Last updated September 4, 2026
InnovaRx is operated by Innova Health Strategies. This policy covers the InnovaRx site at rx.innovahealthstrategies.com and the InnovaRx browser extension. InnovaMed is a separate application with its own policy, and our company website has its own as well.
InnovaRx is built to operate without protected health information. Do not enter patient names, identifiers, dates of birth, record numbers, or chart notes anywhere on the site, including the assistant. The risk score calculator takes codes only and stores nothing. Worksheets stay in your own browser and are never sent to us.
This is an architectural commitment, not a promise about how carefully we handle data we hold. There is no field designed to receive PHI, and no table designed to store it. We have no Business Associate Agreement because there is nothing for one to cover. If you send us patient information anyway — by email or through a support request — we will delete it and ask you to resend without it.
Your account. Your email address, and your name if you give one. Whether you signed in by emailed link, password, or Google. Nothing else is required to use InnovaRx.
Sign-in secrets, hashed. Emailed sign-in links and session cookies are stored only as SHA-256 hashes, so reading our database does not let anyone log in as you. Passwords are stored hashed as well and are never recoverable — only resettable.
A daily count, on the free tier. To enforce the free limit we store one row a day holding a subject and a number: how many code pages were opened. The subject is a random id in a cookie before you sign in, or your user id after. We do not store which codes you looked at — the row is a tally, not a history. Paid accounts are not counted at all; no row is written for them.
Billing. Stripe handles payment. We store your Stripe customer and subscription identifiers and the plan you are on. We never see or store your card number.
Teams. If you invite colleagues, we store the email addresses you invite and who belongs to which account.
No analytics and no advertising trackers. InnovaRx runs no analytics product, no tag manager, and no third-party tracking scripts. Nothing here builds a profile of you or follows you to another site.
No search history. Your searches and the codes you open are not logged against your account. We could not show you your own lookup history if you asked, because we do not keep one.
Nothing from your worksheets or chart counter. Both live in your browser's local storage. They never reach our servers, which also means we cannot recover them if you clear your browser data.
The Ask assistant composes answers using a large language model. When you ask a question, your question and the reference rows needed to answer it are sent to Anthropic's API for the model to compose a reply. We do not send your name, email, or account identity with it. Anthropic processes the request to return the answer.
Because that text leaves our infrastructure, the rule at the top of this page matters most here: do not put patient information in the assistant. Account owners can switch the assistant off for their whole account, and we can disable it globally.
Two, both first-party, neither used for advertising. A session cookie keeps you signed in. A device id cookie — a random value with no meaning outside our free-tier counter — is what lets a signed-out visitor get a daily allowance without an account. There are no third-party cookies on this site.
Stripe for payments. Resend to deliver sign-in emails. Anthropic for assistant answers, as described above. Google only if you choose to sign in with it. Railway hosts the application and its database. We do not sell your information, and we do not share it for anyone's marketing.
The InnovaRx extension has no content script and cannot read the pages you visit. It does not see your EHR, your charts, or anything else in your browser. Its only host permission is our own domain, rx.innovahealthstrategies.com, which is how it fetches results.
It requests storage, to keep your preferences and cached
reference data on your own machine, and contextMenus, to add
the right-click lookup. Nothing it stores is transmitted to us beyond the
lookups you ask it to perform.
Account and billing records last as long as your account does, and then as long as we need them for tax and accounting. Sign-in links expire in minutes and sessions expire on their own. Free-tier counters are only useful for the day they cover.
Write to us to see what we hold about you, correct it, or delete your account and its data. Clearing your browser data removes the device cookie, your worksheets, and your chart counter.
Everything is served over TLS. Sign-in secrets and passwords are stored only as hashes. The most useful security property here is the one designed in rather than added on: the data most worth stealing from a coding tool is patient information, and there is none of it here.
If this policy changes, the date at the top changes with it, and anything significant will be named rather than quietly revised. Questions: support@innovahealthstrategies.com.
