Last Updated: July 16, 2026

Pathfinder Oncology (“Pathfinder Oncology,” “we,” “us,” or “our”) respects the privacy and confidentiality of the information we process.

This Privacy Policy explains how information may be collected, received, accessed, used, stored, disclosed, retained, and protected through our websites, dashboards, applications, integrations, data-processing systems, and related services, collectively referred to as the “Services.”

The Services may receive health and related information through authorized integrations, including the Guava API.

  1. Scope of This Privacy Policy

The Services are primarily used for authorized Pathfinder Oncology purposes, including:

  • Internal data processing;
  • Operational analysis;
  • Reporting and analytics;
  • Dashboard development and visualization;
  • Project and client support;
  • Administrative workflows;
  • Quality-improvement activities;
  • Research-support activities; and
  • Other approved organizational purposes.

This Privacy Policy applies to information processed through the Services.

Separate agreements, privacy notices, patient authorizations, client requirements, research protocols, data-use agreements, or organizational policies may apply to particular information.

Where a separate legal or contractual requirement applies, that requirement may supplement or control over this Privacy Policy.

  1. Information Received Through Guava

Pathfinder Oncology may receive health and related information through the Guava API when an authorized individual or organization connects a Guava account or otherwise authorizes the transfer of information to Pathfinder Oncology.

Depending on the permissions provided, this information may include:

  • Medical records;
  • Laboratory results;
  • Medications;
  • Allergies;
  • Medical conditions;
  • Procedures;
  • Clinical notes or documents;
  • Health measurements;
  • Immunization information;
  • Demographic information;
  • Healthcare-provider information;
  • Dates and timestamps;
  • Account or patient identifiers; and
  • Other health-related information available through the authorized Guava connection.

Pathfinder Oncology intends to access only the information made available through the permissions, authorizations, and agreements associated with the applicable integration.

  1. Other Information We May Collect

Account and contact information

We may process information such as:

  • Names;
  • Business email addresses;
  • Telephone numbers;
  • Organizational affiliations;
  • Job titles or roles;
  • Account identifiers;
  • User permissions; and
  • Authentication information.

Information provided directly to us

We may process information submitted through:

  • Forms;
  • Emails;
  • Support requests;
  • Uploaded files;
  • Project communications;
  • Client communications; or
  • Other interactions with the Services.

Usage and technical information

We may collect technical and usage information, including:

  • Login activity;
  • Access dates and times;
  • IP addresses;
  • Browser and device information;
  • System logs;
  • Audit logs;
  • Dashboard activity;
  • Error reports;
  • Performance data; and
  • Security-event information.
  1. How We Use Information

Pathfinder Oncology may use information to:

  • Operate, maintain, and improve the Services;
  • Retrieve information through authorized integrations;
  • Process and organize authorized data;
  • Create dashboards, reports, summaries, analytics, and visualizations;
  • Support approved operational and administrative workflows;
  • Support authorized client, project, research, or quality-improvement activities;
  • Verify identity and manage access permissions;
  • Provide technical support;
  • Detect, investigate, and prevent unauthorized access or misuse;
  • Monitor system performance and troubleshoot errors;
  • Maintain security and audit records;
  • Comply with applicable agreements, laws, regulations, and legal processes;
  • Protect Pathfinder Oncology, its users, clients, partners, and systems; and
  • Carry out other purposes authorized by the applicable individual or organization.

Information received through Guava is intended to be used only for authorized Pathfinder Oncology activities, including internal processing, analysis, reporting, project support, and dashboard visualization.

Pathfinder Oncology does not use information received through Guava for targeted advertising.

  1. Authorization and Access

Pathfinder Oncology will access information through Guava only when the applicable connection or transfer has been authorized.

Authorization may be provided by:

  • An individual Guava account holder;
  • A patient or authorized representative;
  • A Pathfinder Oncology client;
  • A healthcare organization;
  • An approved user;
  • An applicable contract or agreement; or
  • Another person or organization legally permitted to authorize the access.

The amount and type of information available to Pathfinder Oncology will depend on the permissions granted through Guava and any applicable agreement or authorization.

Users may be able to disconnect or modify a Guava connection through Guava or through the applicable account-management process.

  1. Sensitive and Health-Related Information

Some information processed through the Services may be considered sensitive, confidential, personal, medical, or health-related information.

Pathfinder Oncology processes such information only for authorized purposes and subject to applicable:

  • Access controls;
  • Privacy and security procedures;
  • Confidentiality obligations;
  • Client agreements;
  • Data-use agreements;
  • Patient or user authorizations;
  • Business associate agreements, where applicable; and
  • Legal or regulatory requirements.

In some circumstances, Pathfinder Oncology may process information on behalf of another organization. In those circumstances, that organization may be responsible for determining how the information is collected and used.

This Privacy Policy does not replace a healthcare provider’s Notice of Privacy Practices.

  1. How Information May Be Shared

Pathfinder Oncology may disclose information only as reasonably necessary for authorized purposes.

Authorized Pathfinder Oncology personnel

Information may be accessed by authorized employees, contractors, consultants, or other personnel who require access to perform approved responsibilities.

Access may be limited based on role, project, client, system, or business need.

Clients and authorized organizations

Information, dashboards, reports, or analyses may be shared with the client, healthcare organization, partner, or other entity that authorized the work or is otherwise permitted to receive the information.

Service providers

Pathfinder Oncology may use third-party service providers to host, process, secure, analyze, maintain, or support the Services.

These providers may include:

  • Cloud-hosting providers;
  • Database providers;
  • Software vendors;
  • Analytics providers;
  • Security providers;
  • Technical-support providers; and
  • Other operational vendors.

