Privacy Policy — SERA Web Extension

Nuxera is a healthcare AI company. SERA is Nuxera's AI clinical documentation assistant, available as a Chrome browser extension that records healthcare consultations, generates clinical transcripts and documentation, and assists healthcare professionals by automatically populating EMR/EHR fields.

This Privacy Policy applies specifically to the SERA browser extension ("the Extension") and explains what data is collected, how it is used, where it is processed, how long it is retained, and with whom it may be shared.

The Extension is intended exclusively for authorized healthcare professionals and healthcare organizations that have an active agreement with Nuxera. Access requires an account provisioned by Nuxera's administrators and authentication using approved credentials.

When the Extension is used within a healthcare organization, that organization acts as the data controller for patient information processed through the service. Nuxera acts as a data processor, processing information solely on the organization's behalf and under its instructions. The healthcare organization is responsible for ensuring that patient consultations are recorded lawfully, including obtaining any patient consent or notice required under applicable law in its jurisdiction.

We use collected information solely to:

The Extension uses artificial intelligence technologies to transcribe consultation audio, generate clinical documentation, extract structured clinical information, and assist with EMR/EHR field mapping. Field mapping is performed primarily through direct structural matching; where direct matching is not possible, a language model assists in identifying the correct destination field.

All AI models used by the service, including speech recognition and language models, are developed or operated by Nuxera and run on infrastructure under Nuxera's control. No user data, audio, clinical content, or page data is sent to any third-party AI provider.

AI-generated content should always be reviewed by a qualified healthcare professional before being relied upon or submitted to a medical record system. Healthcare professionals remain responsible for reviewing and approving all generated content before saving or submitting information to a medical record system.

All processing is performed by Nuxera on servers hosted on Oracle Cloud Infrastructure, which acts as Nuxera's infrastructure provider under a data processing agreement and does not access user data for its own purposes. Nuxera does not use any other third-party service providers, subprocessors, or external APIs to process user data.

No information is sold, rented, or shared with advertisers, data brokers, or marketing providers. Information may be disclosed only when required by applicable law, regulation, court order, or lawful governmental request.

Nuxera personnel do not access or read user data, except in the following limited circumstances: (a) when the user explicitly requests assistance that requires such access; (b) where necessary to investigate security incidents, abuse, or violations of our terms; or (c) where required to comply with applicable law. Any such access is limited to what is necessary for the stated purpose and is governed by Nuxera's internal access controls and compliance policies.

SERA's use of information received through Chrome APIs and from user devices complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. Specifically, data is accessed, collected, used, and transferred solely to provide and improve the clinical documentation functionality that is prominently described in the Extension's listing and requested by the user. Data is never sold; never used for advertising, personalized ads, retargeting, or ad measurement; never used to determine creditworthiness or for lending purposes; and never transferred to third parties except as necessary to provide the user-requested functionality, to comply with applicable law, or as part of a merger or acquisition with prior notice to users.

All communications between the Extension and Nuxera services are encrypted using HTTPS/TLS. We implement industry-standard technical and organizational safeguards to protect information against unauthorized access, disclosure, alteration, or destruction. Authentication credentials are stored using Chrome's storage mechanisms and are not exposed to website page content.

The SERA Extension does not use cookies, advertising identifiers, tracking pixels, browser fingerprinting, or advertising SDKs. No user behavior is collected for advertising or marketing purposes.

The Extension is designed for use by licensed healthcare professionals and processes information that may qualify as Protected Health Information (PHI) or sensitive health data, including information relating to patients. The healthcare organization deploying the Extension is responsible for ensuring its use complies with applicable healthcare privacy regulations, including the Saudi Personal Data Protection Law (PDPL), HIPAA where applicable, and other laws within its jurisdiction, and for providing any required notices to, and obtaining any required consents from, patients.

Nuxera processes personal data in accordance with the Saudi Personal Data Protection Law (PDPL) and applicable implementing regulations. Processing is performed on the following legal bases: contractual necessity, legitimate business interests, and compliance with legal obligations.

The Extension is intended exclusively for healthcare professionals and is not directed toward individuals under 18 years of age. We do not knowingly collect personal information from children through the Extension's user accounts. If we become aware that a user account has been created for a child, we will delete the associated personal information promptly.

Subject to applicable law, you may have the right to access your personal data, correct inaccurate data, request deletion of your personal data, object to certain processing activities, and request data portability. Requests are honored subject to legal retention obligations and security requirements. Users within a healthcare organization may also direct requests through their organization's administrator.

To exercise any of these rights, contact us at contact@nuxera.ai. We will respond within the timeframe required by applicable law.

For privacy questions, requests, or concerns, contact us at: contact@nuxera.ai

We may update this Privacy Policy from time to time. The latest version will always be available through the Chrome Web Store listing and associated Nuxera resources. Continued use of the Extension after updates become effective constitutes acceptance of the revised Privacy Policy.