Privacy Policy

Remedy Sys LLC (“Remedy Sys,” “Narzim,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website, use the Narzim platform, or otherwise interact with us. By using our services, you agree to the practices described here.

1. Information we collect

We collect information you provide directly, information collected automatically, and information from third parties, including:

• Account and contact details (name, email, phone, organization, role)
• Billing and transaction information
• Content you submit to the platform, which may include patient records and electronic Protected Health Information (ePHI)
• Usage data, device and browser information, and log data
• Cookies and similar technologies

2. How we use information

We use information to operate, maintain, and improve our services; to provide support; to process payments; to communicate with you; to ensure security and prevent fraud; and to comply with legal obligations.

3. Protected Health Information & HIPAA

When we process ePHI on behalf of a covered entity or business associate, we act as a Business Associate under HIPAA. Our handling of ePHI is governed by the applicable Business Associate Agreement (BAA) and by HIPAA’s Privacy and Security Rules, which take precedence over this Policy with respect to ePHI.

4. How we share information

We do not sell personal information. We share information only as needed with:

• Service providers and sub-processors who support our operations
• Your organization and authorized users
• Authorities when required by law or to protect rights and safety
• A successor entity in connection with a merger, acquisition, or asset sale

5. Data retention

We retain information for as long as needed to provide the services, comply with legal obligations, resolve disputes, and enforce agreements. Retention of ePHI follows the terms of the applicable BAA and customer instructions.

6. Security

We use administrative, physical, and technical safeguards — including encryption in transit and at rest, access controls, and continuous monitoring — designed to protect information. No method of transmission or storage is completely secure.

7. International data transfers

We operate in Mexico and the United States and may process information in either country. Where required, we implement appropriate safeguards for cross-border transfers in line with applicable law, including Mexico’s data protection framework and applicable US requirements.

8. Your rights and choices

Depending on your location, you may have rights to access, correct, delete, or restrict processing of your personal information, and to object or withdraw consent. To exercise these rights, contact us using the details below. Requests involving ePHI are directed to the relevant covered entity.

9. Cookies and tracking

We use cookies and similar technologies to operate the site, remember preferences, and analyze usage. You can control cookies through your browser settings; disabling them may affect functionality.

10. Children’s privacy

Our services are intended for healthcare organizations and are not directed to children. We do not knowingly collect personal information directly from children outside of records lawfully managed by our customers.

11. Changes to this Policy

We may update this Policy from time to time. Material changes will be indicated by updating the “Last updated” date and, where appropriate, through additional notice.

12. Contact us

For questions about this Policy or our privacy practices, email privacy@narzim.com or reach us through our contact page.