Privacy Notice

Jolifox LLC ("we", "us") is a Florida limited liability company. Maltexi and Connect RX are products operated by Jolifox LLC.

This notice explains how we collect, use and share personal information when you:

• visit maltexi.com or connectrx.maltexi.com (the "sites");
• fill out one of our forms, such as a free DSCSA review, a plan request or the free DSCSA training;
• receive our emails; or
• work with us as a customer or trading partner, including when we set up a Connect RX connection with your company.

The data that customers and trading partners exchange through Connect RX is covered separately in section 7.

1. Information we collect

Information you give us

• Contact and company details: name, work email, phone number, job title, company or pharmacy name, number of locations and team size.
• Your request: the plan or service you're interested in, and the messages and support requests you send us.
• Connection details, when we set up Connect RX with your company: server URL, port, AS2 identifiers, public keys, certificates and related settings.
• Billing details, when you subscribe: billing contact and billing address. We don't collect payment card details on our sites.

Information collected automatically

• Device and usage data: IP address, browser and device type, pages visited, links clicked, how far you scroll and the page that referred you.
• Ad source: when you arrive from an ad, the campaign details in the link, such as the campaign name and the Google click ID.
• Cookies and similar technologies, described in section 4.

Information from others

Customers who ask us to connect them with their trading partners may give us those partners' company names, GLNs and business contact details. When we need to reach one of those trading partners, we may also look up the company's business contact details from public sources.

2. How we use information

We use personal information to:

• respond to your request, schedule your free DSCSA review and prepare your plan or quote;
• set up, run, monitor and support Connect RX connections;
• send emails about your request, your account and your connections;
• send the free DSCSA training and news about DSCSA and our products, which you can unsubscribe from at any time;
• understand how our sites are used and which ads bring people to us, so we can improve both;
• keep our sites and services secure and prevent fraud and misuse; and
• meet our legal obligations, including supply-chain traceability requirements.

3. How we share information

We don't sell personal information for money. We share it only with:

• Service providers that work on our behalf, such as website hosting, email and customer messaging (Customer.io), analytics (Google Analytics, Cloudflare Web Analytics and PostHog) and advertising (Google Ads and Meta). They may use the information only to provide their services to us.
• Your trading partners, as needed to set up and run a connection you asked for.
• Our affiliates and professional advisers, such as lawyers and accountants.
• Authorities, when the law requires it or to protect our rights, our users and the public.
• A buyer or successor, if we are involved in a merger, acquisition or sale of assets.

Some US state laws treat the use of advertising cookies, described in section 4, as "sharing" personal information for targeted advertising. Section 5 explains how to opt out.

4. Cookies, analytics and advertising

We and our providers use cookies, pixels and similar technologies on our sites to:

• keep the sites working and remember your choices;
• understand how the sites are used, with Google Analytics, Cloudflare Web Analytics and PostHog;
• connect your visits and email activity to your contact record once you send a form or click one of our emails, with Customer.io; and
• measure our ads, with Google Ads and the Meta Pixel. They tell us which ads lead to visits and requests, and Google and Meta may use them to show you our ads on other sites.

When you send a form, we may share your email address with Google and Meta in an encoded (hashed) form, so they can match your request to an ad you clicked.

You can block or delete cookies in your browser settings. You can also opt out of Google Analytics at tools.google.com/dlpage/gaoptout, manage Google ads at myadcenter.google.com, manage Meta ads at facebook.com/adpreferences, and opt out of interest-based ads from many companies at optout.aboutads.info.

5. Your choices and rights

• Marketing emails. Use the unsubscribe link in any marketing email, or write to [email protected]. We will still send emails about your requests, account and connections. Our Anti-Spam Policy explains how we send email.
• Your rights. Depending on where you live, including California and other US states, the European Union, the United Kingdom and Brazil, you may have the right to know what personal information we have about you, to access, correct or delete it, to get a copy of it, and to opt out of targeted advertising. To make a request, write to [email protected]. We may need to confirm your identity first, and you may use an authorized agent. We won't treat you differently for using your rights.
• Legal bases. Where laws such as the GDPR or Brazil's LGPD apply, we process personal information to perform our agreement with your company, for our legitimate interests in running and securing our services and measuring our marketing, to meet legal obligations, and with your consent for marketing emails.

6. How long we keep information

We keep contact and request details while we have a business relationship with you, or for as long as they are useful to respond to and follow up on your request. Then we delete or anonymize them, unless the law requires us to keep them longer. We keep connection and exchange records while a connection is active, and afterwards for as long as audit and traceability obligations require.

7. Data exchanged through Connect RX

Customers and trading partners use Connect RX to exchange and store product tracing data, such as product identifiers, lot and serial numbers, and shipment details. We process this data on their behalf, under our agreement with them, and use it only to provide the service. Connect RX is built for product and supply-chain records, not patient records, and should not be used to send patient health information. Questions about data in a customer's account should go to that customer.

8. Security

We use technical and organizational measures appropriate to the risk, including encrypted transmission (AS2 and TLS) and access controls that limit who can see your information. No method of transmission or storage is completely secure, but we work to protect your information and fix issues quickly.

9. International transfers

We are based in the United States, and our team also works from Brazil. Your information may be processed in the United States, Brazil and other countries where our service providers operate. Where the law requires it, we use appropriate safeguards for these transfers.

10. Children

Our sites and services are for businesses and are not directed to children under 16. We do not knowingly collect personal information from children.

11. Changes to this notice

We may update this notice. We will post the new version here and change the "Last updated" date. If the changes are significant, we will also tell you by email or with a notice on our sites.

12. Contact us

Jolifox LLC
759 SW Federal Highway, Suite 304
Stuart, FL 34994, United States
[email protected] · +1 (772) 320-5398