Privacy Policy

1. Information we collect

Information you provide directly

When you submit a demo request, contact us, or interact with our website, we may collect:

• Name, email address, organization name, and role
• Information you choose to share in free-text form fields, such as questions, project descriptions, or context about your cancer program
• Communications you send to us via email or other channels

Information collected automatically

When you visit our website, we may automatically collect:

• Device and browser information (browser type, operating system, screen size)
• Usage data (pages visited, time spent, navigation patterns, referral source)
• IP address and approximate geographic location derived from it
• Cookies and similar tracking technologies (described below)

2. How we use information

We use the information we collect to:

• Respond to demo requests and other inquiries
• Communicate with you about Onvera's products and services
• Operate, maintain, and improve our website and services
• Analyze website usage to improve user experience
• Detect, prevent, and address technical issues, fraud, or security risks
• Comply with legal obligations and enforce our terms

3. How we share information

We do not sell your personal information. We may share information in limited circumstances:

• Service providers: With vendors who help us operate our website and business (for example, hosting providers, email infrastructure, analytics tools), bound by confidentiality obligations
• Legal requirements: When required by law, regulation, court order, or governmental request
• Business transfers: In connection with a merger, acquisition, or sale of assets, with notice as required by law
• With your consent: When you direct us to share information with a third party

4. Cookies and tracking

Our website uses cookies and similar technologies to recognize you, remember preferences, and understand how visitors use the site. You can control cookies through your browser settings — refusing cookies may limit functionality but will not prevent you from using the website.

We may use third-party analytics services (such as Google Analytics) that set their own cookies and process information according to their own privacy policies.

5. Protected Health Information (PHI)

This Privacy Policy applies to website visitors and prospective customers. It does not apply to PHI that Onvera processes on behalf of healthcare provider customers. When Onvera processes PHI as part of our cancer registry software services, we do so as a Business Associate under HIPAA, governed by:

• A signed Business Associate Agreement (BAA) with each customer
• The Health Insurance Portability and Accountability Act of 1996 (HIPAA), the HITECH Act, and implementing regulations
• Our HITRUST CSF security framework

If you are a patient and have questions about your health information, please contact your healthcare provider directly. We do not have a direct relationship with patients.

6. Data security

We implement administrative, technical, and physical safeguards designed to protect information from unauthorized access, disclosure, alteration, and destruction. These include encryption in transit and at rest, access controls, regular security assessments, and employee training. No method of transmission or storage is 100% secure, but we work continuously to maintain industry-standard protections.

7. Data retention

We retain personal information only as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we securely delete or anonymize it.

8. Your rights and choices

Depending on your location, you may have rights regarding your personal information, including:

• Access: Request a copy of personal information we hold about you
• Correction: Request that we correct inaccurate information
• Deletion: Request that we delete your personal information, subject to certain exceptions
• Opt-out: Unsubscribe from marketing communications at any time using the unsubscribe link in our emails

To exercise any of these rights, contact us at hello@onverahealth.com. We will respond within the timeframe required by applicable law.

9. Children's privacy

Our website and services are not directed to children under the age of 13, and we do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us so we can take appropriate action.

10. International users

Onvera operates in the United States. If you access our website from outside the United States, your information may be transferred to, stored in, and processed in the United States. By using our website, you consent to this transfer.

11. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when it was most recently revised. Material changes will be communicated through our website or, where appropriate, by email. Your continued use of the website after changes are posted constitutes your acceptance of the revised policy.

12. Contact us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: