Date Last Updated: November 17, 2025
Privacy Policy
Who Is OpiCalc?
OpiCalc ("OpiCalc," "we," and "us") provides online point-of-care clinical decision-support tools, including medical calculators and clinical practice guidelines (collectively referred to herein as the "Service"), for use by healthcare professionals. The decision-support tools are based on published clinical research, and OpiCalc's content is written by physician authors. The Service is not intended for use by laypersons.
Scope of Privacy Policy
OpiCalc takes the private nature of the personal information we collect seriously, and we are committed to protecting it. Therefore, we have in place controls and procedures designed to manage such information responsibly and in accordance with applicable data protection and privacy laws (collectively, "Privacy Laws").
This Privacy Policy applies to OpiCalc's practices where we function as a data controller (or an equivalent role as described under the various Privacy Laws in our regions of operation) and describes our processing practices as it relates to Personal Information collected via: (a) our Website, whether from visitors browsing the site or from healthcare professionals who visit the Website and use our medical calculators. In addition, if you are participating in an OpiCalc sponsored sweepstakes ("Sweepstakes") offered on our Website, be advised that any information you provide to us when entering the Sweepstakes will be subject to this Privacy Policy; (b) our OpiCalc Medical Calculator App (the "App"); (c) other direct interactions with individuals/corporate entities; and (d) data that we collect from third parties and provide to our customers through the Service.
The information that OpiCalc receives through the interactions described above does not include Protected Health Information (PHI), as that term is defined by the Health Insurance Portability and Protection Act ("HIPAA").
This Privacy Policy describes the categories of Personal Information that we collect and the sources of such information, how we use that Personal Information, to whom Personal Information is disclosed and sold and for what purposes, and the rights you have with respect to your Personal Information. This Privacy Policy does not apply where OpiCalc processes Personal Information as a service provider (or an equivalent role under the various Privacy Laws, such as data processor or service provider). When we function as a service provider, the privacy statement of the relevant customer and our agreements with the entity on whose behalf we process the Personal Information will govern our processing of such Personal Information.
By visiting our Website, participating in a Sweepstakes offered on our Website, using our App, or otherwise providing Personal Data to us, you consent to our collection, use, disclosure, sale, sharing and retention of your Personal Data as described herein.
The Service
OpiCalc offers both a free version of the Service and an enterprise version. Healthcare professionals can access the Service for free either via the Website (with or without establishing an account) or via the App, which requires an account. Although the Website can be accessed without an account, more functionality is offered to those who establish an account.
Healthcare professionals can also access the Service through the electronic health record system utilized by the organization for which they work, if such organization has a contract with OpiCalc for integrated access and use of the Service (integrated solutions are referred to as "Enterprise Accounts"). When the Service is used in the context of an Enterprise Account, OpiCalc acts as a service provider and the privacy policy of the enterprise with whom we have a contract will govern OpiCalc's processing of Personal Information through the Service.
Personal Information
"Personal Information" means any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, an online identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Personal Information includes information referred to as "personal data," "personally identifiable information" and such similar references as codified in applicable Privacy Laws.
Under most U.S. Privacy Laws, the information we collect from users of our Service is not considered "Personal Information" because it pertains to users in their role as employees or contractors of a commercial entity or nonprofit. However, certain jurisdictions (e.g., California and the European Union) consider such information to be Personal Information. Given that, this Privacy Policy treats information about the individuals that use our Service as Personal Information. Note, however, that your legal rights with respect to Personal Information are determined by the Privacy Law of the jurisdiction in which you reside.
Our Collection and Use of Personal Information
OpiCalc collects Personal Information in a number of ways: (1) from healthcare professionals who use the Service via the Website or the App ("Users"); (2) from visitors to our Website who do not use our Service ("Website Visitors"), including those who participate in a Sweepstakes; (3) through other means of ordinary business interactions with individuals, whether via email, mail, telephone or in person (collectively, "Direct Interaction"); and (4) from third party health networks and advertising agencies. The table below sets forth the categories of Personal Information OpiCalc has collected in the preceding twelve (12) months, the categories of the sources of such information and the purpose or use for which we collect Personal Information.
