Privacy Policy
This Privacy Policy explains how Tagnara LLC ("Clovai", "we") collects, uses and protects personal information on clovai.us and when we provide the Clovai platform. It does not replace the notices our customers give their own patients.
1. Two different roles
Information we control
We decide how to use the personal information of people who visit our website, request a demo, sign up, or act as contacts, administrators and users for our customers, vendors and partners. This policy covers that information.
Patient information we process for our customers
Healthcare practices use Clovai to record information about their patients, including protected health information (PHI). For that information, the practice is in control and Clovai acts as its business associate under HIPAA: we use and disclose it only to provide the service and as allowed by our Business Associate Agreement and the law. We do not use patient information for our own marketing, and we do not sell it. If you are a patient, please contact your provider; if your request reaches us, we will forward it to them.
2. Information we collect
- Contact and identity: name, email, phone, job title, and the ID type and number of the account administrator.
- Organization: legal name, DBA, tax ID (EIN, SSN or ITIN), NPI, address, locations and specialties.
- Billing: plan, billing period, invoices and the card brand and last four digits. Full card numbers are collected and stored by our payment processor, Stripe, not by us.
- Usage and device: log-in and activity records, IP address, browser and device information, and cookies on our website.
- Communications: messages you send us and the details of demos you schedule.
3. How we use it
- To create and manage accounts and provide the service you subscribed to.
- To verify the administrator's email and protect accounts.
- To process payments, send invoices and handle trials, renewals and cancellations.
- To provide support and send service notices (trial ending, renewals, maintenance, changes to our terms).
- To keep the platform secure, prevent fraud and keep audit trails.
- To send marketing about Clovai, which you can opt out of at any time.
- To create aggregated, de-identified statistics that help us improve the product.
- To comply with the law and respond to lawful requests.
4. How we share it
We share personal information only with service providers that help us run Clovai, under contracts that require them to protect it (and, when PHI is involved, under business associate agreements): cloud hosting, payments (Stripe), email and messaging delivery, customer support and analytics tools, and AI services configured for healthcare use. We may also disclose information to comply with the law, to protect rights and safety, or as part of a merger or acquisition. We do not sell personal information and we do not share it for cross-context behavioral advertising.
5. Cookies
Our website uses cookies that are necessary for it to work and, with your consent where required, analytics and advertising cookies that help us understand how the site is used and measure campaigns. You can block or delete cookies in your browser and honor Global Privacy Control signals where the law requires.
6. Your privacy rights
Depending on where you live (for example, California, Colorado, Connecticut, Virginia, Texas and other states with consumer privacy laws), you may have the right to access, correct, delete or obtain a copy of your personal information, and to opt out of targeted advertising. To exercise them, email privacy@clovai.us. We will verify your request and answer within the time the applicable law sets. We will not discriminate against you for exercising your rights. You may use an authorized agent, and you may appeal a decision by replying to our response.
7. Security
We protect information with administrative, physical and technical safeguards aligned with the HIPAA Security Rule: encryption in transit and at rest, a separate database per customer, role-based access controls, multi-factor authentication options, audit logs, backups and an incident response process. If a breach affects your information, we will notify you and, where applicable, the authorities, as the law requires.
8. Retention
We keep personal information while the account is active and afterwards only as long as needed for legal, tax and accounting obligations or to resolve disputes. Customer data, including PHI, is returned or deleted at the end of the subscription as set out in our Terms of Service and the BAA.
9. Children
Our website and sign-up are intended for businesses and are not directed to children under 13. Information about minors in Clovai is entered by healthcare providers as their patients' records and is handled as PHI under the BAA.
10. Changes
We will post updates to this policy on this page with a new effective date and, for material changes, notify account administrators before they take effect.
11. Contact
Tagnara LLC · 1201 North Market Street #111, Wilmington, DE 19801 · privacy@clovai.us