This Privacy Policy explains how Rockbound Solutions, LLC ("we," "us," or "our") collects, uses, protects, and shares information in connection with the MedEffects platform — our web and mobile applications for medical-device ordering, shipment tracking, insurance eligibility verification, and related billing (collectively, the "Service"). Because the Service is used by healthcare practices and may involve protected health information ("PHI"), this policy describes both ordinary personal information and our handling of health-related information.
MedEffects is a business-to-business platform intended for use by authorized staff of medical practices, our sales representatives, and administrators. It is not directed to the general public or to consumers, and it is not directed to children.
This policy applies to people who use the Service, including: practice/clinic users, sales representatives, and administrators. Where we handle PHI on behalf of a healthcare provider, we do so subject to our agreements with that provider (including any Business Associate Agreement), and the provider's own notice of privacy practices may also apply.
We do not use advertising networks or advertising trackers, and we do not sell personal information.
Where we receive, maintain, or transmit PHI in connection with services performed for or on behalf of a covered entity, we act as a business associate as defined under the Health Insurance Portability and Accountability Act ("HIPAA") and its implementing regulations, and we handle such PHI in accordance with our Business Associate Agreement(s) and applicable law. We apply the minimum-necessary principle, limit access to authorized users with a need to know, and require our subprocessors that handle PHI to provide comparable protections under written agreement.
We share information only as needed to operate the Service and as described below. We do not sell personal information and do not share it for advertising.
We use the following third parties to provide the Service. They are authorized to use information only to perform services for us and under obligations of confidentiality and, where applicable, HIPAA.
| Provider | Purpose |
|---|---|
| Intuit — QuickBooks Online | Accounting and invoicing (customer/clinic records and invoices) |
| pVerify | Insurance eligibility verification |
| MongoDB Atlas (hosted on AWS) | Application database hosting |
| Render | Application (backend/web) hosting |
| Cloudflare | Web delivery / content and object storage |
We may disclose information if required by law, subpoena, or legal process, or where necessary to protect the rights, safety, and security of our users, the public, or us, or in connection with a merger, acquisition, or sale of assets (subject to the protections described here).
We use administrative, technical, and physical safeguards designed to protect information, including encryption of data in transit, access controls, and audit logging. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
We retain information for as long as needed to provide the Service and for legitimate business and legal purposes. Where we act as a business associate, retention and destruction of PHI follow our agreements and applicable law (including HIPAA recordkeeping requirements). Unless a longer period is required by applicable law, we retain records for at least six (6) years.
The Service is operated in the United States and information is processed and stored in the United States.
The Service is intended for use by authorized business users and is not directed to children under 13, and we do not knowingly collect personal information from children.
We may update this policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, provide additional notice.
Questions about this policy or our privacy practices:
© 2026 Rockbound Solutions, LLC. All rights reserved. · See also our Terms of Service.