Terms of Service

1. Eligibility and account registration

C-Link is intended for healthcare professionals, independent doctors, medical practices, and clinics.

By registering, you confirm that:

• You are at least 18 years old.
• You are authorized to register on behalf of yourself or your clinic.
• The information you provide is accurate and up to date.
• You will use C-Link for lawful professional purposes.
• You are responsible for protecting your account credentials.

Customers may register as a Solo Doctor or Clinic.

Clinic owners may invite doctors and authorized staff to participate in their organization. Each invited user must use their own account and comply with applicable access permissions.

The registered clinic or account owner is responsible for managing authorized users, maintaining appropriate permissions, and promptly removing access when necessary.

2. Our services

Depending on the applicable plan, trial, permissions, and configuration, C-Link may provide:

• Appointment and scheduling management.
• WhatsApp business communication.
• Automated appointment reminders and confirmations.
• Appointment cancellation and rescheduling workflows.
• AI-assisted patient communication and appointment booking.
• Multi-doctor clinic management.
• Patient communication records and related administrative functionality.

Availability of individual features may depend on the selected subscription, successful third-party integrations, account verification, and completion of onboarding.

We may improve, modify, or discontinue particular features, subject to applicable contractual obligations and reasonable notice where appropriate.

3. Free trial and onboarding

Eligible new customers may receive a 14-day free trial.

During the trial, customers can access applicable features in accordance with their permissions and successful service activation.

Certain functions, particularly the AI receptionist, may require configuration or activation by the C-Link team.

The operational trial start date will be determined by the activation process and shown in the customer's account.

Registering additional doctors or staff does not create separate trials or restart the original trial.

The trial does not automatically create a paid subscription or authorize an undisclosed charge.

At trial expiration, features requiring a paid subscription may become unavailable until the appropriate subscription is activated.

4. Registration approval and 18-day account freeze

Accounts created through C-Link's public registration process are subject to an administrative approval requirement.

Unless approved by the C-Link administration team through the Keep Alive process, a newly registered account may be automatically frozen exactly 18 days after its original registration.

This applies to both Solo Doctor and Clinic registrations.

For Clinics, an account freeze applies to the organization and its associated users.

The 18-day period begins when the account is registered, regardless of when WhatsApp or AI setup is completed.

A frozen account may experience:

• Restricted access to the dashboard.
• Suspension of AI responses.
• Suspension of automated WhatsApp communications.
• Suspension of appointment reminders.
• Temporary unavailability of operational features.

Freezing an account does not automatically delete its stored data or disconnect its WhatsApp Business Account.

Customers may contact C-Link to request account review and reactivation.

Keep Alive approval prevents the registration-based 18-day freeze but does not automatically extend trial benefits, confirm payment, or grant access to unpaid features.

Payment confirmation and administrative approval are separate processes. If a customer has paid but their account remains unapproved, they should contact C-Link for prompt resolution.

C-Link will make reasonable efforts to resolve verified payment or approval errors.

5. Subscription plans and payments

After the free trial, customers may choose an available paid subscription.

Pricing, included features, doctor-seat limits, and applicable charges are determined by the selected plan and the terms presented at purchase or renewal.

Some services may involve additional third-party charges, including WhatsApp Business Platform messaging fees charged by Meta or another authorized provider.

Unless otherwise expressly stated, such charges are separate from C-Link's subscription fees and are the customer's responsibility.

Customers are responsible for paying applicable agreed subscription fees.

C-Link may suspend access to paid features for overdue or unsuccessful payments, subject to applicable law and any agreed payment terms.

No payment will be considered received until it has been successfully processed or verified.

Subscription renewal, cancellation, and refund conditions will be disclosed in the applicable plan or payment agreement. No automatic paid renewal is created solely by joining a free trial.

6. Clinic accounts, doctor seats, and staff permissions

A clinic may register multiple doctors under one organization.

The clinic owner can allocate available doctor seats and invite doctors or authorized staff, subject to the organization's subscription limits.

Each doctor must have an individual authorized account.

Secretary and staff access is limited by the permissions assigned to their roles.

The clinic owner is responsible for ensuring that access is provided only to appropriate personnel.

