Sovelo
Home Privacy Terms

Sovelo legal information

Privacy Policy and Terms of Service

Both documents are maintained together. Use the buttons below to open the relevant document first.

Privacy Policy Terms of Service

Service terms

Terms of Service

Effective date: July 20, 2026

1. Acceptance

These Terms govern access to and use of Sovelo. By using the service, operating a clinic account, submitting an appointment request, or authorizing an integration, you agree to these Terms and the Privacy Policy contained in this legal document.

2. The Sovelo service

Sovelo provides software for patient booking, clinic and doctor dashboards, patient comments, patient follow-up, doctor preparation reminders, scheduling, notifications, patient reminders, confirmations, available-slot management, clinic operating hours, reschedules, cancellations, and connected automation.

Connected layers may include Google Calendar, WhatsApp, SMS, chat workflow routing, and AI-assisted operational routing. Features depend on clinic configuration, provider availability, subscription, jurisdiction, and technical readiness.

3. Clinic and authorized-user responsibilities

Clinic owners and administrators are responsible for selecting authorized users, defining doctor and staff permissions, protecting credentials, reviewing appointment information, and configuring clinic workflows.

Clinics must obtain notices, consents, and permissions required for patient information, communications, connected services, and staff access.

4. Patient use

Patients must provide accurate appointment and contact information and must not use Sovelo as an emergency channel. Appointment availability displayed by Sovelo may remain subject to clinic confirmation and operational changes.

5. Google Calendar integration

Google Calendar access is optional and requires authorization from the relevant Google account owner. Sovelo may create, update, and remove appointment events in calendars owned by that authorized account according to clinic actions.

The account owner may revoke access. Revocation, expired authorization, Google restrictions, provider outages, or direct changes made in Google Calendar may affect synchronization.

6. WhatsApp, SMS, and other communications

Communication delivery depends on valid recipient details, clinic configuration, applicable consent, provider availability, network conditions, and provider rules.

Clinics are responsible for ensuring that their communication practices comply with applicable privacy, consumer-protection, marketing, and messaging laws.

7. Chat and AI-assisted functions

Chat and AI-assisted functions are operational support tools. Their output may be incomplete, inaccurate, or require human review.

AI output must not be treated as a diagnosis, prescription, emergency instruction, or final clinical decision. Clinics remain responsible for all clinical and operational decisions.

8. Acceptable use

You must not:

  • Access another clinic's, patient's, or user's information without authorization.
  • Bypass tenant separation, access controls, security restrictions, rate limits, or integration controls.
  • Copy, disclose, or misuse OAuth credentials, access tokens, refresh tokens, passwords, or private links.
  • Introduce malicious code or use the service for unlawful, deceptive, abusive, or harmful activity.
  • Use chat or AI functions to make automated clinical decisions without appropriate qualified review.

9. Medical and emergency disclaimer

Sovelo is not a healthcare provider, does not deliver medical care, and does not replace professional clinical judgment. Sovelo must not be used as a substitute for emergency services.

10. Availability and third-party services

Sovelo works to provide a secure and reliable service, but operation may be interrupted by maintenance, internet conditions, provider outages, Google, communication networks, AI providers, security events, or circumstances outside reasonable control.

Failure of one connected provider does not necessarily mean the core Sovelo platform has failed.

11. Suspension and termination

Sovelo may restrict or suspend access where reasonably necessary to address security risk, unlawful use, material breach, nonpayment, provider restrictions, or harm to users or the service.

On termination or offboarding, clinic data and connected integrations will be handled according to contractual instructions, applicable law, the Privacy Policy, and controlled technical procedures.

12. Intellectual property

Sovelo software, branding, documentation, interface, workflow design, and original content are protected by applicable intellectual-property laws. These Terms do not transfer ownership of Sovelo technology.

13. Compliance responsibility

Clinics are responsible for determining which laws, regulations, professional rules, contracts, and patient obligations apply to their operation. Use of Sovelo alone does not guarantee compliance with a particular healthcare or privacy framework.

14. Disclaimers and liability

To the extent permitted by law, Sovelo is provided without a guarantee that it will always be uninterrupted, error-free, or suitable for every clinic workflow. Nothing in these Terms excludes rights or liability that cannot lawfully be excluded.

To the extent permitted by law, Sovelo is not responsible for indirect or consequential loss resulting from use of the service, incorrect clinic configuration, unauthorized access, or failure of a third-party provider.

15. Governing law

These Terms are governed by the laws of Indonesia, without limiting mandatory rights that apply under another jurisdiction's law. Disputes are subject to the competent courts of Indonesia unless applicable law requires otherwise.

16. Changes and contact

Sovelo may update these Terms to reflect changes to the platform, connected services, business arrangements, or applicable law. Continued use after an updated version becomes effective constitutes acceptance where permitted by law.

Questions may be sent to ewsabayu@gmail.com .

Privacy

Privacy Policy

Effective date: July 20, 2026

1. About Sovelo and this policy

Sovelo provides software for clinic appointment operations, patient communication, scheduling, connected integrations, and workflow automation. This policy explains how Sovelo collects, accesses, uses, stores, shares, retains, and protects information.

A clinic normally determines why patient appointment information is collected and how it is used. Sovelo processes that information to provide services to the clinic and its authorized users.

