HIPAA Notice of Privacy Policy

Effective Date: April 29, 2025

THIS NOTICE DESCRIBES HOW YOUR PROTECTED HEALTH INFORMATION (PHI) MAY BE USED AND SHARED, YOUR RIGHTS REGARDING THAT INFORMATION, AND HOW YOU CAN EXERCISE THOSE RIGHTS.

Please read it carefully.

1. Our Responsibilities

When HIPAA applies to the services we provide, NVOX is required by law to:

Protect the privacy and security of your Protected Health Information (PHI).

Provide you with this Notice describing our privacy practices.

Follow the privacy practices described in this Notice.

Notify you if a breach of unsecured PHI occurs that may affect your information.

We will not use or disclose your PHI except as described in this Notice or as otherwisepermitted or required by law.

2. How We May Use and Share Your PHI

A. Treatment

We may use and share your PHI to provide, coordinate, and manage your healthcare services, including structured assessments, clinician review, report preparation, review of assessment recordings where applicable, professional consultation, and care coordination.

NVOX's AI tools assist licensed professionals only as clinical decision-support tools. All diagnostic reports require review and approval by a licensed clinician.

B. Payment

We may use your PHI to process payments, verify payment transactions, issue refunds whereappropriate, respond to billing questions, resolve payment disputes, and supportpayment-related operations.

C. Healthcare Operations

We may use your PHI for quality assurance, clinical supervision, staff training, compliance,internal audits, security monitoring, fraud prevention, risk management, credentialing, technical support, platform reliability, incident investigation, and improving healthcareoperations.

Where required by HIPAA, uses and disclosures are limited to the minimum necessaryinformation.

3. Other Permitted Uses and Disclosures

We may disclose PHI without authorization when permitted or required by law, includingpublic health activities, health oversight, law enforcement requests, judicial proceedings,court orders, subpoenas, reporting abuse or neglect, preventing serious threats to health orsafety, workers compensation, and other legally required disclosures.

4. Uses Requiring Your Authorization

Written authorization is required where HIPAA requires it, including certain marketing, saleof PHI, certain research activities, and uses not described in this Notice. You may revokeauthorization in writing at any time unless we have already relied on it.

NVOX does not sell, rent, trade, or monetize your PHI.

5. Your Rights

You may request access, amendments, restrictions, confidential communications, anaccounting of disclosures, and a paper copy of this Notice.

If you pay entirely out of pocket for a service, you may request that we not discloseinformation relating to that service to your health plan where HIPAA requires us to honorthat request.

6. Assessment Recordings and AI

Some services include audio or video recordings used for treatment, clinician review, qualityassurance, documentation, security, compliance, and healthcare operations.

Artificial intelligence is used only as a clinical decision-support tool and never makeshealthcare decisions independently.

7. Filing a Complaint

Compliance Information Security Officer
NVOX INC
254 Chapman Rd, Ste 208
Newark, DE 19702
Email: compliance@nvox.com
General Support: support@nvox.com

You may also file a complaint with the U.S. Department of Health and Human Services. You willnot be retaliated against for filing a complaint.

8. Changes to This Notice

We may update this Notice from time to time. The current version will always be available on ourwebsite and upon request.

9. Contact Information

If you have questions, requests, or complaints about this Website Privacy Policy, please contact us: