By accessing or using Seviko you agree to this agreement. If you are accepting on behalf of a clinic, you confirm you have authority to bind that clinic. If you do not agree, do not use the Service.
1. The agreement
This end-user licence agreement (“Agreement”) is between you (the individual or the clinic you represent) and Seviko (“Seviko”, “we”, “us”). It governs use of the Seviko practice-management software, related websites, and optional integrations, including QuickBooks Online and Xero (together, the “Service”).
Seviko is a trading name of SEVIKO LTD, a company registered in England and Wales (company number 17322349), registered office 14 Norcot Road, Tilehurst, Reading, England, RG30 6BU. Notices to us may be sent to that address or to [email protected].
Our privacy policy explains how personal data is handled. If you connect QuickBooks, Intuit’s terms and privacy statement also apply to your use of QuickBooks. If you connect Xero, Xero’s terms and privacy notice also apply to your use of Xero.
2. The service
Seviko is cloud software for independent UK ear care and audiology clinics. Features depend on the plan you choose (Essential, Loaded or Supreme) and on optional add-ons you enable. We may improve, add or withdraw features, provided we do not materially reduce the core Service during a paid term without notice.
Seviko is a practice-management tool. It is not a substitute for clinical judgement, professional registration, or your legal duties as a clinic. You remain responsible for patient care, record-keeping, consent, invoicing accuracy and regulatory compliance.
3. Licence
Subject to this Agreement, we grant you a limited, non-exclusive, non-transferable, revocable licence to access and use the Service for your clinic’s internal operations during your trial or paid subscription.
You may not:
- sublicence, sell, rent or provide the Service to third parties as a bureau or competing product;
- copy, modify, reverse engineer or attempt to extract source code except where the law allows;
- bypass usage limits, security or access controls;
- use the Service to build a competing product or to scrape Intuit, Xero or other third-party APIs beyond the integration we provide;
- remove proprietary notices.
All rights not expressly granted are reserved by Seviko and its licensors.
4. Accounts and users
You must provide accurate account details and keep login credentials confidential. You are responsible for activity under your clinic’s users and roles. Tell us promptly if you believe an account is compromised.
You must ensure each user is authorised by the clinic and uses the Service only for clinic purposes. You must set access rights appropriately (for example so that only people who need clinical or accounting data can see it).
5. Your clinic data
You retain all rights in the data you and your users enter into Seviko (“Clinic Data”), including patient records and accounting information.
You grant Seviko a licence to host, process, transmit and display Clinic Data solely to provide, secure and support the Service, to create backups, and to follow your instructions (including syncing to QuickBooks or Xero when you connect them).
You warrant that you have a lawful basis to process Clinic Data (including special-category health data) and to instruct us to do so, and that sharing it with optional third parties you connect (such as Intuit or Xero) is permitted.
We act as your processor for Clinic Data, as described in the privacy policy. You are the controller. Where we process personal data on your behalf, the data-processing terms in Schedule 1 (Data Processing) apply and satisfy Article 28 of the UK GDPR. If you require a separate signed data-processing agreement, contact us.
6. QuickBooks Online
QuickBooks Online integration is optional. To use it you must have a valid QuickBooks Online subscription and complete Intuit’s authorisation flow. By connecting QuickBooks you:
- instruct us to access, retrieve and (where you enable write-back) create or update data in your QuickBooks company on your behalf;
- confirm you are authorised to grant that access for the QuickBooks company you connect;
- agree that Intuit’s developer and product terms apply to that connection;
- understand that Intuit is not a party to this Agreement, does not sponsor or endorse Seviko, and is not responsible for the Service.
We access only the QuickBooks data needed to provide the integration, as described in the privacy policy. We do not send clinical records to Intuit.
You can disconnect QuickBooks in Seviko or revoke access in your Intuit account at any time. Disconnecting does not delete invoices or records already stored in Seviko or already written to QuickBooks.
We are not responsible for QuickBooks availability, Intuit’s APIs, tax calculations inside QuickBooks, or loss arising from incorrect mappings you configure. You should check synced invoices and payments in both systems.
Intuit may suspend or withdraw API access. If that happens we will tell you and the integration may stop until access is restored or you use another method.
7. Xero
Xero integration is optional. To use it you must have a valid Xero subscription and complete Xero’s authorisation flow. By connecting Xero you:
- instruct us to access, retrieve and (where you enable write-back) create or update data in your Xero organisation on your behalf;
- confirm you are authorised to grant that access for the Xero organisation you connect;
- agree that Xero’s developer and product terms apply to that connection;
- understand that Xero is not a party to this Agreement, does not sponsor or endorse Seviko, and is not responsible for the Service.
