Terms of Service

These Terms of Service are a legal agreement between you and DeepVertex Healthcare Technology (“Orvie”, “we”, “us”) for the use of Orvie. By creating an account, accessing the workspace or using any part of the service, you accept these terms. If you use the service for a hospital, clinic or other organisation, you confirm that you have authority to bind that organisation.

The service is a clinical workspace for patients, doctors, nurses and hospital administrators. It includes the web application, device data ingestion, appointment and record tools, and links to video consultation rooms. Unless a separate written agreement says otherwise, Orvie is a technology provider, not a hospital, clinic or medical practice. We do not provide medical care, diagnosis or treatment; the clinicians and facilities that use the workspace do.

If your organisation has a signed agreement with us, that agreement takes precedence over these terms where they conflict. Our Privacy Notice governs personal data. These terms govern your use of the software.

You must be at least 18 years old and have legal capacity to enter into this agreement. If you are under 18, a parent or guardian must accept these terms and supervise your use. By using the service, you confirm that you meet these requirements.

Professional accounts are for licensed clinicians and authorised administrators. If you register as a doctor or nurse, you confirm that your licence, registration and practice authority are valid, that you are permitted to practise at the facility you name, and that you will keep that information current. We may ask for evidence and may suspend an account until it is provided.

You must not use the service if the law prohibits you from doing so, or if you are acting for someone without their authority. The service is operated for Indonesia; if you access it from elsewhere, you do so on your own initiative and are responsible for local law.

You must give accurate, complete information when you register and keep it up to date. You are responsible for everything that happens through your account, except to the extent the law says otherwise.

• Keep your password and one-time codes private. Do not share your account or let another person sign in as you.
• Use a unique password and a password manager where possible. Administrator accounts must also complete the email-code step at every sign-in.
• Tell us immediately at security@deepvertex.tech if you suspect unauthorised access, a lost device or a leaked credential.
• One account per person. Clinic administrators may create an account for a patient only with the patient’s knowledge and the authority of the facility.
• Demo accounts are read-only and for evaluation only. Do not enter real patient data into a demo workspace.

Sessions expire after eight hours. We may require a password change, revoke a session or suspend an account when we believe its security has been compromised.

You may use the workspace only for lawful clinical, administrative or personal purposes connected with your account. You must not:

• access, view, copy or alter data you are not authorised to see, including another patient’s record or another hospital’s data;
• share credentials, impersonate a clinician or administrator, or create an account with false identity or licence information;
• enter false, misleading or incomplete clinical information, or prescribe, order or record care you are not authorised to provide;
• probe, scan, bypass or defeat authentication, role checks, rate limits or other security controls;
• introduce malware, overload the service, run denial-of-service tests, scrape or harvest data, or use automated tools to access records;
• reverse engineer, decompile or copy the software except where the law expressly permits it;
• use the service to advertise or sell products, to build a competing product, or to resell or time-share access;
• remove copyright, attribution or security notices;
• use the workspace as the sole basis for an emergency response, automated diagnosis or prescribing decision;
• violate the UU PDP, medical-records law, professional ethics or the rights of another person.

Good-faith security research is welcome under the policy in our Security Overview. We may investigate suspected misuse, preserve evidence and report it to the relevant authorities. We may suspend access while an investigation is open.

The software supports care. It does not diagnose, prescribe or treat. The workspace stores and displays information, calculates early-warning scores from vital signs and connects you with clinicians. Those outputs are decision support. They can be incomplete, delayed or wrong, and a qualified clinician must verify them against the patient in front of them. A score is not a diagnosis and must never replace clinical judgement.

Clinicians remain responsible for every clinical decision, for the accuracy and completeness of the records they write, for obtaining the consent their care requires, and for confirming the identity and authority of the people they treat or delegate to.

This is not an emergency service. The workspace is not continuously monitored by a clinician, and alerts and device readings may be delayed. If you have chest pain, difficulty breathing, severe bleeding, a seizure, a complication in pregnancy or any other emergency, call 119 or 112 or go to the nearest emergency department. Do not wait for a message through the workspace.

Teleconsultations have limits: there is no physical examination, technology can fail, and a clinician may end the consultation and direct you to in-person care. Device readings from wearables or home monitors are not a substitute for a clinical measurement, and you must not change medication or treatment based on a device reading alone.

Visiting this website or using a demo does not create a doctor-patient relationship. That relationship is between you and the licensed clinician or facility providing care.

We provide the service on an “as available” basis. Unless a signed agreement says otherwise, we do not promise uninterrupted availability or a particular uptime. We may perform maintenance, deploy updates, change features or suspend access to protect patients, security or the law.

We try to give notice of planned maintenance and material changes, but urgent security work may happen without notice. You are responsible for your internet connection, browser and devices. Third-party networks and services can fail outside our control.

We keep backups and follow the retention schedule in the Privacy Notice, but you should not rely on the workspace as your only copy of information you cannot afford to lose. If we discontinue the service, we will give at least 90 days’ notice where practicable and a way to export your data, subject to medical-records retention.

Orvie and its licensors own the software, the interface, the design system, the documentation, the Orvie name and logo, and all related intellectual property. We grant you a limited, non-exclusive, non-transferable, revocable licence to use the service for its intended purpose while your account is active and these terms are met. No other licence is granted, whether by implication or otherwise.

