Effective date: November 11, 2026

This Privacy Policy explains how OD Link (“OD Link”, “we”, “us”) collects, uses, shares and protects information through the OD Link patient portal at app.odlink.com and each practice’s portal address under it (for example, yourpractice.app.odlink.com), and through the OD Link website contact form. It includes how we handle information we receive from Google when you sign in with Google.

The OD Link patient portal

The patient portal lets patients of participating eye care practices sign in to book, view, reschedule and cancel appointments and to keep their contact details up to date. Each practice that uses the portal is the provider of your care and keeps your patient and appointment records. OD Link provides the portal to the practice and processes this information on the practice’s behalf.

Information we collect

  • Sign-in information: your e-mail address, and a one-time code we e-mail to you, or the verified e-mail address returned by Google, Microsoft or Apple when you choose to sign in with one of them.
  • Patient and appointment information: the details you enter or confirm in the portal, such as your name, date of birth, contact details and appointment choices. This information is stored in your practice’s records.
  • Session information: a secure cookie that keeps you signed in. We do not use advertising or analytics cookies in the portal.
  • Website inquiries: the name, e-mail address and message you submit through the website contact form.

Google user data we access

When you choose “Continue with Google”, OD Link requests only Google’s basic sign-in permissions (OpenID Connect sign-in and your e-mail address). Google handles authentication and does not give OD Link your Google password. From Google’s response, OD Link reads only your e-mail address and whether Google has verified it. If Google includes your name or profile photo in its response, OD Link does not read or store them. OD Link does not request access to your Gmail messages, contacts, calendar events, Drive files or any other Google data.

How we use Google user data

OD Link uses your verified e-mail address only to sign you in to the patient portal and to find the patient record that matches it at the practice you are signing in to. OD Link does not use Google user data for advertising, marketing, profiling or credit decisions, and does not use it to develop, improve or train generalized artificial intelligence or machine-learning models.

Sharing of Google user data

OD Link does not sell Google user data and does not share or transfer it to third parties. Your e-mail address is checked against, and your appointments are recorded in, the records of the practice you are signing in to, which already holds your patient record. We may disclose information only where required by law.

How we protect your information

All traffic to the portal is encrypted with HTTPS. Your sign-in session is kept in a secure, HTTP-only cookie, and we store only a one-way hash of its token on our servers. One-time sign-in codes are stored only as hashes, expire after a short time and are limited in the number of attempts. OD Link does not keep Google access tokens or refresh tokens after sign-in. Access to our servers is restricted to authorized personnel.

Retention and deletion

The e-mail address stored with a sign-in session is deleted when you sign out, or automatically when the session expires, at most 7 days after sign-in. Expired one-time codes are deleted within one day of expiring. Patient and appointment records are kept by your practice under its own record-keeping obligations; contact the practice directly about them.

To ask us to access or delete information OD Link holds about you, e-mail craig@odlink.com or use our contact page. You can also remove OD Link’s access to your Google Account at any time at myaccount.google.com/permissions.

Google API Services User Data Policy

OD Link’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Website inquiries

When you contact us through the website contact form, we use your name, e-mail address and message only to respond to your inquiry. We do not sell this information or use it for marketing.

Changes to this policy

We may update this policy from time to time. When we do, we will change the effective date at the top of this page.

Contact us

OD Link LLC
849 E. 400 So
Salt Lake City, UT 84102
E-mail: craig@odlink.com
Phone: 888-635-4657