Privacy Policy

Controller

The controller of the registration, billing, payment and usage data described in this policy is JIVSoft S.A.. Its contact details appear at the end of this page.

The data that Customer uploads about its own patients or clients is Customer’s responsibility; JIVSoft S.A. acts as processor under the Data Processing Agreement (https://live.jivsoft.com/en/data-processing).

Data we process

• Registration data: name, email address, telephone number, country and name of the practice or business.
• Billing data: type and number of identity document, legal name and address, when a plan is purchased.
• Payment data: the identifier of each transaction and its outcome. We never receive or store card data: it is entered directly into the payment gateway.
• Usage data: access date, IP address, browser and security events, for security, support and evidence of acceptance of the terms.
• Referral data: whether the visit came from an advertisement or a search engine. A random identifier is stored in a first-party cookie of this domain, which cannot be used to track browsing outside this site.

How we use it and on what legal basis

• To provide, charge for and invoice the subscribed service (performance of the contract).
• To provide support and send service notices (performance of the contract).
• To maintain security and prevent fraud and abuse (legitimate interest and legal obligation).
• To comply with accounting and tax obligations and requests from authorities (legal obligation).
• To measure which campaign each visit to our commercial pages comes from (legitimate interest).
• To send you marketing communications, only if you consent (consent, which you may withdraw at any time without affecting the service).

Your account information

The data you upload to LIVE (patients, medical records, prescriptions, appointments, invoices) belongs to you. We process it solely to provide the service to you.

We do not use it for advertising purposes, we do not sell it, we do not transfer it and we do not use it to train artificial intelligence models. Our metrics record events (for example, that the first patient was created), never clinical content.

With whom it is shared

• Infrastructure, storage and email providers, to operate the service.
• The payment gateway, to process payments.
• Tax authorities, when you issue electronic tax documents.
• Messaging providers (Twilio, Meta), if you activate WhatsApp reminders.
• The artificial intelligence provider (OpenAI), only with the text you submit when using an AI feature.
• Google, only on our commercial and registration pages, to measure campaigns and to verify that the person registering is not a bot (reCAPTCHA). No account information or clinical content is ever sent.
• Authorities, when required by law or by a valid order.

International transfers

Our providers may host or process data outside your country. We require each of them to provide appropriate contractual data protection safeguards, and we comply with the additional requirements of your country described in the country-specific Terms.

How long

For as long as the account is active and, thereafter, for the period required by applicable accounting and tax regulations or the period necessary to address claims.

Account information is retained for 90 days after the service ends so that you may request it; thereafter it may be deleted.

Registration requests that are never verified expire and are deleted.

Your rights

You may exercise the rights of access, rectification, updating, erasure, objection, portability and any other rights granted by the law of your country by writing to support@jivsoft.com from your registered email address. We will respond within the time period set by your law.

If you are not satisfied with the response, you may contact the data protection authority of your country, identified in the country-specific Terms (https://live.jivsoft.com/en/terms/countries).

Security

Access is encrypted in transit; passwords are stored using irreversible hashing; each account is isolated, and access within it is controlled by roles and permissions. No system is infallible: if we detect a breach affecting you, we will notify you in accordance with the law.

Minors

The service may be purchased only by professionals and organizations. Data of patients who are minors is processed by Customer under its own responsibility and with the authorization of their representatives as required by law.