Information we collect
We process account details such as email, display name, role, access status, acceptance records, security events, and billing metadata if billing is enabled.
If you choose to provide it, we process child display names, approximate birth year, therapy focus, session records, goals, trials, saved materials, notes, audio recordings, transcripts, and clinician-reviewed report drafts.
How we use information
We use information to authenticate users, provide the private workspace, connect session evidence to draft documentation, deliver requested transcription or AI-supported features, operate security and deletion controls, respond to requests, and operate and improve the service.
We do not sell personal information. We do not use child/client information for advertising.
Minimum necessary information and your authority
The product is designed for aliases or display names and minimal clinical context. Do not enter legal names, exact birth dates, diagnoses, school records, or other identifiers unless necessary and permitted for your workflow.
You are responsible for having the required authority and consent before entering information about another person or recording audio. If your clinic, school, health plan, or jurisdiction requires a written agreement or approval before using this type of service, do not use real data until it is complete.
Storage and service providers
Sensitive workspace records and private uploaded assets in the active Azure environment are hosted in Microsoft Azure. Authentication is temporarily provided through Supabase Auth. Selected feature providers receive information only when their feature is invoked.
Microsoft Azure
Hosting, private storage, database, secrets, and operational security for the Azure environment.
Supabase Auth
Account sign-in and session authentication while this authentication provider is in use.
AssemblyAI
Transcription only when you request transcription for uploaded audio.
OpenAI
Draft-assistance features only when you request an AI-generated report draft.
Google Gemini
Enabled media or game-audio generation features; it is not intended to receive child records.
Stripe (if billing is enabled)
Subscription and payment processing. Payment-card details are handled by Stripe rather than stored in the SLP Nova workspace.
Service providers may process data outside your province or country under their applicable contractual and security controls. Material changes to processing purposes or provider disclosures will be reflected in an updated policy where required.
SLP Nova does not authorize real child/client data for workflows that require a separate BAA, DPA, school agreement, clinic vendor approval, or written privacy review unless that approval has been completed in writing.
Retention and deletion
Uploaded audio recordings are configured for deletion after 30 days and can be deleted earlier from the session workflow. Transcripts, session records, goals, trials, saved materials, and report drafts are retained while needed to provide the workspace or provide the service, unless deletion is requested or preservation is required for security or legal reasons.
Account metadata, legal acceptance records, audit logs, and billing records may be retained after closure when reasonably necessary to establish authorization, investigate security incidents, resolve disputes, keep financial records, or comply with law.
Deletion from active systems may not immediately remove data from protected backup or diagnostic copies. Residual copies are restricted from normal product use and expire under infrastructure retention controls unless preservation is required.
Access, correction, export, and deletion requests
To request access, correction, export, or deletion, use the controls in Settings or email hello@slpnova.com from your account email. We verify deletion requests before acting on them.
Security and policy updates
We use technical and organizational controls intended to protect information from unauthorized access, use, loss, or disclosure. If an incident affects your information and notice is required, we will use available account contact information.
Security, privacy, support, and legal requests can be sent to hello@slpnova.com.
Material changes to this Privacy Policy will require acceptance of a new version before continued workspace use.