Privacy Policy
FxMedSupport (a d/b/a of NutrimentRx, LLC) (“FxMedSupport”, “we”, “our”, “us”) respects your privacy. This policy explains what personal information we collect, how we use it, who we share it with, and what choices you have. It applies to (i) the website at fxmedsupport.com and related domains, (ii) the FxMedSupport application platform, and (iii) any communications, demos, or interactions you have with us.
§ 1Information We Collect
a. Information You Provide
- Account information: name, email, phone number, practice/company name, role, and login credentials when you create an account or request access.
- Demo & sales inquiries: contact details, practice type, current EHR, and other context you share when requesting a demo or asking questions.
- Support requests: the content of tickets, chat messages, emails, and other support communications.
- Billing information: billing address, payment card details (processed by our payment processors — we do not store full card numbers), and tax identifiers where applicable.
- Marketing preferences: any preferences you set regarding email or other communications.
b. Information Collected Automatically
- Device & usage data: IP address, browser type, operating system, referring URL, pages visited, timestamps, and approximate location (derived from IP).
- Cookies and similar technologies: see Cookies & Tracking below.
- Application logs: records of authentication events, integration activity, and other operational telemetry necessary to run the platform reliably and securely.
c. Information from Third Parties
We may receive information about you from third parties such as Cerbo (when a referral is made), payment processors, analytics providers, and publicly available sources (e.g., your business website or LinkedIn profile) for prospect qualification.
§ 2How We Use Your Information
We use the personal information we collect to:
- Provide, operate, and improve the Services;
- Process payments and manage your subscription;
- Respond to support requests, sales inquiries, and other communications;
- Send service-related notifications (downtime, security, billing, terms changes);
- Send marketing emails about new features, updates, and offerings (with the option to opt out at any time);
- Detect, investigate, and prevent fraud, abuse, and security incidents;
- Comply with our legal obligations and enforce our terms;
- Conduct analytics to understand how the Services are used and to improve them.
§ 3How We Share Information
We do not sell your personal information. We share information only as described below:
- Service providers: with vendors and contractors who help us operate the Services (hosting, analytics, customer support tools, payment processing, email delivery). These providers are bound by confidentiality and data-protection obligations.
- Cerbo: when relevant to your account (e.g., confirming your status as a Cerbo client) or in connection with our role as the official integration partner.
- Authorized integrations: when you direct us to send data to a Third-Party Service, that data flows according to your configuration.
- Legal compliance: when required by law, subpoena, court order, or to protect the rights, safety, or property of FxMedSupport or others.
- Business transfers: in the event of a merger, acquisition, or sale of all or substantially all of our assets, in which case continuity of this Privacy Policy will be required of the successor.
§ 4Cookies & Tracking
We use cookies and similar technologies to operate the website and Services, remember your preferences, analyze usage, and (where applicable) deliver relevant marketing.
- Strictly necessary cookies: required for the website and Services to function (e.g., authentication, session management).
- Analytics cookies: help us understand how visitors use the website so we can improve it.
- Marketing cookies: used by us or our partners to understand the effectiveness of our marketing.
You can control cookies through your browser settings. Disabling certain cookies may limit functionality.
§ 5Data Retention
We retain personal information for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Account data is retained for the duration of your subscription plus a limited period thereafter for legitimate business purposes (e.g., billing reconciliation, legal hold). Application logs are retained according to our internal log-retention policy.
For terminated accounts: we delete all encrypted patient ID mappings, integrations, and operational data within 1–2 business days of cancellation. We retain only a record that you were once a customer (name only, no operational data).
§ 6Security
We use commercially reasonable administrative, technical, and physical safeguards to protect personal information against unauthorized access, alteration, disclosure, or destruction. See our Security page for detail. No system is 100% secure; we cannot guarantee that information will not be accessed by unauthorized parties despite our best efforts.
§ 7Your Rights & Choices
Depending on the laws applicable to you, you may have certain rights regarding your personal information, including the right to:
- Access the personal information we hold about you;
- Correct inaccurate personal information;
- Delete personal information (subject to legal retention requirements);
- Object to or restrict certain processing;
- Receive a portable copy of your information;
- Opt out of marketing communications at any time (use the unsubscribe link in any email or contact us directly);
- Withdraw consent where processing is based on consent.
California residents have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the right to know what personal information is collected, sold, or disclosed, and the right to opt out of sale (FxMedSupport does not sell personal information). To exercise any of these rights, contact us at privacy@fxmedsupport.com.
§ 8Children’s Privacy
The Services are not directed to individuals under 18, and we do not knowingly collect personal information from minors. If you believe we have collected information from a minor, please contact us so we can delete it.