Please note that OpiCalc only uses the Sensitive Personal Information we collect in order to provide the Service to the individual from whom such information is collected and for no other purposes.
| Category | Examples of Data Elements | Sources | Purpose for Collection |
|---|---|---|---|
| Personal Identifiers | Name; Email address; Phone number; National Provider Identifier Standard Code ("NPI Code"); IP Address; Personal identifiers present on a CV. | Users and Website Visitors; Physicians who contribute content; Individuals including employment applicants, Advisory Board members, customers, and vendors; Third party health information companies, advertising networks and agencies; Cookies; Operating system and platforms. |
|
| Sensitive Personal Information | Log-in information for a User's OpiCalc account; Credit card number with expiration date and CVC; Citizenship or immigration status. | Users; Website Visitors who purchase Continuing Medical Education packages and/or gift cards; Employment applicants. |
|
| Electronic Network Activity | IP address, city; Device brand, model and name, browser information, operating system, platform version, screen resolution and preferred language; Performance data and interactions information (e.g., where a Website Visitor clicks, scrolls, moves between pages, time spent per visit, cumulative time spent across all usage, frequency of usage, features used, buttons clicked, actions taken and frequency of each); Ad tracking codes. | Users and Visitors; Cookies; Operating systems and platforms. |
|
| Commercial Information | Records of Services and Continuing Medical Education courses purchased. | Users and Website Visitors. |
|
| Professional or Employment-Related Information | Associated health system; Occupation; Professional designation, medical specialty and level of practice; Medical school and graduation year and degree obtained; Information contained on a CV (e.g., work history, experience summary). | With respect to Users, we have knowledge of the User's occupation (e.g., physician, nurse, pharmacist) and area of specialty. OpiCalc can also infer from IP addresses the hospitals from which Website Visitors are connecting to our servers. Third party health information companies. Direct interactions with individuals including employment applicants, physician contributors, Advisory Board members, customers, and vendors. |
|
OpiCalc's Disclosure of Personal Information
Personal Information Disclosed to Third Parties
OpiCalc discloses Personal Information we receive to commercial clients and prospective commercial clients, such as pharmaceutical companies and their advertising agencies and third party advertising networks. Those entities provide OpiCalc with lists of specific healthcare professionals and/or healthcare specialties to whom such entities would like their ads displayed. OpiCalc monitors our Website Visitors and Users of our Website and App and displays the ads to specific physicians depending on their specialty. We then provide back to the third parties the IP addresses, healthcare professional name and NPI number of those healthcare professionals to whom we presented an ad on behalf of such networks and agencies so that the third parties can analyze campaign performance and optimize advertising content and advertising spend.
In addition, there are certain circumstances in which we may disclose Personal Information to trusted entities in order to improve, protect and support our business. For instance, OpiCalc may disclose Personal Information to: (i) service providers (e.g., hosting providers, business advisors, auditors, etc.); and (ii) any potential purchasers or investors in the business. OpiCalc requires our service providers to whom we disclose Personal Information to process Personal Information in accordance with our contracts with such service providers. We impose on our service providers with whom we share Personal Information privacy and security obligations consistent with this Privacy Policy and applicable laws. In addition, OpiCalc may disclose Personal Information if required to do so by law or in the good faith belief that such action is necessary to: (a) comply with a legal obligation; (b) protect and defend our rights or property; or (c) protect the rights, property, or safety of our Users, Website Visitors, or the public.
How We Protect Personal Information
The security of your Personal Information is important to us. We maintain industry standard physical, technical and administrative safeguards designed to protect your Personal Information from unauthorized access, use, disclosure, and destruction. We update and assess our security controls on a regular basis including through audits conducted by third party auditors. We train our personnel about the importance of confidentiality, security and consumer privacy and limit our personnel's access to Personal Information to those who need such in order to perform their job. Electronic Personal Information, including the Personal Information of Website Visitors and Users, is stored on restricted database servers housed with a third party cloud provider in the United States.
