Privacy
Privacy Policy
Last updated: June 2026
Red Letter Nexus (we, us, or our), a subsidiary of Red Letter Investment Group, provides marketing and technology services for telemedicine clinics, including the NexusRX application for GoHighLevel. This Privacy Policy explains how we collect, use, share, and protect information through our website at redletternexus.com and through the NexusRX application and related services (together, the Services).
Scope of this policy
This policy covers the redletternexus.com website and the NexusRX application. NexusRX is software that clinics install in their GoHighLevel accounts to manage e-prescribing, pharmacy ordering, and subscription refills. Where we process patient health information on behalf of a clinic, that processing is also governed by a Business Associate Agreement (BAA) between us and the clinic, which controls if it conflicts with this policy.
Information we collect
Information you provide
When you contact us, request a marketing audit, subscribe to our blog, or set up an account, we collect details such as your name, email address, phone number, clinic name, and website.
Information from the NexusRX integration
When a clinic installs NexusRX, the app accesses the data in that clinic's GoHighLevel sub-account that it needs to provide its features. This includes patient contact records, opportunities (the cards that track prescriptions and orders), custom fields, workflows, subscription status, and the identity of staff members who take actions in the app. We access this data only for the clinic that installed the app.
Health information
To process prescriptions and orders, NexusRX handles health information about a clinic's patients, such as medications, prescription details, and order history. We process this information on behalf of the clinic and only to provide the Services.
Information collected automatically
On our website we collect standard usage data such as IP address, browser type, pages viewed, and similar analytics information through cookies and tools like Google Analytics.
How we use information
We use information to provide, operate, and maintain the Services, including processing prescriptions, orders, and refills; to configure NexusRX to a clinic's setup; to respond to support requests; to communicate with you about your account and, with your consent, send marketing; to improve and secure the Services; and to meet legal and recordkeeping obligations.
How information obtained through GoHighLevel is used
Data that NexusRX accesses through the GoHighLevel API is used only to provide the application's features to the clinic that installed it. We do not sell this data, we do not use it for advertising, and we do not share it except as described in this policy or as needed to deliver the Services.
Protected health information and HIPAA
When we process protected health information (PHI) for a clinic, we act as a Business Associate under the Health Insurance Portability and Accountability Act (HIPAA). Our use and disclosure of PHI is limited to what the BAA with the clinic and applicable law allow. The clinic remains responsible for its own privacy obligations to its patients.
How we share information
We share information only as needed to run the Services or as required by law. This may include:
- Fulfillment pharmacies the clinic designates, to fill and ship prescriptions.
- GoHighLevel, the platform NexusRX integrates with.
- Service providers that host our infrastructure, send email, or process payments, under contracts that limit their use of the data.
- Legal and safety disclosures when required by law or to protect rights and safety.
We do not sell personal information or PHI.
Data retention and deletion
We retain information for as long as needed to provide the Services and to meet legal, tax, and recordkeeping obligations. When a clinic uninstalls NexusRX, the app's access to that clinic's GoHighLevel account is revoked and the stored connection tokens are cleared. Clinics may request deletion of their data, subject to records we are required to keep by law or the BAA.
Security
We use administrative, technical, and physical safeguards designed to protect information, including access controls, encryption in transit, and dedicated infrastructure that is not shared between clients. No system is perfectly secure, and we cannot guarantee absolute security.
Your choices and rights
You may ask us to access, correct, or delete the personal information you have provided to us, and you may opt out of marketing emails at any time. Patients who want to access or correct their health information should contact their clinic, which controls that record. Depending on where you live, you may have additional rights under applicable privacy laws.
Cookies and analytics
Our website uses cookies and analytics tools to understand usage and improve the site. You can control cookies through your browser settings. The NexusRX application does not use cookies for advertising.
Children's privacy
The Services are intended for clinics and their authorized staff, not for children, and we do not knowingly collect information directly from children.
Changes to this policy
We may update this policy from time to time. When we do, we will revise the date above and, where appropriate, provide additional notice.
Contact us
If you have questions about this policy or your information, contact us at support@redletternexus.com. See also our Terms of Service.