Skip to content

Privacy policy

We take privacy seriously because our customers trust us with health data. This policy explains what we collect on this website, why, and the choices you have.

Last updated: 29 October 2026

1. Who we are

Sovica is a product of Vahue Ltd, a company registered in England and Wales. For this website we are the data controller. You can reach us at support@sovica.ai.

2. What this policy covers

This policy covers visitors to this website and people who contact us through it.

Patient and clinic data inside the Sovica product is different: there, the clinic is the controller and we act as its processor under a data processing agreement. That is described on our security page.

3. What we collect on this website

  • Messages you send us through the chat, the walkthrough form or the “before you go” card: your message, and your name, email, phone and clinic details if you give them.
  • Job applications through a careers page: your name, email, phone, location, LinkedIn, any website you give us, your CV, your right to work and your answers.
  • Reactions on the home page boards: we store only the total count per emoji, with nothing that identifies you.
  • Choices stored in your browser: your cookie choice and your chat history are kept in your browser’s local storage so the site remembers them. We can’t read them unless you send us a message.
  • Server logs: our hosting keeps standard request logs (IP address, time, page) for security, for a short period.

4. Why we use it and our lawful basis

  • To reply to you and arrange a walkthrough: our legitimate interest in answering enquiries, or steps before a contract.
  • To consider a job application: steps you ask us to take before a contract, and our legitimate interest in hiring. Only the people deciding on the role read your CV.
  • To keep the site secure and working: legitimate interest.
  • We do not sell personal data, and we do not use it for advertising.

5. Cookies

Today we use only what the site needs to work. If we add analytics, we will ask first in the cookie card, and you can say no without losing anything.

6. Who we share it with

Processors who handle it on our behalf: Vercel (hosting, London region), Neon (the database, on Amazon Web Services in London) and Resend (sending our emails, EU region). When AI answers are enabled in the website chat, Anthropic processes the chat question and relevant help-centre content to generate an answer. We redact common personal details from the question first and send an opaque visitor identifier instead of an IP address. Anthropic says it deletes API inputs and outputs within 30 days, subject to its Usage Policy and legal obligations. We share data with others only when the law requires it or as described here.

7. How long we keep it

Enquiries and chat messages: up to 24 months after our last contact with you. Job applications and CVs: deleted automatically six months after we receive them, sooner if you ask, and kept longer only with your consent. Server logs: up to 30 days.

8. Your rights

Under UK GDPR you can ask to see, correct, delete or export your data, and you can object to or restrict how we use it. Email support@sovica.ai and we will reply within one month.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office (ico.org.uk).

9. Changes to this policy

When we change this policy we update the date at the top. Significant changes are announced on this site.