Privacy Policy

Scope and our role

Nagi Labs LLC is a New York limited liability company that provides Healthware ("Nagi Labs," "we," or "us"). This policy applies when Nagi Labs determines how personal information is handled, including for our website, access requests, support, and business operations.

Healthware is offered to organizations and their authorized business users, not to individuals for consumer or personal use.

To the extent Nagi Labs processes prompts, files, recordings, and other content for an organization ("Customer Content"), that organization generally decides why and how the content is used and Nagi Labs acts on its instructions under the applicable customer agreement. The organization's privacy notice and agreement may also apply. This policy does not govern third-party services you or your organization choose to connect.

Information Healthware handles

Website and business information. We collect a work email for access requests. If you contact us, we collect your name, work email, organization, message, and related correspondence. We may also handle customer, deployment, contract, and support information.

Product content. Healthware handles prompts, messages, files, outputs, workspace and session information, tool activity, settings, and information returned by sources or services you connect. It may also handle connection details and, where enabled, create memory or other product content from session content.

Workflow recordings. When you activate the recorder, Healthware may capture screen content, user interactions, and dictated or typed comments to create a reusable workflow. Recordings can contain personal or confidential information visible or entered during the workflow.

Technical information. Our website and service providers may receive internet, browser, device, and security information such as IP address, request data, and anti-abuse signals. The desktop app may create operational logs and crash files. Some approved builds may enable limited usage and diagnostic analytics.

We receive information from you, your organization, your device and operating system, connected services, and your use of Healthware.

Local and third-party processing

Healthware is local-first. Sessions, workspace data, full workflow recordings, local memory, skills, logs, and crash files are generally stored on your device or in an environment controlled by your organization.

Local storage does not mean all processing stays on your device. When Healthware uses an AI model—including to respond to a request or, where enabled, create memory or a skill—or runs an integration, the content needed for that operation may be sent to the provider or service you or your organization selected. Those providers process information under their own terms and configurations.

Website form submissions are stored by our cloud service providers. Contact submissions are also sent through an email provider so we can respond. Website security and anti-abuse providers may process technical signals when you use a form.

How we use information

We process Customer Content to provide, secure, and support Healthware and to perform customer-directed operations under the applicable agreement. We use website, business, and technical information to manage access and customer relationships; respond to messages; secure, troubleshoot, and improve product operations; enforce our agreements; and comply with law.

How we disclose information

We disclose information only as reasonably needed to: your organization and its administrators; providers, integrations, and data sources selected for your use; vendors that help with hosting, security, forms, email, analytics, and support; professional advisers and authorities when required for legal, safety, or security reasons; and a successor in a merger, financing, reorganization, or sale of all or part of our business.

Sensitive and regulated data

Healthware is intended for professional work, not to provide health care or maintain personal health records for individuals. Do not send protected health information, identifiable patient information, consumer health data, or other regulated or highly sensitive personal data through our public website forms.

Do not use the product with that data unless a written agreement with Nagi Labs expressly authorizes the use and your organization has approved the deployment, providers, integrations, and required safeguards. Where we process regulated data solely for a customer, we follow that customer's documented instructions and applicable agreement.

Retention

Product content stored locally remains there until you, your organization, or the product's configured behavior removes it. Information held by a selected provider follows that provider's retention rules and your organization's configuration.

We keep website, support, customer, and business information only for as long as reasonably needed for the purposes described above, including to provide the service, respond to you, maintain required records, resolve disputes, enforce agreements, and meet legal obligations. Backup copies may remain for a limited period.

Security

We use reasonable administrative, technical, and physical safeguards appropriate to the information we handle. No system is completely secure. You and your organization are responsible for securing devices, accounts, credentials, backups, providers, integrations, and deployment settings.

Your choices and privacy rights

Depending on where you live, you may have rights to request access, correction, deletion, or a copy of personal information, or to appeal a denied request. You may also opt out of promotional email using its unsubscribe method. We may verify your identity and apply exceptions permitted by law.

For Customer Content controlled by your employer or another organization, contact that organization first. For locally stored information, use available product and device controls or contact us for help. Send other privacy requests to contact@tryhealthware.app.

Website security and tracking

We use security and anti-abuse technology, including Firebase App Check with reCAPTCHA Enterprise, to protect website forms. The provider may process device, application, and interaction signals and set a cookie to detect fraud and abuse. Browser "Do Not Track" signals do not change this processing. We do not use Customer Content or website form submissions for targeted advertising.

United States processing

Nagi Labs operates from the United States. Information may be processed in the United States and in other places where your organization or selected providers operate, subject to applicable agreements and law.

Changes to this policy

We may update this policy by posting the revised version and effective date. We will provide additional notice of material changes when required by law.

Contact

Contact Nagi Labs LLC at contact@tryhealthware.app.