Privacy Policy

Effective date: June 10, 2026  ·  Last updated: June 10, 2026

1. Who We Are

ThePharmaBridge ("we," "us," or "our") operates the occupational health screening platform available at this website. We provide AI-assisted educational tools to help firefighters and other first responders prepare for conversations with their healthcare providers about occupational exposure history.

2. Information We Collect

When you submit an intake form, we collect the following categories of self-reported information:

  • Occupational information: role, department, years of active service, types of incidents responded to
  • Exposure history: chemical and substance exposures, personal protective equipment usage
  • Health-related information: current symptoms, family medical history, high-risk incident history
  • Account information (if you register): email address and password (stored as a one-way hash)

We also collect standard server logs (IP address, browser type, pages visited) for security and operational purposes. We do not collect payment information.

3. How We Use Your Information

  • To generate your clinical reference packet: Your intake data is processed by our AI clinical intelligence engine to produce an educational summary of your occupational exposure history. Our AI provider processes this data under a Business Associate Agreement (BAA) in accordance with HIPAA requirements.
  • To display and store your report: Generated packets are stored so you can retrieve them later via the user portal.
  • To improve the service: Anonymized, aggregated data (e.g., most common exposure types across the cohort) may be used to improve screening questions and report quality. Individual records are never sold or shared with third parties for marketing purposes.
  • To comply with legal obligations.

4. Health Data and HIPAA

We treat all health-related information you provide as sensitive. Our platform is designed to comply with the Health Insurance Portability and Accountability Act (HIPAA) to the extent applicable. We have executed BAAs with our AI processing provider and our hosting provider. Data is stored encrypted at rest and in transit.

This platform is an educational tool, not a covered entity under HIPAA in the traditional sense, as we do not provide medical treatment or insurance. However, we voluntarily apply HIPAA-equivalent safeguards to all health data.

5. Data Sharing

We do not sell your personal or health information. We share data only with:

  • Our AI processing provider: To process your intake form through our clinical intelligence engine (under BAA)
  • Render: Our hosting provider, for infrastructure purposes (under BAA)
  • Your department administrator: If your department has an enterprise account, your submission and risk flag may be visible to authorized department wellness administrators. You will be notified of this at the time of submission.
  • Law enforcement or regulators: If required by applicable law

6. Data Retention

Your intake records and generated reports are retained for as long as your account is active, or up to 3 years from the date of submission, whichever comes first. You may request deletion of your data at any time (see Section 8). Anonymized aggregate statistics are retained indefinitely.

7. Security

We use industry-standard safeguards including TLS encryption in transit, encryption at rest on our hosted database, hashed passwords, and JWT-based authentication. No system is 100% secure; if you believe your account has been compromised, contact us immediately.

8. Your Rights

You have the right to:

  • Access the personal and health data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data ("right to be forgotten")
  • Withdraw consent at any time (this does not affect past processing)

To exercise these rights, email us at sid@thepharmabridge.org. We will respond within 30 days.

9. Not Medical Advice

All content generated by this platform is for informational and educational purposes only. Nothing on this platform constitutes medical advice, a clinical diagnosis, or a treatment recommendation. Always consult a licensed healthcare provider for medical decisions.

10. Changes to This Policy

We may update this policy periodically. We will notify registered users of material changes by email or in-app notice. Continued use of the platform after changes constitutes acceptance of the updated policy.

11. Contact

For privacy-related questions: sid@thepharmabridge.org
For general inquiries: sid@thepharmabridge.org