Privacy Policy

What Nabi is

Nabi ("Nabi," "we," "us") is an AI receptionist for elective-care clinics. Clinics that use Nabi connect a phone number so that Nabi can answer their customers' calls, send appointment texts, and book appointments onto the clinic's calendar.

Information we collect

• Message content. The text of the appointment SMS messages a clinic sends through Nabi. Texts are one-way notifications: a reply other than STOP or HELP is not read or answered.
• Contact information. Phone numbers and names shared during a conversation, used to keep track of a customer's conversation and booking history with a clinic.
• Booking and calendar data. Appointment details (service, time) and, if a clinic connects Google Calendar, the calendar access needed to check availability and create bookings.
• Clinic account data. Login/account information for clinic staff who use the Nabi dashboard.

How we use information

We use the information above to:

• Send appointment texts (confirmations, reminders, waitlist offers and follow-ups) on behalf of a clinic, and honour STOP and HELP replies.
• Follow up with leads who have gone quiet, per the clinic's configured follow-up settings.
• Check calendar availability and create/update/cancel appointments.
• Show clinic staff their conversation and booking history in the Nabi dashboard.

Message content, call audio and transcripts, dictated visit notes and booking details are sent to the AI and infrastructure providers listed under Service providers below so that Nabi can answer, draft, transcribe and book. Those providers process the data on our instructions under terms that do not allow them to use it to train their models, and we do not use it to train models either. We do not sell personal information. Mobile phone numbers and SMS opt-in data are not shared with third parties or affiliates for their own marketing purposes.

Data storage & retention

Application data (records, messages, bookings, uploaded files) is stored with Supabase. Call audio, voice transcripts, texts and emails pass through the providers below. Some of these providers process data in the United States. We retain conversation, booking and chart history for as long as a clinic maintains an active Nabi account, so staff can reference prior visits and conversations; a clinic can export its data from the dashboard and can ask us to delete its account data.

Service providers

Nabi runs on the following providers, each of which receives only what it needs for its part:

• Supabase. Database, file storage and login for the dashboard and booking pages.
• Twilio. Phone numbers, calls and text messages.
• Amazon Web Services. The voice AI that answers calls (Amazon Bedrock) and storage of call audio.
• Anthropic. The AI that drafts replies, chart notes, translations and summaries.
• OpenAI, through Vercel's AI Gateway. Transcription of dictated visit notes.
• Resend. Booking and account emails.
• Stripe. Card payments, deposits and clinic subscriptions; card numbers are held by Stripe, not by Nabi.
• Vercel and Railway. Hosting for the website, dashboard and API.
• Google. Sign-in with Google and, if a clinic connects it, Google Calendar.
• Expo. Push notifications to the Nabi iOS app.

We will update this list when a provider changes.

Your choices

A customer who no longer wants to hear from a clinic via Nabi can ask the clinic directly, or reply STOP to an SMS thread. A clinic can disconnect Google Calendar at any time from their Nabi dashboard Settings, which stops Nabi from accessing that account going forward.

Contact us

Questions about this policy or your data can be sent to hello@nabiai.tech.