DrugBank Clinical API
Privacy Notice: Version 2.0, Effective
Things you should know
The DrugBank Developer Hub is our central location for customers and trial users to configure and access their DrugBank API accounts.
Account Creation
API Customers and potential API customers (trials) create an account in our API Developer Hub interface (https://dev.drugbank.com/). We capture the following information about these users directly in our database:
Email
Billing Email (optional)
First and Last Name
Phone number (optional)
Organization
Country
State / Province
HubSpot contact ID
Stripe Customer Identifier
API Key
In addition, we capture the following technical details, tied to this account, directly in our database:
Current / Last sign in IP address
Current / Last sign in timestamp
Sign in count
API Access
The Developer Hub Account is used to access the API. The customer receives an API key and password which they use to make calls. The DrugBank API is usage-based, therefore we track all requests made through this account to the API. The full request including any parameters (E.g. search terms, product IDs) are recorded. However, it is important to note that there are no API endpoints that require personal information to be submitted (E.g. patient details). The following information is captured for each request to the API:
The associated customer account ID
The request path
The full request body
The request IP address
The request timestamp
The status of the request (success/failure)
Request performance
We record the entire request body in order to understand how users are making use of the API (individually and collectively). In addition it allows our customer success team to better support customers when they face technical issues with the API.
Billing
The Developer Hub system integrates with the Stripe payment system. Stripe allows us to
automatically bill customer credit cards based on usage. Stripe handles all credit card
transactions, we do not store credit card information directly within our database.
As part of the Stripe offering, we are able to see and provide invoices to customers. Information on invoices is limited to:
Customer email address
Customer Stripe ID
Stripe transaction ID
Payment type
Payment timestamp
Payment status (success/failure)
Who can I contact for more information?
If you have any comments or questions, you may address them to OMx Personal Health Analytics, Inc., 700-10130 103 St. NW Edmonton, Alberta, Canada T5J 3N9, or by email at privacy@drugbank.com.