Privacy Policy

1. Introduction

TheranosTest ("we," "us," "our") respects your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

2. Information We Collect

2.1 Information You Voluntarily Provide

2.2 Information Automatically Collected

2.3 Information We Do NOT Collect

We do NOT collect:

• Names, addresses, or phone numbers (unless you voluntarily include them in submissions)
• Credit card or payment information (the platform is free)
• Social Security Numbers, government IDs, or financial account numbers
• Precise geolocation data
• Social media profiles or contact lists

3. How We Use Your Information

3.1 Email Addresses

• Notifications Only: To send you updates about your specific submissions (verification status, new company responses, score changes)
• Communication: To respond if you contact us with questions or disputes
• Never Sold: We NEVER sell, rent, or share your email with third parties for marketing purposes
• No Spam: We do not send promotional emails, newsletters, or advertisements

3.2 Submitted Content

• Public Display: To publish evidence, reviews, and company information on TheranosTest for others to view
• AI Analysis: To generate company risk scores using automated algorithms
• Platform Improvement: To improve our verification processes and scoring accuracy (anonymized and aggregated)

3.3 Technical Data

• Security: To detect and prevent fraud, spam, abuse, hacking attempts, and other malicious activity
• Performance: To monitor platform performance, fix bugs, and optimize user experience
• Legal Compliance: To comply with legal obligations or respond to lawful requests from authorities

4. Automatic Data Redaction & Protection

4.1 Personal Health Information (PHI)

For submissions marked as healthcare-related or containing medical evidence, we attempt to automatically redact:

• Social Security Numbers (SSN)
• Medical Record Numbers (MRN)
• Patient names and addresses
• Phone numbers and email addresses appearing in uploaded documents

4.2 File Security

• Uploaded files are stored on secure, encrypted cloud storage (Uploadcare or similar services)
• Files are accessed only by authorized personnel for verification purposes
• We implement industry-standard security measures, but no system is 100% secure

5. Data Sharing & Third Parties

5.1 We Do NOT Sell Your Data

We do not sell, rent, or trade your personal information to third parties for any purpose.

5.2 Service Providers

We may share limited data with trusted third-party service providers who help operate the platform:

• Cloud Storage: Uploadcare (for file hosting)
• Email Services: [e.g., Resend, SendGrid] (for sending notification emails)
• AI Analysis: OpenAI or similar (for generating risk scores; data is anonymized)
• Hosting: [e.g., Vercel, AWS] (for website infrastructure)

These providers are contractually required to protect your data and use it only for the services they provide to us.

5.3 Legal Disclosures

We may disclose your information if required by law or in response to:

• Valid legal process (subpoena, court order, warrant)
• Requests from law enforcement or government agencies
• Protection of our rights, safety, or property
• Prevention of fraud or illegal activity

We will notify you of such requests unless legally prohibited.

5.4 Business Transfers

If TheranosTest is acquired, merged, or sold, your information may be transferred to the new entity. You will be notified of any such change via email or prominent notice on the website.

6. Anonymity & User Privacy

6.1 Anonymous Submissions

• If you choose "anonymous" when submitting evidence, we do NOT publicly display your email, name, or identifying information
• Anonymous Forever: Anonymous submissions remain anonymous permanently
• Internal Records: We may retain your email internally for anti-spam purposes (to prevent abuse), but it is NEVER publicly displayed

6.2 Public Content

• Any content you submit (evidence descriptions, testimony, company reviews) may be publicly visible on company profile pages
• Be Careful: Do not include personal information you wish to keep private in your submissions
• Attribution: Non-anonymous submissions may display a username or role (e.g., "Former Employee," "Patient") if you provide one

7. Your Privacy Rights

7.1 Access Your Data

You have the right to request a copy of the personal information we hold about you. Email hello@theranostest.com with your request.

7.2 Correct Your Data

If we have inaccurate information about you, you may request corrections by emailing hello@theranostest.com.

7.3 Delete Your Data

You may request deletion of:

• Your email address
• Your submitted content (evidence, reviews, company responses)
• Your uploaded files

How to Request Deletion: Email hello@theranostest.com with:

• The email you used (if any)
• Description of the content you want deleted (e.g., specific submission URL)
• Verification of your identity (if claiming ownership of non-anonymous content)

Processing Time: We will process deletion requests within 30 days.

Exceptions: We may retain data if required by law, necessary for legal disputes, or if deletion would harm the integrity of the platform (e.g., verified evidence in active investigations). In such cases, we will explain why data cannot be deleted.

7.4 Opt Out of Emails

To stop receiving notification emails, click "Unsubscribe" in any email we send, or email hello@theranostest.com with your request.

7.5 Export Your Data

You may request a copy of all data you've submitted in a portable format (e.g., JSON, CSV). Email hello@theranostest.com.

8. International Users & Data Transfers

8.1 Data Storage Location

TheranosTest is operated from the United States. Your data may be stored and processed in the United States or other countries where our service providers operate.

8.2 EU/UK Users (GDPR Compliance)

If you are located in the European Union or United Kingdom:

• Legal Basis: We process your data based on your consent (for email notifications) or legitimate interests (for platform operation and security)
• Your Rights: You have additional rights under GDPR, including the right to object to processing, restrict processing, and lodge a complaint with your data protection authority
• Data Transfers: Data transferred outside the EU/UK is protected by standard contractual clauses or other lawful mechanisms

Contact for GDPR Requests: hello@theranostest.com

8.3 California Residents (CCPA Compliance)

If you are a California resident:

• Right to Know: You can request what personal information we collect, use, and share
• Right to Delete: You can request deletion of your personal information (with exceptions)
• Right to Opt-Out: We do not sell personal information, so there is nothing to opt out of
• No Discrimination: We will not discriminate against you for exercising your privacy rights

Contact for CCPA Requests: hello@theranostest.com

8.4 Other Jurisdictions

We strive to comply with privacy laws in all jurisdictions where we operate. If you have questions about how your local laws apply, contact us.

9. Children's Privacy

TheranosTest is not intended for users under 18 years old. We do not knowingly collect personal information from children.

If we become aware that we have collected data from a user under 18, we will delete it immediately. If you believe a child has submitted information, contact hello@theranostest.com.

10. Data Retention

10.1 How Long We Keep Data

10.2 Deletion Exceptions

We may retain data longer if:

• Required by law (e.g., court order, regulatory requirement)
• Necessary for ongoing legal disputes or investigations
• Essential for platform integrity (e.g., verified evidence in high-profile cases)

In such cases, we will inform you of the reason for retention.

11. Security Measures

We implement reasonable security measures to protect your data, including:

• Encryption: Data transmitted to and from TheranosTest is encrypted using HTTPS/TLS
• Access Controls: Only authorized personnel can access personal information
• Secure Storage: Files and data are stored on encrypted, secure cloud servers
• Regular Audits: We periodically review our security practices

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a new "Last Updated" date.

Material Changes: If we make significant changes (e.g., new data collection practices, sharing with new third parties), we will notify you via email (if you provided one) or prominent notice on the website.

Your Continued Use: Continued use of TheranosTest after changes constitutes acceptance of the updated Privacy Policy.

13. Third-Party Links

TheranosTest may contain links to external websites (e.g., company websites, news articles). We are not responsible for the privacy practices of third-party sites. We encourage you to review their privacy policies.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your data:

Email: hello@theranostest.com

Response Time: We will respond to privacy requests within 30 days.

15. Summary (Plain Language)