SaaS Service Terms

Mindful Message provides a platform for referral-provider organisations to create and manage referrals, for assigned verified professionals to deliver counselling or support sessions, and for organisation-funded session and invoice workflows.

Unless a signed operating model says otherwise, A Mindful Message provides the platform, referral, verification, allocation, administration, billing, privacy, and compliance workflow. The assigned professional remains responsible for delivering within their competence, registration, licence, membership, insurance, safeguarding, and local practice obligations.

Professionals must provide role-appropriate registration, licence, membership, safeguarding suitability, jurisdiction, expiry, and identity evidence before receiving assigned referrals. Referral matching considers verification status, referral status, professional specialities, and the support needs recorded for the referral.

Verification does not replace the professional's own statutory, professional-body, insurer, supervision, safeguarding, or local telehealth obligations.

The organisation must send only referrals it is authorised to send, keep account access secure, provide accurate safeguarding and billing information, and report suspected errors, incidents, complaints, or unauthorised access promptly.

The platform is not an emergency service, crisis line, or substitute for immediate safeguarding, urgent triage, prescribing, or medical emergency routes.

Organisation users receive workflow, status, service allowance, contract, billing, and administration information only. They do not receive routine clinical notes, assessment answers, session content, professional clinical records, or case detail.

Assigned verified professionals receive the minimum referral, assessment, session, and case information needed to deliver the assigned service.

Normal support uses non-sensitive IDs, timestamps, route names, error IDs, and redacted logs. Sensitive clinical or ePHI access is not part of routine support. Any exceptional support access must be time-limited, justified, audited, and reviewed.

Data protection roles, processing instructions, subprocessors, transfers, rights handling, breach support, audits, and security measures are governed by the data processing addendum or controller terms. The HIPAA BAA addendum path applies only when the organisation role requires it.

Fees, included session allowance, additional-session rules, expiry, cancellation, and invoice workflow are set in the accepted subscription schedule and reflected in the product contract record.