Privacy Policy

1. Who we are

ThePharmaBridge Inc. ("we," "us") operates this occupational health tool. We are a for-profit company. We are not a nonprofit, not a union, not a government agency, and not affiliated with the IAFF, NFPA, NIOSH or the CDC — we reference their published guidance, and that is the entire relationship.

We are not a healthcare provider, we do not practice medicine, and we do not bill insurance.

2. What we collect

Only what the tool needs to do its job. When you submit the intake form we collect what you type into it:

• Occupational details: role, department or station name, years of active service, the kinds of incidents you respond to
• Exposure history: chemical and substance exposures, SCBA and PPE practice, high-risk incident history
• Health details you choose to enter: current symptoms, age, sex, smoking history, and any screenings or test results you already have
• Work status and coverage: whether you are still serving or retired and the year you retired, the year and contents of your last department physical, the type of insurance you have, and an optional ZIP code
• Email address — optional. It exists so we can send you the link to your own summary. Leaving it blank costs you nothing else.
• Account details, only if you register: email address and a password, which we store as a one-way hash and cannot read

We do not ask for your name, date of birth, Social Security number, employee ID, insurance policy or member numbers, or payment information. There is no payment step anywhere in this product.

We do not ask for your family's medical history, and there is no place on the form to enter it.

Our servers also keep standard logs (IP address, browser type, pages requested) for security and to keep the service running.

We count page visits, and that is all we do. We keep a plain tally of how many people opened the home page, how many went on to the intake, and how far into the form people get. Each of those is a single number that goes up by one — there is no visitor ID, no cookie, no advertising or analytics pixel, and no third-party analytics or advertising company receives anything from this site. The counters are ours and the requests reach our server and stop there. Nothing about who you are, where you came from, or what you entered is attached to any of it, so a number like “412 people opened the home page” tells us nothing about any of those 412 people. We use it to find out where the form is losing people so we can fix it.

3. What we do with it

• Build your summary. Your intake answers are sent to a third-party AI provider (Anthropic) through its commercial API, which generates the written summary. Under that API's terms, your data is processed to return our result and is not used to train their models.
• Draft a coverage summary your doctor can edit. The report includes a draft a physician can adapt when documenting why a test is medically necessary. Only someone with your private link can open or edit it.
• Store it so you can get it back. Your summary lives at a private link so you can return to it, download it, or print it.
• Email it to you, if and only if you gave us an email address. We use SendGrid to deliver that message.
• Improve the questions. We look at aggregate patterns — which questions people abandon, which exposures come up most — to make the intake better. This does not involve reading individual records for marketing or selling anything.
• Meet legal obligations where we are required to.

4. Who can see your submission

This is the question most people actually have, so here it is in full.

If you complete the intake on your own — no account, or an account not linked to any department — your submission is visible to you (via your private link) and to our own system administrators for support and maintenance. No fire department can see it, and no department administrator is told it exists.

If you join a department using an invite code, your submission is counted toward that department's aggregate figures. Their designated administrator sees only totals — how many members took part, and counts by category. They cannot open, read, download, or link to any individual member's summary, including yours. Any group smaller than five is withheld from their dashboard entirely, so a count can never be narrowed down to one person. Your summary stays reachable only through your own private link.

How the link is made: submissions are matched to department accounts by email address. If you have joined a department here using an email address and then enter that same address on the intake form, that submission will appear in that department's account. Use a different address, or leave the email blank, and it will not.

We never share your data with employers, insurers, pension boards, licensing bodies, or anyone acting for them, and we do not sell it or use it for advertising. Beyond that, we share data only with the service providers listed in section 5, or where we are legally required to.

5. Service providers we use

Running this service means a small number of companies process data on our behalf:

• Anthropic — generates your written summary from your intake answers
• Render — hosts the application and the database
• SendGrid — delivers email, only if you gave us an email address

Each of these is bound by its own contractual terms with us and processes data only to provide its service.

6. Security

The most sensitive fields you enter — exposures, symptoms and high-risk incident details — are encrypted at rest in our database using AES-256-GCM. All traffic between you and us moves over TLS. Passwords are stored as one-way hashes, so nobody here can read them, and sessions use signed tokens.

Fields such as your role, department name and years of service are stored without field-level encryption, so that summaries can be listed and retrieved.

No system is perfectly secure, and we are not going to claim otherwise. If you think your account has been accessed by someone else, email us and we will act on it.

7. How long we keep it

Intake records and generated summaries are kept while your account is active, or up to three years from the date you submitted, whichever comes first. Aggregate statistics that cannot be traced to an individual may be kept longer.

You can ask us to delete your data at any time, and you do not have to give a reason. See section 8.

8. Your rights

You can ask us to:

• Show you the data we hold about you
• Correct anything that is wrong
• Delete it
• Stop processing it going forward

Email sid@thepharmabridge.org. We will respond within 30 days. Depending on where you live, you may have additional rights under state or national law; we will honor those too.

9. What this tool is not

10. Children

This service is for adults. We do not knowingly collect information from anyone under 18.

11. Changes to this policy

If we change this policy in a way that materially affects you, we will update the date at the top and notify registered users by email. We are not going to quietly widen what we do with your data.

12. Contact

Privacy questions, deletion requests, or anything else: sid@thepharmabridge.org.