Privacy Policy

This Privacy Policy explains how PraesidioCare Private Limited ("ByOnco", "we", "our", or "us") collects, uses, stores, and protects personal and medical information ("Personal Information") when you interact with our services. This applies to our websites, ByOnco mobile and web apps, and any related services, including our cancer care navigation platform ("Services"). By using our Services, you consent to the terms outlined in this Privacy Policy. A separate Consumer Health Data Privacy Policy covers Washington, Nevada, and Connecticut consumer health data rules.

1. Information We Collect

A. Information You Provide

• Account Details: Full name, phone number, email, city, and basic profile data.
• Patient Data: Cancer stage, treatment details, hospital preferences, financial needs, and other health-related inputs.
• Communications: When you contact us via WhatsApp, chat, email, or form submissions.
• Payment Details: Where applicable, details like cardholder name, masked card information, billing address.

B. Information We Collect Automatically

• Usage Data: IP address, device type, browser, OS, screen resolution, time spent on app or pages.
• Cookies and Local Storage: To personalize experience, retain session data, and offer relevant content.
• Device & Diagnostic Logs: For security, troubleshooting, and improving app experience.
• Security Fingerprinting: Browser characteristics, device identifiers, and request patterns for abuse detection and security monitoring.

2. How We Use Your Information

• Hospital Matching & Care Navigation: To help recommend best-fit cancer hospitals based on your profile.
• Communications: To send confirmations, alerts, WhatsApp messages, and respond to queries.
• WhatsApp Integration: When you contact us via WhatsApp, we process your messages, phone number, and related data to provide customer support, send appointment reminders, and facilitate care coordination. WhatsApp data is subject to WhatsApp's privacy policy, and we store only necessary information for service delivery.
• Service Optimization: Analyze aggregated data to improve user experience, routes, and performance.
• Personalization: Tailor hospital and treatment suggestions based on user patterns.
• Security & Abuse Prevention: Monitor for unauthorized access, scraping attempts, and security threats to protect our platform and users.
• Compliance: Ensure adherence to Indian laws like IT Act, DISHA guidelines, and data protection frameworks.

3. Data Sharing & Disclosure

We do not sell your personal data. We only share:

• With Healthcare Partners: Hospitals and labs you engage with (only post-consent).
• With Trusted Vendors: Including cloud storage providers, payment gateways, and analytics services.
• For Legal Reasons: If required by Indian law enforcement or judiciary.
• Business Transfers: If ByOnco undergoes merger or acquisition.

4. Data Security Measures & Storage

• Encryption: HTTPS/TLS for data in transit. AES encryption for data at rest.
• Data Storage: Your data is stored on secure cloud servers with geographic redundancy. Primary storage is in India, with backup systems as needed for service continuity.
• Access Control: Only essential staff and systems have access based on role. All access is logged and monitored.
• Audit Logs: All critical actions and logins are tracked securely.
• Security Monitoring: We employ automated systems to detect and prevent unauthorized access, scraping, and abuse.
• Breach Notification: In the event of a data breach, we'll notify affected parties as required under Indian law within 72 hours of discovery.

5. Data Retention

We retain user information for as long as necessary to:
• Provide services
• Comply with medical or regulatory obligations (e.g., Ayushman Bharat scheme records)
• Improve platform accuracy
After that, data is either anonymized or deleted securely.

6. Your Rights

• Access to your stored information
• Rectification of inaccurate details
• Deletion, subject to legal limitations
• Data Portability (where feasible)
• Opt-out of marketing or communications via care@getbyonco.com

7. User Consent & Compliance

By using ByOnco, you explicitly consent to:

• Processing of your health-related data for service delivery
• Storage of your data on secure servers as described in this policy
• Communication via WhatsApp, email, and other channels for service-related purposes
• Sharing necessary information with healthcare partners you engage with
• Security monitoring and abuse prevention measures

You confirm that:
• You are either the patient or an authorized caregiver with legal authority to consent
• The information you provide is accurate and complete
• You agree to abide by the Terms and Conditions and Privacy Policy

We comply with India's evolving data laws, including those under the Digital Personal Data Protection Act, 2023 and healthcare-specific norms. For users in the United States, we also consider applicable US privacy frameworks, though our primary jurisdiction is India.

8. Prohibited Activities & Content Protection

ByOnco's content, data, and platform are protected by intellectual property laws and security measures. You agree not to:

• Scrape or Extract Data: Use automated tools, bots, or scripts to extract, copy, or download content, hospital data, pricing information, or user data from our platform.
• Redistribute Content: Republish, resell, or redistribute any content, data, or information obtained from ByOnco without written permission.
• Reverse Engineer: Attempt to reverse engineer, decompile, or extract source code, algorithms, or proprietary logic.
• Circumvent Security: Bypass security measures, rate limits, or access controls.

Violations may result in immediate termination of access and legal action. We monitor for such activities and reserve the right to take appropriate measures to protect our platform and users.

9. Changes to this Privacy Policy

We may revise this policy periodically. Any changes will be posted on this page with a new effective date. Continued use of ByOnco after updates constitutes your consent to the changes.

10. Contact Us