Privacy Policy

Effective Date: August 14, 2026 Last Updated: August 14, 2026

At Nayx (“Company,” “we,” “us,” or “our”), we are committed to protecting the privacy and security of personal information collected from clinicians, healthcare facilities, and visitors who use our website, mobile applications, web applications, and workforce management platform (collectively, the “Services”).

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit or interact with our Services.

1. Information We Collect

We collect information directly from you, automatically through your device, and from third-party verification services.

A. Information You Provide to Us

  • Account & Profile Data: Name, business email, phone number, physical address, profile picture, account credentials, and communication preferences.
  • Professional Credentials (Clinicians): State medical licenses, National Provider Identifier (NPI), certifications, background check disclosures, immunization records, emergency contact information, work experience, and educational background.
  • Facility & Operational Data (Facilities): Facility name, tax ID/EIN, administrator contact details, shift schedules, department requirements, and billing information.
  • Payment Data: Bank account details, routing numbers, and payment card details processed through our secure, PCI-compliant payment gateways.

B. Information Collected Automatically

  • Device & Technical Data: IP address, browser type, operating system, unique device identifiers, device hardware specifications, and system event logs.
  • Usage Data: Pages viewed, shift posting interactions, app features accessed, session duration, and clickstream data.
  • Geolocation Data: Precise or approximate location data (with your consent) to facilitate real-time, proximity-based shift matching.

2. On-Device AI Documentation & Patient Privacy

Nayx provides an On-Device AI Documentation Tool (e.g., AI SOAP Note generation) for clinicians.

  • Local Hardware Processing: All audio recording and text generation occur 100% locally on your physical smartphone or tablet hardware.
  • Zero Cloud Transit: No raw ambient clinical audio, transcripts, or patient encounter details generated through the local AI documentation feature are transmitted to, processed by, or stored on Nayx cloud servers or third-party cloud infrastructure.
  • EHR Export: Once approved by the clinician, documentation is exported directly to the target Electronic Health Record (EHR) system under the user's manual control.

3. How We Use Your Information

We use personal data for the following business purposes:

  • Algorithmic Shift Matching: Connecting clinicians with appropriate open shifts based on preferences, licenses, location, and facility needs.
  • Automated Credential Verification: Verifying state medical licenses, background screenings, and peer certifications to maintain regulatory compliance.
  • Payment Processing: Facilitating direct deposits to clinicians and invoicing healthcare facilities.
  • Platform Improvement: Analyzing platform performance, monitoring system availability, and enhancing user experience.
  • Security & Compliance: Preventing fraud, ensuring security compliance (including SOC 2 Type II (Audit in Progress) controls), and enforcing our Terms of Service.

4. How We Share Your Information

We do not sell your personal data. We disclose personal data only in the following scenarios:

  • Between Platform Users: Matching clinician credential profiles with prospective healthcare facility managers when a shift is requested or accepted.
  • Service Providers: Vetted third-party vendors who perform services on our behalf (e.g., identity verification databases, payment processors, cloud hosting).
  • Legal & Regulatory Requirements: When required by law, subpoena, or government authority to comply with legal obligations or protect rights and safety.
  • Business Transfers: In connection with a corporate merger, acquisition, restructuring, or sale of company assets.

5. Data Security & Storage

Nayx maintains administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, or misuse:

  • SOC 2 Type II (Audit in Progress) Protocols: Infrastructure monitored under enterprise security protocols.
  • Encryption Standards: Data in transit encrypted via TLS 1.3 and data at rest encrypted using AES-256 bit encryption.
  • Access Safeguards: Multi-factor authentication (MFA) enforcement across enterprise account interfaces.

6. Your Data Rights & Choices

Depending on your jurisdiction, you have the following rights regarding your personal information:

  • Access & Portability: Request a copy of the personal data we maintain about you.
  • Correction: Request updates to incomplete or inaccurate account or credential records.
  • Deletion: Request erasure of your personal data, subject to regulatory record-retention mandates for medical credentialing and tax compliance.
  • Location Controls: Disable precise geolocation tracking through your mobile device settings.

To exercise your privacy rights, submit a request to info@nayx.ai.

7. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in platform functionality or legal requirements. Material revisions will be communicated via app notification or email prior to taking effect.

8. Contact Us

If you have questions regarding this Privacy Policy or our privacy practices:

Email: info@nayx.ai

Ask AI