How Long Do We Retain Personal Information?
OpiCalc retains Personal Information collected from Users until such time as the individual deletes their profile via the functionality provided. The information is retained to better understand the usage patterns of our audience. The more we understand usage patterns, the better we can create relevant content and products that ultimately benefit our Users. When a User "deletes" their profile, we will delete such an individual's Personal Information from our system. However, the User's historical usage activity and IP address will be retained. OpiCalc retains Personal Information about Website Visitors as long as necessary to fulfill the purpose(s) for which it was collected, including legal, accounting, and reporting requirements or as otherwise set forth under applicable law. OpiCalc retains the information collected through GA4 for a period of fourteen (14) months.
A Note About Children's Personal Information
Neither the Service, the App nor the Website is marketed to, and none of the foregoing is intended for use by, children. Therefore, OpiCalc does not knowingly collect any Personal Information from children under the age of 17. If we become aware that we have collected Personal Information about a child under the age of 17, we will delete it.
Your Rights to Access
We will comply with all reasonable requests from you to correct, amend, or delete the Personal Information we have about you, and will provide you access to your Personal Information. There may be limits to the amount of information we can practically provide. For example, we may limit an individual's access to Personal Information where the burden or expense of providing access would be disproportionate to the risks to your privacy or where doing so would violate others' rights. You may submit your request via our Data Rights Request Form or by contacting us at the address below.
Last Updated: November 17, 2025
If You Are a California Resident
The California Consumer Privacy Act of 2018 and its implementing regulations, each as amended (collectively, the "CCPA"), is a California law that gives California residents certain rights as it relates to the Personal Information that a business (including OpiCalc) collects about them.
OpiCalc's Sale and Sharing of Personal Information
OpiCalc discloses Personal Information we receive to commercial clients and prospective commercial clients, such as pharmaceutical companies and their advertising agencies and advertising networks. In addition, OpiCalc utilizes Google Analytics 4 as indicated above. Certain privacy laws consider this activity a "sale" or "sharing." The table below sets forth the categories of Personal Information OpiCalc has sold to, or shared with, third parties in the preceding twelve (12) months, the categories of third parties to whom the information was sold or with whom it was shared, and the purpose or use for which the Personal Information was sold or shared. OpiCalc has no actual knowledge of selling or sharing Personal Information of consumers under 16 years of age.
| Category | Sold or Shared? | Categories of Third Parties | Purpose |
|---|---|---|---|
| Personal Identifiers | Yes | Commercial and prospective commercial clients such as Advertising Networks and Agencies. | Third party advertising networks and agencies provide OpiCalc with lists of specific physicians and/or physician specialties to whom they would like their ads displayed. OpiCalc monitors Visitors and Users, displays ads accordingly, and may provide back to the third parties the IP addresses, physician name and NPI number of those physicians to whom ads were presented, so that those third parties can analyze campaign performance and optimize advertising content and spend. Google Analytics also collects and uses information as disclosed herein. |
| Sensitive Personal Information | No | — | — |
| Electronic Network Activity Information | Yes | Commercial and prospective commercial clients such as Advertising Networks and Agencies. | Same as Personal Identifiers above. Google Analytics collects information regarding Visitors to our Website and provides aggregated, statistical information back to OpiCalc regarding Website visits. |
| Commercial Information | No | — | — |
| Professional or Employment-Related Information | Yes | Advertising Networks and Agencies. | We share with advertising networks and agencies the specialty and NPI number of those physicians visiting our Website and App for purposes of list matching in order for them to provide advertising services to clients including placing ads on our Website. |
Personal Information Disclosed to Service Providers, Contractors and Third Parties for a Business Purpose
The CCPA defines a "third party" as a person other than the business with whom the California Consumer interacts. The CCPA defines a "service provider" as a person that receives from or on behalf of a business consumers' Personal Information for a business purpose and processes the Personal Information for such business purpose. The CCPA defines a "contractor" as a person to whom a business makes available a consumer's Personal Information for a business purpose. A contractor differs from a service provider in that a contractor does not "process" the Personal Information.
