Privacy Policy

This policy explains what information Skovia (“we”, “us”) collects when you use the Skovia web application, how we use it and the choices you have. Skovia is business software: the businesses that use it (“customers”) decide what records they keep in it.

Information we collect

• Account information — your name, email address and business name. If you sign in with Google or Facebook, we receive your name, email address and profile picture from that provider. We never receive your password for those services.
• Business records — data you or your staff enter, such as products, stock, sales, purchases, customers, suppliers, employees, payroll, accounting entries and, for laboratories and hospitals, patient and test information.
• Technical information — basic logs such as IP address, browser type and error reports that help us keep the service secure and working.

How we use information

• To provide the service: sign you in, store your records and show them to authorised users of your business.
• To send messages your business has switched on, such as lab reports or payslips on WhatsApp.
• To run optional AI features (for example reading a scanned invoice or summarising a report) when a user starts them.
• To keep the service secure, prevent abuse and fix problems.

We do not sell personal information and we do not use your business records for advertising.

Who can see your data

Each business’s data is separated at the database level. Inside a business, the owner controls who has access and which role (owner, manager, cashier, accountant, viewer or staff) each person has.

We use trusted service providers to run Skovia, only for the purposes above:

• Supabase — database, sign-in and file storage
• Vercel — website hosting
• Google and Facebook — only if you choose to sign in with them
• Meta (WhatsApp Business Platform) — only if your business turns on WhatsApp messages
• AI providers (such as OpenAI, Google or Anthropic) — only when a user runs an AI feature

Patient and employee information

Laboratories, hospitals and employers that use Skovia are responsible for having a lawful reason to record patient or employee information and for informing those people. Skovia processes that information on their behalf and only according to their instructions.

Security

Data is encrypted in transit (HTTPS), access is checked against each user’s role on the server, and lab reports are stored privately and shared only through time-limited links. No online system is 100% secure, so please keep your password private and remove staff accounts that no longer need access.

Data retention

We keep your data while your account is active. Business owners can ask us to delete their business and its records; some records may be kept longer where the law requires it (for example, tax and accounting records).

Deleting your data

To delete your account or your business data — including data received from Google or Facebook sign-in — send a deletion request from the email address linked to your account to skoviasupportteam@gmail.com. We will confirm and complete the request within 30 days. You can also remove Skovia’s access at any time from your Google or Facebook account settings.

Changes to this policy

If we make important changes we will update this page and the date above, and tell business owners inside the app.

Contact

Questions about privacy? Email skoviasupportteam@gmail.com.