OralOnly LLC DBA Panel Route Diagnostics — Privacy Policy

Effective Date: September 13, 2026 Last Updated: September 13, 2026

This Privacy Policy describes how OralOnly LLC DBA Panel Route Diagnostics ("Panel Route Diagnostics," "OralOnly," "we," "us," or "our") collects, uses, and shares information in connection with the Panel Route Diagnostics website and platform (the "Platform"). It applies to visitors of our websites, prospective customers who contact us, and the healthcare providers, practices, and businesses that use the Platform ("Providers").

Patient information. When a Provider uses the Platform to order laboratory testing for a patient, patient information is Protected Health Information governed by HIPAA and by the Business Associate Agreement between OralOnly and that Provider, not by this Privacy Policy. Patients should direct privacy questions to their Provider.

1. Information We Collect

Information you give us.

  • Contact form: your name, email address, business name, business type, phone number (optional), and your message.
  • Account registration: organization name, contact email, NPI (optional), licensed states, specialty, expected volume, and your acceptance of our Terms and BAA.
  • Account use: team member names and email addresses, the lab panels you build, and orders you place. Payment card details are entered directly with our payment processor and are never stored by us.
  • SMS opt-in: if you check the SMS consent box on our contact form, we record your phone number, your consent, and the time you gave it.

Information collected automatically.

  • Usage and device data: pages viewed, actions taken on the Platform, browser and device type, IP address, and referring URLs, collected through cookies and similar technologies.
  • Attribution data: the campaign or referral that brought you to us (such as UTM parameters and advertising click identifiers), which we keep with your account so we can understand which channels work.

2. How We Use Information

We use information to:

  • provide, operate, secure, and support the Platform;
  • respond to inquiries and follow up on requests for information;
  • send transactional messages about your account and orders (for example, order confirmations, results availability, and panel approvals);
  • with your consent, send marketing and informational messages by email or SMS;
  • understand how the Platform is used and improve it;
  • measure and improve our advertising;
  • comply with legal obligations and enforce our agreements.

3. SMS / Text Messaging

If you opt in to receive text messages from us:

  • Consent is separate and optional. Checking the SMS box on our contact form is not a condition of purchasing anything or of using the Platform.
  • What we send: replies to your inquiry, information about Panel Route Diagnostics, and account or service updates.
  • Message frequency varies. We expect to send no more than a few messages per month, and you may receive more during an active conversation you initiated.
  • Message and data rates may apply.
  • Opt out at any time by replying STOP to any message. Reply HELP for help, or contact us at support@panelroute.com.
  • We do not share your SMS opt-in or consent information, or your mobile phone number collected for SMS, with third parties or affiliates for their marketing purposes. This information is used only to send you the messages you agreed to receive and is shared only with the service providers that deliver those messages on our behalf.

Our SMS program terms are in our Terms of Service and SMS Terms.

4. How We Share Information

We do not sell personal information. We share information only:

  • With service providers that process it on our behalf and under contract, including cloud hosting, database and authentication, email and SMS delivery, payment processing, customer relationship management, error monitoring, and product analytics.
  • With laboratory and clinical partners as needed to fulfill orders a Provider places (patient information shared this way is governed by the BAA, not this Policy).
  • With advertising and analytics partners to measure advertising performance, as described in Section 5.
  • For legal reasons, when required by law, subpoena, or legal process, or to protect the rights, property, or safety of OralOnly, our users, or others.
  • In a business transfer, such as a merger, acquisition, or sale of assets, subject to this Policy.

Mobile phone numbers and SMS consent are never shared for third-party marketing (see Section 3).

5. Cookies, Analytics, and Advertising

We use cookies and similar technologies to keep you signed in, remember preferences, recognize returning visitors, and measure usage. We use product analytics tools that record page views and actions on the Platform; session replays, where used, mask all typed text and form contents.

For advertising, we may use tools such as the Meta Pixel and Conversions API and Google Analytics to measure whether our ads lead to inquiries and sign-ups. Where we share information for this purpose, identifiers such as email addresses are hashed before they leave our systems. You can limit ad-related tracking through your browser settings and the settings offered by those platforms. We do not run advertising measurement on patient data.

6. Data Retention

We keep account information for as long as your account is active and as needed to meet legal, accounting, and contractual obligations. Inquiry records, usage data, and attribution data are kept for as long as they are useful for the purposes above. SMS consent records are kept for as long as required to demonstrate consent.

7. Security

We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information we hold, including encryption in transit, encrypted storage of credentials, access controls, and audit logging. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your Choices and Rights

  • Email: unsubscribe using the link in any marketing email. You will still receive transactional messages about your account.
  • SMS: reply STOP to opt out at any time.
  • Account information: Providers can update most account details in the Platform, or contact us to request changes.
  • Access, correction, deletion: depending on where you live, you may have the right to request access to, correction of, or deletion of your personal information, or to object to certain processing. Contact us at support@panelroute.com and we will respond as required by applicable law.

9. Children

The Platform is for businesses and licensed professionals and is not directed to children under 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Policy from time to time. The "Last Updated" date above shows when it last changed. Material changes will be posted on this page, and continued use of the Platform after a change constitutes acceptance.

11. Contact Us

OralOnly LLC DBA Panel Route Diagnostics Email: support@panelroute.com