Privacy Policy
Last updated: Draft — not yet finalized
This page is a draft placeholder pending review by legal counsel. It does not yet reflect OncoFlow's finalized policy and should not be relied on as legal advice.
Information We Collect
OncoFlow collects identity, contact, and clinical information necessary to coordinate care — including a permanent Unique Patient ID, appointment history, lab results, and billing records tied to services received through partner facilities.
How Information Is Used
Information is used to schedule and deliver care, generate invoices, coordinate between clinical roles, and maintain the audit trail required for a safe, accountable care pathway. It is not sold or used for advertising.
Access Controls
Access to personal and clinical information is restricted by role-based access control. Sensitive identifiers, such as phone numbers, are scoped to only the roles that need them for a given task.
Data Retention
Records are retained for as long as necessary to support ongoing care and applicable regulatory requirements. Retention specifics will be finalized alongside formal compliance review.
Contact
Questions about this policy can be directed to our support team via the contact page.