Legal

Privacy Policy

Last updated: September 14, 2026

LENTIL HEALTH, INC. d/b/a Miraei AI ("Miraei," "we," "us") provides business-to-business software and analytics services for life-sciences organizations. This Privacy Policy explains how we handle personal information about visitors to our website, customers, and authorized users of our services.

1. Scope

This Privacy Policy applies to Miraei's website, platform, and related interactions with customers and users.

If you do not have a Miraei account and want to understand how Miraei handles professional information about you for its business-intelligence and customer-directed outreach services, please see our Professional Information Notice.

When Miraei processes personal information solely on a customer's instructions, that customer determines the purposes of the processing and its privacy notice may also apply.

2. Information we process

Depending on how you interact with Miraei, we may process:

  • Your name, work email address, job title, employer, and business contact details
  • Account information and authentication identifiers
  • Information about how you use our website and services, such as device, browser, log, and feature-usage information
  • Communications with Miraei, including support requests and feedback
  • Information submitted or configured by customers and authorized users when using the services
  • Information needed for billing, security, fraud prevention, and administration

Miraei's services are not designed to process patient records, medical records, or protected health information, and customers should not submit that information unless Miraei has expressly agreed otherwise in writing.

3. Google user data

Miraei offers Sign in with Google as an authentication option. If you use it, Miraei receives your email address, name, profile picture, and Google account identifier.

Miraei uses this information to authenticate you, create or match your Miraei account, and display basic account information in the application. Through this Google Sign-In authorization, Miraei does not request access to Gmail, Google Calendar, Google Drive, Google Contacts, or other Google services.

Miraei does not sell Google user data or use it for advertising. We share it only with service providers supporting functions such as hosting and authentication, as necessary to operate the services.

We retain Google profile information while the associated Miraei account is active and delete it from active systems after account closure or revocation, subject to applicable legal obligations and normal backup cycles.

Miraei's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. Connected email services

Separately from Google Sign-In, an authorized user may connect a business email account to Miraei through our email infrastructure provider, Nylas. Miraei and its providers process information necessary to authenticate the connection, send and manage customer-directed messages, and provide related delivery and engagement information.

The customer determines the recipients, purposes, and content of its messages. When providing these functions, Miraei processes the communications on the customer's behalf and does not combine a customer's email-engagement information with that of other customers.

5. Sources of information

We receive information:

  • Directly from customers, users, and people who communicate with us
  • From authentication, email-infrastructure, and other service providers used at a user's direction
  • Automatically when people use our website or services
  • From a customer's organization in connection with its use of Miraei

Our separate Professional Information Notice describes the sources used for non-user professional profiles.

6. How and why we use information

We use personal information to:

  • Provide, administer, support, and improve our services
  • Authenticate users and manage accounts
  • Enable customer-configured workflows, communications, analytics, and reporting
  • Respond to inquiries and communicate about our services
  • Protect the security and integrity of Miraei and prevent misuse
  • Comply with legal obligations and enforce our agreements

Depending on the activity and applicable law, we rely on performance of a contract, legitimate interests in operating and securing our business and services, consent where requested, or compliance with legal obligations.

7. How we share information

We may share personal information with:

  • Service providers supporting hosting, authentication, email infrastructure, analytics, security, support, and other operations
  • The customer organization associated with a user's account, including its authorized administrators
  • Professional advisers, authorities, or other parties when reasonably necessary to comply with law, protect rights and security, or complete a corporate transaction

Miraei may provide limited professional information to business customers as described in our Professional Information Notice.

8. International processing

Miraei is based in the United States. Personal information may therefore be processed in the United States and other countries whose data-protection laws may differ from those where you live or work. Where applicable law requires an international-transfer mechanism, Miraei relies on contractual or other legally recognized safeguards. You may contact us for more information about safeguards applicable to your information.

9. Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including providing the services, maintaining security and business records, complying with law, and resolving disputes. Information processed on a customer's behalf is retained in accordance with the applicable customer agreement and instructions. Information in backups is removed or put beyond active use through normal backup cycles.

10. Security

We use administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, disclosure, alteration, or misuse. No system can guarantee absolute security.

11. Your choices and rights

Depending on applicable law, you may have rights to request access to, correction of, deletion of, or restriction of your personal information, or to object to certain processing.

If Miraei processes information solely for a customer, we may direct your request to that customer or assist the customer in responding. Requests concerning a Miraei professional profile may be submitted as described in our Professional Information Notice.

You may also have the right to complain to the data-protection authority where you live or work.

12. Contact us

For questions or privacy requests, contact privacy@miraei.ai.