Privacy policy

Last updated: 13 November 2026

This policy explains how Corvidis LLC (“Corvidis”, “we”) handles personal information on this website and in our products (SurgiNest, and MediNest when it launches), the clinical software we provide to practices.

1. Two different roles

• Patient information in our products. The practice that uses our products decides what patient information is collected and why. For that information the practice is responsible (the “controller”) and Corvidis acts only on its behalf (a “processor”). If you are a patient, please contact your practice first about your records; we will help the practice answer you.
• This website and user accounts. For messages sent through this website and for the accounts of the people who use our products, Corvidis is responsible.

2. What we collect on this website

Only what you type in the contact form — your name, email address, the kind of person you are (surgeon, clinic, patient …), the topic and your message — plus a one-way scrambled form of your internet address and your browser type, used only to stop abuse. This website sets no tracking or advertising cookies and uses no analytics.

3. How we use it

• To answer your message and keep a record of our conversation.
• To run our products for practices: to sign users in, keep it secure, provide support and improve it.
• We do not sell personal information and do not use patient information for advertising.

4. Who else processes it

We use carefully chosen service providers to host and run our products — for example cloud hosting and databases, file storage, email delivery, messaging platforms the practice connects (such as WhatsApp or Messenger) and, where the practice switches them on, AI services. They may only use the information to provide their service to us. Some of them are located outside your country; we use them under contractual safeguards.

5. How we protect it

Each practice's data is kept apart by the database itself; connections are encrypted; sign-in can require a second step; access is limited by permissions; and sensitive actions are recorded. Shared studies and links are anonymised by default and expire. No system is perfectly secure, but we work to keep the risk as low as reasonably possible and will inform affected practices of a breach without undue delay.

6. How long we keep it

Contact messages: up to two years after the conversation ends. Patient information: as long as the practice keeps it in our products and as required by the practice's legal record-keeping duties; when a practice deletes information or stops using our products, it is removed from active systems and later from backups.

7. Your choices and rights

Depending on the law where you live, you may ask to see, correct, export or delete your personal information, or object to how it is used. Use the contact form (choose “Privacy / data request”). For patient records, we will pass your request to the practice that holds them.

8. Children

This website is not meant for children. Information about children in our products is entered by their practice, under the practice's responsibility.

9. Changes

We may update this policy; the date above shows the latest version. Important changes will be announced to practices using our products.

10. Contact

Corvidis LLC — please write to us through the contact form.