knowingly collect information from anyone under 18. If we learn we have, we will delete it.

10. Changes and contact

We may update this Policy; we will post the updated effective date and, where required, notify you. Privacy questions or requests: support@getmyivm.com.

Effective date: August 21, 2026.