Service providers are expected to process information only for the services they provide to Pathfinder Oncology and subject to applicable agreements and confidentiality requirements.

Guava and connected platforms

Information may be exchanged with Guava or another connected platform when necessary to establish, maintain, troubleshoot, or operate an authorized integration.

Legal and safety purposes

Pathfinder Oncology may disclose information when reasonably necessary to:

  • Comply with applicable law, regulation, subpoena, court order, or legal process;
  • Respond to an authorized governmental request;
  • Enforce agreements or policies;
  • Investigate fraud, misuse, or security incidents;
  • Protect the rights, safety, property, or security of Pathfinder Oncology or others; or
  • Establish, exercise, or defend legal claims.

Business transactions

Information may be transferred as part of a merger, acquisition, financing, restructuring, sale of assets, or similar organizational transaction, subject to applicable legal and confidentiality protections.

  1. No Sale or Advertising Use

Pathfinder Oncology does not sell information received through Guava for monetary consideration.

Pathfinder Oncology does not use information received through Guava for:

  • Targeted advertising;
  • Consumer advertising profiles;
  • Unrelated marketing;
  • Sale to data brokers; or
  • Unrelated commercial purposes.

Information will not be used for a materially different purpose without any additional authorization, consent, or agreement required by applicable law.

  1. Data Minimization

Pathfinder Oncology seeks to limit the information it accesses, collects, and processes to what is reasonably necessary for the authorized purpose.

Where practical, we may use limited, aggregated, de-identified, or anonymized information instead of directly identifiable information.

The information available through Guava will depend on the permissions and settings associated with the authorized connection.

  1. Data Retention

Pathfinder Oncology retains information only for as long as reasonably necessary to:

  • Fulfill the purpose for which it was received;
  • Maintain authorized dashboards, reports, and operational records;
  • Complete client or project work;
  • Meet legal, regulatory, contractual, or audit requirements;
  • Resolve disputes;
  • Investigate security incidents;
  • Enforce agreements; and
  • Protect the integrity of the Services.

Retention periods may vary based on the type of information, the purpose of processing, client requirements, applicable agreements, and legal obligations.

When information is no longer required, Pathfinder Oncology may delete, de-identify, anonymize, aggregate, or securely archive it, subject to applicable legal, contractual, and technical requirements.

Disconnecting a Guava account may prevent Pathfinder Oncology from receiving new information but may not automatically delete information previously received and retained for an authorized purpose.

  1. Data Security

Pathfinder Oncology uses reasonable administrative, technical, and organizational safeguards designed to protect information from unauthorized access, use, loss, misuse, alteration, or disclosure.

Depending on the Services and information involved, these safeguards may include:

  • Access restrictions;
  • Role-based permissions;
  • Authentication controls;
  • Logging and monitoring;
  • Encryption;
  • Secure hosting;
  • Vendor-management procedures;
  • Confidentiality requirements;
  • Security reviews; and
  • Incident-response procedures.

No electronic transmission, application, database, or storage system can be guaranteed to be completely secure.

Users are responsible for protecting their credentials and promptly reporting suspected unauthorized access or security incidents.

  1. Data Accuracy

Some information processed through the Services originates from Guava, healthcare providers, users, clients, or other external sources.

Pathfinder Oncology may not control the completeness or accuracy of information received from those sources.

Users should contact the original healthcare provider, record source, Guava, or other responsible organization to correct inaccuracies in source records.

  1. Privacy Choices and Requests

Depending on the applicable law, agreement, and relationship with Pathfinder Oncology, an individual may be able to request:

  • Access to certain information;
  • Correction of inaccurate information;
  • Deletion of certain information;
  • Restriction of certain processing;
  • Information about how information is used or disclosed;
  • Withdrawal of a previously provided authorization; or
  • Disconnection of an integration.

Some requests may need to be submitted directly to:

  • Guava;
  • A healthcare provider;
  • A Pathfinder Oncology client;
  • A health plan;
  • A research organization;
  • An employer; or
  • Another organization that controls the information.

Pathfinder Oncology may be unable to fulfill a request where retention or continued processing is required by law, contract, security requirements, or another authorized business need.

Identity verification may be required before responding to a privacy request.

  1. Cookies and Similar Technologies

Pathfinder Oncology websites or Services may use cookies or similar technologies for:

  • Authentication;
  • Security;
  • User preferences;
  • Session management;
  • System performance;
  • Error detection; and
  • Basic analytics.

Pathfinder Oncology does not use health information received through Guava for targeted advertising.

  1. Children’s Information

The Services are not intended for direct, independent use by children unless access or processing has been appropriately authorized by a parent, guardian, healthcare provider, client, or other legally authorized person or organization.

Information relating to minors may be processed when permitted by applicable law, agreement, and authorization.

  1. Third-Party Services

The Services may integrate with or link to third-party platforms, websites, APIs, applications, or services, including Guava.

Third parties maintain their own privacy practices, terms, and security procedures.

This Privacy Policy does not govern information independently collected or processed by Guava or another third party outside Pathfinder Oncology’s Services.

Users should review the privacy policies and terms of applicable third-party services.

  1. International Processing

Information may be processed or stored in the United States or other locations where Pathfinder Oncology or its service providers operate.

Where required, Pathfinder Oncology will take reasonable steps to process information in accordance with applicable legal and contractual requirements.

  1. Changes to This Privacy Policy

Pathfinder Oncology may update this Privacy Policy periodically to reflect changes in:

  • The Services;
  • Integrations;
  • Business practices;
  • Security procedures;
  • Legal obligations; or
  • Data-processing activities.

The updated Privacy Policy will be posted on this page with a revised “Last Updated” date.

  1. Contact Us

Questions, concerns, or privacy requests may be directed to: info@pathfinderoncology.com