Terms of Service

SideClick Terms of Service

These Terms of Service ("Terms") govern the SideClick website (sideclick.io), purchasing and trials, the licensing service, and the online services offered with the Practice and Cloud editions (and with legacy Sync licences): the sync relay, patient portal publication, and cloud hosting. The installed software itself is governed by the EULA. The Acceptable Use Policy, the Privacy Policy, and — where they apply to you — the data-processing instruments in §12 are incorporated by reference. For patients using a practice's portal, the patient portal terms apply instead.

1. Who we are

SideClick (Pty) Ltd, a South African company ("SideClick", "we"). Registration number 2026/655265/07. Registered office: 175 Neptune Way, Olympus, Pretoria, 0081. Contact: support@sideclick.io.

2. Customers and eligibility

SideClick is sold to healthcare practices and practitioners ("you"). You confirm that the people using clinical features hold the professional registrations their jurisdiction requires; verifying and maintaining professional credentials is your responsibility, not ours. You must provide accurate purchase and contact information — your licence key is issued to the name and email you purchase with.

3. Purchases, billing, and Paddle (merchant of record)

Purchases are processed by Paddle as merchant of record: your contract of sale for the payment itself — including payment processing, tax collection and invoicing, and refunds of the purchase price — is with Paddle, under Paddle's checkout terms presented at purchase. SideClick never receives your card or full billing details; we receive your name, email, and the edition and seat configuration you bought, and we issue your licence key on that basis (see the Privacy Policy §3).

The edition and seat count of your licence are determined by the product and price you purchase. Seat or edition changes made through the billing portal are reflected in a re-issued key.

4. Licence delivery and self-service

After successful payment your signed licence key is issued and made available to you (delivery to your purchase email and self-service re-download using your licence id and purchase email). Keep the key confidential to your practice (EULA §8).

The apps themselves are installed from each platform's app store; purchasing and licensing always happen on the sideclick.io storefront, never in-app. Store terms govern store delivery and update mechanics but never replace or waive these Terms, the EULA, or any executed data-processing instrument (EULA §16).

5. Subscriptions: renewal, cancellation, expiry

• Automatic renewal. A subscription renews automatically at the end of each billing period (monthly or annual, as you chose at checkout) and is charged by Paddle to the payment method on file until you cancel. The price, the period, and the renewal date are shown at checkout and on every receipt.
• Cancelling. You can cancel at any time from the billing portal linked from your receipts and from the storefront, or by emailing support@sideclick.io. Cancellation takes effect at the end of the current paid period; you keep the service until then. Except where the law that applies to you requires otherwise, we do not refund the unused part of a period.
• Renewal. Each renewal issues a re-issued key; installing it resumes service in place.
• Expiry. The software warns 14 days before expiry; a 14-day grace period follows expiry during which all services continue.
• After grace. Relay-dependent services pause (see §7); your installed software and all existing data remain fully usable and exportable per EULA §7. Nothing is deleted; renewing resumes service in place.

6. Trials and evaluation

We offer one 30-day trial per person, at full Practice capability with no feature crippling, requested with your name and email; no payment details are collected for a trial and a trial never converts into a paid subscription on its own. To enforce the one-trial rule we retain a one-way hash of the trial email indefinitely (see the Privacy Policy §3). Separately, an installation without any key has a 30-day evaluation window (EULA §6).

7. Relay and portal services (Practice edition; legacy Sync licences)

The sync relay is a zero-knowledge relay: it stores and routes end-to-end-encrypted content between your enrolled devices and (on the Practice edition) your patients' portal accounts. It cannot read clinical content. What it necessarily observes and stores is delivery metadata and service data — enrolled-device identifiers, names and platform labels, public keys, encrypted payloads with their sizes and timestamps (including phone-captured photos and voice memos travelling as sealed media frames), push-notification subscriptions (browser push endpoints; Apple device tokens for the iPhone companion), hashed connection addresses, and your licence entitlement record — described precisely in the relay DPA Annex A.

Two portal surfaces are published in readable form by design and under your control: the open-slot availability board (appointment types, times, durations — no patient data) and calendar feeds you publish, which are sanitised before publication. You choose whether to enable them.

Video consultations are not part of the services. You may store a video-consultation link from a service you choose against an appointment; the software opens it in your browser and, if you share it with a patient through the portal, delivers it as sealed content like any other message. The consultation itself runs on that service under its own terms.

Data portability commitment: whatever your licence state, the relay never refuses download and acknowledgement of your already-synced data, and queued encrypted data and backup archives are not deleted by us on expiry. Deletions you instruct yourself are always honoured: the software's audited archive-delete command and your practice's own automatic-backup retention setting remove archives as instructed, and delivered media frames are cleaned up on the automatic schedule in the relay DPA Annex A. Lapse or revocation pauses new uploads, new device enrolment, cloud backup, and portal publication only.

Service availability: the relay and portal are provided with commercially reasonable availability; the Cloud edition's service-level agreement, with its availability targets and service credits, is provided to Cloud customers at onboarding.

8. Cloud edition

The Cloud edition adds operator-hosted, zero-knowledge storage of your client-side-encrypted records. Processing of practice data in the Cloud edition does not begin until the data-processing instrument appropriate to your region (a Business Associate Agreement, a GDPR or UK GDPR data processing agreement, or the equivalent instrument for your country, together with the POPIA schedule for South African practices) has been executed; the platform technically refuses to serve an organisation until then. Cloud customers receive the executed instrument's terms in precedence over these Terms for all personal-data obligations.

