Privacy & data practices

What we collect

To access the site, we ask for your first name, last name, work email, pharmacy or facility name, and APC membership status, and we confirm your email with a one-time code. If you submit the get-started form, we also collect your phone number and details about your pharmacy's software, point-of-sale system, current card merchant, and approximate card volume. If you use the 60-Second Audit, we receive the processing statement you upload.

How we use it

This information is used by The Processing Brokerage and APC to present member payment programs, analyze the statement you submit, respond to your requests, and follow up about the Tabz and APC Worldpay programs. We do not sell your information.

Your processing statement & the 60-Second Audit

When you upload a statement, it is stored in a private, access-controlled location and sent to our AI provider (Anthropic) to read the aggregate figures (volume, fees, effective rate, and line-item charges). We instruct the analysis to extract only aggregate dollar amounts and rates and to exclude bank account numbers, routing numbers, merchant IDs, and tax IDs.

Under our commercial agreement, the AI provider does not use your statement to train its models and deletes the request data within 30 days. On our side, your uploaded statement file is automatically deleted from our storage within 14 days (we keep it briefly to verify the audit reported your figures correctly) unless you ask us to keep it by sending your audit to the team for enrollment. Only the audit's numeric results are retained after that, to service your request. You can ask us to delete any of this at any time.

If you choose to email or share your audit, we create a shareable link to a read-only copy of your report. Anyone who has that link can open the report without signing in, so only share it with people you intend to. The link contains your report's figures (not your account login). You can disable a link you've shared at any time with the “Disable the link” control on your results page, or ask us to remove it.

The audit results are estimates, not a quote

The 60-Second Audit is a tool that estimates potential savings from the single statement you provide, using current APC member rates. The figures are estimates only, not a guarantee or an offer of any specific savings amount, and your actual results will differ with your card mix and monthly interchange. Final pricing is confirmed in writing only when you enroll in the program, and nothing on this site creates a binding commitment or any liability for estimated amounts.

Where it lives & how it's protected

Data is stored with our infrastructure providers (Supabase and Vercel) in the United States, protected by access controls and encryption in transit. Access to your information is limited to The Processing Brokerage and APC personnel who need it to serve you.

Email & sign-in

We use a one-time emailed code to verify your address and keep a session cookie so you stay signed in. We do not use advertising or third-party tracking cookies.

Site analytics

To understand how many people reach the site and which pages they use, we keep privacy-minimized, first-party analytics: a record of page views with the page path and an anonymous first-party identifier stored in a cookie named apc_vid so we can estimate unique visitors. We do notstore your IP address, your browser's user-agent, or your identity alongside these page-view records, and we never use them for advertising. This first-party identifier is not strictly anonymous — it can link page views from the same browser over time — so we keep these raw records for at most 180 days and then delete them automatically. We do not store your name, account, or email with these page-view records — and for signed-in visits we do not store the browser identifier at all — so (unlike the account data above) there is nothing personally identifying for us to look up or remove on request; you can also clear the apc_vid cookie in your browser at any time to reset the identifier. We also use Vercel's built-in Web Analytics, which Vercel states uses no third-party cookies and stores aggregate, anonymous data.

Updates & deletion

To access, correct, or delete your information, or to have your statement and audit removed, email jason@a4pc.org and we'll take care of it. We may update this page as the service evolves; the date above reflects the latest version.