Privacy Policy

OncoSource AI (“OncoSource,” “we,” “us”) operates a procurement platform for radiation oncology, including a free public document analyzer at oncosourceai.com. This policy covers our public website and the free analyzer. If your organization has a signed agreement with OncoSource for the full platform, that agreement governs where it differs from this policy.

When you use the free analyzer, we collect:

• The document you upload (an invoice, quote, or similar procurement document) and a cryptographic hash of the file, used for duplicate detection.
• Data extracted from the document, including product names and SKUs, descriptions, quantities, unit prices, line totals, currency, and vendor names.
• Your email address, which you provide before the analysis runs.
• Technical metadata: your IP address, browser user agent, and the file name and type.

We are deliberately honest about this: the extracted line-item data is stored on our systems. We do not pretend otherwise.

• To run the analysis you requested and show (and optionally email) you the resulting savings report.
• To build aggregated, de-identified market pricing statistics — for example, the typical price range observed for a product category. These aggregates do not identify you, your organization, or your document.
• For security and abuse prevention: rate limiting, duplicate detection, and fraud investigation.
• To follow up with you about OncoSource using the email you provided. Every marketing message includes an opt-out.

Anonymous analyses are subject to a scheduled retention window: if you do not create an account, the personal identifiers on an anonymous analysis (email address, IP address, user agent, file name) are automatically purged after 180 days. De-identified aggregate statistics may be retained after personal identifiers are removed.

You can request deletion of your data at any time by emailing michael@oncosourceai.com from the address you used. We will honor verified deletion requests. Signed-in platform users can also request erasure of their prior anonymous analyses from within their account.

We do not sell your personal information, and we do not share it with third parties for their own marketing. We share data only with the infrastructure service providers we use to operate the platform (hosting, database, AI document processing, and email delivery), each bound to process it only on our behalf.

The analyzer is for procurement documents only — invoices, quotes, and price lists. Do not upload documents containing patient information.

OncoSource is not a clinical system and is designed to operate without protected health information. If you believe you have uploaded a document containing patient information by mistake, contact us immediately at michael@oncosourceai.com and we will delete it.

Data is encrypted in transit and at rest, access is role-scoped and audit-logged, and our security architecture is described in detail on our Security page.

We may update this policy as the product evolves; material changes will be reflected in the “Last updated” date above. Questions, deletion requests, or privacy concerns: michael@oncosourceai.com.