Privacy Policy

Second Look Cancer helps people organize clinical trial search information, maintain a shortlist, track trial-related tasks, and receive trial-related updates. The Service is informational only and is not a substitute for medical advice, diagnosis, treatment, or a clinician's judgment.

We treat health-related information as sensitive. This Privacy Policy explains what we collect, why we use it, when we share it with service providers, how long we keep it, and how you can contact us about privacy rights.

Second Look Cancer is not claiming to be a HIPAA covered entity unless we separately enter into a relationship that makes us a covered entity or business associate. Even when HIPAA does not apply, we design the Service to handle health-related information carefully.

Some information you choose to provide may be sensitive health information or special-category data under certain laws. You provide this information so Second Look Cancer can help organize trial search information and make the Service more relevant to your stated needs.

Where required, we rely on your consent or another applicable lawful basis to process health-related information. You may withdraw consent for optional processing by changing available settings, deleting information, deleting your account, or contacting us, but some information may be needed for core Service features to work.

We do not publish internal ranking weights, model prompts, operational logic, or detailed matching criteria in this Privacy Policy because those details may change and may reveal proprietary or security-sensitive information.

Second Look Cancer may use AI-assisted tools to summarize clinical trial information, structure source material, explain eligibility concepts, support trial matching, and help prepare informational content. These tools are used to support the Service, not to replace professional medical judgment.

AI-assisted outputs may be incomplete, outdated, or incorrect. You should review trial information with your oncology team, trial site staff, or another qualified clinician before making medical decisions.

We use administrative, technical, and organizational safeguards designed to protect personal information, including access controls, encryption in transit, monitoring, and limited personnel access for operational needs.

We do not sell personally identifiable health information. We may share information with trusted service providers that help us operate, host, secure, communicate, analyze, troubleshoot, and support the Service. These providers may process information only for the work they perform for us.

Service provider categories may include hosting and database providers, authentication services, email delivery providers, native push notification services, security and anti-abuse services, maps or location-support services, AI infrastructure providers, analytics or diagnostics providers, and customer support tools.

We may also disclose information if required by law, to protect users or the Service, in connection with a business transaction, or with your direction or consent.

Second Look Cancer may create de-identified or aggregated information from product usage, profile patterns, trial search activity, shortlisted trials, tracker activity, and patient-experience feedback.

De-identified or aggregated information may be used for product analytics, quality improvement, public or private reports, research collaborations, nonprofit work, partner insights, or commercial insights products. These materials are intended not to identify individual users.

Your name, email address, contact details, and identifiable health profile are not sold as personally identifiable health information.

We may send transactional or service messages about your account, security, trial search workflow, notifications, support requests, or changes to the Service. These messages are part of operating the Service.

We may send optional product updates, research resources, trial-search event emails, or similar communications where you opt in or where applicable law otherwise allows. You can unsubscribe from optional emails or change available preferences without closing your account.

Native push notifications require device-level permission. You can change app notification settings in the product where available and in your device settings.

For users in Canada, we aim to handle personal information in a manner consistent with PIPEDA-style principles, including accountability, meaningful consent, limiting collection and use, safeguards, openness, access, correction, and complaint handling.

For users in the UK and European Economic Area, we aim to provide GDPR-style transparency about purposes, data categories, recipients, retention, rights, and international processing where applicable. Depending on your location and the data involved, rights may include access, correction, deletion, objection, restriction, portability, withdrawal of consent, and complaint rights with a supervisory authority.

For users in the United States, state privacy laws may provide additional rights depending on your residency and how the law applies. You may contact us to make a privacy request, and we will respond as required by applicable law.