Last Updated: February 5, 2026
This Privacy Policy explains how ACE MD collects, uses, discloses, and protects information when you:
This Privacy Policy does not replace notices issued by medical providers, pharmacies, or laboratories that deliver clinical services or dispensing services. Those entities may provide separate notices that govern protected health information.
Personal Information means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to you or your household.
Sensitive Personal Information may include government identifiers, account credentials, precise geolocation, and certain health related data, as defined by applicable law.
Protected Health Information, also called PHI, generally means health information protected by HIPAA when handled by a covered entity or business associate in connection with treatment, payment, or healthcare operations.
Consumer Health Data is a term used in some state laws and can include health related information and inferences, including information that indicates interest in or use of health related services.
De-Identified Information means information that cannot reasonably be used to infer information about, or otherwise be linked to, an identifiable individual, as defined by applicable law.
ACE MD collects information in three ways: information you provide, information collected automatically, and information received from third parties.
ACE MD may collect:
When you visit ACE MD websites or use ACE MD online services, ACE MD may collect:
ACE MD may receive information from:
ACE MD supports telehealth workflows through licensed clinicians and prescription fulfillment through pharmacy partners.
Certain information may be PHI and may be governed by HIPAA or other applicable health privacy laws when handled by covered entities or business associates in connection with treatment, payment, or healthcare operations.
Information that is not intended and used solely for diagnosis, treatment, prescribing, dispensing, or related healthcare operations may not be PHI. For example, general browsing data on marketing pages and certain account setup information may be governed by this Privacy Policy and applicable state privacy laws.
ACE MD does not use PHI for advertising or marketing where prohibited by law. ACE MD may send service related communications necessary to provide services, including administrative, security, and transactional messages.
ACE MD uses information to:
ACE MD discloses information as described below.
ACE MD may disclose information to:
ACE MD may disclose information to vendors that provide:
ACE MD may allow certain analytics and advertising partners to collect information through cookies and similar technologies. Some state laws define certain disclosures used for targeted advertising as "sale" or "sharing." Section 11 describes opt out options where required by law.
ACE MD may disclose information to comply with applicable law or legal process, respond to lawful requests, protect rights and safety, and enforce agreements.
If ACE MD is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be disclosed or transferred as part of that transaction, subject to applicable law and appropriate safeguards.
ACE MD and service providers may use cookies, pixels, web beacons, scripts, SDKs, and similar technologies.
ACE MD uses these technologies to:
You can control certain technologies through:
Disabling cookies may limit site functionality.
Some browsers support Global Privacy Control. Where required by applicable law and technically feasible, ACE MD will treat a recognized Global Privacy Control signal as a request to opt out of processing for targeted advertising and related disclosures that may be considered "sale" or "sharing" under certain state laws.
Because there is no consistent industry standard for interpreting Do Not Track signals, ACE MD does not currently respond to Do Not Track browser signals.
You can opt out of promotional emails by using the unsubscribe mechanism in the email. ACE MD may still send service and transactional emails.
If ACE MD offers SMS messages, you can opt out by following the instructions in the message, including replying STOP where applicable. Carrier message and data rates may apply.
Certain messages are necessary to provide services, including security and administrative notifications.
ACE MD retains information for as long as reasonably necessary to:
Retention periods vary based on data type, purpose, user expectations, and legal requirements.
ACE MD uses administrative, technical, and physical safeguards designed to protect information from unauthorized access, use, disclosure, alteration, and destruction.
No method of transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your account credentials and for activity that occurs under your account.
Privacy rights vary by state. Depending on where you live and the services you use, you may have the right to:
Submit requests to the ACE MD Privacy Officer using the contact information at the top of this policy.
ACE MD verifies identity before fulfilling certain requests. Verification may include account authentication, matching information provided to information on file, and in some cases requesting additional proof of identity.
Where permitted by law, an authorized agent may submit a request on your behalf. ACE MD may require proof of authorization and may require you to verify identity directly.
Where required by law, submit an appeal by contacting the Privacy Officer and using the subject line "Privacy Request Appeal."
If California law applies, the following may also apply.
Depending on your interactions, ACE MD may collect:
ACE MD provides opt out mechanisms for certain disclosures used for targeted advertising that may be considered "sale" or "sharing" under California law. Requests can be submitted to the Privacy Officer. Where recognized by law and technically feasible, a Global Privacy Control signal may be treated as an opt out request as described in Section 7.
ACE MD does not disclose Personal Information to third parties for the third parties' direct marketing purposes as defined by California Civil Code section 1798.83.
Some state laws regulate Consumer Health Data.
Consumer Health Data may include:
ACE MD uses Consumer Health Data to provide services, facilitate clinician review, coordinate pharmacy fulfillment, support customer service, prevent fraud, and operate and improve the platform.
ACE MD discloses Consumer Health Data to clinicians, pharmacies, laboratories, and service providers as described in Section 6. Where required by law, ACE MD provides rights and opt out mechanisms related to targeted advertising and certain disclosures.
Where applicable, you may have rights to access, delete, or withdraw consent related to Consumer Health Data. Submit requests as described in Section 11.
ACE MD services are intended for adults age 18 and older. If you believe a child provided information, contact the Privacy Officer.
ACE MD websites may link to third party websites or services. Third parties control their own privacy practices. This Privacy Policy does not apply to third party practices.
ACE MD services are intended for use in the United States. ACE MD may process and store information in the United States, subject to U.S. law.
ACE MD may update this Privacy Policy. ACE MD will update the "Last Updated" date when changes go into effect.