Privacy Policy

How Threvix collects, uses, discloses, retains and protects personal information.

Last updated · August 2026Threvix Technologies Inc.

PRIVACY POLICYThrevix Technologies Inc.Last updated: August 2026 Threvix Technologies Inc. ("Threvix", "we", "us", or "our") is a Quebec corporation based in Montreal. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you use the Threvix website or application (the "Services"). Our Privacy Officer can be reached at privacy@threvix.com.

1. Information we collect

The information we collect depends on how you use Threvix.

Information about you

We may collect:- account information, such as your name, email address, profession, practice information, location, language preference, and account credentials;- subscription and billing information;- communications you send to us; and- limited operational information, such as IP address, browser and device information, authentication events, logs, and feature usage. Operational information is used for security, reliability, support, and aggregate service measurement. We do not use it to profile you. Payment information may be processed by a payment provider. Threvix does not store full payment-card numbers.

Patient information

When you use Threvix in your clinical practice, you may submit patient information such as audio, transcripts, clinical notes, prompts, medical images, and files. You determine what patient information you submit and are responsible for having the authority, notice, consent, or other lawful basis required by applicable law and professional rules.

2. How we use information

We use personal information as reasonably necessary to:- provide, operate, secure, and support the Services;- create and manage accounts and subscriptions;- process payments;- respond to questions and support requests;- communicate about accounts, billing, security, and the Services;- detect and prevent misuse or security threats; and- comply with legal and regulatory requirements. We may send optional product communications where permitted by law. You can opt out of non-essential communications at any time. We do not sell or rent personal information or use it for third-party advertising.

3. Patient information and AI

Patient information is processed as necessary to provide, operate, secure, and support the clinical Services requested by our users. Threvix does not:- sell patient information;- use patient information for advertising; or- use patient information to train AI models. Service providers processing patient information on our behalf are not permitted to use it for their own advertising or model-training purposes. The Services may generate transcripts, draft notes, summaries, suggestions, imaging results, and other AI-assisted outputs. These outputs are drafts and must be reviewed by a qualified healthcare professional before being relied upon or incorporated into a patient record. Threvix does not make clinical decisions on behalf of clinicians or patients.

4. Service providers and data location

Threvix may use service providers where necessary to operate and support the Services, including providers supporting technology infrastructure, data processing, authentication and security, payments, communications, and customer support. Service providers that process personal information on our behalf are subject to appropriate privacy, confidentiality, and security obligations. Personal information stored by Threvix, including patient information, is hosted in Canada. Certain processing may occur outside Quebec or Canada. Where personal information is communicated outside Quebec, Threvix conducts the assessments and applies the safeguards required by applicable privacy law. Information processed in another jurisdiction may be subject to the laws of that jurisdiction. We may also disclose personal information where required or permitted by law or in connection with a merger, financing, reorganization, acquisition, or sale of our business, subject to applicable privacy requirements.

5. Retention and deletion

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and to meet applicable legal, contractual, security, and operational requirements. In particular:- audio submitted for transcription is not retained as a stored recording after processing is complete;- clinical notes and other patient information are retained according to applicable settings and legal requirements; and- account, transaction, security, and administrative information may be retained where reasonably necessary. Following account closure, we delete your account information and any patient information within a reasonable period, except where we are required or permitted to retain it by law. Residual copies may remain in backups until removed through our normal backup lifecycle.

6. Security and confidentiality incidents

Threvix maintains administrative, physical, and technical safeguards appropriate to the sensitivity of the information we handle. These include measures designed to protect information in transit and at rest, restrict access to authorized personnel and systems, monitor security events, and respond to confidentiality incidents. Privacy impact assessments are conducted where required by applicable law. Threvix maintains internal policies governing the collection, use, disclosure, retention, access, and protection of personal information, including our use of service providers and our handling of confidentiality incidents, privacy requests, and complaints. These practices are overseen by our Privacy Officer. No information system can be guaranteed to be completely secure. Where required by law, Threvix will notify affected individuals, customers, regulators, or other authorities of confidentiality incidents and take appropriate measures to reduce the risk of harm. If you believe your account or information may have been compromised, contact privacy@threvix.com.

7. Cookies and browser storage

Threvix uses a limited number of first-party cookies necessary to operate the website and Services. Certain cookies are required for authentication, account security, and session management. Where optional first-party measurement cookies are used, they are not set unless you accept them, and you can change your choice through the cookie controls available on our website. We do not use third-party advertising or analytics cookies. The application may keep work in progress and preferences in your browser's local storage so they can persist between page loads. Information stored locally remains on your device until it is deleted by the application, cleared from your browser, or otherwise expires. You are responsible for the security of any device you use with the Services.

8. Consent and privacy rights

Where consent is required by law, it may be withdrawn where permitted, subject to applicable legal or contractual restrictions. Withdrawal may affect our ability to provide some or all of the Services. Subject to applicable law, you may have the right to:- access personal information we hold about you;- correct inaccurate or incomplete information;- withdraw consent where applicable;- request deletion where applicable;- request eligible information in a portable format where applicable; and- make a complaint about our privacy practices. Requests may be sent to privacy@threvix.com. We may verify your identity before responding. Patients seeking access to or correction of information in their clinical record should generally contact their clinician or practice. Threvix supports clinicians and practices in responding to applicable privacy requests. If you are dissatisfied with our response, you may have the right to contact the Commission d'accès à l'information du Québec, the Office of the Privacy Commissioner of Canada, or another applicable privacy regulator.

9. Changes to this Policy

We may update this Privacy Policy as our Services, practices, or legal obligations change. The current version will be published on our website with the date of the most recent update. We will provide additional notice of material changes where required by law.

10. Contact

For privacy questions, requests, or complaints: Privacy OfficerThrevix Technologies Inc.Montreal, Quebec, Canadaprivacy@threvix.com For general inquiries: contact@threvix.com This Privacy Policy is available in English and French.

Last updated · August 2026

Privacy & Security Terms