Cookie Policy

What Are Cookies

Cookies are small text files stored on your device by your web browser. They let a website remember who you are between one page and the next.

This policy explains which cookies Medivis sets, why, and how you can manage them.

Cookies We Use

Medivis sets essential cookies only. There are no tracking, analytics or advertising cookies on this platform.

Cookie Name	Type	Duration	Purpose
`mv_session`	HTTP-only, host-only	24 hours	Business staff sign-in, on that business's own subdomain
`mv_platform`	HTTP-only	24 hours	Platform administrator sign-in on the Medivis console
`mv_platform_pending`	HTTP-only	5 minutes	Holds a half-finished console sign-in while the emailed one-time code is entered
`kf_active_branch`	HTTP-only	30 days	Remembers which branch a multi-branch staff member is currently working in

All four are HTTP-only, so JavaScript running in the page cannot read them. None of them carries contact data: the session cookies hold a signed token naming the account and the business it belongs to, nothing else.

Managing Cookies

You can view, block and delete cookies through your browser settings. Because every cookie Medivis sets is essential to signing in, blocking them prevents staff from using the platform at all.

Signing out clears the session cookies immediately.

Third-Party Cookies

Medivis uses no third-party cookies. The external services the platform depends on — the WasapFlow bridge for WhatsApp and OpenAI for the AI agent — are called from our servers, not from your browser, so they cannot set a cookie on your device.

If that ever changes, this policy will be updated before the change is deployed.