A user must not attempt to view, modify, disclose, or access patient records, doctor notes, or other information outside their authorized permissions.

C-Link may enforce role-based access controls to protect clinic and patient information.

7. WhatsApp integration

C-Link may integrate with the WhatsApp Business Platform operated by Meta.

Customers may connect their WhatsApp Business Account independently or request assistance from the C-Link team.

By enabling WhatsApp functionality, customers acknowledge that:

• They are responsible for their WhatsApp Business Account and its authorization.
• They must comply with Meta's applicable business, messaging, and platform policies.
• They are responsible for obtaining necessary patient communication permissions and opt-ins.
• They must respect patient opt-outs and applicable communication preferences.
• Their WhatsApp account may be subject to Meta's fees, verification, limitations, or enforcement actions.

C-Link does not control Meta's infrastructure or guarantee approval, uninterrupted messaging, or continued availability of a WhatsApp account.

Customers must not use C-Link to send spam, deceptive messages, unauthorized advertising, or communications prohibited by applicable laws or platform policies.

8. AI receptionist and automated communication

C-Link may provide an AI-powered receptionist designed to assist with administrative communication, appointment booking, and general clinic inquiries.

The AI receptionist is a technological assistance tool, not a licensed healthcare professional.

It is not intended to independently diagnose diseases, prescribe treatments, make clinical decisions, or replace professional medical judgment.

AI-generated messages may contain inaccuracies or misunderstandings.

Customers acknowledge that:

• AI-generated information must not be treated as guaranteed accurate.
• The clinic is responsible for verifying its service information, schedules, pricing, and approved automated workflows.
• Doctors and authorized staff remain responsible for professional medical decisions.
• Clinics must maintain appropriate human support and escalation channels.
• Medical emergencies must be directed to appropriate emergency services rather than relying on automated messaging.

C-Link may require its team to configure, test, and approve AI functionality before activation.

Certain AI configuration permissions may remain restricted to authorized C-Link administrators.

C-Link will take reasonable steps to support reliable operation, but does not guarantee that AI will correctly interpret every patient request.

9. Patient privacy and confidentiality

C-Link may process patient contact information, appointment details, communications, and other information entered by authorized clinic users.

The clinic is responsible for determining the lawful purposes for collecting and using its patient information and for obtaining required notices, permissions, or consents.

Enovail is responsible for applying appropriate safeguards to information it processes while providing C-Link, according to its contractual obligations and applicable law.

Both parties must comply with applicable privacy, confidentiality, and data protection obligations.

Authorized C-Link personnel may access customer data only where reasonably necessary for permitted support, configuration, maintenance, security, or other documented service purposes, subject to appropriate confidentiality and access controls.

Customers must not upload, disclose, or send sensitive patient information through channels where doing so would violate applicable law or third-party platform requirements.

Additional details concerning information collection, processing, storage, sharing, and user rights are provided in our Privacy Policy and any applicable data-processing agreement.

10. Account security and acceptable use

Customers agree not to:

• Share passwords or authentication credentials with unauthorized persons.
• Access another clinic's or doctor's information without authorization.
• Attempt to bypass subscription, security, or permission controls.
• Introduce malicious software.
• Use C-Link for fraudulent or unlawful activities.
• Misuse messaging capabilities or violate applicable patient privacy rules.
• Reverse engineer or interfere with the service except where permitted by applicable law.

Customers must promptly inform C-Link if they suspect unauthorized access to their account.

C-Link may restrict or suspend access where reasonably necessary to address security concerns, serious misuse, legal violations, or material breaches of these Terms.

11. Service availability

C-Link aims to provide reliable services but cannot guarantee uninterrupted operation.

Temporary disruptions may occur because of:

• Maintenance or software updates.
• Internet connectivity problems.
• WhatsApp or Meta service interruptions.
• Hosting or infrastructure problems.
• Third-party provider outages.
• Events outside our reasonable control.

Where practical, C-Link will take reasonable steps to restore affected functionality.

Customers should maintain appropriate alternative procedures for time-sensitive patient communications and clinic operations.

12. Data ownership, export, and retention

Customers retain their rights to patient information and other data they lawfully provide to C-Link.

