What we hold about you, and why.

If you ask for a call or join the Medical list

We keep your name, your clinic's name, your email, your phone number if you gave one, which system you use today and which side of Sovia you asked about. We use them to ring or email you about Sovia and for nothing else.

We also keep the network address the form was sent from, for a short time, so the form can't be flooded.

We keep the request until we've spoken and you've either moved to Sovia or told us you're not interested, and for no longer than twelve months after that. Ask and we delete it sooner.

If you try the demo

We keep your name and email, and the clinic name you give. A demo clinic is made for you, filled with made-up patients and bookings, and you're signed into it. The demo clinic and everything in it is deleted seven days after it's made.

We may email you once about the demo and once about Sovia afterwards. Reply to any email and we stop.

If you sign in to a clinic's Sovia

Your clinic has made you an account. We hold your name, work email and role so you can be signed in, and a record of what you did in the system, because the clinic needs to know who changed what. That record is the clinic's, not ours to share.

Cookies

The front page sets no cookies and runs no analytics. The demo and sign-in set two: one that keeps you signed in for seven days, and one that remembers which clinic you were in. Neither follows you anywhere else. The cookie notice itself is remembered in your browser's own storage, not on our servers.

Where it's held and who touches it

The database runs in London, encrypted at rest and in transit. The site is served by Vercel. Email is sent through Resend. None of them is given your details for their own use, and nobody else is.

Where a clinic has switched on Sovia's AI features, the text of a message or a dictated note may be sent to Groq or OpenRouter to be read or transcribed. Both are held to a data processing agreement, both are set to keep nothing once they've answered, and neither trains on what they see.

We don't sell, share or trade anything about you.

Your rights

You can ask for a copy of what we hold, ask us to correct it or delete it, or object to our using it. Email the address above and we'll do it within a month, usually the same week. If you're not happy with how we've handled it you can complain to the Information Commissioner's Office at ico.org.uk.

Patients of a clinic using Sovia

If you're a patient of a clinic that runs on Sovia, your records belong to the clinic. The clinic is the controller and its own privacy notice applies. We hold the data on the clinic's behalf, under a written agreement with them, and only do with it what the clinic tells us to. Questions about your records go to the clinic.