Privacy Policy
Last updated August 27, 2026
Visipill Inspect is used by consultant pharmacists to record medication-area inspections. This policy explains what we hold, who else sees it, and what you can do about it.
No patient information, by design
The service is built so that no patient data is needed and none is asked for. No field prompts for it, and the photo screen carries a standing reminder to keep patient information out of images. We are not a covered entity or a business associate, and you should not upload protected health information.
What we collect
- Your account: name, email, phone, company, postal address, and the state licence numbers you enter, which are printed on the reports you issue.
- Your signature: the image you draw or upload, used to sign reports.
- Your facilities: names, addresses, the doctor of record, and accounts receivable contacts you enter. This is business contact information about the sites you inspect.
- Your inspections: answers, notes, refrigerator readings, photographs you take inside medication areas, and the co-signature of whoever acknowledged the findings.
- Billing: your plan and how many reports you have finalized. Card details go directly to Stripe; we never see or store a card number.
Who else processes it
These are the third parties that hold or handle data on our behalf:
- Supabase — the database, authentication, and private file storage where your reports, photographs and signatures live.
- Vercel — hosting. Serves the application and processes requests.
- Resend — sends the reports and invoices you choose to send, including their PDF attachments, to the recipients you name.
- Stripe — subscriptions and payments. Stripe holds your card details; we do not.
- Mailgun — handles email sent to our own visipill.com addresses, so it processes anything you send us directly.
We do not sell your data, we do not share it for advertising, and the service runs no analytics or advertising trackers at all. The only cookies set are the ones that keep you signed in.
How long we keep it
Finalized reports are kept for as long as your account exists, because they are the record of an inspection and you may need to produce one years later. Deleting your account removes your data from our systems.
Your choices
- Export: you can download a copy of your account data at any time from the Account page.
- Deletion: you can permanently delete your account and its data from the Account page. This cannot be undone.
- Correction: profile, licence, facility and draft report data can all be edited in the app. Finalized reports are deliberately immutable, because they are records of what was found on a particular day.
Security
Data is encrypted in transit. Every table and storage bucket enforces row-level access rules, so one consultant’s account cannot read another’s. Report PDFs, photographs and signatures live in private storage and are only reachable through short-lived signed links.
Children
The service is for licensed professionals and is not directed to anyone under 18.
Contact
Questions, or to exercise any of the choices above: support@visipill.com.