Privacy Policy — MedSpotter

MedSpotter (“we,” “us,” “our”) operates a free platform that helps patients locate medications in stock at nearby pharmacies, using a combination of publicly available Health Canada shortage data and reports submitted by pharmacies and users.

Contact: MedSpotter Canada
Email: medspotter@outlook.com
Website: medspotter.ca

From Patients (Public Users)

• Search activity: medications searched, general location (postal code or city-level, not precise GPS unless you enable location services)
• Optional account information: if you create an account, your email address and any saved preferences
• Stock reports you submit: medication, pharmacy, and general details of the report
• Technical data: IP address, browser type, device type, and usage analytics collected automatically via cookies or similar technologies

From Pharmacies

• Business contact information: pharmacy name, address, phone number, email, and the name of the individual registering the account
• Stock and inventory data the pharmacy chooses to share on the platform
• Billing information: for pharmacies on a paid plan, payment details are collected and processed by our third-party payment processor (see Section 5) — we do not store full credit card numbers ourselves

From Donors

• Payment and contact information necessary to process a donation, handled through our third-party payment processor

We do not knowingly collect sensitive health information beyond what is voluntarily submitted as part of a medication search or stock report (e.g., you searching for a specific drug name). We do not require or request diagnoses, prescriptions, or other clinical records.

We use the information we collect to:

• Provide and improve the core search and stock-reporting functionality
• Allow pharmacies to manage their listings and, where applicable, billing
• Communicate with you about your account, pilot/free-period status, or platform updates
• Monitor and improve platform performance, security, and usage trends
• Process donations and pharmacy subscription payments
• Comply with legal obligations

We do not sell personal information to third parties.

By using MedSpotter, you consent to the collection, use, and disclosure of your information as described in this policy. Where required by PIPEDA, we will obtain express consent for any use of personal information beyond what is reasonably necessary to provide the service (for example, before sending marketing communications, which you may opt out of at any time).

You may withdraw consent at any time, subject to legal or contractual restrictions, by contacting us at medspotter@outlook.com. Withdrawing consent may limit your ability to use certain features of the platform.

We share personal information only in the following circumstances:

• Service providers: we use third-party providers for hosting, database storage, analytics, and payment processing (e.g., Supabase, Stripe). These providers are contractually required to protect your information and use it only for the purposes we specify.
• Between users of the platform: pharmacy stock information you view is, by design, shared publicly on the platform. Patient-submitted stock reports may be shown in aggregate or anonymized form to other users.
• Legal requirements: we may disclose information if required by law, regulation, court order, or to protect the rights, safety, or property of MedSpotter, our users, or the public.
• Business transfers: if MedSpotter is involved in a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction, subject to standard confidentiality protections.

MedSpotter uses cookies and similar technologies to operate the platform and understand usage patterns (e.g., which searches are most common, general geographic demand for medications). You can control cookies through your browser settings; disabling cookies may affect platform functionality.

We retain personal information only as long as necessary to fulfill the purposes described in this policy, or as required by law. Pharmacy billing records are retained as required for tax and accounting purposes even after account cancellation.

Your information may be stored or processed on servers located outside of Canada, including in the United States, depending on our service providers’ infrastructure. Where this occurs, your information may be subject to the laws of that jurisdiction, including potential access by foreign government authorities.

We take reasonable technical and organizational measures to protect personal information against unauthorized access, loss, or misuse. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Under PIPEDA and applicable provincial law, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Withdraw consent to certain uses of your information (see Section 4)
• File a complaint about our handling of your personal information

To exercise any of these rights, contact us at medspotter@outlook.com. If you are not satisfied with our response, you may file a complaint with the Office of the Privacy Commissioner of Canada (OPC) at priv.gc.ca, or with the applicable provincial privacy regulator.

MedSpotter is not directed at children, and we do not knowingly collect personal information from individuals under the age of 13 (or the applicable age of consent in your province). If you believe we have inadvertently collected such information, please contact us so we can remove it.

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated “Last updated” date. Continued use of MedSpotter after changes take effect constitutes acceptance of the revised policy.

If you have questions or concerns about this Privacy Policy or our handling of your personal information, please contact:

MedSpotter Canada
medspotter@outlook.com