Privacy Policy

NADI AI (“NADI AI,” “we,” “us,” or “our”) provides an AI-powered clinic operating system designed to help healthcare providers automate documentation, patient engagement, and clinical workflows.

This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website, use our platform, request a demo, or otherwise interact with our services. We are committed to protecting the privacy of clinics, providers, staff, and patients whose data may be processed through our systems.

By accessing or using NADI AI, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use our services.

We may collect the following categories of information:

Information you provide

• Contact details such as name, email address, phone number, and clinic name
• Account and profile information for authorized users
• Demo requests, support inquiries, and communications with our team
• Clinical and operational data entered into the platform by authorized users

Information collected automatically

• Device, browser, and usage data such as IP address, pages visited, and interaction logs
• Authentication and security logs
• Cookies and similar technologies as described below

Healthcare-related information

Where our services are used by clinics, we may process protected health information (PHI) and other clinical data solely on behalf of our customers and in accordance with applicable agreements, including Business Associate Agreements where required.

We use collected information to:

• Provide, operate, maintain, and improve the NADI AI platform
• Generate clinical documentation, summaries, and workflow automations
• Respond to demo requests, support inquiries, and customer communications
• Authenticate users and protect against fraud, abuse, and security threats
• Analyze product usage to improve performance, reliability, and user experience
• Comply with legal obligations and enforce our terms and policies
• Send service-related notices and, where permitted, product updates or marketing communications

We do not sell personal information. We do not use patient data for unrelated advertising purposes.

Where applicable under data protection laws, we process personal information based on:

• Contractual necessity — to provide services requested by our customers
• Legitimate interests — to secure, improve, and promote our platform, balanced against your rights
• Legal obligation — to comply with applicable laws and regulatory requirements
• Consent — where required for specific activities such as certain cookies or marketing communications

We may share information in the following circumstances:

• Service providers — with trusted vendors who assist with hosting, analytics, communications, security, and support, subject to contractual safeguards
• Healthcare customers — clinical data is controlled by the clinic or organization using NADI AI
• Legal and safety — when required by law, regulation, legal process, or to protect rights, safety, and security
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, with appropriate notice where required

We require third parties that process data on our behalf to maintain appropriate security and confidentiality measures.

We implement administrative, technical, and organizational safeguards designed to protect information against unauthorized access, alteration, disclosure, or destruction. These measures may include:

• Encryption in transit and at rest where appropriate
• Role-based access controls and authentication mechanisms
• Monitoring, logging, and incident response procedures
• Vendor risk management and secure development practices

No method of transmission or storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

We retain information only for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law, contractual obligation, or legitimate business need.

Retention periods for clinical and account data may be determined by customer agreements, applicable healthcare regulations, and backup or disaster recovery requirements.

We use cookies and similar technologies to operate our website, remember preferences, analyze traffic, and improve our services. These may include:

• Essential cookies — required for core site functionality
• Analytics cookies — to understand how visitors use our website
• Preference cookies — to remember settings and improve experience

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect site functionality.

NADI AI may process and store information in countries other than where it was originally collected. When we transfer personal information internationally, we implement appropriate safeguards consistent with applicable data protection laws.

Depending on your location, you may have rights to:

• Access, correct, or delete your personal information
• Object to or restrict certain processing activities
• Withdraw consent where processing is based on consent
• Request data portability where applicable
• Lodge a complaint with a supervisory authority

To exercise your rights, contact us using the details below. We may need to verify your identity before responding. Patients seeking access to medical records should contact their healthcare provider directly.

Our website and services are not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any information.

We may update this Privacy Policy from time to time. When we make material changes, we will post the updated policy on this page and revise the “Last Updated” date. Your continued use of our services after changes become effective constitutes acceptance of the revised policy.

If you have questions about this Privacy Policy or our data practices, contact us at: