Legal

Privacy

Effective 14 October 2026.

Solemark LLC (“Pillwise”, “we”) operates pillwise.dev and api.pillwise.dev. This page covers the website, accounts, and billing. Cabinet PHI is governed by the BAA, not this page alone.

What we collect

• Account email and org name; the account id Google gives us if you sign in with Google.
• Billing details via Stripe. We do not see full card numbers.
• API keys (hashed at rest), lookup counts, webhook URLs.
• Server logs (IP, user agent) for abuse and uptime.
• Where a sign-up came from: the campaign tags on the link you arrived from (such as utm_source, or an ad's click id) and the site that sent you. A first-party cookie keeps them for up to 30 days; when you create an organization they are stored with the organization, not with you, and the cookie is deleted. If you came from one of our ads, we may tell that ad platform, by its click id alone, that the click led to a paid plan.
• When you accept the BAA: who accepted it, when, which version, and from which IP and browser.
• Cabinet: completed medication forms and a tokenized member id — only if you enable Cabinet and sign a BAA.

What we do not do

• No advertising pixels on this site.
• No sale of catalog or Cabinet data.
• No tracking cookies. The session cookie is httpOnly on pillwise.dev after you sign in; the campaign cookie above is first-party and httpOnly too.
• Page views are counted with Cloudflare Web Analytics, which sets no cookies and does not identify you. It is not loaded on account or checkout pages.

Processors

Cloudflare (site and bot checks), Fly.io (API and accounts), Neon (accounts, keys and usage), Stripe (payments), Resend (sign-in and billing email), and Google if you sign in with Google.

Contact

Contact or privacy@pillwise.dev.