Privacy Policy

1 Who We Are

DataAutomata is a clinical data extraction and automation platform operated by NuvoAI Private Limited ("NuvoAI", "we", "us", or "our"). We provide healthcare institutions and medical professionals with AI-assisted tools to extract, verify, and manage structured clinical data from medical reports.

If you have any questions about this Privacy Policy, please contact us at helpdesk.nuvoai@gmail.com or call 1800-202-7201.

2 Information We Collect

We collect the following categories of information in connection with your use of DataAutomata:

• Account Information: Name, email address, institution, and role provided during registration.
• Clinical Report Data: PDF reports and structured data fields extracted from them, which may include patient demographics, imaging measurements, and clinical observations.
• Usage Data: Log data, session information, feature usage patterns, and browser/device metadata collected automatically during your use of the platform.
• Communications: Messages or requests you send to our support team.

3 Patient Health Information

DataAutomata processes clinical reports that may contain Protected Health Information (PHI) as defined under HIPAA. We act as a Business Associate to covered healthcare entities that use our platform. All PHI is handled in accordance with our Business Associate Agreements (BAAs) and applicable law.

• PHI is processed solely to provide the contracted services.
• PHI is not sold, shared with third parties for advertising, or used for any purpose outside the scope of the BAA.
• Access to PHI is restricted to authorized personnel on a need-to-know basis.
• All PHI at rest and in transit is encrypted using industry-standard protocols.

4 How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the DataAutomata platform and its AI extraction capabilities.
• Authenticate users and manage access controls.
• Monitor platform performance, diagnose errors, and ensure system security.
• Respond to support inquiries and communicate service updates.
• Comply with legal obligations and enforce our Terms of Service.

We do not use clinical report data to train general-purpose AI models without explicit written consent from the data controller.

5 Data Sharing and Disclosure

We do not sell personal information. We may share information with:

• Service Providers: Trusted vendors who process data on our behalf (cloud infrastructure, security monitoring) under confidentiality obligations.
• Your Institution: Administrators at your healthcare institution have access to records created under their organizational account.
• Legal Requirements: Where required by law, court order, or to protect the rights and safety of users or the public.

6 Data Retention

We retain account information for as long as your account is active or as needed to provide services. Clinical data is retained according to the data retention terms specified in your institution's agreement with NuvoAI. Upon termination, data is securely deleted or returned within 30 days unless a longer retention period is required by law.

7 Security

We implement technical and organizational security measures designed to protect your information against unauthorized access, alteration, disclosure, or destruction. These include:

• TLS encryption for all data in transit.
• AES-256 encryption for data at rest.
• Role-based access controls and audit logging.
• Regular security assessments and vulnerability monitoring.

No method of transmission or storage is 100% secure. In the event of a security incident affecting PHI, we will notify affected parties as required by applicable law.

8 Your Rights

Depending on your location and applicable law, you may have the right to access, correct, or request deletion of your personal information. To exercise these rights, contact us at privacy@nuvo.ai. Requests related to patient PHI should be directed to the covered healthcare entity responsible for that data.

9 Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated to registered users via email or an in-app notice at least 30 days before they take effect. Continued use of the platform after that date constitutes acceptance of the updated policy.

10 Contact Us

For privacy-related questions, data requests, or BAA inquiries, please contact:

• Email: helpdesk.nuvoai@gmail.com
• Phone: 1800-202-7201
• Address: 135/139, Muktanand Marg, Bilakhia House, Chala, Vapi, Pardi, Vapi, Valsad, Gujarat (India) – 396191
• Company: NuvoAI Private Limited (in association with Meril Life Sciences Pvt. Ltd.)