Last Updated: January 6, 2025

1. Introduction Welcome to CancerBot ("we," "our," "us"). We are committed to protecting your privacy and ensuring that your personal data is handled in compliance with applicable privacy laws, including the General Data Protection Regulation (GDPR) for European users and U.S. state privacy laws such as the California Consumer Privacy Act (CCPA), Virginia Consumer Data Protection Act (VCDPA), Colorado Privacy Act (CPA), and other relevant regulations. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our clinical trial matching service.

2. Data Controller CancerBot, Inc. is responsible for processing personal data under this Privacy Policy. If you have any questions, you can contact us at:

Email: support@cancerbot.org 

Address: 4363 Hazel Avenue, Fair Oaks CA 95628

3. What Personal Data We Collect We may collect the following categories of personal data:

• Identity Data: Name, date of birth, gender

• Contact Data: Email address, phone number

• Health Data: Medical conditions, treatment history, medications (collected only with explicit consent)

• Technical Data: IP address, browser type, operating system

• Usage Data: How you interact with our platform

4. How We Use Your Personal Data We use your personal data for the following purposes:

• To provide clinical trial matching services based on your health information and preferences.

• To communicate with you regarding potential trial opportunities and service updates.

• To comply with legal obligations and ensure data security.

• To improve our services through analytics and user experience monitoring.

5. Legal Basis for Processing (GDPR & U.S. Laws) We process your data based on the following legal grounds:

• Consent: For processing sensitive health data, we require explicit consent.

• Contractual Obligation: To provide our services.

• Legal Compliance: To meet regulatory and legal requirements.

• Legitimate Interest: To improve our services and security.

6. How We Share Your Data We may share your personal data with:

• Clinical trial sponsors and research organizations, only with your explicit consent.

• Service providers that help us operate our platform (e.g., IT services, analytics, cloud storage).

• Regulatory authorities, if required by law.

We do not sell or rent your personal data to third parties. However, if we engage in "sharing" as defined under CCPA, we will provide you with opt-out options.

7. Your Rights Under GDPR & U.S. State Privacy Laws Depending on your location, you may have the following rights:

• Right to Access: Request a copy of your personal data.

• Right to Rectification: Request correction of inaccurate data.

• Right to Erasure (Right to be Forgotten - GDPR): Request deletion of your data under certain conditions.

• Right to Restrict Processing (GDPR): Limit how we process your data.

• Right to Data Portability (GDPR): Receive your data in a structured format.

• Right to Object (GDPR): Object to data processing based on legitimate interest.

• Right to Withdraw Consent (GDPR): Withdraw consent at any time.

• Right to Know (CCPA): Request details on what personal data we collect and how we use it.

• Right to Delete (CCPA, CPA, VCDPA): Request deletion of your data under certain conditions.

• Right to Correct (CPA, VCDPA): Request correction of inaccurate data.

• Right to Opt-Out (CCPA, CPA, VCDPA): Opt-out of data sales or targeted advertising.

• Right to Limit Use of Sensitive Data (CCPA): Restrict use of sensitive personal information.

To exercise these rights, contact us at [Your Email Address]. If you are a California resident, you may also designate an authorized agent to make a request on your behalf.

8. Data Retention We retain your personal data only as long as necessary to fulfill the purposes outlined in this policy. If you withdraw consent, we will delete your data unless retention is required by law.

9. Security Measures We implement technical and organizational measures to protect your data from unauthorized access, loss, or disclosure.

10. Cookies and Tracking Technologies We use cookies and similar technologies to enhance user experience and analyze website usage. You can manage cookie preferences through your browser settings or our Do Not Track preferences if applicable.

11. Do Not Sell or Share My Personal Information (CCPA Compliance) Under CCPA, California residents have the right to opt out of the sale or sharing of personal data. While we do not sell your data, if you wish to opt out of certain data-sharing practices, please visit our [Do Not Sell My Personal Information] page or contact us at [Your Email Address].

12. International Data Transfers (GDPR Compliance) If we transfer your data outside the European Economic Area (EEA), we ensure appropriate safeguards, such as Standard Contractual Clauses (SCCs) or other GDPR-compliant measures.

13. Changes to This Privacy Policy We may update this Privacy Policy periodically. Any changes will be communicated via email or a notice on our platform.

14. Contact Us If you have questions about this Privacy Policy, contact us at:

Email: support@cancerbot.org

Address: 4363 Hazel Avenue, Fair Oaks CA 95628

This Privacy Policy ensures compliance with GDPR and U.S. state privacy laws, protecting patient data while facilitating clinical trial matching services.