Using C-Link does not transfer ownership of their patient records to Enovail.

Customers grant Enovail the limited rights necessary to host, process, transmit, secure, and manage data for the purpose of providing the contracted services.

If an account is frozen or terminated, its data will be handled according to the applicable Privacy Policy, contractual obligations, and retention requirements.

Customers may request available data export or deletion through C-Link's support channels, subject to lawful retention obligations and technical limitations.

Account freezing does not itself constitute a request for data deletion.

13. Intellectual property

C-Link, including its software, interface, design, branding, and proprietary technology, belongs to Enovail or its respective licensors.

Customers receive a limited, non-exclusive, non-transferable right to access and use the service during an authorized subscription or trial.

Customers may not reproduce, distribute, resell, or commercially exploit C-Link's proprietary software without authorization.

14. Limitation of liability

To the maximum extent permitted by applicable law, Enovail is not responsible for losses caused by unauthorized customer actions, incorrect customer-supplied information, external provider failures, or the use of automated communications as a substitute for medical judgment.

Nothing in these Terms excludes liability that cannot lawfully be excluded, or removes Enovail's own applicable obligations concerning security, confidentiality, or misconduct.

Any additional contractual liability limitations must be interpreted in accordance with applicable law and any separately executed agreement.

15. Suspension, termination, and cancellation

Customers may request cancellation of their subscription or account through the supported account-management or customer-support process.

C-Link may suspend or terminate services for:

• Material violations of these Terms.
• Nonpayment under the applicable subscription agreement.
• Unauthorized use or serious security concerns.
• Failure to obtain required account approval.
• Applicable legal or regulatory requirements.

Where appropriate, C-Link will provide notice and an opportunity to resolve the issue, except when immediate action is reasonably necessary for security or legal compliance.

Cancellation or termination does not remove outstanding lawful payment obligations.

Stored data will be managed in accordance with Section 12 and the Privacy Policy.

16. Updates to these Terms

We may update these Terms to reflect changes in services, laws, operational practices, or business requirements.

The latest version will be published on the C-Link website with its effective date.

Where changes are material, we will provide appropriate notice and obtain renewed acceptance where required.

Continued use after the effective date of validly notified changes may constitute acceptance where permitted by applicable law.

17. Governing law and disputes

Subject to mandatory applicable laws and customer protections, these Terms are intended to be governed by the laws of Lebanon.

Disputes that cannot be resolved through good-faith communication may be referred to the competent courts of Lebanon, subject to applicable jurisdictional requirements.

18. Contact information

If you have questions about these Terms, billing, account access, or C-Link services, please contact:

C-Link — By Enovail
Website: https://enovail.com
Email: admin@enovail.com

By creating a C-Link account, you acknowledge that you have read and agree to these Terms of Service and the applicable Privacy Policy.

Patient data, medical information & confidentiality

The following provisions supplement the C-Link Terms of Service and form part of the agreement.

1. Ownership of patient and clinic data

All patient information, medical records, doctor notes, appointment information, uploaded photos, documents, and clinic communications remain under the ownership or lawful control of the respective clinic or healthcare professional, subject to patients' applicable legal rights.

Enovail does not acquire ownership of patient data through the provision of C-Link.

The customer authorizes Enovail to process this information only as necessary to provide, secure, maintain, support, and improve the contracted services within the limits established by applicable law and the Data Processing Agreement.

C-Link will not sell identifiable patient data or use it for unrelated advertising.

2. Categories of information

Depending on the features used, C-Link may process:

• Patient names, phone numbers, and contact information.
• Appointments, dates, schedules, and doctor assignments.
• WhatsApp messages and communication history.
• Patient-uploaded images and documents.
• Medical information voluntarily disclosed in conversations.
• Doctor notes and other records entered into the platform.
• Appointment reminders, confirmations, and cancellation records.
• AI conversation content and information necessary to process requests.
• User activity, security, and operational logs.

Medical information and patient photographs may constitute sensitive personal information requiring additional legal safeguards.

3. Clinic responsibilities

Each clinic or doctor is responsible for establishing an appropriate legal basis for collecting and processing patient information.

This includes providing required privacy notices, obtaining any necessary consents or authorizations, complying with medical confidentiality obligations, and ensuring that only authorized personnel access patient records.