We access only the Xero data needed to provide the integration, as described in the privacy policy. We do not send clinical records to Xero.
You can disconnect Xero in Seviko or revoke access in your Xero connected apps at any time. Disconnecting does not delete invoices or records already stored in Seviko or already written to Xero.
We are not responsible for Xero availability, Xero’s APIs, tax calculations inside Xero, or loss arising from incorrect mappings you configure. You should check synced invoices and payments in both systems.
Xero may suspend or withdraw API access. If that happens we will tell you and the integration may stop until access is restored or you use another method.
8. Acceptable use
You must not use the Service to:
- break the law, infringe rights, or process data you are not entitled to process;
- upload malware or interfere with the Service, Intuit’s systems or Xero’s systems;
- attempt to access other clinics’ data;
- misrepresent your identity to Intuit, Xero or any other provider;
- send unlawful or unsolicited messages using reminder tools, beyond what the clinic’s patients would reasonably expect.
We may suspend access if we reasonably believe this section has been breached, or if required by Intuit, Xero or by law.
9. Arli and AI features
Some plans include Arli, an optional assistant for documentation and in-product help. You must review AI-assisted output before relying on it in a clinical or financial record. Arli is not a clinician and does not provide medical advice. Features are designed so that Arli does not receive patient-identifiable data; you must not paste identifiable patient data into any channel that would bypass those controls.
10. Trial, fees and payment
New clinics may receive a free trial as described on the website at the time they sign up. Unless we say otherwise, a trial does not require a credit card. When the trial ends, continued use requires a paid plan.
Fees, billing periods and what each plan includes are as quoted to you or shown at purchase. Fees are exclusive of VAT unless stated. You are responsible for applicable taxes.
If a payment fails we may suspend the Service after notice. You remain responsible for fees incurred before termination.
11. Intellectual property
Seviko, the software, branding, documentation and website are owned by Seviko or its licensors. This Agreement does not transfer ownership of those materials to you, nor of Intuit’s, Xero’s or other third parties’ software.
Feedback you give us may be used to improve the Service without obligation to you.
12. Third-party services
The Service may interoperate with third parties (including Intuit/QuickBooks, Xero, email, SMS, WhatsApp and payment providers). Those services are not sold by us. Your use of them is under their terms. We are not liable for third-party services, outages, or changes they make to their APIs or policies.
13. Availability and support
We aim to keep the Service available and to respond to support requests sent to [email protected] within one working day. We do not warrant uninterrupted or error-free operation. Planned maintenance will be notified where practicable.
You are responsible for suitable devices, connectivity, and for exporting or backing up Clinic Data if you need copies outside Seviko.
14. Warranties
The Service is provided with reasonable skill and care. Except as required by law, we disclaim all other warranties, including implied warranties of merchantability, fitness for a particular purpose, and non-infringement.
We do not warrant that the Service, or any QuickBooks or Xero sync, will meet every accounting, VAT or clinical standard applicable to your practice. You remain responsible for verifying records, invoices and submissions.
Nothing in this Agreement limits your statutory rights as a UK customer where those rights cannot be excluded.
15. Liability
Nothing in this Agreement excludes or limits liability for death or personal injury caused by negligence, fraud, or any liability that cannot legally be limited.
Subject to that:
- we are not liable for loss of profits, revenue, goodwill, anticipated savings, or indirect or consequential loss;
- we are not liable for loss arising from QuickBooks, Intuit, Xero, or other third-party platforms, from incorrect data you enter, or from your failure to disconnect or map integrations correctly;
- our total liability arising out of the Service in any 12-month period is limited to the fees you paid us for the Service in that period (or £100 if you are on a free trial and have paid nothing).
16. Indemnity
You will indemnify Seviko against claims, losses and costs arising from Clinic Data, your use of the Service in breach of this Agreement, or your connection of third-party accounts (including QuickBooks or Xero) without authority.
17. Term and termination
This Agreement starts when you first use the Service and continues until your account is closed.
You may stop using the Service and close your account at any time. We may terminate or suspend the Service if you materially breach this Agreement and do not remedy it within a reasonable time after notice (or immediately for serious breach, non-payment, or risk to other customers or to Intuit’s or Xero’s platform).
On termination your licence ends. We will handle Clinic Data as described in the privacy policy. You should export any data you need before closing the account. Disconnect QuickBooks or Xero if you no longer want Seviko to have access; we will also revoke tokens when the account is closed.
Sections that by nature should survive (including intellectual property, liability, indemnity and governing law) remain in effect.
18. Changes
We may update this Agreement by posting a new version on this page and updating the date. Material changes will be notified to account holders. Continued use after the effective date constitutes acceptance, except where the law requires a different process.
