naoveil privacy notice
Last updated: October 14, 2026
This notice explains how naosuu LLC handles personal information in connection with naoveil and the website naoveil.naosuu.com. naoveil is our tool for removing or disguising identifying details in research spreadsheets, available as an Excel add-in, a desktop app and a command-line tool. Some files and settings, such as earlier exports, study mapping workbooks and the desktop installer, may still show the earlier names "Naosuu Research" or "Naosuu".
Who we are
naosuu LLC ("naosuu", "we"), 418 Broadway, Suite N, Albany, NY 12207, United States, is responsible for the personal information described in section 2. Under EU and UK data protection law, we are its "controller". Contact: [email protected].
The short version
- naoveil processes your data on your own computer. We never receive the datasets you open, the files you export, your study mapping files or your processing records.
- naoveil contains no analytics, tracking, telemetry or advertising, and it does not contact our servers, including to check licences.
- We collect personal information only when you contact us, when our web host records visits to our website, when we send you news about naoveil, and if you buy a licence.
1. Data you process with naoveil
When you use the Excel add-in, the desktop app or the command line, your data stays where you keep it: on your computer, or in your own Excel or Microsoft 365 storage. naoveil does not send it to naosuu or to any other service. You, or your institution, decide what data to process and are responsible for it. We do not act as your processor or as a HIPAA business associate for this data.
Some practical points:
- Excel workbooks. The Excel add-in adds the processed data and the processing record as new sheets in the workbook you are using. That workbook still contains your original data. Before you share processed data, copy the processed sheet to a new workbook and share only that. If you use Excel for the web, or save to OneDrive or SharePoint, Microsoft stores the workbook under your organisation's Microsoft agreement.
- Study mapping files. If you use a study mapping, naoveil saves an encrypted file protected by your passphrase. It does not contain raw patient IDs, but together with the passphrase it can link a patient ID to its study code, so treat it as confidential. In Excel, the mapping opens as a new workbook: when you save it, choose a folder on your computer rather than OneDrive or SharePoint, unless your institution has approved that storage. We cannot recover the file or your passphrase.
- Processing records. The record exported with your data includes the file name, column headers, the decisions made and any purpose notes you write. It contains no data values, but file names and notes can contain personal information, so keep personal information out of them and keep the record with the dataset's other records.
- Licences. naoveil does not contact our servers to check a licence, and it does not send us your data, your usage or details about your device.
- Microsoft Office. The Excel add-in runs inside Microsoft Excel and loads Microsoft's Office.js library from Microsoft's servers. Microsoft's handling of that request is governed by the Microsoft Privacy Statement.
Pseudonymised or de-identified data can still be personal data. naoveil helps you prepare data; it does not decide whether your data can be shared.
2. Information we collect
| What | When | Why | Legal basis (EU/UK) | How long we keep it |
|---|---|---|---|---|
| Technical request information: IP address, browser type, page or file requested, date and time. Cloudflare, which hosts our website, processes it automatically; we do not download it or use it to identify or profile you | When you visit naoveil.naosuu.com, or when the Excel add-in loads its files from it | To deliver the website and add-in, protect them against attacks and fix errors | Legitimate interests | Kept by Cloudflare under its data processing terms, then deleted |
| Name, email address, organisation and the content of your message | When you email us about the pilot or for support | To answer you and run the pilot | Legitimate interests; contract, if you join the pilot | 24 months after our last contact |
| Name, email address and organisation | When you ask for news about naoveil, or when we contact you about the pilot using your professional contact details | To send you news about naoveil and the pilot | Consent, which you can withdraw at any time; or legitimate interests for professional outreach | Until you unsubscribe. We keep a record of your opt-out so that we never contact you again |
| Billing contact (name, email address, organisation, billing address, VAT number), licence details and payment records | If you or your organisation buy a licence | To sell and manage licences, and for tax and accounting | Contract; legal obligation | As long as tax and accounting law requires |
Please do not send us research data, patient information or files containing personal information, including in support requests. If you need help, describe the problem or use synthetic example data, and do not show real data during a screen-share. If we receive such data by mistake, we delete it and record that we did.
We do not use cookies on naoveil.naosuu.com. We do not sell or share personal information, we do not use it for targeted advertising or to train AI models, and we do not make automated decisions about you that have legal or similarly significant effects.
3. Who we share information with
- Cloudflare, which hosts naoveil.naosuu.com and the Excel add-in files and provides our domain name service.
- Google Workspace (Gmail), which hosts our email and which we use to send marketing and outreach emails.
- Stripe, which processes payments if you buy a licence. Stripe receives your payment details directly; we do not see or store your full card number. See the Stripe Privacy Policy.
- Professional advisers and authorities, when required by law or to protect our rights.
We use Microsoft Azure to digitally sign our Windows installer. This does not involve your data.
4. International transfers
naosuu is a United States company, and our service providers Cloudflare, Google and Stripe are United States companies that may process personal information in the United States and other countries. Where personal information from the European Economic Area, the United Kingdom or Switzerland is transferred to the United States, we rely on these providers' certification under the EU-US Data Privacy Framework (and its UK and Swiss extensions) and on the European Commission's Standard Contractual Clauses included in their data processing terms. You can ask us for a copy of the relevant safeguards at [email protected].
5. Security
naoveil encrypts study mapping files with AES-256-GCM, saves exported files so that only your user account can read them on your computer, warns you before you save to a cloud-synced folder, and warns you when a purpose note seems to contain personal information. Our website uses HTTPS, loads nothing from third parties, and does not use Cloudflare's analytics features. No method is perfectly secure; protect your device, passphrases and files.
6. Your rights
Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict its use, to withdraw consent at any time, and to complain to a data protection authority. To use these rights, email [email protected]. We will answer within one month. We do not have access to the research data you process with naoveil; requests about that data should go to the institution responsible for it.
7. Children
naoveil is a professional tool and is not directed to children.
8. Changes
We will update this notice whenever naoveil changes how it handles information, for example if a feature starts connecting to the internet. We will change the date above and, for significant changes, tell pilot participants and licence holders directly.
9. Contact
naosuu LLC, 418 Broadway, Suite N, Albany, NY 12207, United States. [email protected]