OpiCalc requires the service providers to whom we disclose Personal Information to process Personal Information strictly in accordance with our contracts with such service providers. We ensure that any service provider and contractor with whom we share Personal Information is subject to privacy and security obligations consistent with this Privacy Policy and applicable laws. In addition, OpiCalc may disclose Personal Information if required to do so by law or in the good faith belief that such action is necessary to: (a) comply with a legal obligation; (b) protect and defend our rights or property; or (c) protect the rights, property, or safety of our Users, Website Visitors, or the public.
OpiCalc only discloses the Sensitive Personal Information we collect in order to provide Services to and process employment applications from the individuals from whom such information is collected and for no other purposes.
| Category | Disclosed? | Categories of Third Parties | Purpose |
|---|---|---|---|
| Personal Identifiers | Yes | Service Providers. | We use Stripe for payment processing, associated analytics, and other business services when you purchase Continuing Medical Education packages. As a result, Stripe collects and processes certain Personal Information on our behalf, including names, credit card information and device information. Stripe uses this information to operate and improve the services it provides to us, including for fraud detection and prevention. You can learn more about Stripe and its processing activities via Stripe's privacy policy. We also share data with hosting service providers. |
| Sensitive Personal Information | Yes | Service Providers. | We use Stripe for payment processing, associated analytics, and other business services when you purchase Continuing Medical Education packages. As a result, Stripe collects and processes certain Personal Information on our behalf, including names, credit card information and device information. Stripe uses this information to operate and improve the services it provides to us, including for fraud detection and prevention. You can learn more about Stripe and its processing activities via Stripe's privacy policy. We also share data with hosting service providers. |
| Electronic Network Activity Information | Yes | Service Providers. | We use Stripe for payment processing, associated analytics, and other business services when you purchase Continuing Medical Education packages. As a result, Stripe collects and processes certain Personal Information on our behalf, including names, credit card information and device information. Stripe uses this information to operate and improve the services it provides to us, including for fraud detection and prevention. You can learn more about Stripe and its processing activities via Stripe's privacy policy. We also share data with hosting service providers. |
| Commercial Information | Yes | Service Providers. | We use Stripe for payment processing, associated analytics, and other business services when you purchase Continuing Medical Education packages. As a result, Stripe collects and processes certain Personal Information on our behalf, including names, credit card information and device information. Stripe uses this information to operate and improve the services it provides to us, including for fraud detection and prevention. You can learn more about Stripe and its processing activities via Stripe's privacy policy. We also share data with hosting service providers. |
| Professional or Employment-Related Information | Yes | Service Providers. | Hosting services; Employment recruiting firms. |
Your California Privacy Rights (CCPA)
Right to Know Before Collection of Personal Information
At or before the point your Personal Information is collected, OpiCalc must inform you of: the categories of Personal Information to be collected and the purposes for which they are collected or used; the categories of Sensitive Personal Information to be collected and the purposes for which the information is collected and used; whether Personal Information and/or Sensitive Personal Information is sold or shared; and the length of time OpiCalc intends to retain each category of Personal Information collected, or if that is not possible, the criteria used to determine that period. Note that OpiCalc does not knowingly collect, sell or share the Personal Information of individuals under the age of 17.
Right to Know What Personal Information Is Collected and Right to Access
As a California resident, you have the right to request from OpiCalc disclosure of the following information, up to twice in a twelve-month period: (a) the categories and specific pieces of Personal Information that OpiCalc has collected about you; (b) the categories of sources from which that Personal Information is collected; (c) the business or commercial purpose for collecting, selling or sharing that Personal Information; and (d) the categories of third parties to whom OpiCalc discloses Personal Information. Before providing such information to you, OpiCalc must verify your identity.
