Acceptable Use Policy

1. Permitted use

Nheva must be used for psychological care and practice management, within each account's permissions: professionals look after their own clients; secretaries handle the schedule, registration and charges, without access to records; clients follow their own care through the app and the booking and payment pages.

2. Prohibited conduct

• using the platform for illegal, fraudulent or discriminatory activities, or activities that violate third-party rights or the rules of the Federal Council of Psychology;
• accessing or trying to access accounts, practices, clients, documents or payment links without authorization;
• exploiting vulnerabilities, inserting malicious code, bypassing technical or plan limits, automating access abusively (bots, scraping) or harming the availability of the service;
• sharing logins, selling or handing over access: each person uses their own account;
• registering clients, sending messages or creating charges without real care or without a legal basis;
• using charges to collect amounts that are not for the care you provide;
• sending unsolicited bulk messages through the practice's WhatsApp or e-mail, or messages that breach WhatsApp/Meta policies;
• publishing misleading content, promises of results or any other practice forbidden by the Federal Council of Psychology's advertising rules on the professional website.

3. Client data and confidentiality

Treat client data confidentially, only for care and practice management, and record only what is needed. Tell your clients that you use Nheva and obtain the authorizations required by law and professional rules.

PDFs, documents and spreadsheets you download are in your custody: protect them as carefully as the records. Give access to the practice only to those who need it and remove anyone who leaves the team.

4. Artificial intelligence

Use AI as support: review, correct and personally sign each progress note, and don't present generated text as a clinical assessment without your review. Nheva removes the client's name, CPF, phone and e-mail before sending text to AI, but it can't recognize every identifying detail written freely: avoid unnecessary identifiers in your notes (addresses, third parties' names, workplaces).

Don't try to make the AI or the AI secretary act outside its role, such as providing clinical support or revealing other clients' data.

5. Integrations and messages

WhatsApp, Google and payment methods connected to Nheva may only be used for the practice's purposes. Respect a client's request to stop receiving automatic messages, and don't use the integrations to extract data in bulk or bypass permissions.

6. Account security and vulnerabilities

Use a strong password, don't share access and keep your devices locked and up to date. Tell seguranca@nheva.com.br immediately about suspicious access, a lost device or a leaked password.

If you find a vulnerability, write to seguranca@nheva.com.br with the details. Good-faith reports are welcome, as long as they don't access third-party data beyond what is needed to show the problem, don't harm the service and aren't disclosed before the fix.

7. Measures in case of violation

If this Policy is violated, Nheva may warn, limit, suspend or close accounts, remove content from the professional website, hold payouts under the Professional Agreement, preserve technical records and inform the authorities when the law requires it. Clinical records remain kept for the period required by professional rules.