19. General
This Agreement is the entire agreement for the Service and replaces prior terms for it. If a clause is unenforceable, the rest remains in effect. You may not assign this Agreement without our consent; we may assign it as part of a reorganisation or sale of the business. A person who is not a party has no rights under the Contracts (Rights of Third Parties) Act 1999. Intuit and Xero are not third-party beneficiaries required to consent to changes, except where their own terms say otherwise for your QuickBooks or Xero use.
This Agreement is governed by the law of England and Wales. The courts of England and Wales have exclusive jurisdiction, except that we may seek injunctive relief in any jurisdiction.
20. Contact
Questions about this Agreement: [email protected].
Related: Privacy policy.
Schedule 1 — Data Processing
This Schedule forms part of the Agreement and sets out the terms on which Seviko (the “Processor”) processes personal data on behalf of the clinic (the “Controller”), as required by Article 28 of the UK GDPR. It applies whenever we process Clinic Data that is personal data. If it conflicts with the rest of the Agreement on data protection, this Schedule prevails.
1. Roles and scope
The Controller is the clinic. The Processor is Seviko. The Processor processes personal data only on the Controller’s documented instructions, which are: this Agreement, the privacy policy, the configuration and actions the Controller takes in the Service (including any integration it connects, such as QuickBooks Online or Xero), and any further written instruction the Controller gives. The Processor will inform the Controller if, in its opinion, an instruction infringes UK data protection law.
2. Subject-matter, duration, nature and purpose
Subject-matter and purpose: providing the Seviko practice-management Service and the integrations the Controller enables. Nature: collection, storage, organisation, retrieval, transmission, backup, deletion and other operations needed to run the Service. Duration: for the term of the Agreement, plus the retention periods described in the privacy policy.
3. Types of personal data and categories of data subject
Data subjects: the Controller’s patients, staff/users, and contacts. Types of personal data: contact and identity details; appointment, clinical and audiology records (including special-category health data); documents and correspondence; invoicing and accounting data; and account/login and audit data. The Controller must not instruct the Processor to process personal data outside the categories reasonably needed to use the Service.
4. Confidentiality
The Processor ensures that people authorised to process the personal data are bound by an appropriate duty of confidentiality and access it only on a need-to-know basis under role-based controls.
5. Security
The Processor implements appropriate technical and organisational measures under Article 32 of the UK GDPR, including encryption in transit and at rest, access controls, tenant isolation, audit logging and UK hosting for Seviko records, to a standard appropriate to health and accounting data. A summary is in the privacy policy.
6. Sub-processors
The Controller gives general authorisation for the Processor to engage sub-processors to provide the Service. The current sub-processors, their purpose and processing location are listed at seviko sub-processors. The Processor imposes data-protection terms on each sub-processor no less protective than this Schedule and remains liable for their performance. The Processor will give the Controller prior notice of any intended addition or replacement of a sub-processor that processes Clinic Data, and the Controller may object on reasonable data-protection grounds.
7. International transfers
The Processor does not transfer the Controller’s personal data outside the UK except as described in the privacy policy (for example, an integration the Controller connects, or a messaging provider it enables). Where such a transfer occurs, an appropriate safeguard (such as the UK International Data Transfer Addendum) is used. Transfers the Controller initiates by connecting a third party (such as Intuit or Xero) are made on the Controller’s instruction and under that third party’s terms.
8. Data-subject requests
Taking into account the nature of the processing, the Processor assists the Controller by appropriate technical and organisational measures — including self-service and export tooling in the Service — to respond to requests to exercise data-subject rights. If the Processor receives such a request directly, it forwards it to the Controller and does not respond except on the Controller’s instruction or as legally required.
9. Assistance
The Processor assists the Controller, taking into account the nature of processing and the information available to it, in meeting its obligations on security, personal-data breach notification, data-protection impact assessments and prior consultation with the ICO.
10. Personal-data breach
The Processor notifies the Controller without undue delay after becoming aware of a personal-data breach affecting the Controller’s personal data, and provides the information the Controller reasonably needs to meet its own notification duties.
11. Return and deletion
On termination, and at the Controller’s choice, the Processor deletes or returns the Controller’s personal data and deletes existing copies, except to the extent retention is required by law or as described in the privacy policy (including clinical-record retention the Controller configures). Backups are overwritten or deleted on the Processor’s ordinary cycle.
12. Audit
The Processor makes available to the Controller the information reasonably necessary to demonstrate compliance with this Schedule and allows for and contributes to audits, including inspections, by the Controller or an auditor it mandates, on reasonable notice, no more than once a year unless a breach or regulator requires otherwise, and subject to confidentiality and to not compromising other customers’ data.