Privacy policy
DTxPlus, Inc. · Last updated: July 22, 2026
The short version
- This policy covers our website. Patient information handled by Carrie lives under separate, stricter rules: HIPAA, our contracts with healthcare organizations, and your provider's own privacy notice.
- On the website we collect what you give us (a work email, what you tell us about your goals) and standard analytics.
- We don't sell personal information, and we never share phone numbers or texting consent for anyone else's marketing.
- Questions, or want something corrected or deleted: legal@dtxplus.com.
1. What this policy covers
This policy explains what DTxPlus, Inc., a Delaware corporation ("DTxPlus," "we," "us"), collects through the Carrie by DTxPlus website where it's posted (the "Site"), and what we do with it. Patient information that Carrie handles is covered in section 2, and by rules well beyond this policy.
2. If Carrie called you: patient information
Carrie calls because your healthcare provider asked her to. She's part of the follow-up your care team planned, and everything you tell her goes back to them, including into your medical record.
When Carrie works with patients, DTxPlus handles patient information on behalf of the healthcare organization that arranged the calls. HIPAA calls us that organization's "business associate": we may use patient information only to deliver the service under our contracts, and your provider's notice of privacy practices governs it. Your consent to the calls sits in the paperwork you signed with your practice.
What that means in practice:
- To see, correct, or ask questions about your health records, contact your practice. They control the record; we work for them.
- To stop the calls, tell Carrie during a call or tell your practice. Stopping never affects your care.
- Please keep health details out of this website's forms and email. Talk to your practice, or ask Carrie to connect you during a call.
More plain-language answers for patients: Did Carrie call you?
3. What we collect on the Site
Things you give us:
- The scoping-call form: your work email, your organization type, which EHR you use, and whatever you tell us about your goals and patient groups.
- Email you send us, including diligence-pack requests, and anything you share on calls we schedule.
Things collected automatically:
- Server logs from our host, Netlify: IP address, browser type, pages requested, timestamps. Kept for security and capacity planning.
- Google Analytics: cookies that record pages visited, rough location (from IP address), device type, and how you found the Site.
- Netlify Analytics: server-side traffic counts, measured without cookies or scripts.
The Site keeps no patient records, and its forms should never contain patient-identifying information. If some slips through, email legal@dtxplus.com and we'll delete it.
4. What we use it for
- Answering you: replies, scoping calls, the diligence pack.
- Following up about our products. Every marketing email we send has an unsubscribe link, and "stop emailing me" sent to legal@dtxplus.com works too.
- Understanding Site traffic and improving pages.
- Security, record-keeping, and legal obligations.
5. What we share
- Service providers that run things for us: hosting (Netlify), analytics (Google), email and scheduling tools. They're bound by contract to use your information only for our work.
- Professional advisors (lawyers, accountants, auditors) under confidentiality.
- Courts and regulators, when the law requires it.
- A buyer or successor if DTxPlus is part of a merger, acquisition, or sale of assets; this policy, or a successor policy you can read, would continue to apply.
We do not sell personal information, and we do not share it for cross-context behavioral advertising. The Site runs no ad networks and no social-media pixels.
6. Phone numbers and text messages
The Site's forms don't ask for a phone number. If you give us one by email or on a call, we use it to reach you about your inquiry.
We never share mobile phone numbers, text-message opt-in status, or texting consent with third parties or affiliates for their marketing or promotional purposes.
For patients, texting and calling consent sits in the paperwork you signed with your practice. Reply STOP to any text to stop texts, reply HELP for help, or tell Carrie or your practice. Message and data rates may apply. Opting out never affects your care.
7. Cookies
Google Analytics sets the Site's only cookies. You can block or delete cookies in your browser, or install Google's opt-out add-on; the Site works fine without cookies.
8. How long we keep things
As long as we need it for the purposes above: correspondence while we're talking and as a business record afterward, analytics for the tool's retention window, server logs briefly. When we no longer need personal information, we delete or de-identify it.
9. Security
The Site runs over HTTPS and keeps no patient records. The Carrie platform, where patient information lives, runs SOC 2 Type II-aligned controls, with encryption in transit and at rest. The security page has the summary; the diligence pack has the detail.
10. Your choices and rights
Email legal@dtxplus.com to ask what we hold about you through the Site, or to have it corrected or deleted. We verify who's asking and answer within 30 days. We treat these requests the same wherever you live, and we never penalize you for making one.
Several US states grant privacy rights by statute; requests under any of them go to the same address. For patient health records, section 2 applies: your practice is the right door.
The Site is operated from the United States, and information collected through it is processed in the United States.
11. Children
The Site is written for adults and isn't directed to children under 18. We don't knowingly collect children's information through it. If you believe a child sent us some, email legal@dtxplus.com and we'll delete it.
12. Changes to this policy
When we change this policy, we update the date at the top. For material changes, we'll say so on this page.