§ 9International Users
FxMedSupport is operated from the United States. If you access the Services from outside the U.S., your information may be transferred to, stored in, and processed in the United States, where data-protection laws may differ from those in your country. By using the Services, you consent to such transfer.
§ 10Changes to This Policy
We may update this Privacy Policy from time to time. The “Last reviewed by counsel” date at the top reflects the most recent change. Material changes will be communicated to active Clients in advance of taking effect. Your continued use of the Services after changes take effect constitutes acceptance of the updated policy.
§ 11Contact Us
Questions, requests, or concerns about this Privacy Policy can be directed to:
FxMedSupport (NutrimentRx, LLC)
Email: privacy@fxmedsupport.com
Support: via our standard support ticket system
Privacy Policy
Effective Date: March 11, 2026
FXMedSupport (“we”, “our”, or “us”) operates the website https://fxmedsupport.com and provides electronic health record (EHR) optimization, integration services, and technical infrastructure solutions for healthcare practices.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with our integrations, applications, and technology infrastructure.
By accessing or using our services, you agree to the collection and use of information in accordance with this policy.
Who we are
Our website address is:
https://fxmedsupport.com
FXMedSupport specializes in healthcare technology infrastructure including EHR optimization, integrations, automation tools, and technical services supporting medical practices and healthcare organizations.
What personal data we collect and why we collect it
We collect certain information to operate our website, support integrations, communicate with clients, and improve our services.
Information may include personal information voluntarily provided by users as well as technical data automatically collected through website interactions.
Comments
When visitors leave comments on the site we collect the data shown in the comments form, along with the visitor’s IP address and browser user agent string to help spam detection.
An anonymized string created from your email address (a hash) may be provided to the Gravatar service to determine whether you are using it.
The Gravatar privacy policy can be found here:
https://automattic.com/privacy/
After approval of a comment, the user’s profile picture may be visible publicly in the context of that comment.
iOS / Android Applications
FXMedSupport may provide mobile applications or integrations with mobile platforms used by healthcare practices.
We do not store personal data within the mobile application unless required for specific integration functionality.
HealthKit
Our application may request access to Apple HealthKit if you choose to share health metrics with your healthcare provider.
Examples of data that may be shared include:
-
Vital signs
-
Health measurements
-
Activity data
This access is optional and fully controlled by the user.
Users may modify or revoke HealthKit permissions at any time within their device settings.
FXMedSupport does not independently store HealthKit data outside of authorized healthcare provider integrations.
Media
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS).
Visitors to the website may download and extract location data from images posted on the site.
Contact forms
When you submit a contact form through our website, we collect the information you provide so we can respond to your inquiry.
This information may include:
-
Name
-
Email address
-
Organization or practice name
-
Message content
Information submitted through contact forms is used solely for communication and support purposes.
Cookies
If you leave a comment on our site you may opt-in to saving your name, email address, and website in cookies.
These cookies are provided for your convenience so that you do not need to reenter your information when leaving future comments. These cookies remain active for one year.
If you have an account and log in to the site, a temporary cookie is set to determine whether your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, cookies may store your login information and screen display preferences.
Login cookies last for two days.
Screen option cookies last for one year.
If “Remember Me” is selected, login will persist for two weeks.
Logging out removes login cookies.
If you edit or publish content, an additional cookie may be saved indicating the post ID of the edited article. This cookie contains no personal data and expires after one day.
Embedded content from other websites
Articles on this site may include embedded content such as:
-
Videos
-
Images
-
Articles
-
Widgets
Embedded content behaves the same as if the visitor had visited the external website.
These third-party websites may collect data, use cookies, or monitor interactions with their embedded content.
Users should review the privacy policies of those third-party websites.
Analytics
We may use website analytics services to understand how visitors interact with our website.
Analytics data may include:
-
Pages visited
-
Time spent on pages
-
Browser type
-
Device type
-
Referring URLs
This information helps us improve website performance, usability, and service quality.
Who we share your data with
We do not sell personal data.
Information may be shared only when necessary to:
-
Operate our website
-
Provide requested services
-
Maintain system security
-
Support integrations
-
Comply with legal obligations
Limited information may be shared with trusted technology providers assisting with hosting, infrastructure, or security services.
How long we retain your data
If you leave a comment, the comment and its metadata may be retained indefinitely.
This allows follow-up comments to be recognized and approved automatically.
For registered users (if applicable), personal profile information is stored within the website system.
Users may view, edit, or delete their personal information at any time, except for their username.
Website administrators may also manage this information.
What rights you have over your data
If you have an account or have left comments, you may request an exported file of the personal data we hold about you.
You may also request that we erase personal data we hold about you.
This does not include data we must retain for administrative, legal, or security purposes.
Where we send your data
Visitor comments may be checked through automated spam detection services.
