Privacy Policy

Version 2.0 · Effective August 17, 2026
Second Opinion Oncology (“we”, “our”, or “us”) operates the SOClarity platform, which helps patients collect, upload, organize, and understand their medical information. We are committed to protecting your privacy and handling your personal information securely and transparently.
This Privacy Policy explains what information we collect, how we use it, how we protect it, and the choices you have regarding your data.

1. Information We Collect

We collect the following types of information when you use our website or mobile app:

1.1 Information You Provide

  • Medical records you upload (PDFs, images, DICOM files, pathology reports, documents)
  • Photos or scans of medical documents
  • Information you enter manually (symptoms, history, notes)
  • Contact information (name, email, phone number)
  • Account login information

1.2 Information from Connected Health Systems

If you choose to connect your medical records through SMART Health, SMART on FHIR, or other health data sources, we may receive:
  • Clinical data (conditions, medications, labs, imaging metadata)
  • Visit summaries
  • Treatment history
  • Biomarker and pathology results
This only occurs with your explicit consent.

1.3 Device, Technical & Usage Information

  • IP address
  • Device type
  • Browser type
  • App version
  • Usage logs
  • Aggregate, first-party analytics about which pages you visit (see our Cookies & Local Storage page for exactly what this involves and how to opt out)
We do not collect precise location unless you explicitly allow it.

2. How We Use Your Information

We use your information to:
  • Provide the services you request
  • Help you organize and view your medical records
  • Analyze documents you upload (e.g., OCR, metadata extraction)
  • Generate plain-language explanations of your records using AI language models (see 2.1 below)
  • Improve app performance and user experience
  • Communicate with you about your account
  • Maintain security and prevent misuse
We do not sell your data. We do not use your medical information for advertising.

2.1 AI Processing

When you ask SOClarity a question or upload a document, the relevant text is sent to an AI language-model provider so it can generate a response. We do not permit any AI provider we use to train their models on your data, and your records are never shared with anyone outside of providing your own care review — the same commitment made in our Terms of Service.
We only access or process your medical information when you explicitly authorize us to do so.
Examples of actions requiring consent:
  • Uploading documents or imaging
  • Connecting to a hospital or health system
  • Importing medical records
  • Sharing information with a clinician (if you choose to)
You may revoke consent at any time.

4. How We Protect Your Information

We use industry-standard security measures, including:
  • Encryption in transit and at rest
  • Access controls and authentication
  • Audit logs of access to your records
  • Secure cloud infrastructure
  • Ongoing security review as the product evolves

5. Sharing Your Information

We only share your information in the following situations:
  • With your explicit consent
  • With service providers who help us operate the platform (see 5.1 below)
  • When required by law (e.g., court order)
We do not share your information with advertisers or data brokers.

5.1 Service Providers

The categories of service providers who may process your information on our behalf:
  • Cloud hosting and database storage
  • AI language-model providers, to generate responses to your questions (see 2.1 above)
  • Optical character recognition (OCR), to extract text from documents you upload
  • Email delivery, for account and notification emails
  • First-party, self-hosted analytics (see our Cookies & Local Storage page)
We do not name individual vendors on this page today; a linked, dated list of our current service providers is planned for a future update to this policy.

5.2 Data Location

Our infrastructure runs on Amazon Web Services (AWS). Your data may be stored or processed in more than one AWS region.

6. Your Rights

Depending on your location, you may have the right to:
  • Access your data
  • Correct your data
  • Delete your data
  • Export your data
  • Revoke consent
  • Request information about how your data is used
You can exercise these rights by contacting us at: support@secondopinion-oncology.com

7. Data Retention

You can remove your case, chat history, uploaded documents, and clinical profile yourself at any time from your account — this takes effect immediately and does not require contacting us. For a full account deletion, contact us at the email above.
Some records may need to be kept longer than your account itself — for example, an audit trail of who accessed a record, or documentation tied to a specialist’s completed review, where retention may be required by law regardless of a deletion request. We do not currently publish specific retention periods per data type; that detail is still being finalized.

8. Children’s Privacy

Our services are intended for adults 18 and older. We do not knowingly collect information from anyone under 18.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Each version carries a version number and effective date at the top of this page. We will notify you of significant changes through the app or website.

10. Contact Us

If you have questions about this Privacy Policy or your data, contact us at:
Second Opinion Oncology
Email: support@secondopinion-oncology.com

Privacy Policy — Version 2.0 · Effective August 17, 2026 — secondopinion-oncology.com