Your data remains yours. You keep ownership of the records, text and other content you submit. You grant us a licence to host, process, transmit, display and back it up solely to operate, support and secure the service and to comply with the law. Clinicians grant that licence for the records they author, and patients for the data they provide. This licence ends when the data is deleted, except for copies we must keep by law or in backups that age out.

If you send us feedback, we may use it without obligation to you. Open-source components keep their own licences. You must not use our marks without written permission.

We process personal data as described in the Privacy Notice, including the categories, purposes, legal bases, recipients, transfers and retention periods. The notice also explains your rights under the UU PDP and how to exercise them.

Where a hospital or clinic is the controller for the care it provides, it is responsible for its own notice, its lawful basis and its instructions to us. Where we act as a processor, we process only on documented instructions and under a data processing agreement.

Clinicians must access only the records of patients they treat, must not copy records into personal devices or accounts, and must report a suspected breach to security@deepvertex.tech without undue delay.

You may stop using the service at any time and ask us to close your account. We may suspend or terminate access, with notice where practicable and immediately where necessary, if:

• you materially breach these terms or a signed agreement;
• we reasonably believe your account is compromised or creates a risk to patients, staff or the service;
• we are required to do so by law, a regulator or a court;
• your organisation’s agreement ends, or you are no longer authorised to act for it;
• fees under a paid agreement remain unpaid after notice.

When access ends, you lose the right to use the service. You may request an export of your data before closure. Clinical records and audit logs are kept for the periods the law requires, even after an account is closed. Provisions on intellectual property, personal data, liability, governing law and interpretation survive termination.

If we terminate for convenience, we will give at least 30 days’ notice unless a legal or security reason requires otherwise. If you believe a suspension is mistaken, contact privacy@deepvertex.tech; we will review it.

The workspace links to services we do not control, including Jitsi video rooms (operated by 8x8, Inc.), Google sign-in, app stores and your internet provider. Those services have their own terms and privacy notices. We are not responsible for their content, availability or security, except where the law makes us responsible for a processor we have engaged.

A link is not an endorsement. If a third-party service fails during a consultation, the clinician should use an alternative channel or ask you to attend in person. Report a problem to us at security@deepvertex.tech so we can investigate our own integration.

To the fullest extent permitted by Indonesian law, the service is provided “as is” and “as available”. We disclaim implied warranties of merchantability, fitness for a particular purpose, accuracy and non-infringement. We do not warrant that the service will be uninterrupted, error-free or that every device reading is accurate.

We are not liable for clinical decisions, for information a user or device enters incorrectly, for a third-party service, or for loss caused by your failure to keep credentials secure. We are not a provider of medical care and do not control the judgement of a clinician.

To the extent permitted by law, our aggregate liability for all claims arising from or relating to the service in any 12-month period is limited to the greater of:

• the total fees you paid us for the service in the 12 months before the event; or
• IDR 10,000,000.

To the same extent, we are not liable for indirect, incidental, special, consequential or punitive loss, or for loss of profit, revenue, goodwill or opportunity. This does not exclude loss of personal data where the law gives you a right to compensation.

Nothing in these terms limits liability that cannot be limited by law. This includes death or personal injury caused by our negligence, fraud or wilful misconduct, a breach of the UU PDP where compensation is required, and your rights as a consumer under Law No. 8 of 1999 on Consumer Protection. If a provision of this section is held invalid, the rest remains in force.

We are not liable for delay or failure caused by events beyond our reasonable control, such as a natural disaster, widespread network failure or government action, provided we take reasonable steps to resume service and protect data. This does not excuse our obligations under data-protection law.

These terms are governed by the laws of the Republic of Indonesia, without regard to conflict-of-law rules. Before starting a claim, we ask you to send a written description of the dispute to privacy@deepvertex.tech and allow 30 days for good-faith discussion.

If the dispute is not resolved, it will be decided by the competent courts in Jakarta, Indonesia. Nothing in this section prevents you from using a consumer dispute body or court that Indonesian law makes available to you, or from seeking urgent relief where delay would cause harm.

These terms are published in English with a Bahasa Indonesia summary. A complete Indonesian translation will be published with the next revision; where Indonesian law requires an Indonesian version of this agreement, that version will prevail. If any provision is unenforceable, it will be read down to the minimum necessary and the remaining provisions will continue.

We may update these terms to reflect changes in the service, the law or our operations. The current version and date appear at the top of this page. For a material change, we will give at least 30 days’ notice by email or in the workspace before it takes effect, unless the law or a security risk requires a shorter period.

If you disagree with a change, stop using the service and ask us to close your account before the effective date. Continuing to use the service after that date means you accept the new terms. Earlier versions are available on request. Where the law requires your consent to a change, we will ask for it separately.

Questions about these terms, a notice under them, or a dispute: privacy@deepvertex.tech. Security reports: security@deepvertex.tech. Postal address: DeepVertex Healthcare Technology, Jakarta, Indonesia.

We aim to acknowledge legal correspondence within five business days and security reports within three business days. These targets do not replace any deadline the law imposes.