Clear rules for health data.

SuperClini is a brand of LF BROTHERS SpA, a Chilean company, RUT 78.441.027-7. In these terms, “SuperClini” or “we” means LF BROTHERS SpA; “your clinic” means the organization that contracts the service; and “users” means the people on your team who log in to the platform.

Address: Apoquindo 6410, office 605, Las Condes, Santiago, Chile. Contact: [email protected].

SuperClini is a cloud platform for managing health clinics and practices: scheduling, clinical records, treatment plans, cash desk and billing, communication with patients by WhatsApp and email, and supporting artificial intelligence features.

Each clinic works in an isolated space: the system limits every query to the organization that makes it, and no clinic can see another clinic's data. In a network of branches, central management sees indicators, not records.

Some features depend on the country or on services your clinic turns on by itself, such as electronic invoicing or online payments.

By contracting SuperClini or using the platform, your clinic accepts these terms. Whoever signs or contracts on behalf of the clinic states that they have the authority to do so.

When your clinic subscribes, the administrator accepts inside the platform the Software License Agreement, which includes the data processing agreement and the order form with the price. These terms summarize and complement that agreement; where they differ, the agreement your clinic accepted prevails.

• Your clinic appoints at least one administrator, who creates users, assigns roles and keeps contact and billing details up to date.
• Each person uses their own user account. Sharing credentials is prohibited: the access log only protects your clinic if it identifies who really logged in.
• Passwords must have at least 8 characters, with an uppercase letter, a lowercase letter, a number and a special character. The system rejects the most common passwords.
• Your clinic is responsible for granting and removing access on time, for example when someone leaves the team.
• If you suspect someone logged in without permission, change the password and tell us right away.

The platform is for the legitimate operation of a health clinic. You may not:

• try to access another organization's data or get around the permissions of your role;
• extract data with bots or scripts, or try to obtain the source code;
• upload malicious software or illegal content;
• use the platform's WhatsApp or email to send unsolicited bulk messages;
• register the same clinic several times to get around the contracted conditions.

If we detect such use, we may suspend access. Unless there is an urgent security risk, we tell you first.

Who is responsible for what

Your clinic is the controller of its patients' personal and clinical data: it decides what the data is used for, obtains any required consents, informs patients and handles their rights. SuperClini is the processor: it processes that data on your clinic's behalf, only to provide the service and following your clinic's instructions.

What we do and what we don't

• We use the data only to operate, maintain, protect and support your clinic's platform.
• We do not sell, rent or transfer your clinic's or your patients' data.
• We do not use your patients' data to train our own AI models.
• We may use aggregated, anonymized statistics that identify neither your clinic nor any person to improve the service.
• We keep the data confidential, and the same obligation applies to the people who work with us.
• We only hand over data to an authority when a law or a court order requires us to, and in that case we tell you if the law allows it.

Access by the SuperClini team

Our team accesses identifiable data of your clinic only with your authorization, to handle a support request; by order of a competent authority; or when strictly necessary for technical operation, such as a security incident. Every support-mode session is logged with the person, date, IP and user account used, and everything done in that session is flagged as done by support. That log is not yet visible in your dashboard: if you need it, ask at [email protected] and we will send it to you.

Providers (sub-processors)

To provide the service we use the providers in this table. Each one receives only what it needs for its task. If we add or change a provider that processes patient data, we update this list and notify administrators at least 30 days in advance.

International transfers

SuperClini's servers are in Brazil, and the AI providers process data in the United States. By using the platform, your clinic instructs these transfers, which are necessary to provide the service. If the law of your country requires you to inform your patients about them or to register them, that obligation belongs to your clinic, and we give you the information you need to comply.

Security

• Encrypted connection (HTTPS) between the browser and the platform.
• Role-based permissions checked on the server, and isolation between clinics.
• Access log: record views, changes, logins and exports, with date, user and IP. The log is kept for as long as the service lasts.
• Clinical notes that cannot be edited or deleted: they are amended and the original text remains.
• Passwords stored as hashes; integration credentials encrypted with AES-256.
• Daily database backup, encrypted before it leaves the server and stored outside it for 30 days.

Files your clinic uploads (X-rays, photos and documents) are stored on the main server and are not currently part of the external backup. We recommend also keeping a copy outside the platform of any file you could not obtain again.

Security incidents

If we confirm an incident that affects your clinic's data, we notify you without undue delay and no later than 72 hours after we confirm it, with what we know about its scope and the measures taken. This way your clinic can meet its own duties to notify the authority and patients.