Right to Know About Personal Information Disclosed
As a California resident, you have the right to know the categories of Personal Information disclosed about you for a business purpose and the categories of persons to whom each category of Personal Information was disclosed. Before providing such information to you, OpiCalc must verify your identity.
Right to Know About Personal Information Sold or Shared
As a California resident, you have the right to know the categories of Personal Information sold about you, the categories of third parties to whom each category of Personal Information was sold and the purpose for doing so. Before providing such information to you, we must verify your identity.
Right to Request Deletion
As a California resident, you have the right at any time to request that OpiCalc delete any Personal Information that we collected directly from you. The obligation to delete Personal Information upon request is not absolute. The CCPA allows businesses to retain Personal Information for certain purposes even when a deletion request is received. In addition, before deleting Personal Information in response to your request, OpiCalc must verify your identity.
Right to Correct Inaccurate Personal Information
As a California resident, you have the right to request at any time the correction of inaccurate Personal Information that OpiCalc maintains about you. Before correcting Personal Information in response to your request, OpiCalc must verify your identity.
Right to Opt Out of Sale or Sharing of Personal Information
As a California resident, you have the right to opt out of OpiCalc's sale and/or sharing of your Personal Information to third parties at any time. To exercise this right, please contact us at support@opicalc.com.
Right to Limit Use and Disclosure of Sensitive Personal Information
California residents have the right at any time to direct businesses to limit their use of the resident's Sensitive Personal Information to that necessary to provide the services requested and to those purposes otherwise allowed by California law. OpiCalc only uses Sensitive Personal Information in order to provide Services to the individuals from whom such information is collected and for no other purposes.
Right Not to be Retaliated Against
California law prohibits OpiCalc from retaliating against you based on your exercise of the privacy rights described above, including when you are acting as a job applicant, employee or independent contractor. For example, OpiCalc cannot deny you services or provide a different level or quality of services to you as a result of your exercise of such rights.
Method to Submit Requests
Requests to Delete, Correct and to Know: If you wish to exercise your right to delete, correct and/or know (as described above), you may do so by contacting OpiCalc at support@opicalc.com or by mail at the address below. We will confirm receipt of your request within 10 business days. OpiCalc will then take steps to verify your identity. OpiCalc may occasionally request additional information to assist in facilitating verification. Any Personal Information received by OpiCalc with respect to a request to delete, to correct and/or to know will be held strictly in confidence, used only for the purposes of processing your request and in accordance with applicable data privacy laws and regulations. Within 45 calendar days of receiving your request, we will comply with your request unless there is a legal basis for denying your request. In the event we need additional time to respond, we will inform you of that within the initial 45-day period.
How An Authorized Agent Can Make a Request for You: California law allows you to designate an agent to submit a request to delete, correct or to know. We will require that agent to provide proof that you gave the agent signed permission to submit the request on your behalf. We may also require the agent to verify their own identity and confirm that you provided the agent permission to submit the request. If you have provided the agent with power of attorney pursuant to Probate Code sections 4121 to 4130, evidence of that power of attorney is sufficient.
If You Live in the European Economic Area, the United Kingdom or Switzerland
OpiCalc complies with the EU General Data Protection Regulation 2016/679, the UK Data Protection Act of 2018 and the Swiss Data Protection Act of 2020 (collectively, "GDPR") with respect to the protection of individuals with regard to the processing of Personal Information and the free movement of such Personal Information.
Right of Access
You have the right to ask us for copies of your Personal Information. The law provides for some exemptions, which means you may not always receive all the Personal Information we process.
Right to Rectification
You have the right to ask us to rectify Personal Information you think is inaccurate. You also have the right to ask us to complete Personal Information you think is incomplete.
Right to Restrict Processing
You have the right to ask us to restrict the processing of your Personal Information in certain circumstances.
Right to Withdraw Consent
You have the right to revoke your consent to our processing of your Personal Information at any time by contacting us via our Data Rights Request Form. Withdrawing consent will not affect the lawfulness of the processing performed based on your consent before its withdrawal.
