Effective May 28, 2026
Privacy Policy
This Privacy Policy describes how Opero Labs, Inc. ("Opero Labs," "we," "us," or "our") collects, uses, and shares information when you use the GoodMeds website and platform.
1.HIPAA and this Policy
Protected health information ("PHI") that you provide to receive clinical care is held by [Affiliated Medical Group — pending clinical partner agreement] (the "Medical Group"), which is a HIPAA "Covered Entity." Opero Labs is the Medical Group's "Business Associate" and processes PHI on its behalf under a written Business Associate Agreement. PHI is governed by the Notice of Privacy Practices of the Medical Group. This Privacy Policy covers non-PHI personal information we collect when you visit our website, create an account, or otherwise interact with the Service outside the context of clinical care.
2.Information we collect
Information you provide
Account details (name, email, date of birth, address); intake responses, medical history, current medications, allergies, and health metrics you submit; messages to your provider and our support team; payment information (processed by our payment processor — we do not store full card numbers).
Information we collect automatically
Device and browser information (user agent, IP address, screen size); usage data (pages visited, links clicked, timestamps); cookies and similar technologies as described in our Cookies section.
Information from third parties
Payment confirmation from our payment processor; shipping status from carriers; identity-verification signals from anti-fraud providers.
3.How we use information
We use information to (a) provide and improve the Service, (b) facilitate the asynchronous telehealth visit between you and the Medical Group, (c) process payments and shipments, (d) communicate with you about your account, your care, and important service or legal updates, (e) detect and prevent fraud, (f) comply with legal and regulatory obligations, and (g) — only with your separate consent — send you promotional emails (you can unsubscribe at any time).
4.How we share information
The Medical Group and its providers
Your intake responses, medical history, messages, and other clinically relevant information are shared with the Medical Group and the licensed provider who reviews your file, so they can evaluate and treat you.
Compounding pharmacy
If you are prescribed medication, the prescription and shipping details are transmitted to the US-licensed compounding pharmacy that fills your prescription.
Service providers
We share information with vendors that help us operate the Service (hosting, analytics, email delivery, payment processing, customer support tooling, shipping). Vendors that handle PHI are bound by HIPAA-compliant Business Associate Agreements.
Legal, safety, and corporate transactions
We may share information when required by law, in response to valid legal process, to protect rights and safety, or in connection with a merger, acquisition, financing, or sale of assets (with notice to you where required).
We do not sell your personal information
We do not sell personal information, and we do not share PHI with third parties for their own marketing purposes.
5.Cookies and tracking
We use cookies and similar technologies to keep you signed in, remember preferences, measure how the Service performs, and — only with consent where required — for marketing analytics. You can control cookies through your browser settings; turning off some cookies may affect functionality.
We honor Global Privacy Control ("GPC") signals as a valid opt-out of sale/share of personal information for residents of states that recognize it.
6.Data retention
We retain account and usage information for as long as your account is active and for a reasonable period afterward to comply with legal obligations and resolve disputes. PHI held by the Medical Group is retained according to applicable state medical-record retention laws (typically 6–10 years from last service, longer for minors).
7.Your choices and rights
Account controls
You can review and update your account information at any time from your dashboard. You can unsubscribe from marketing emails using the link in any marketing message.
State privacy rights
Residents of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, and Virginia (and other states that grant comparable rights) may have the right to (a) access the personal information we hold about them, (b) correct inaccuracies, (c) request deletion, (d) opt out of sale/share/targeted advertising (we do not engage in any of these for PHI), and (e) appeal a denied request. To exercise a right, email privacy@goodmeds.org. We will verify your identity before fulfilling a request and respond within the timeframes required by applicable law.
PHI requests
For requests related to your medical record (right to access, amend, request restrictions, accounting of disclosures), see the Notice of Privacy Practices.
8.Security
We use administrative, technical, and physical safeguards designed to protect your information, including encryption in transit and at rest, access controls, audit logging, vendor risk review, and employee training. No system is perfectly secure; we cannot guarantee that information will never be accessed, used, or disclosed in a manner inconsistent with this Policy.
9.Children
The Service is intended for adults 18 and older. We do not knowingly collect personal information from children under 13. If we learn we have, we will delete it.
10.International users
The Service is offered only in the United States, and information we collect is stored and processed in the United States. If you access the Service from outside the US, you do so at your own initiative and are responsible for compliance with local laws.
11.Changes to this Policy
We may update this Policy from time to time. We will post the updated version with a revised effective date and, for material changes, notify you by email or in-app banner.
12.Contact
Questions about this Policy or our privacy practices? Email privacy@goodmeds.org or write to Opero Labs, Inc., Attn: Privacy, 1616 E 56th Street, Unit 1508, Chicago, IL 60637.