Privacy Policy
How we collect, use, and protect your information
Last updated: April 2026
Introduction
NouxVoice is operated by NouxAI Pty Ltd ("NouxAI", "we", "us", or "our"). This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our AI voice receptionist service for healthcare practices. We are committed to protecting the privacy and security of all personal and health-related information processed through our platform.
Information We Collect
Account Information
When you register for NouxVoice, we collect your clinic name, contact name, email address, phone number, medical specialisation, medical or facility registration details, and operating region.
Call Recordings and Transcripts
Our AI receptionist processes incoming voice calls in real time. Call audio is analysed and converted into written transcripts by our AI system to handle appointment bookings, patient inquiries, and call management. All transcripts are stored in encrypted form within your country's designated secure infrastructure.
Usage Data
We collect aggregated service usage information to provide analytics dashboards, monitor service performance, and support billing.
Cookies and Analytics
Our website uses essential cookies for authentication and session management. We may use analytics tools to understand how visitors interact with our marketing pages. No tracking cookies are used within the practice portal.
How We Use Information
- To provide, operate, and maintain our AI receptionist service
- To process voice calls and manage patient interactions on behalf of your practice
- To book, modify, and manage patient appointments
- To generate usage analytics and billing reports
- To send service-related notifications and updates
- To improve our service quality and reliability
- To comply with legal obligations in your operating region
Patient Data and Practice Isolation
Each healthcare practice on NouxVoice operates in a fully isolated and secure environment. Patient data belonging to one practice is never combined with, or accessible to, any other practice. All data is protected using dedicated encryption and strict access controls specific to each practice.
NouxAI acts as a data processor on behalf of healthcare practices (data controllers). We process patient data solely to deliver the receptionist service and do not use patient data for any other purpose.
Data Retention
- Call recordings: retained for 3 months from the date of the call, then permanently and securely deleted.
- Call transcripts: retained for 3 months from the date of the call, then permanently and securely deleted.
- Account data: retained while your account is active and for 30 days following account closure.
- Aggregated analytics: retained indefinitely in de-identified form that cannot be linked to any individual.
Regional Compliance
Australia
We comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). We adhere to the Notifiable Data Breaches (NDB) scheme and will notify affected individuals and the OAIC in the event of an eligible data breach. All data is processed and stored locally on country-specific servers within Australia.
Canada
We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial health privacy legislation including PHIPA (Ontario) and HIA (Alberta). All data is processed and stored locally on country-specific servers within Canada.
India
We comply with the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000. We implement reasonable security practices as prescribed under Indian law. All data is processed and stored locally on country-specific servers within India.
Third-Party Services
We engage a carefully selected group of trusted technology partners solely to deliver the NouxVoice service. Each partner is bound by formal data processing agreements and is required to meet our security, privacy, and data residency standards. We only work with partners who can process and store data within the required country, and we regularly review their compliance with applicable data protection laws.
Your Rights
Depending on your region, you may have the following rights regarding your personal information:
- Access: request a copy of the personal data we hold about you
- Correction: request that we correct inaccurate or incomplete data
- Deletion: request that we delete your personal data, subject to legal retention requirements
- Portability: request your data in a structured, machine-readable format
- Withdrawal of consent: withdraw consent where processing is based on consent
To exercise any of these rights, contact us at privacy@nouxvoice.com. We will respond within the timeframe required by your applicable regional legislation.
Contact Us
For questions or concerns about this Privacy Policy or our data practices, please contact:
NouxAI Pty Ltd
Email: privacy@nouxvoice.com
Website: www.nouxvoice.com