Privacy Policy

Rad Second Opinions ("Company," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your information when you use our website and services at radsecondopinions.com. By using our services, you agree to the practices described in this policy.

1. Information We Collect

1.1 Information You Provide Directly

• Account information: Your name and email address when you sign up or log in, including via Google OAuth.
• Medical imaging files: DICOM files, X-rays, CT scans, MRI studies, or ultrasound images you upload for review.
• Payment information: Credit or debit card details entered during checkout. Payment data is processed and stored by Stripe — we do not store your full card number on our servers.
• Communications: Any messages or inquiries you send to us via the contact form or email.

1.2 Information Collected Automatically

• Log data: IP address, browser type, pages visited, and timestamps when you use our site.
• Cookies and session data: We use cookies to maintain your login session and improve site functionality. We do not use third-party advertising cookies.

1.3 Information from Third Parties

• Google OAuth: If you sign in with Google, we receive your name and email address from Google. We do not receive your Google password or any other account data beyond what you authorize.

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account and authenticate your identity;
• Provide radiology second opinion reports based on your submitted imaging;
• Process payments for our services through Stripe;
• Communicate with you about your submission status, reports, and account;
• Respond to your support requests and inquiries;
• Improve and maintain our platform, services, and user experience;
• Comply with applicable legal obligations;
• Use de-identified imaging data for research, AI model development, and educational purposes as described in our Terms of Service.

3. Medical Imaging Data

3.1 How We Handle Your Imaging Files

Medical imaging files you upload are stored securely and used solely to provide your radiology second opinion report. Your imaging is reviewed by licensed radiologists retained by our Company.

3.2 De-Identification and Research Use

As described in our Terms of Service, we may use your imaging data for research, AI development, and educational purposes after de-identifying it in accordance with HIPAA Safe Harbor standards. De-identification means removing your name, date of birth, and all other information that could identify you before any such use.

3.3 Retention

We retain your submitted imaging files and associated reports for as long as your account is active or as needed to provide our services. You may request deletion of your data by contacting us at support@radsecondopinions.com.

4. How We Share Your Information

We do not sell your personal information. We share your information only in the following limited circumstances:

• Radiologists: Licensed radiologists on our platform receive your imaging files and any relevant clinical information you provide in order to prepare your report.
• Stripe: Payment information is transmitted directly to Stripe for secure processing. Stripe's privacy policy governs their handling of your payment data.
• Supabase: We use Supabase as our database and authentication provider. Your account and submission data are stored on Supabase's infrastructure.
• Google: If you use Google sign-in, Google's privacy policy governs the data shared during the OAuth process.
• Legal compliance: We may disclose your information if required to do so by law, court order, or government authority, or to protect the rights, property, or safety of our Company, users, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of our business, your information may be transferred as part of that transaction.

5. Data Security

We implement reasonable technical and organizational measures to protect your personal and medical information from unauthorized access, disclosure, alteration, or destruction. These measures include encrypted data transmission (HTTPS), secure cloud storage, and access controls limiting who can view your data.

However, no method of electronic transmission or storage is completely secure. We cannot guarantee the absolute security of your information and encourage you to use a strong, unique password for your account.

6. Cookies

We use essential cookies to keep you logged in during your session. We do not use tracking cookies, advertising cookies, or analytics cookies from third parties. You can disable cookies in your browser settings, but doing so may prevent you from using certain features of the site, including staying logged in.

7. Your Rights and Choices

Depending on your location, you may have the following rights with respect to your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that we correct inaccurate or incomplete information.
• Deletion: Request that we delete your account and associated data, subject to legal retention obligations.
• Withdraw consent: If you signed in with Google, you can revoke our access through your Google account settings at any time.
• Data portability: Request a copy of your data in a portable format where technically feasible.

To exercise any of these rights, please contact us at support@radsecondopinions.com. We will respond to your request within a reasonable timeframe.

8. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, please contact us immediately at support@radsecondopinions.com and we will promptly delete it.

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. Your continued use of our services after any changes constitutes your acceptance of the updated policy. We encourage you to review this page periodically.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us:

Rad Second Opinions
Email: support@radsecondopinions.com