2. Information processed by Sovelo

Depending on clinic configuration and the features being used, Sovelo may process:

  • Patient name, telephone number, email address, requested service, appointment date and time, selected doctor, appointment status, and booking reference information.
  • Reschedule requests, cancellations, confirmations, reminders, follow-up information, and patient comments submitted through Sovelo workflows.
  • Clinic information, services, operating hours, appointment availability, staff accounts, role permissions, and operational settings.
  • Communication content and delivery information for WhatsApp, SMS, email, or other configured channels.
  • Chat messages and workflow-routing information where a clinic has enabled chat functionality.
  • Authentication records, timestamps, session information, diagnostic records, retry status, security events, and service logs.

3. Patient booking and clinic operations

Appointment information is used to display available slots, validate clinic operating hours, create bookings, prepare clinic and doctor dashboards, deliver confirmations and reminders, manage reschedules or cancellations, and support patient follow-up.

Patients should not submit information that is unrelated to the appointment or use a comment or chat field for an emergency.

4. Google Calendar data

When a clinic authorizes Google Calendar access, Sovelo processes OAuth credentials, a calendar identifier, and appointment-event information required to create, update, or remove events in calendars owned by the authorized clinic account.

Sovelo requests the Google scope calendar.events.owned. Google user data is used only for authorized calendar synchronization, security, troubleshooting, monitoring, and account disconnection.

Sovelo does not sell Google user data or use Google OAuth credentials for advertising, WhatsApp, SMS, chat, or AI-assisted routing. Google OAuth credentials are restricted to the Google Calendar integration and its security, monitoring, token-refresh, and administrative controls.

Sovelo handles Google API data in accordance with the Google API Services User Data Policy, including its Limited Use requirements.

5. WhatsApp, SMS, and notification services

Where a clinic enables a communication provider, Sovelo may send appointment confirmations, reminders, reschedule notices, cancellation notices, and follow-up messages through that provider.

The communication provider may process recipient identifiers, message content, delivery status, timestamps, and provider error information according to its own terms and the clinic's configuration.

6. Chat and AI-assisted workflows

Chat messages may be processed by Sovelo's workflow router to identify the appropriate operational path, clinic response, automation, or staff-review queue.

AI-assisted routing may process text submitted to an enabled operational workflow. Before activation for a clinic, the permitted content, provider configuration, retention or model-training settings, and required human review must be defined and documented. The AI layer is intended to assist routing and response preparation. It does not diagnose, prescribe, make final clinical decisions, or replace qualified healthcare professionals.

A clinic is responsible for deciding whether an AI-assisted feature is appropriate for its operation and for avoiding unnecessary sensitive information in free text.

7. Purposes of processing

  • Provide booking, availability, dashboard, scheduling, reminder, confirmation, follow-up, reschedule, and cancellation functions.
  • Operate Google Calendar, communication, chat, and other integrations authorized by a clinic.
  • Authenticate users and enforce clinic-specific access controls.
  • Monitor service health, retry failed operations, prevent abuse, investigate incidents, and improve reliability.
  • Respond to support requests and comply with lawful obligations.

8. Disclosure and service providers

Information may be disclosed to the clinic responsible for the relevant appointment, its authorized users, and providers that support hosting, communication, calendar, email, security, monitoring, or configured AI-assisted functions.

Provider processing is also governed by the applicable provider terms, technical configuration, contractual arrangements, and legal obligations. Sovelo does not sell personal information.

9. Retention, disconnection, and deletion

Sovelo retains information only for as long as reasonably needed to provide the service, follow clinic instructions, maintain security and operational records, resolve disputes, and comply with legal obligations.

Google OAuth credentials are retained while the integration remains authorized and required. At present, disconnection and clinic offboarding are handled through a controlled administrative process; automated destructive offboarding is not enabled. Access can be disabled, and the Google account owner can revoke access. Credential deletion is performed only after identity, tenant-isolation, and rollback checks.

Retention periods may vary according to clinic configuration, contractual requirements, applicable law, backup cycles, and the type of information involved.

10. Security

Sovelo uses technical and organizational safeguards such as encrypted transport, restricted service identities, access controls, separated clinic data stores, credential-permission controls, monitoring, backups, retry controls, and security logging.

No storage or transmission system is completely free of risk. Clinics and authorized users must protect account credentials and notify Sovelo of suspected unauthorized access.

11. International processing

Information may be processed in a country other than the country in which it was collected, including where hosting, calendar, communication, or other providers operate. Appropriate measures will be used where required by applicable law.

12. Individual requests

Depending on applicable law, an individual may request access, correction, deletion, restriction, objection, or another available action concerning personal information.

Patient requests should generally be directed first to the clinic that collected the appointment information. Google account owners may also revoke Sovelo through their Google Account third-party connection settings.

13. Children and guardian information

Where an appointment concerns a child or another person who requires a representative, the clinic is responsible for obtaining appropriate parent, guardian, or representative authorization.

14. Medical and emergency notice

Sovelo is an operational scheduling and communication platform. It does not provide medical advice and is not an emergency service. Urgent concerns must be directed to an appropriate healthcare provider or local emergency service.

15. Changes and contact

Sovelo may update this policy to reflect changes in the service, providers, law, or data-handling practices. The effective date will be updated when a revised policy is published.

Privacy questions and requests may be sent to ewsabayu@gmail.com .

© 2026 Sovelo. All rights reserved.

Home Privacy Policy Terms of Service