Privacy policy

me.onco.cc is the signed-in, private side of onco.cc, run by the operator of onco.cc ("we"). This policy explains what we hold when you use it, why, where it goes, and how to see, change or delete it. The public site onco.cc has its own privacy notice and holds nothing about you.

• Account. Sign-in is by WorkOS. WorkOS holds your email address and name; we receive a user id and, at sign-in, your first name for display. We do not store your email address unless you later opt into emails.
• Your record. What you enter on My context: role, cancer type and subtype, stage, date of diagnosis, treatments, current line of therapy, biomarkers, country, care setting, and for each value where it came from (typed, read from a document, carried from onco.cc, or from your settings).
• Documents. Reports and letters you choose to upload, the file itself in private storage and what software read from it, kept until you delete them.
• Watch list and settings. Pages on onco.cc you chose to watch; theme, country and language.
• Audit log. A record of each read and write of your data: when, which table, which columns changed. Never the values.
• Session cookie. A signed, HttpOnly cookie on me.onco.cc holding your user id and first name so that onco.cc can greet you and keep a Watch on your account. No other cookies; no analytics on me.onco.cc.
• Server logs. Our hosting provider records requests (address, time, path, status) for security and operation. Our code writes only statuses to logs, never your values.

Most of your record is health information, which the law in many places treats as a special category. We process it only because you ask us to, by entering or uploading it, for the purpose of showing it back to you, reading your documents into it, and pointing you to public reference pages. By entering health information you give your explicit consent to that processing. You can withdraw consent at any time by deleting your record (Settings, Delete my record), which removes everything listed in section 2 except the audit log entries recording the deletion and the hosting provider's request logs.

If you record information about another person, you are responsible for having their permission or another lawful basis.

• Supabase (database and file storage, United States, us-east-1): your record, documents, watch list, settings and audit log, encrypted at rest, reachable only through our server or your own signed-in session.
• Vercel (hosting, United States): runs our code and holds request logs.
• WorkOS (sign-in): your email, name and sign-in events.
• Anthropic (artificial intelligence): when you ask for a document or pasted text to be read, its content is sent to Anthropic's API to extract values, with no user id attached, and is handled under Anthropic's data policies. Nothing else about you is sent.
• onco.cc (the public site): only the cancer type appears in links we build to it, and only in your own browser. We send nothing about you to onco.cc.

We do not sell personal information, do not share it for advertising, and do not use it to train models. We disclose it only to the providers above as needed to run the Service, or where the law requires.

Wherever you are, you can see everything we hold (it is all on your pages), correct it (edit on My context), delete it (Settings) and download it (export, on Settings when available, or by asking). Depending on where you live you may also have rights to restrict or object to processing, to portability and to complain to a supervisory authority. To exercise a right that the pages do not already cover, use the contact details on onco.cc/about; we respond within the time the applicable law requires and in any case within 45 days.

We keep your record, documents, watch list and settings until you delete them or your account is closed. Audit log entries are kept for two years. Hosting request logs are kept by the provider for its standard period.

Every request to our server is verified against your sign-in token or session cookie; every table is protected by row-level security so a person can only ever read their own rows; the service key never reaches a browser; files are in a private bucket reachable only through short-lived signed links; every read and write is logged. No system is perfectly secure; if we learn of a breach affecting you we will tell you and any regulator the law requires, without undue delay.

The Service is for adults. We do not knowingly hold information from anyone under 18, or under the age of majority where they live if higher. A carer may record a child's case as the responsible adult.

Our providers are in the United States. If you are in the United Kingdom, the European Economic Area or another place with transfer rules, your data is transferred there under the providers' standard contractual protections. If this does not suit you, do not enter data.

We may update this policy; the date above is the current version. Questions and requests: the contact details on onco.cc/about. This policy forms part of the Terms of use.