Privacy Policy

Effective date: September 20, 2026

Ortho Trauma Call (“the application,” “we,” “us,” or “our”) is a private scheduling application used by an orthopedic trauma practice to collect physician scheduling requests, generate and manage call and Trauma OR assignments, and optionally publish finalized schedules to Google Calendar.

Information we collect

We may collect and store the following information when you use the application:

Your name, initials, email address, active/inactive status, administrator status, and scheduling role.
Your Google account identifier when you sign in with Google.
Scheduling requests and preferences that you submit, including unavailable dates, No Call requests, and No Trauma OR requests.
Call and Trauma OR assignments, lock status, scheduling periods, and related administrative settings.
Technical information necessary to maintain authentication sessions and operate the application.

Google user data

The application uses Google OAuth for sign-in and, for an administrator who explicitly connects Google Calendar, for schedule publishing.

For ordinary Google sign-in, the application requests basic identity information:

OpenID identifier
Email address
Basic profile information

For Google Calendar publishing, the application requests:

https://www.googleapis.com/auth/calendar.calendarlist.readonly so the administrator can view available writable calendars and choose where schedules are published.
https://www.googleapis.com/auth/calendar.events so the application can create, update, and remove Ortho Call and Trauma OR schedule events on the calendar selected by the administrator.

The Calendar events permission technically permits access to calendar event data, but the application uses that access only to provide the schedule-publishing feature. It does not use Google Calendar data for advertising, profiling, or unrelated purposes.

How Google user data is stored

When an administrator connects Google Calendar, the application stores the selected calendar identifier, calendar name, identifiers for schedule events created by the application, and an encrypted Google OAuth refresh token so that the application can update or republish the schedule without requiring a new consent flow each time.

Google access tokens are used to communicate with Google APIs and are not displayed to other users. Calendar publishing access can be disconnected from the application, and Google permissions can also be revoked through the user’s Google Account security settings.

How we use information

Information is used only to:

Authenticate approved users.
Display and manage each physician’s own scheduling requests.
Allow administrators to manage the physician roster and scheduling periods.
Generate, edit, finalize, and publish call and Trauma OR schedules.
Maintain application security, reliability, and troubleshooting.

Sharing of information

We do not sell personal information or Google user data. We do not use Google user data for advertising. Information may be processed by service providers that are necessary to operate the application, including cloud hosting, database hosting, and Google APIs, subject to their applicable terms and security practices.

Google API Limited Use

The application’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide or improve user-facing features that are prominent in the application.

Patient information

Ortho Trauma Call is a physician scheduling tool and is not intended to store patient records, protected health information (PHI), medical record numbers, diagnoses, or other patient-identifying information. Users should not enter patient information into scheduling requests, notes, or other application fields.

Data retention and deletion

Scheduling and account data may be retained while needed to operate the service, preserve schedule history, or meet legitimate administrative needs. An administrator can deactivate physician accounts and disconnect Google Calendar access. Users may request correction or deletion of their account data through the application administrator, subject to any legitimate record-retention requirements.

Security

We use reasonable technical safeguards designed to protect application data, including authenticated access, encrypted HTTPS connections, restricted database access, and encryption of stored Google Calendar refresh tokens. No internet service can guarantee absolute security.

Children

This application is intended for authorized professional users and is not directed to children.

Changes to this policy

We may update this Privacy Policy as the application or its data practices change. The current version will be posted at this URL with an updated effective date.

Contact

Questions about this Privacy Policy, account information, or Google data access should be directed to the Ortho Trauma Call application administrator.