Cloud accounts sign in against our identity service. Your email address and password transit our servers at each sign-in; we store the email only as a keyed one-way hash and the password only as a password hash. Multi-factor authentication is supported (authenticator apps, backup codes, passkeys and security keys, and enterprise single sign-on). Account recovery uses a recovery code that only you hold: we can reset your sign-in, but we can never decrypt or recover your data (EULA §7.6; see the Privacy Policy §4).

9. Refunds, chargebacks, and revocation

Refunds of the purchase price are handled by Paddle under its buyer terms. When a purchase is refunded or charged back, the associated licence key is revoked: revocation stops key re-downloads, new activations, and all relay-facing services for that key. Consistent with EULA §7, revocation never removes access to data already on your machines — existing records stay readable and exportable locally. How to ask for a refund, the time limits that apply, and what happens to your licence afterwards are set out in our Refund Policy.

We may also revoke keys obtained fraudulently or used in material breach of the Acceptable Use Policy, with notice and a chance to remedy where the breach is remediable.

10. Support

Support is provided for every edition as described in the help centre at sideclick.io/help/, via support@sideclick.io. We aim to respond within two business days.

11. Acceptable use and suspension

Use of the online services is subject to the Acceptable Use Policy. We may suspend relay or portal service for serious breach of that policy (for example abuse of patient messaging, or attacks on the service), applying the least restrictive measure available; local data access is never affected (EULA §7).

12. Privacy and data protection

Our Privacy Policy describes the personal information we handle for our own purposes: customers, trial requesters, and website visitors. For clinical data, your practice is the party responsible under the privacy law that applies to it; where our services store your encrypted practice data we act as its processor, operator, or business associate under the instrument that applies to you:

• If you are subject to the United States' HIPAA rules, the relay Business Associate Agreement applies to the relay and portal services.
• If you are subject to the GDPR or the UK GDPR, the relay Data Processing Agreement applies.
• If you are a South African responsible party, the POPIA operator schedule applies in addition.
• Cloud edition customers execute the instrument for their region at onboarding (§8).

The parties we use to host or carry practice data are listed in the sub-processor register, which forms Annex C of each instrument.

13. Intellectual property and feedback

The services, software and site are SideClick's or its licensors'. If you send us feedback or suggestions, we may use them without obligation; this never grants us any rights in your Practice Data.

14. Indemnities

• By you. You will defend and indemnify SideClick against third-party claims, and the resulting losses and reasonable legal costs, that arise from your Practice Data, your use of the services in breach of these Terms or the law, or your failure to hold the professional registrations and patient consents your practice requires.
• By us. We will defend and indemnify you against third-party claims, and the resulting losses and reasonable legal costs, alleging that the services or the software as provided by us infringe that third party's intellectual property rights. This does not cover claims arising from your Practice Data, from modifications we did not make, or from combinations with products we did not supply; if such a claim is made we may procure the right to continue, modify the services to avoid the claim, or, as a last resort, end the affected service and refund the fees prepaid for it.
• Process. The indemnified party must give prompt notice, allow the indemnifying party to control the defence and settlement (no settlement may impose obligations on the indemnified party without its consent), and provide reasonable cooperation.

15. Disclaimers and liability

The clinical-responsibility and AI provisions of EULA §11, the warranty disclaimer of EULA §12, and the liability cap of EULA §13 apply equally to the online services and are incorporated here. The services support — and never replace — the professional judgement of the treating practitioner.

16. Changes

We may update the services and these Terms. Material changes to these Terms will be notified to the purchase email at least 30 days before they take effect. Changes never retroactively remove the EULA §7 data-access guarantees for keys already issued, and never reduce a perpetual key's rights.

17. Term and termination

These Terms apply while you use the site or services. Either party may terminate for material breach unremedied 30 days after notice. Consequences of lapse or termination are as in §5, §9, and EULA §14 — designed so that your data is never the casualty.

18. Notices

Notices to you go to the purchase email on your licence; notices to us go to support@sideclick.io (legal notices: with "Legal notice" in the subject). A notice is effective when sent, unless a delivery failure is received.

19. Force majeure

Neither party is liable for a delay or failure caused by events beyond its reasonable control — including natural disasters, war, civil unrest, epidemics, government action, labour disputes, or failures of internet, power, or third-party hosting infrastructure — provided it uses reasonable efforts to resume. Your payment obligations for services already delivered are not excused. Because the software works offline and verifies licences offline (EULA §7.3), such events never lock you out of your installed software or your data.

20. Assignment and general terms

You may transfer your subscription with your practice as a going concern with notice to us; otherwise neither party may assign these Terms without the other's consent, not to be unreasonably withheld, except that we may assign to a successor in a merger or sale of the business that assumes these Terms in full. If any provision is unenforceable, the rest remains in force. A failure to enforce a right is not a waiver of it. These Terms, with the documents they incorporate and the EULA, are the entire agreement between us for the site and the online services; an executed data-processing instrument prevails over them for personal-data obligations.

21. Governing law and disputes

These Terms are governed by the law of the Republic of South Africa, and the courts of South Africa have jurisdiction — without depriving you of mandatory consumer or data-protection rights of your country of residence. Please raise complaints with us first at support@sideclick.io; we aim to respond within two business days.

---

SideClick (Pty) Ltd · support@sideclick.io Version 1.1 · Published 2026-09-12 Sections 14 and 18–20 follow the structure of the Bonterms Cloud Terms (Version 1.0), used under the Creative Commons Attribution 4.0 licence.