Patients' rights

When a patient asks to access, correct, delete or take away their data, they ask your clinic, and your clinic responds. If you need technical help to comply, write to us: we help you at no extra cost.

Retention of clinical records

Health laws require clinical records to be kept for a minimum period; in Chile, at least 15 years. Those periods prevail over any deletion request: SuperClini keeps the information for as long as they require, even after termination, with the same security and confidentiality measures. The platform never deletes clinical records on its own.

Your clinic complies with the data protection law of the country where it provides care, and SuperClini, as processor, complies with the obligations that law places on whoever processes data on behalf of someone else. These are the main rules in the countries where we offer the service:

This table is for guidance; it does not replace your clinic's legal advice.

SuperClini's AI features (record summaries, image analysis, smile simulation, Sofía on WhatsApp and the support assistant) are support tools. They are not a diagnosis and do not replace the judgment of the professional, who is solely responsible for clinical decisions.

For each task we send the provider the information that task needs. Depending on the feature, it may include the patient's name, contact details, clinical history, conversations or images. We do not anonymize them before sending: without that data, the result would be of no use for care. The providers are listed in the sub-processors table.

• AI can make mistakes. Review every result before using it.
• The availability of each feature depends on the plan and the country.

• SuperClini is contracted as an annual membership. The price, currency and taxes are those in the proposal your clinic accepted; published prices are net, with taxes added on top.
• The membership renews automatically for another year unless your clinic tells us it does not want to renew.
• When we agree on a trial period, it lasts for the period we tell you in writing.
• We notify you by email and on the platform 30, 15, 7 and 1 day before the membership expires.
• If we change the price, we notify you at least 30 days in advance; the new price applies from the next renewal.
• If your clinic signed up at a campaign price, it keeps that price on renewals as long as the agreement remains in force without interruption.
• If the membership expires without payment, your clinic has 15 days of grace with the full service. After that, the account becomes read-only: everything can be viewed and exported, but records cannot be created or changed. Nothing is deleted because of a late payment.
• Once payment is brought up to date, the account goes back to normal operation.

Your clinic may terminate the agreement at any time, with no penalty, by writing to [email protected]. Termination takes effect at the end of the period already paid, and until then you keep full access. Because the membership is annual, we do not refund the unused period, unless applicable law provides otherwise.

We may terminate the agreement for a serious or repeated breach of these terms, unlawful use of the platform or non-payment, with 30 days' prior notice.

Your data when you leave

• The administrator can request a full export at any time: a ZIP file with one CSV table per data type and, if requested, the files. The download link lasts 7 days.
• After termination, your clinic has 60 days to ask us to hand over its data, and we deliver it in a structured format within 15 business days.
• Clinical records and tax documents are kept for the legal retention periods. Once those periods end, we delete or anonymize the information, notifying the administrator 30 days in advance.

The platform, its code, its design and the SuperClini brand belong to LF BROTHERS SpA. Using the service does not transfer those rights.

The data your clinic records, its templates, protocols and settings belong to your clinic, and health data also belongs to each patient. Your clinic gives us permission to host and process them only to provide the service to your clinic.

We work to keep the platform available at all times, but we do not guarantee uninterrupted or error-free service. If scheduled maintenance will interrupt the service, we announce it at least 24 hours in advance and carry it out at low-demand times.

• SuperClini is not liable for clinical decisions, including those based on AI results.
• Your clinic is responsible for the accuracy of the data it records and for how its team uses the platform.
• We are not liable for indirect damages or lost profits, or for failures of third-party services we do not control, such as the WhatsApp network or the clinic's internet access.
• Our total liability to your clinic does not exceed what your clinic paid for the service in the 12 months before the event that gives rise to it.

These limits do not apply where the law does not allow them to be limited, for example in cases of wilful misconduct or gross negligence.

If we change these terms, we notify administrators by email at least 30 days in advance, unless a law requires the change with a shorter deadline. Changes to the License Agreement are submitted for your acceptance in the platform; until you accept them, the version you accepted applies, and if you disagree you may terminate without penalty.

These terms are governed by the laws of Chile, without prejudice to the data protection and consumer protection rules of your clinic's country that cannot be waived. Before going to court, the parties try to resolve the dispute in good faith for 30 days. If they do not succeed, the ordinary courts of Santiago, Chile have jurisdiction.

Questions, complaints or requests: [email protected]. We reply within 5 business days.