Privacy Policy

Last Updated: January 1, 2025 Scriptyx, Inc. ("Scriptyx", "we", "our", or "us") provides a text messaging service that enables healthcare providers to send appointment-related messages (such as reminders or confirmations) to their patients. This Privacy Policy describes how we collect, use, and protect personal information through this service. 1. Scope This policy applies solely to information collected through Scriptyx’s SMS-based appointment scheduling service. This service is limited to non-clinical communication. It is not designed for and does not transmit Protected Health Information (PHI) as defined by the Health Insurance Portability and Accountability Act (HIPAA). 2. Information We Collect We collect the following types of information:

• Phone Number: Used to send SMS messages.
• Consent Status: Whether the user has opted in or out, including timestamps.
• Delivery Metadata: Such as carrier responses, delivery receipts, and error messages.
• Technical Metadata: IP address and browser type (if interacting via web form).
• We do not collect or process any message content that includes PHI or clinical details.

3. Use of Information Scriptyx does not store or transmit PHI via its texting service. Messages are limited to non-clinical scheduling functions. While we implement industry-standard safeguards, SMS is not a secure method of communication. Scriptyx disclaims responsibility for any risks associated with SMS delivery, including delayed or misdirected messages. 4. Sharing of Information All vendors are contractually obligated to maintain data security and confidentiality. We may share limited data:

• With Providers: To confirm opt-in status and message delivery details.
• With Service Vendors: Such as SMS delivery platforms and infrastructure partners.
• As Legally Required: In response to subpoenas, court orders, or regulatory requests.

5. Data Security & Retention Scriptyx uses industry-standard security practices to protect your data. However, SMS is inherently insecure and unencrypted. For that reason, Scriptyx prohibits the use of its service for clinical communications or transmission of PHI. We retain consent records and metadata for as long as required to fulfill our service obligations or comply with legal requirements. We do not store SMS content. 6. Your Choices You may opt out of receiving messages at any time by replying “STOP” to any text. Consent status will be updated automatically. For changes to your contact information, please contact your healthcare provider directly. 7. Children's Privacy This service is not directed to children under 13, and we do not knowingly collect data from children. 8. Policy Updates This Privacy Policy may be updated periodically. The “Effective Date” above will reflect the latest revision. Continued use of the service after changes constitutes your acceptance of the updated policy.