BackNeuro Ortho NYC

Clinic Calendar Companion

Privacy Statement

Effective date: October 5, 2026

This Privacy Statement explains what information the Clinic Calendar Companion (the “Service”), operated by The Spine & Brain Coalition, collects, how it is used, and the choices you have.

1. Information we collect

  • Account information: your name, work email address, role, and a securely hashed password.
  • Scheduling information: events you or administrators create, such as clinic sessions, call, surgery, conferences, virtual meetings, availability, away time, inbox entries, and personal events.
  • Connected calendar data: if you connect a Microsoft account, event titles, times, and locations from your Outlook calendar, along with the access tokens needed to sync them.
  • Technical information: basic session and log data needed to keep you signed in and operate the Service securely.

2. How we use information

We use this information to authenticate you, display and manage schedules, enforce role-based access, sync connected calendars, send service emails (such as account invitations), and maintain the security and reliability of the Service. We do not sell your information or use it for advertising.

3. Who can see your information

Shared work calendar entries are visible to users whose role permits that category. Personal events are private by default: they appear only on your own personal calendar and are not shown to other users, including administrators. If you choose to share a personal event, it becomes visible on the work calendar. Synced Outlook events are visible only to you.

Administrators can see account details (name, email, role) to manage users.

4. Patient information

The Service is a scheduling tool, not a medical record. Please do not enter protected health information (PHI) beyond what Coalition policy permits for scheduling, and never place patient details in personal events or free-text notes.

5. Service providers

The Service is hosted by a cloud platform provider and uses an email delivery service for notifications. If you connect a Microsoft account, data is exchanged with Microsoft under the permissions you approve. These providers process data only to operate the Service.

6. Retention

Scheduling data is kept for as long as it is needed for Coalition operations. When an account is removed, the user’s sign-in credentials and connected-calendar tokens are deleted; shared schedule records may be retained for operational continuity.

7. Security

We use encrypted connections, hashed passwords, and role-based access controls to protect information. No system is perfectly secure, so please use a strong password and report suspected misuse to an administrator promptly.

8. Your choices

You can change your password and connect or disconnect a Microsoft account from Settings, switch any personal event between private and shared, and delete your own personal events at any time. To correct account details or request removal, contact your administrator.

9. Changes to this statement

We may update this Privacy Statement from time to time. The effective date above reflects the latest version.

10. Contact

Privacy questions should be directed to your Coalition administrator or practice management team.