The clinic must maintain accurate patient information and manage access for its doctors, secretaries, and other staff.

The clinic remains responsible for medical judgments, diagnoses, prescriptions, and clinical decisions.

4. Enovail's responsibilities

When processing patient information on behalf of a clinic, Enovail will process it in accordance with applicable contractual instructions, the Privacy Policy, the Data Processing Agreement, and applicable law.

Enovail must maintain reasonable technical and organizational safeguards appropriate to the sensitivity of the information.

These safeguards should include appropriate access controls, separation between clinic organizations, secure authentication, protected data transmission and storage, and security monitoring.

Access to patient information by Enovail personnel must be limited to legitimate, authorized operational needs.

Enovail remains responsible for meeting its own applicable privacy, security, and contractual obligations.

5. Doctor notes and access permissions

Patient information must be accessible only to users with appropriate permissions.

Doctor notes and restricted clinical records must not be exposed to unauthorized secretaries, clinic owners, other doctors, or unrelated organizations.

Permission restrictions must be enforced by the backend, not merely by hiding elements of the dashboard.

Clinic owners are responsible for assigning permitted access, subject to C-Link's enforced role restrictions.

6. AI processing of patient information

Where the AI receptionist is activated, relevant messages and information may be processed to answer administrative questions, identify appointment requests, and manage supported clinic workflows.

AI processing must remain within the enabled services and applicable data-processing arrangements.

C-Link must disclose relevant external AI-processing providers and applicable data-handling arrangements in its Privacy Policy or Data Processing Agreement.

Identifiable patient information must not be used for unrelated AI model training without appropriate authorization and a lawful basis.

The AI receptionist is not a medical professional and must not replace clinical judgment or emergency medical assistance.

7. WhatsApp and external service providers

When a clinic enables WhatsApp integration, relevant communication information may be processed through Meta's WhatsApp Business Platform.

Other authorized infrastructure providers may process information necessary to operate C-Link, including hosting, database, and AI service providers.

Applicable provider categories, purposes, cross-border transfers, and relevant safeguards must be disclosed through the Privacy Policy or Data Processing Agreement.

Customers must comply with applicable WhatsApp policies, including restrictions affecting sensitive medical information.

8. Patient rights and requests

Patients may have rights relating to access, correction, deletion, and other processing of their personal information under applicable law.

Requests concerning clinic-controlled patient records should generally be directed to the relevant clinic.

Enovail will provide reasonable assistance to the clinic in responding to valid requests, as required by law and the applicable Data Processing Agreement.

Requests involving data independently controlled by Enovail will be handled directly by Enovail where applicable.

9. Account freezing and data preservation

If an account is frozen following the 18-day registration deadline or another authorized suspension:

• Normal operational access may be restricted.
• AI and automated messaging may be suspended.
• Patient information and clinic records must not be automatically deleted solely because of the freeze.
• Stored information remains subject to applicable confidentiality, security, and retention requirements.
• Authorized reactivation should preserve existing records.

Account freezing and account deletion are separate operations.

10. Cancellation, retention, and deletion

After subscription cancellation or account termination, data will be retained, returned, exported, or deleted according to the applicable Data Processing Agreement, Privacy Policy, lawful retention requirements, and documented service procedures.

Where available and legally permitted, clinics may request export of their information before deletion.

Enovail will not retain identifiable patient information indefinitely without an appropriate purpose or lawful basis.

Deletion from active systems and expiration of backup copies may follow different documented schedules.

Specific retention and deletion periods must be defined in the applicable policies before publication.

11. Security incidents

In the event of a confirmed personal-data security incident, Enovail will investigate, take appropriate containment measures, and provide notifications to affected customers or authorities as required by applicable law and contractual obligations.

The Data Processing Agreement should establish relevant incident notification procedures and responsibilities.

12. Confidentiality

Both Enovail and its clinic customers must protect confidential patient and business information against unauthorized disclosure.

These confidentiality obligations continue after cancellation or termination for as long as required by applicable law and contractual obligations.

Nothing in these Terms removes either party's statutory responsibilities concerning personal-data protection or medical confidentiality.