Tali AI Privacy Policy

Policy

Tali AI ("Tali", "we", "us", "our") posts the current version of the Privacy Policy ("Policy") at https://tali.ai/privacy-policy which sets forth Tali's Policy with respect to information, including personally identifiable data and other information that is collected from visitors and users ("**Providers", "Provider", "you", "your") of Tali's applications, websites, content, products and services (individually and collectively referred to as the "Tali Platform"). We reserve the right to amend the Policy at any time to account for changes in Applicable Law, our practices and the Tali Platform. Please check to see if we have amended the Policy since you last used the Tali Platform to ensure you are aware of (and agree to) our current privacy practices.

Definitions

The following provides the meaning of certain terms used in this Policy. If not defined below, the capitalized words and phrases in this Policy have the same meaning as in Tali's Terms of Use.

• "Tali Platform" refers collectively to the hardware, software, applications, websites, Content, products and services owned and/or operated by us to enable the provision of Electronic Health Record enablement to Providers, among other purposes.
• "Information" refers collectively to information about an identifiable patient as further defined in Applicable Law ("Personal**Information") and information about a patient's health or healthcare ("Personal Health Information" or "PHI") as further defined in Applicable Law.
• Health professionals ("Providers") refer collectively to physicians registered to practice medicine in a province or territory of Canada ("Authorized Physicians") and regulated health professionals other than physicians registered to practice in a province or territory of Canada ("Authorized Non-Physician Providers) registered to use the Tali Platform to provide services in the Authorized Provider's scope of practice ("Healthcare Services").
• "Applicable Law" in relation to Tali or Providers, means the laws and regulations including privacy laws and regulations to which each is subject.
• "Content" means general information about health related topics posted on the Tali Platform, access to which is not the delivery of healthcare services (including diagnosis, care or treatment), does not replace and cannot be relied upon as healthcare services.

Agreement With Tali

The arrangement between you and Tali -- your rights and obligations and those of Tali's -- is set out in Terms of Use and where applicable, supplementary Terms. Your access to, and use of, the Tali Platform is subject to the Terms of Use found at https://tali.ai/terms-of-use.

Application of This Policy

This Policy describes Tali's management of Information, including the purposes for which we collect, use and disclose Information and the safeguards we use to protect Information. The Tali Platform is a tool used by Providers that does not alter their obligations or responsibility for Information they collect. Providers are subject to privacy legislation and professional requirements that govern their record keeping and management of Information, regardless of the tools they use to collect, use, disclose and hold the Information.

Overview of the Tali Platform

As mentioned, Providers are responsible for their collection, use, disclosure, retention, destruction and protection of Information. The following is an overview of how the Tali Platform functions and may not apply to any particular Provider.

• Main Services. Tali uses deep learning and natural language processing techniques to analyze Providers' voices and input texts to enhance their interactions with Electronic Medical Record (EMR) software. Through Tali, Providers can transcribe their notes, retrieve medical information from trusted resources and also navigate through their EMR faster.
• Other Services. We may provide services that support the provision of Healthcare Services, which may include receiving, reviewing and scanning or otherwise uploading Providers' notes and laboratory test results to the Tali Platform, faxing prescriptions to pharmacies, and obtaining referrals for consultations with certain specialists, collecting information (such as that in referral letters and health card numbers) required for scheduled appointments. We provides some of these services to Providers (for example, the receipt and preliminary review of laboratory results). These services require the use of Information.
• We may expand the services available through the Tali Platform from time to time to include services that are healthcare related but not Healthcare Services (such as navigational services to assist Providers to access information on the Tali Platform). Unless otherwise advised, Tali Personnel will deliver these services. Tali Personnel receive privacy and security training and commit to complying with Tali's obligations in connection with Information to the extent applicable to their role, as more particularly described below in the section on Safeguarding Information.

Tali's Collection and Use of Information

Tali collects and uses Information to the extent necessary to develop, evaluate, improve and provide the Tali Platform and related services. We do not collect or use Information if non-identifying information will suffice. More specifically:

• Collection. We collect and use your Information to register you, create your account ("Account"), authenticate you when you log in, and personalize your experience while using the Tali Platform.
• We use Information to provide you with services that you request us to perform on your behalf.
• We use Information to the extent required to operate, deliver and support the Tali Platform
• If you use our medical transcription and voice recognition service, we may capture your voice and the words that you speak into the product and we may use your voice and text to optimize our machine learning models.
• If you use our information retrieval services or navigation services, we may collect your commands and questions.
• We may use Information for loss prevention, anti-fraud purposes, and to comply with regulatory and legal requirements.
• We may use Information to help us create, develop, evaluate, and improve the Tali Platform and Content.
• We may collect information about the software and how you use it, including settings changes, behavioural usage, character trace paths, custom words, total number of characters typed, speed of text entry, and similar data.
• We may indirectly collect personal information. Tali provides medical voice recognition, transcription, and clinical documentation to Providers. To deliver these services, we may collect patient data indirectly from vendors serving our healthcare customers. This patient data may include name, birthdate, address, medical record, diagnosis, image, and treatment information. Where consent is required for the collection and use of medical information, Tali will obtain consent. However, if we are processing personal data on behalf of a vendor that has direct patient access, it will be the third party's responsibility to obtain the consent
• Essential and Non-essential Communications. From time to time, we may send Providers service announcements, including information about our latest products, updates to our policies, Terms of Use and software ("Essential Communications"). We may send Providers who opt-in to receive the information, information such as newsletters, or information about any upcoming events that we believe may be of interest or apply to them ("Non-Essential Communications"). Providers may opt-out of receiving Non-Essential Communications at any time by emailing us through our contact page at https://tali.ai/contact-us to update their preferences. Please reference updating your preferences in your email. For clarity, service announcements including updates to our policies, Terms of Use and software are Essential Communications not subject to an opt-out.

