Privacy Policy
Effective Date: November 22, 2025
1. Introduction
Welcome to nVadi, operated by WhiteCoat Development ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information through industry-leading encryption and security practices. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.
2. We Do Not Sell Your Personal Information
Your trust is paramount to us. We understand that you entrust us with sensitive personal, medical, legal, and asset information. We pledge that this information will never be sold or used for commercial purposes beyond providing you with our services.
3. Information We Collect
We collect information that you provide directly to us, including but not limited to:
Personal Information: Name, email address, phone number, date of birth
Health Information: Medical records, prescriptions, physician information, insurance details
Legal Documents: Living wills, DNR orders, legal documentation
Asset Information: Personal property inventory, purchase records
Communication Data: SMS consent records, communication preferences
4. How We Use Your Information
We use your information solely for the following purposes:
Providing and maintaining our services
Account verification and security purposes
Account verification and login SMS notifications (with your consent)
Providing customer support and technical assistance
Improving our services and user experience
Complying with legal obligations
5. Third-Party Service Providers
We work with trusted third-party service providers to deliver our services. These providers are contractually bound to protect your data:
Microsoft Azure: Cloud hosting and infrastructure services
Twilio: SMS verification and communication services
Azure Communication Services: Email delivery and communication
6. Data Retention and Your Right to Delete
We respect your right to control your data:
Retention Period: We retain your data only as long as necessary to provide services or as required by law
Complete Deletion: Upon request, we will completely remove all your data from our systems
Deletion Verification: We maintain detailed logs of all data deletion activities for compliance and verification purposes
Backup Removal: Data is also removed from all backup systems within 90 days of deletion request
7. Data Portability - Take Your Data With You
We provide comprehensive data portability options:
Complete Data Export: Download all your data in standard formats (JSON, PDF, CSV)
Self-Service Export: Access your data export tools directly from your account settings
Delivery Options: Receive your data via secure email or download link
Timely Processing: Data exports are typically available within 48 hours of request
Secure Transfer: All data exports are encrypted and password-protected
8. Data Security and Protection
We implement comprehensive security measures to protect your information and strongly encourage additional security practices:
End-to-End Encryption: All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption
Multi-Layered Access Controls: Zero-trust security model with role-based access and multi-factor authentication
Secure Infrastructure: Hosted on Microsoft Azure with SOC 2 Type II compliance and enterprise-grade security
Key Management: Advanced encryption key management with regular rotation and secure storage
24/7 Monitoring: Continuous security monitoring, intrusion detection, and automated threat response
Regular Security Audits: Frequent security assessments, penetration testing, and vulnerability management
Easy Setup: Enable 2FA in your account settings using authenticator apps like Microsoft Authenticator or Google Authenticator
Recovery Options: Secure backup codes provided for account recovery if your device is unavailable
SMS Backup: Optional SMS-based 2FA available (with your consent) as a secondary authentication method
Enhanced Protection: 2FA provides up to 99.9% protection against automated attacks and unauthorized access
9. Your Privacy Rights
You have the following rights regarding your personal information:
Access: View and review all personal information we have about you
Correction: Update or correct any inaccurate information
Deletion: Request complete removal of your personal information
Portability: Export your data in a machine-readable format
Restriction: Limit how we process your information
Objection: Object to certain types of processing
Consent Withdrawal: Withdraw consent for SMS communications at any time
10. SMS Communications and Two-Factor Authentication
If you consent to receive SMS messages from nVadi, we use them for enhanced security and account protection:
Primary Purpose: SMS messages are used for account verification, login notifications, and Two-Factor Authentication (2FA)
Security Notifications: Immediate alerts for suspicious login attempts or account changes
Frequency: Messages are sent only when necessary for security purposes or when you initiate 2FA login
Carrier Charges: Standard message and data rates may apply according to your carrier's plan
Opt-Out Options: You can withdraw SMS consent anytime through account settings (note: this may disable SMS-based 2FA)
Secure Provider: SMS services are provided through Twilio, a SOC 2 compliant provider with strict data protection standards
Message Encryption: All SMS communications are transmitted using encrypted channels and contain no sensitive personal data
11. Legal Compliance
This privacy policy complies with applicable privacy laws including GDPR, CCPA, and HIPAA where applicable. We are committed to maintaining compliance with all relevant data protection regulations and industry standards.
12. Policy Updates
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically for any changes.
13. Contact Us
If you have any questions about this Privacy Policy, need to exercise your privacy rights, or want to request data deletion or export, please contact us:
Company: WhiteCoat Development
Service: nVadi
Privacy Contact: privacy@nvadi.com
Support: support@nvadi.com