PharmStack.ai

Legal

Privacy Policy

Last updated: 31 March 2026

1. Introduction

PharmStack ("we", "us", "our") respects your privacy. This policy describes how we handle personal information when you visit our website at pharmstack.ai (and related pages), submit forms (such as book a demo or contact), or interact with us by email.

We aim to meet our obligations under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). If you have questions, contact us at hello@pharmstack.ai.

2. Personal information we collect

Depending on how you interact with us, we may collect:

  • Identity and contact details — e.g. your name, pharmacy or business name, email address, and phone number when you submit our book-demo or contact forms.
  • Messages — the content you include in contact form enquiries.
  • Technical and usage data — e.g. general analytics about pages viewed, device/browser type, and approximate location (such as country or region) when you use our site. We use privacy-conscious analytics (see below).

Where you use the PharmStack service, we may also process limited personal information provided by your organisation (such as customer contact details) as part of operating the service.

In providing the PharmStack service, we may process limited health information contained in pharmacy documents (such as regulatory approvals), including prescriber details, patient initials, and date of birth, where necessary to deliver the service.

3. How we collect information

We collect personal information when you:

  • submit information through forms on this website;
  • email us directly; or
  • browse our site (through cookies and similar technologies used for analytics and site operation).

4. Why we use your information

We use personal information to:

  • respond to demo requests, contact form submissions, and other enquiries;
  • communicate with you about PharmStack and related services where you have agreed or where permitted by law;
  • operate, secure, and improve our website and understand how it is used;
  • comply with legal obligations and protect our legitimate interests (e.g. fraud prevention).

5. AI-powered features

AI-powered features. PharmStack may use AI-based services, including services provided by Microsoft Azure, to assist pharmacists in extracting and organising information from documents and supporting operational workflows.

Where these features are used:

  • Documents or selected portions of documents may be securely transmitted to AI service providers for processing.
  • Processing may occur in Australia and, in some cases, other jurisdictions due to the global infrastructure of these services.
  • We take steps to minimise the information shared and only process what is necessary for the relevant function.

PharmStack's AI features do not operate on complete patient records. Structured customer or patient data stored within the platform is managed separately and is not directly provided to AI services.

PharmStack is designed to support pharmacy operations and workflow efficiency. It does not provide clinical decision-making, diagnosis, or treatment recommendations, and AI-generated outputs are not intended to be used as clinical advice.

Where AI-assisted features reference clinical information, they are limited to summarising source documents and do not provide patient-specific clinical advice.

PharmStack helps pharmacists quickly locate and understand information from their own documents. It does not make clinical decisions or provide patient-specific advice.

AI-generated outputs are intended to assist pharmacists and are subject to human review before being relied upon.

AI service providers do not retain personal information submitted for processing except for transient handling required to deliver the service.

Your data is not used to train public or shared AI models, and is not shared between customers.

6. Disclosure and overseas recipients

We do not sell your personal information. We may share it with trusted service providers who help us operate our website and services, for example:

  • Email delivery — we may use a third-party email provider (e.g. Resend) to send transactional emails when you submit forms. Those providers process data on our behalf and are bound by contractual obligations.
  • Hosting and analytics — our website may be hosted or analysed using services that operate infrastructure or process limited technical data. Data may be stored or processed in Australia and/or overseas, including in the United States, depending on the provider.
  • SMS and text notifications — where we send SMS or text messages (for example customer notifications), we use ClickSend. ClickSend processes those messages in Australia. We only share the contact details and message content necessary to deliver the service, in line with this policy.

Where we disclose personal information overseas, we take reasonable steps to ensure appropriate safeguards in line with applicable privacy law. Further detail on international transfers in connection with our services is set out in section 7 below.

7. International transfers of personal information

7.1 PharmStack is designed to store and manage pharmacy data within Australia wherever reasonably possible.

7.2 Some features of the service, such as AI-powered responses, may involve secure processing by trusted third-party providers located outside Australia, including in the United States. SMS and text-message notifications are sent via ClickSend, with processing in Australia.

7.3 Where personal information is transferred overseas, we take reasonable steps to ensure it is handled in accordance with the Australian Privacy Principles. This includes using reputable providers, contractual safeguards, and limiting the information shared to what is necessary for the relevant service.

7.4 We minimise the amount of personal information disclosed to third parties. For example, SMS and text notifications via ClickSend are limited to essential contact details and message content required to deliver the notification, and are not intended to include sensitive clinical or health information.

7.5Your pharmacy's data remains isolated to your account and is not shared with other customers or used to train public or shared AI models.

7.6 By using our services, you acknowledge that, in limited circumstances, your personal information may be processed by service providers located outside Australia in accordance with this policy.

7.7 We are committed to maintaining appropriate technical and organisational measures to protect personal information, including access controls, encryption, and secure infrastructure.

7.8 In relation to AI-powered features, personal information (including limited health-related information contained in documents) may be transmitted to and processed by Microsoft Azure OpenAI services. While PharmStack does not control the exact location of processing in all cases, it configures services to use Australian regions where available and relies on contractual and technical safeguards provided by Microsoft to protect personal information.

8. Cookies and analytics

We may use cookies and similar technologies for essential site functionality and to measure traffic (e.g. page views) in an aggregated way. You can control cookies through your browser settings. Our analytics tooling is configured to minimise personal data collection; refer to your analytics provider's documentation for details.

9. Security

We take reasonable technical and organisational measures to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. This includes secure storage, encrypted transmission of documents, access controls, and limiting exposure of personal information during processing by third-party services. No method of transmission over the internet is completely secure.

Access to personal information is restricted to authorised users based on their role and responsibilities.

10. Access, correction, and complaints

You may request access to or correction of personal information we hold about you by contacting hello@pharmstack.ai. If you believe we have mishandled your information, please contact us first. You may also complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

11. Changes

We may update this policy from time to time. The "Last updated" date at the top will change when we do. Continued use of the site after changes constitutes acceptance of the updated policy where permitted by law.

12. Contact

For privacy questions: hello@pharmstack.ai

See also our Terms of Use.