This Privacy Policy describes how Novalyte AI ("Novalyte," "we," "us," or "our") collects, uses, discloses, and protects information collected through the Novalyte AI platform (the "Service"). The Service is a healthcare technology platform that connects patients, clinics, healthcare professionals, vendors, and other participants in the men's health ecosystem.
Novalyte AI is a technology facilitator, not a medical provider. Some information processed through the Service may be considered protected health information ("PHI") under applicable law. We design our systems to minimize the PHI we touch and to support covered entities and business associates in their compliance obligations.
1. Information We Collect
1.1 Information you provide directly
- Account and contact information — name, email address, phone number, organization, role, and similar identifiers submitted through forms, onboarding flows, or contact requests.
- Patient intake information — demographic, contact, treatment interest, and scheduling preference data submitted when a patient requests a consultation with a clinic.
- Assessment responses — answers to optional health intake questionnaires intended to help route patients to appropriate clinics.
- Clinic, professional, and vendor information — business details, licensure, credentialing, service descriptions, pricing, and operational data submitted by participants.
- Communications — the content of messages, support tickets, and other correspondence you send to us.
1.2 Information collected automatically
- Device and browser information, IP address, referring URLs, and usage data collected through cookies and similar technologies (see our Cookie Policy).
- Aggregate interaction metrics such as page views, click events, and form engagement used to improve the Service.
1.3 Information from third parties
- Verification data from public registries, licensure databases, or reference checks used to validate participant information.
- Analytics and infrastructure data from service providers that support our platform operations.
2. How We Use Information
We use information to operate, maintain, and improve the Service, including to:
- Facilitate connections between patients, clinics, professionals, and vendors.
- Process consultation requests, applications, onboarding submissions, quote requests, and contact messages.
- Verify participant information and display verification status.
- Communicate with you about your submissions, account, and platform updates.
- Detect, prevent, and respond to fraud, abuse, security incidents, and policy violations.
- Comply with legal obligations and enforce our Terms of Service.
3. Health Information and PHI
Novalyte AI is not a covered entity under U.S. HIPAA regulations. Where a clinic or professional using the Service is a covered entity or business associate, we aim to operate as a business associate or sub-processor under a written Business Associate Agreement (BAA). Assessment responses and consultation requests are intended for routing and facilitation and are not intended to constitute a medical record.
Patients should not include information they do not wish to share with the receiving clinic. Sensitive details should be discussed directly with a licensed provider in the appropriate clinical setting.
4. Sharing and Disclosure
We share information only as described in this Policy or as required by law:
- With participants — when you submit a request (e.g., consultation, application, quote), we share the submitted information with the relevant clinic, professional, or vendor.
- With service providers — vendors that host infrastructure, deliver analytics, process payments, or support operations under written agreements.
- For legal compliance — to respond to lawful requests, protect rights and safety, and comply with legal obligations.
- Business transfers — in connection with a merger, acquisition, or sale of assets, subject to confidentiality obligations.
We do not sell personal information for monetary consideration.
5. Data Retention
We retain information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. When information is no longer needed, we delete it or anonymize it, subject to legal retention requirements.
6. Security
We use administrative, technical, and physical safeguards designed to protect information processed through the Service. No system is perfectly secure, and we cannot guarantee the absolute security of information. We encourage participants to use strong authentication and to report suspected incidents promptly.
7. Your Rights
Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict the processing of your personal information; object to processing; and request data portability. To exercise these rights, contact us using the information below. We will respond consistent with applicable law.
8. Children's Privacy
The Service is not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us to request deletion.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will update the "Last updated" date above when we do. Material changes will be communicated through the Service or by other reasonable means. Continued use of the Service after changes take effect constitutes acceptance of the revised Policy.
10. Cookies and Similar Technologies
We use cookies and similar technologies on the Novalyte AI platform. Cookies are small text files placed on your device when you visit a website.
We use the following categories of cookies:
- Strictly Necessary Cookies — required for basic site functionality, security, session state, and system operations. These cannot be disabled.
- Functional Cookies — remember your selections, theme settings, or helper choices to provide a more personalized experience.
- Analytics Cookies — with your consent, PostHog, Google Analytics, and Vercel Analytics help us understand traffic sources, page performance, and product usage. These services are not loaded for analytics until you enable analytics cookies.
- Marketing Cookies — monitor the performance of marketing campaigns. We do not sell personal data to third parties or run cross-site tracking ads.
Modifying Consent: You can change your cookie preferences at any time by clicking the button in our site footer. You can also block or clear cookies via your browser settings.
11. Contact
For privacy questions or requests, please contact us through the dedicated Contact page. We will respond consistent with applicable law.