Australian Privacy Principles (APPs)

Clinical Notes AI, Inc. (“Clinical Notes AI,” “we,” “our,” or “us”) is committed to protecting the privacy of individuals in Australia in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This is an addendum to the Clinical Notes AI Privacy Policy and the Clinical Notes AI Terms of Service; those policies apply in addition to this addendum where applicable to the (APPs).

1. Open and Transparent Management of Personal Information

We manage personal information in an open and transparent way. This includes having a clearly expressed and uptodate privacy policy outlining how we collect, use, disclose, and manage your personal information.

2. Anonymity and Pseudonymity

Where practicable and lawful, you have the option of not identifying yourself or using a pseudonym when dealing with us. However, in certain circumstances, we may require your real identity to provide our services effectively.

3. Collection of Personal Information

We only collect personal information that is reasonably necessary for our business functions or activities. We collect personal information by lawful and fair means and not in an unreasonably intrusive way. Where reasonable and practicable, we collect personal information directly from you.

Types of Personal Information Collected:

• Contact details (e.g., name, email address, phone number)

• Professional information (e.g., company, title)

• Payment information

• Metadata and analytics from your use of our Services

• Any other information you provide directly to us

We will obtain your consent before collecting sensitive information, unless an exception applies under the APPs.

4. Dealing with Unsolicited Personal Information

If we receive personal information that we did not solicit, we will, within a reasonable period, determine whether we could have collected the information under APP 3. If not, we will destroy or deidentify the information as soon as practicable, provided it is lawful and reasonable to do so.

5. Notification of the Collection of Personal Information

At or before the time we collect personal information (or as soon as practicable thereafter), we will take reasonable steps to notify you or ensure you are aware of:

• Our identity and contact details

• The purposes for which we are collecting the information

• The entities or types of entities to which we usually disclose personal information that our privacy policy contains.

• Information about how you may access and correct your personal information and how to make a complaint whether we are likely to disclose personal information to overseas recipients and, if so, the countries in which such recipients are likely to be located

6. Use or Disclosure of Personal Information

We will only use or disclose your personal information for the primary purpose for which it was collected, or for a secondary purpose if:

• You have consented

• You would reasonably expect us to use or disclose the information for the secondary purpose, and it is related to the primary purpose

• Otherwise required or authorized by law

7. Direct Marketing

We may use your personal information for direct marketing purposes only if:

• We collected the information directly from you

• You would reasonably expect us to use or disclose the information for that purpose

• We provide a simple means by which you can request not to receive direct marketing communications from us

You may opt out of receiving marketing communications at any time by contacting us or using the opt out mechanisms provided in our communications or software platform.

8. CrossBorder Disclosure of Personal Information

We may disclose your personal information to overseas recipients, including in the United States. Before disclosing personal information overseas, we will take reasonable steps to ensure that the overseas recipient does not breach the APPs in relation to your information, or we will seek your consent to the disclosure.

9. Adoption, Use, or Disclosure of Government Identifiers

We do not adopt, use, or disclose any government related identifiers (such as Tax File Numbers) as our own identifier of you unless required or authorized by law.

10. Quality of Personal Information

We take reasonable steps to ensure that the personal information we collect, use, or disclose is accurate, uptodate, complete, and relevant. We encourage you to contact us if your personal information changes.

11. Security of Personal Information

We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorized access, modification, or disclosure. We use a combination of technical, administrative, and physical safeguards. When we no longer need your personal information, we will take reasonable steps to destroy or de identify it, unless required by law to retain it.

12. Access to Personal Information

You have the right to request access to the personal information we hold about you. To make a request, please contact us using the details provided below. We will respond to your request within a reasonable period and provide access in the manner you request if it is reasonable and practicable to do so.

We may refuse access in certain circumstances as outlined in the APPs, and if so, we will provide written reasons for the refusal and the mechanisms available to complain about the refusal.

13. Correction of Personal Information

If you believe that any personal information we hold about you is incorrect, incomplete, or not uptodate, you may request correction. We will take reasonable steps to correct the information to ensure that it is accurate, uptodate, complete, relevant, and not misleading.

14. Complaints and Contact Details

If you have any questions, concerns, or complaints about this addendum or our handling of your personal information, please contact us:

Email: privacy@clinicalnotes.ai

Mailing Address: 651 North Broad St. Ste 201, Middletown, DE 19709 USA

Phone: +1 619-804-4317

We take complaints seriously and will respond within a reasonable period. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC):

Website: www.oaic.gov.au

Phone: 1300 363 992

Email: enquiries@oaic.gov.au