Third-Party Payment Processing
FXMedSupport may provide integrations allowing medical practices to connect their EHR or operational systems with third-party payment processors.
FXMedSupport does not directly process or store credit card information.
Payment transactions are processed by independent payment providers selected by the medical practice.
These providers may include:
-
Payment gateways
-
Credit card processors
-
Subscription billing platforms
-
Online invoicing systems
-
POS platforms
Payment data is transmitted directly to the payment processor using encrypted connections.
FXMedSupport systems follow security practices including:
-
TLS/SSL encrypted communication
-
Secure API authentication
-
Tokenized credential protection
-
Secure infrastructure management
-
Controlled access permissions
FXMedSupport does not store full credit card numbers or CVV codes.
Payment processors are responsible for maintaining PCI-DSS compliance.
HIPAA & Healthcare Data Handling
FXMedSupport provides technology infrastructure and integrations that may interact with healthcare software platforms used by licensed medical providers.
FXMedSupport operates as a technology service provider and integration specialist and is not a healthcare provider.
Systems and integrations may align with standards associated with the Health Insurance Portability and Accountability Act (HIPAA) where applicable.
Security practices may include:
-
Secure API-based data exchange
-
Encryption of data in transit
-
Role-based access control
-
Secure server infrastructure
-
System monitoring and logging
Healthcare providers remain responsible for maintaining regulatory compliance when using EHR systems and related integrations.
Where required, Business Associate Agreements (BAAs) may be established.
API & Integration Security Standards
FXMedSupport develops integrations connecting healthcare platforms, automation systems, payment systems, and third-party applications.
Integration security practices may include:
-
API authentication using OAuth or API keys
-
Token-based authorization
-
TLS/SSL encrypted communications
-
Infrastructure security controls
-
Monitoring and logging of integration activity
External platforms maintain their own privacy and security policies.
AI Tools and Automation
FXMedSupport may integrate artificial intelligence tools and automation technologies used by healthcare practices to improve operational workflows.
Examples may include:
-
Clinical documentation assistance
-
Workflow automation
-
Messaging or communication tools
-
Data organization systems
AI service providers operate independently and maintain their own privacy and security policies.
Google User Data Access
Our application accesses Google user data only after explicit user consent and only for the functionality required by the application.
We use the following Gmail API scopes:
Gmail Read-Only (gmail.readonly)
Used to read incoming email messages and metadata required for authorized application workflows.
Gmail Send (gmail.send)
Used to send emails on behalf of the user within authorized application processes.
We do not request or access additional Gmail scopes beyond those listed.
How We Use Gmail Data
Gmail data is accessed and processed only to support authorized application functionality.
This may include:
-
Reading email messages necessary for workflows
-
Extracting limited metadata such as sender, subject, and timestamp
-
Sending emails initiated or approved by the user
Gmail data is never sold or used for advertising purposes.
Data Retention Policy
FXMedSupport retains data only as long as necessary to fulfill operational purposes such as providing services, maintaining integrations, supporting users, and complying with legal requirements.
Retention periods may vary depending on the type of information and system requirements.
When data is no longer required, it may be securely deleted, anonymized, or archived.
International Data Transfers
FXMedSupport may utilize infrastructure providers, service platforms, or integration partners located in various geographic regions.
As a result, information may be processed or stored outside the user’s country.
When such transfers occur, we take reasonable steps to ensure appropriate safeguards are implemented, including encrypted communications and contractual protections with service providers.
How we protect your data
FXMedSupport implements security safeguards designed to protect information from unauthorized access, disclosure, alteration, or destruction.
Security measures may include:
-
Secure infrastructure environments
-
Encrypted communications
-
Access control systems
-
System monitoring and logging
-
Secure development practices
What data breach procedures we have in place
If a security incident involving data occurs, FXMedSupport may:
-
Investigate the incident
-
Contain and remediate affected systems
-
Notify affected parties when required
-
Implement corrective measures to prevent recurrence
What third parties we receive data from
We may receive limited information from:
-
Integration partners
-
EHR platforms
-
Payment processors
-
Email systems
-
CRM or automation platforms
Such data is used only to support requested integrations or services.
What automated decision making and/or profiling we do with user data
FXMedSupport does not use automated decision-making processes that produce legal or significant effects for individuals.
Automation tools may be used to assist operational workflows or system routing.
Industry regulatory disclosure requirements
FXMedSupport provides technology infrastructure that may interact with regulated healthcare systems.
Regulatory compliance obligations remain the responsibility of the healthcare provider or organization using the services.
Contact Information
If you have questions regarding this Privacy Policy, please contact:
FXMedSupport
help@fxmedsupport.com
https://fxmedsupport.com