Privacy Policy
Last updated: March 16, 2026
1. Information We Collect
Boudreaux's New Drug Store ("we," "us," or "our") operates the Boudreaux's Data Vault platform. We collect information you provide directly, including your name, email address, department, and role when you create an account. We also collect usage data such as login times, pages visited, and actions performed within the platform to maintain audit trails and improve our services.
2. How We Use Your Information
We use collected information to provide and maintain the Data Vault platform, authenticate your identity, enforce role-based access controls, generate audit logs for compliance purposes, send service-related notifications, and improve platform performance and security.
3. Data Storage and Security
All data is stored using Supabase infrastructure with encryption at rest and in transit. Sensitive vault entries are encrypted using AES-256 encryption before storage. We implement Row Level Security (RLS) policies to ensure users can only access data they are authorized to view. Multi-factor authentication (MFA) is available for enhanced account security.
4. Data Retention
We retain your account data for as long as your account is active. Audit logs are retained for a minimum of 7 years to meet regulatory compliance requirements. You may request deletion of your account and associated data by contacting your organization administrator or our support team.
5. Data Sharing
We do not sell, rent, or trade your personal information to third parties. We may share data with infrastructure providers (Supabase, Vercel) solely to operate the platform, and with law enforcement when required by law. Organization administrators may access audit logs and user activity within their organization's scope.
6. Your Rights
You have the right to access, correct, or delete your personal data. You may request a copy of your data in a portable format. You have the right to withdraw consent for optional data processing. To exercise these rights, contact your organization administrator or email us at privacy@bndsrx.com.
7. Cookies and Tracking
We use essential cookies required for authentication and session management. We do not use third-party advertising cookies or cross-site tracking technologies. Analytics data is collected in aggregate to improve platform performance.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users of material changes via email or in-platform notification. Continued use of the platform after changes constitutes acceptance of the updated policy.
9. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us at privacy@bndsrx.com or write to: Boudreaux's New Drug Store, Attn: Data Privacy, Louisiana, USA.