NOW AVAILABLEClinical Intelligence Platform — Now Available

Legal

Privacy Policy

At Nyelux, we take your privacy seriously. This policy describes how we collect, use, and protect your information when you use our medical device intelligence platform.

Effective October 7, 2026Replaces the version effective October 3, 2026

1. Information we collect

Account information

When you create an account, we collect:

  • Name and professional title
  • Email address
  • Organization name and department
  • Professional credentials (optional)
  • Phone number (optional)

Usage information

We automatically collect information about how you use Nyelux:

  • Device searches and queries
  • Features accessed and frequency of use
  • Training materials viewed
  • Support tickets and feedback
  • IP address and browser type
  • Page load timings and the pages you open, measured in your browser (see Cookies, browser storage and analytics)

Questions you ask the assistant

When you ask the Nyelux assistant a question, we store the text of your question and of the answer, together with your IP address and browser type, in our chat history and in our analytics records. We store the question as you typed it. In the clinician assistant, a question that contains a medical record number, date of birth, phone number, email address or Social Security number is declined and is not stored. That check does not find names, and it does not yet cover every chat in Nyelux, so please do not include patient names, record numbers or other patient identifiers anywhere. We do not yet delete this chat history on a fixed schedule; it is removed when your data is erased on request, as described under Data retention below.

What we do not ask for

Nyelux is not designed to receive, and never asks you for:

  • Patient information or PHI
  • Medical records
  • Clinical data about patients

2. How we use information

We use your information to:

  • Provide and improve Nyelux services
  • Authenticate your account and manage access
  • Send important service updates and notifications
  • Provide customer support
  • Analyze usage patterns to improve features
  • Ensure platform security and prevent fraud
  • Comply with legal obligations

3. Information sharing

We do not sell, rent, or trade your personal information. We may share information only:

  • With your explicit consent
  • To comply with legal obligations
  • With service providers who help operate Nyelux. Our data security page names each one, what it receives and why
  • To protect rights, property, or safety
  • In aggregated, anonymized form for research

What the companies on Nyelux receive

Companies that publish content on Nyelux receive some information about how people use it. Today that is:

  • Questions asked about their devices through Nyelux: the question text, the device, the time, whether the asker was signed in, and the assistant’s confidence in its answer
  • Booth QR code sign-ups for their booth: your email address, your name if you gave one, and the time you signed up
  • Messages you send to their representatives through Nyelux

4. Data security

Measures that protect your information include:

  • Encrypted connections (TLS) and server-side encryption for uploaded files
  • Individual accounts, account lockout after repeated failed sign-ins, and automatic sign-out
  • Access limited by organization and role, enforced by our servers
  • Audit logging of document sharing changes and key administrative actions

Details are on our data security page. Please do not enter patient health information; the platform is not designed to receive it.


5. Cookies, browser storage and analytics

Nyelux and the services it uses place the following in your browser or measure the following from it:

  • Sign-in and preferences: your session and settings are kept in your browser’s storage so you stay signed in and your choices are remembered. Signing out removes the session.
  • A random identifier on the public assistant: the assistant on public pages creates a random value, stored under the name nyelux_device_id in your browser’s local storage, to count the free questions you have used in that browser. It is not derived from your device’s characteristics and it is not sent to us.
  • Google Analytics on public marketing pages only. It is not loaded on sign-in, account or portal pages, and it receives the page you view, a browser identifier, your IP address and your browser type.
  • Vercel Speed Insights on every page, including pages you see after signing in. It sends page load timings, the page address, and the type of browser and device to Vercel, our web host.
  • Google reCAPTCHA on the sign-in, sign-up, password reset and contact pages. It checks that a submission comes from a person, and Google receives your IP address and signals from your browser. Our servers send the bot-check token back to Google to verify it.
  • Embedded videos: when a YouTube or Vimeo video is shown, that provider receives your IP address, browser type and the page you are on.

You can manage cookies and site storage in your browser settings. Blocking the storage that keeps you signed in will sign you out.


6. Information from your Google account

Some features connect to your Google account only when you choose to use them.

  • Sign in with Google: your email address and your name, so we can find or create your Nyelux account.
  • Google Calendar (vendor representatives): when you connect your calendar, Nyelux reads the calendar name and time zone and your events: title, start and end time, status and whether you are free or busy. Nyelux asks Google for read-only calendar access and never creates, changes or deletes your events.
  • Google Drive import: you pick files in Google’s own file picker, and Google limits Nyelux to the files you pick. An imported file becomes a document in your content library. It is handled like any file you upload, which includes indexing its text and sending it to Microsoft Azure OpenAI, our AI service provider, to answer questions and, for videos, to transcribe them.

We encrypt the access tokens Google gives us before we store them. We use your Google data only to provide the feature you connected. We do not sell it, use it for advertising, or use it to train AI models. Calendar data is not sent to any AI service.

To disconnect, use the disconnect control for Google Calendar or Google Drive in Nyelux settings. That asks Google to revoke Nyelux's access and deletes the access we stored. It does not delete calendar events already copied into Nyelux or files already imported. You can also check or remove Nyelux's access at myaccount.google.com/permissions. To have copied events or imported files deleted, email contact@nyelux.com.

Nyelux's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.


7. Your rights

You have the right to:

  • Access your personal information
  • Correct inaccurate data
  • Request deletion of your data
  • Export your data
  • Opt out of marketing communications
  • Lodge a complaint with supervisory authorities

8. Data retention

We keep your information while your account is open, and afterwards only as needed to provide the service and meet legal obligations. When you delete your account, it is closed immediately and can no longer be used to sign in. To have the personal data in it erased, email contact@nyelux.com; we complete erasure within 30 days of your request, except where the law requires us to keep something.


9. Children's privacy

Nyelux is not intended for users under 18 years of age. We do not knowingly collect information from children.


10. Changes to this policy

We may update this policy periodically. We will notify you of significant changes via email or platform notification. Continued use after changes constitutes acceptance.


11. Contact us

For privacy questions or concerns, contact us at:

Email: contact@nyelux.com