Right to Erasure
You have the right to ask us to erase your Personal Information in certain circumstances.
Right to Data Portability
This only applies to Personal Information you have given to us and that is held electronically. You have the right to ask that we transfer this information from OpiCalc to another organization or give it to you.
If you wish to exercise your rights above, you may contact us at support@opicalc.com or by mail at the address below. You are not required to pay any charge for exercising your rights. We have one month to respond to you. You may also contact the relevant supervisory authority to lodge a complaint related to our handling of your Personal Information. However, we invite you to give us a chance to resolve the situation directly with you. Your privacy is important to us, and we will do our best to address any concerns.
Though we make our Service available globally, our computer systems are based in the United States, which means Personal Information we collect will be processed by us in the U.S. where data protection and privacy regulations may not offer the same level of protection as in other parts of the world, such as in Europe. For transfers to the United States, we will either rely on a derogation applicable to the specific situation (e.g., consent or if the transfer is necessary to perform our contract with you) or implement the Standard Contractual Clauses adopted by the European Commission and/or an International Data Transfer Addendum with respect to transfers outside of the United Kingdom.
Legal Bases for Processing
The legal bases for processing your Personal Information include one or more of the following depending on the circumstances:
Contractual obligations: To comply with contractual obligations or to take steps at your request before entering into a contract. When you subscribe to the Service or purchase Continuing Medical Education packages, we will process your Personal Information in order to provide the Service to you and answer your requests.
Consent: In certain cases, you consent to the processing of your Personal Information by us (e.g., when you submit the Contact Form via the Website or use our Service). When consent is the basis on which we process your Personal Information, we will inform you if we need to carry out further processing for purposes other than those for which you provided consent and obtain your further consent. You may withdraw your consent at any time.
Legitimate interest: On occasion, when we have a legitimate interest to process your Personal Information, we may not need your consent to do so, however, we must inform you that we do this. Examples of a legitimate interest include: the analysis and optimization of the Website and App; ensuring IT security and the operation of OpiCalc's technology; prevention and investigation of criminal acts.
Legal obligations or public interest: In some cases the processing of your Personal Information will be necessary for us to fulfill legal or public interest obligations.
If OpiCalc uses email prospecting, we first obtain the consent of the individual, unless the recipient is already a customer and the email involves products similar to those we already provide to such customer. In such instances, the legal basis of the processing is the legitimate interest of OpiCalc, namely to promote our products to our customers. When OpiCalc sends commercial solicitations to customers by email regarding products other than those already provided to such customers, the legal basis of the processing is consent.
You have the right at any time to stop us from contacting you for marketing purposes or giving your data to third parties. If you no longer wish to be contacted for marketing purposes, please reach out to us at support@opicalc.com.
Links to Third Party Websites
OpiCalc's Website contains links to third party websites (e.g., Apple App Store, Google Play, LinkedIn, and X). These third-party websites publish their own privacy statements, which disclose the manner in which those third parties process Personal Information. OpiCalc recommends that you review those third party privacy statements when visiting any linked websites. OpiCalc is not responsible for the content of linked websites or the processing of Personal Information by the companies that own and manage such websites.
Changes to This Privacy Policy
As we evolve, we may update this Privacy Policy to align with changes in the Service, our business and/or Privacy Laws. The Date Last Updated at the beginning of this Privacy Policy will reflect the last date on which the Privacy Policy was updated. We recommend that you periodically review the Privacy Policy to stay informed of changes. We will ask for your consent to such changes if required by Privacy Law. In other cases, please note that your continued use of the Service, the Website and/or App after any change means that you agree to the terms of the updated Privacy Policy. The same is true with respect to Personal Information that we collect via email, mail and other communication methods. If you disagree with the Privacy Policy, please reach out to us at support@opicalc.com and stop using the Service and Website/App.
How to Contact Us
If you have any questions about this Privacy Policy, please reach out to us via the contact information below.
Inquiries & Correspondence
support@opicalc.com
For official correspondence or legal notices, please contact us via email for current routing information.