Privacy policy
What Attergo collects, why, and what we will never do with it. This policy covers the marketing site and the application. Protected health information is governed separately by the business associate agreement with your pharmacy.
Last updated 1 August 2026 · Promatics Informatics LLC, operating as Attergo · Changes are versioned and announced to account owners thirty days before they take effect.
What we collect
Two categories, kept strictly apart. Business data: the name, work email, phone number and organisation of the people who use Attergo or ask for a demo. Protected health information: the prescription, claim and encounter events your dispensing system sends us, processed only as your business associate and never used for our own purposes.
We do not buy data, we do not enrich your record from third-party sources, and we do not sell anything to anyone.
Why we collect it
Business data operates your account and lets us contact you about the service. PHI exists solely to compute margin, prepare claims, assemble evidence and produce reporting for your organisation.
What we never do
- We never sell personal information.
- We never use PHI to train models that serve any other customer.
- We never place PHI in a URL, a log line, an error message, an export filename or an email.
- We never share your data with another pharmacy, including anonymised, without a written agreement naming the purpose.
Cookies and analytics
The marketing site sets one first-party cookie to remember whether you dismissed the cookie notice, and it uses Google Analytics to measure which pages people read and which of them lead to a demo request. That records page paths, referrer, approximate location derived from IP, and device and browser type. It does not record form contents, and Google Analytics is configured with IP anonymisation.
The analytics tag runs on this marketing site only. It is not present anywhere on https://app.attergo.com, and that boundary is deliberate rather than incidental. Inside the application, a page path or a page title can carry context about a patient, and sending that to an analytics vendor would be a disclosure no business associate agreement covers. No third-party script of any kind loads on an authenticated page.
Product analytics inside the application are first-party, record page paths and interaction counts, and never form contents or PHI. There is no advertising pixel and no remarketing tag on any Attergo property.
Retention
Business data is kept for the life of the account and thirty days after. Raw event archives are retained ten years because that is what audit defence requires. This is your data, held for your benefit, and exportable in full at any time.
Your rights
Access, correction, export and deletion, exercised through your account owner or by writing to privacy@attergo.com. Where a deletion request conflicts with an audit-retention obligation we will say so plainly and tell you which obligation applies.
Contact
privacy@attergo.com · Promatics Informatics LLC