Privacy Policy
Last updated: June 24, 2026
1. Introduction
NuScript Systems, Inc. ("NuScript", "we", "us", or "our") operates the Audryl platform (audryl.us and app.audryl.us). This Privacy Policy describes how we collect, use, store, and protect information when you use our services. Protected health information processed on behalf of a client is governed by the Business Associate Agreement (BAA) between NuScript and that client, which controls over this policy for such data.
2. Information We Collect
- Account Information: When you register for Audryl, we collect your name, email address, phone number, company name, and role.
- Usage Data: We collect information about how you interact with the platform, including documentation volumes, feature usage, login times, and performance metrics.
- Medical Audio & Documentation Data: As a clinical documentation platform, we process audio files and transcribed clinical documents on behalf of our clients. This data is processed solely to provide the documentation service, is governed by the applicable BAA, and is treated with the highest security standards.
3. How We Use Your Information
We use collected information to provide and improve the Audryl platform, process clinical documentation through our AI pipeline, generate analytics and reporting, communicate service updates and support, and comply with legal obligations.
4. Data Security
We implement industry-standard security measures including encryption at rest and in transit, role-based access controls, secure US cloud infrastructure, SOC 2-audited controls, regular security assessments, and audit logging of all data access.
5. Data Storage & Retention
Data is stored on secure US cloud infrastructure. Medical audio files and documentation data are retained per the customer's configuration and applicable regulations, and deleted or returned per the BAA upon termination.
6. Third-Party Subprocessors
Audryl uses a limited set of vetted third-party subprocessors to operate the platform, each engaged under terms consistent with our HIPAA obligations. A current subprocessor list is available to clients under NDA on request.
7. Data Sharing
We do not sell, rent, or trade your personal information. We share data only with subprocessors necessary to operate the platform, when required by law, regulation, or legal process, and with your organization as configured by the account administrator.
8. Your Rights
You have the right to access your personal data, request correction of inaccurate data, request deletion of your data (subject to legal retention requirements), export your data in a portable format, and withdraw consent for optional data processing.
9. Cookies
We use essential cookies for authentication and session management. We do not use tracking cookies for advertising purposes.
10. Jurisdiction
This Privacy Policy is governed by the laws of the State of Texas, USA. Any disputes arising from this policy shall be subject to the exclusive jurisdiction of the courts located in the State of Texas.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users of material changes via email or platform notification.