1. Information We Collect

• Personal Information: Name, email, phone number, date of birth, medical history, cancer diagnosis, treatment records.
• Medical Data: Lab results, chemotherapy cycles, side effects, vital signs, medication adherence, imaging reports.
• Technical Data: IP address, device type, browser type, session duration, pages visited, interaction patterns.
• Communication Data: Messages, consultation notes, video call records (encrypted), feedback provided.

2. How We Use Your Information

• Deliver personalized treatment tracking and clinical recommendations.
• Enable real-time tele-oncology consultations and remote supervision.
• Generate AI-powered risk assessments and adherence alerts.
• Improve platform features, security, and clinical outcomes.
• Comply with regulatory and legal obligations.
• Send appointment reminders and clinical notifications (with your consent).

3. Data Sharing and Disclosure

We share your information only with:

• Your Healthcare Team: Your primary oncologist and authorized care center staff to facilitate treatment.
• Authorized Partners: Labs, imaging centers, and pharmacies (only relevant data for their service).
• Legal Requirements: When required by law, court order, or regulatory authority.
• Service Providers: Cloud hosting providers, payment processors (under strict data processing agreements).

We never sell or rent your personal data to third parties.

4. Data Security

• End-to-end encryption for all medical data in transit and at rest.
• HIPAA and GDPR compliant security protocols.
• Regular security audits and penetration testing.
• Role-based access controls limiting data visibility.
• Secure video conferencing with encrypted transmission.

5. Your Rights

You have the right to:

• Access, correct, or delete your personal data (subject to legal retention requirements).
• Opt-out of non-essential communications.
• Request a copy of your data in a portable format.
• Lodge a complaint with regulatory authorities.

6. Data Retention

We retain your data for as long as necessary to provide services and comply with legal obligations. Medical records are retained per Indian healthcare regulations (typically 5-7 years post-discharge).

7. Contact Us

For privacy concerns, email: privacy@a4uhealthcare.online

1. Eligibility and Account

• You must be at least 18 years old (or have parental consent if a minor).
• You are responsible for maintaining confidentiality of your login credentials.
• You agree not to share your account with unauthorized individuals.
• A4U Healthcare reserves the right to suspend accounts violating these terms.

2. Medical Disclaimer

IMPORTANT: A4U Healthcare is a clinical support tool, NOT a substitute for professional medical advice.

• All recommendations must be reviewed and approved by your treating oncologist.
• In case of emergency, contact emergency services or your nearest hospital.
• AI-generated risk scores are tools for clinical decision-making, not diagnoses.
• Treatment decisions rest solely with your healthcare team.

3. Acceptable Use

You agree NOT to:

• Use the platform for unlawful purposes or to violate any law.
• Access another user's account without authorization.
• Transmit malware, viruses, or harmful code.
• Harass, threaten, or defame other users.
• Misrepresent your identity or qualifications (if a healthcare provider).
• Attempt to reverse-engineer or hack the platform.

4. Intellectual Property

All content, software, and designs within the A4U Healthcare platform are owned by or licensed to A4U Healthcare and are protected by copyright and intellectual property laws. You may not reproduce, distribute, or modify any content without explicit permission.

5. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW:

• A4U Healthcare is provided "as-is" without warranties of accuracy or completeness.
• We are not liable for direct or indirect damages from platform use or unavailability.
• We are not responsible for medical outcomes or treatment decisions.
• Our total liability shall not exceed the fees paid in the preceding 12 months.

6. Service Availability

While we strive for 99.5% uptime, A4U Healthcare does not guarantee uninterrupted service. We reserve the right to suspend or modify services for maintenance, security, or regulatory reasons.

7. Indemnification

You agree to indemnify and hold harmless A4U Healthcare from any claims, damages, or costs arising from your violation of these terms or misuse of the platform.

8. Termination

A4U Healthcare may terminate or suspend your account at any time for violating these terms or for any reason, with or without notice.

9. Changes to Terms

We may update these terms at any time. Continued use of the platform constitutes acceptance of updated terms.

10. Contact for Legal Matters

Email: legal@a4uhealthcare.online

1. Encryption Standards

2. Access Control

• Role-Based Access (RBAC): Patients see only their data; oncologists see authorized patients; staff access is limited to necessary functions.
• Multi-Factor Authentication (MFA): All users can enable MFA for enhanced account security.
• Session Management: Automatic logout after 30 minutes of inactivity.
• Audit Logging: All data access is logged and regularly audited for suspicious activity.

3. Compliance Standards

4. Infrastructure Security

• Cloud Hosting: Servers hosted with ISO 27001 certified providers in secure data centers.
• DDoS Protection: Enterprise-grade DDoS mitigation to prevent unauthorized traffic attacks.
• Firewalls & Intrusion Detection: Multi-layered firewall systems with 24/7 intrusion monitoring.
• Backup & Disaster Recovery: Automated daily backups with geographically distributed redundancy.
• Network Segmentation: Critical systems isolated on separate networks with strict access controls.

5. Security Testing & Audits

• Penetration Testing: Quarterly third-party penetration tests to identify vulnerabilities.
• Security Audits: Annual independent security audits by certified auditors.
• Vulnerability Scanning: Continuous automated scanning and regular patch management.
• Bug Bounty Program: External security researchers can report vulnerabilities through our responsible disclosure program.

6. Employee Security

• All employees undergo background checks and sign confidentiality agreements.
• Mandatory annual security training and HIPAA compliance courses.
• Limited access to production systems; all changes logged and reviewed.
• No employee can access patient data without explicit authorization.

7. Incident Response

In the event of a security incident:

• Dedicated incident response team is activated within minutes.
• Affected users are notified within 24 hours.
• We conduct a thorough investigation and issue a detailed incident report.
• Preventive measures are implemented to avoid recurrence.

8. Third-Party Security

All third-party vendors and service providers must:

• Meet or exceed our security standards through Data Processing Agreements.
• Undergo annual security audits and certifications.
• Maintain liability insurance for data breaches.
• Comply with all applicable healthcare privacy laws.

9. Report a Security Concern