Third Party Service Providers

Tali uses third-party software and service providers for a variety of services including but not limited to technical, operational and other business, and marketing services. We require our third party service providers to limit their use of Information (that you or we provide or allow them to access) to that necessary for their services, and to have security measures in place that are appropriate for the protection of Information. Some of our service providers operate from outside of Canada, which means that Information they use on our behalf for their services may be subject to the law of country or state in which they operate ("Country") including lawful orders to produce the Information to among others, the government of the Country, its law enforcement and other agencies including where applicable national security authorities, and courts.

Tali's Disclosure of Information

Compliance, Fraud Prevention. We disclose Information to the extent we, in our good faith judgment, are required to do so to comply with Applicable Law including to respond to a subpoena, order, or similar obligation to produce information, establish or exercise Tali's legal rights including defend against legal claims, detect, investigate, suppress, prevent or take action regarding illegal or prohibited activities, including without limitation suspected fraud and threats to the reputation or safety of any person.

Business transactions. We may disclose Information for the purposes of conducting required due diligence or the completion of a business transaction such as a merger, acquisition or asset sale. We will comply with any applicable legal requirements, including agreements and notice requirements that apply to the disclosure of Information for such transactions.

Tali's Retention/Deletion of Information

Unless we notify you otherwise, we will retain your Information on the Tali Platform until you (or Tali) close your Account. On termination, we will provide you with a grace period of 30 days for you to copy your Information, after which we will delete the Information associated with your Account, except for any Information that Tali is required to retain under Applicable Law. When Information is deleted, it is removed from our active database. Any Information that remains in our backup is securely stored and isolated from any further processing until deletion is possible.

Privacy Settings

Please contact us directly by emailing us through our contact page at https://tali.ai/contact-us if you have questions on privacy or about how to use the Tali Platform. To protect your privacy, we may request information to verify your identity when you contact us.

Safeguarding Information

We only permit Tali personnel ("Personnel" which includes our employees, contractors and subcontractors) to access Information to the extent necessary to perform their designated functions. We require Personnel to complete privacy and security training and to commit to protecting Information by complying with our policies, procedures and Applicable Law.

We store your information in electronic format within Canada, using computer systems with restricted access and housed in facilities using physical security measures.

Tali is PIPEDA and HIPAA compliant. We can guarantee that PHI data will never be shared with third parties and is encrypted both in transfer and at rest.

More generally, we have in place appropriate physical, technological, and organizational safeguards including access controls to protect Information against loss, theft, and unauthorized access, use and disclosure. Notwithstanding the safeguards we employ and our commitment to protecting Information, we cannot guarantee the security or error-free transmission or storage of Information. There are risks inherent in the use of electronic means to transmit and hold information in electronic format. These risks can be minimized but not eliminated by the use of appropriate security measures, such as the measures we employ. These risks include interception, loss, corruption, unauthorized access to, use and disclosure of Information, and delay in the availability of Information.

You play an important role in protecting your privacy and your Information and for that purpose, we ask you to do the following.

• Do not share your Account or password with anyone. We will never ask you for your password, including in any unsolicited communication such as letters, phone calls or email messages, so please do not provide it and contact us if you receive such a request.
• Log out of your Account as soon as you finish using it, especially if you share the device you use to access the Tali Platform with anyone else.
• Password-protect your device with a strong and unique password.

Tali's Use of De-identified Data

Tali obtains the authorization of Providers to collect from them and use data created by de-identifying Information so that it no longer identifies a patient ("Data"). We may use Data for monitoring the compliance of Providers with the Tali Platform terms of use, for making use of the Tali Platform more accessible and enhancing the experience for Providers through analyzing Provider usage and utilization patterns, and designing surveys (to be posted and completed at the discretion of Providers). We may also use or disclose Data for the purposes of academic research. We will not use Data to re-identify patients or for any other purpose prohibited by Applicable Law. We will only de-identify Information in a manner that complies with Applicable Law.

Cookies and Similar Technologies

The Tali Platform, email messages, and marketing materials use "cookies" and other technologies such as pixel tags and web beacons. We use these technologies to better understand the use of the Tali Platform, analyze trends, and administer, personalize and improve the experience of using the Tali Platform for Providers. Tali uses cookies including third party cookies to obtain information about the use of the Tali Platform. For more information about our use of cookies and your ability to accept or decline our use of cookies, please refer to our Cookie Policy, posted at https://tali.ai/cookie-policy.

Links to Third Party Websites

The Tali Platform may contain links to websites that we do not own or operate. The provision of these links is not an endorsement of or referral to the linked websites. We provide the links solely for your convenience. We strongly encourage you to review the privacy policies and terms of use applicable to any site you visit. This Policy does not apply to linked sites or pages and we are not responsible for the content or privacy practices applicable to them or used by their operators.

Contact Us

If you have any questions, concerns or suggestions about our privacy practices, please contact us at https://tali.ai/contact-us.