Terms of Service

These Terms of Service (“Terms”) are a legal agreement between you and InPractice Health governing your access to and use of our websites, software, platforms, reports, interfaces, support and related offerings (collectively, the “Services”). By accessing or using the Services, you agree to these Terms. If you do not agree, do not use the Services.

The Services are intended for business and professional use. You must be at least 18 years old and legally able to enter this agreement. If you use the Services for an organisation, you represent that you have authority to bind it, and “you” includes that organisation.

InPractice Health may provide data integration and harmonisation, analytics and reporting, research and query interfaces, workflow tools, clinical-data infrastructure, software support, and related professional services. Features may differ by customer, plan, geography and stage of development.

You must provide accurate account information, keep credentials confidential, use reasonable security measures and promptly notify us of suspected unauthorised access. You are responsible for activity under accounts assigned to you or your organisation, except to the extent caused by InPractice Health’s breach of an applicable obligation.

Administrators may provision, suspend and manage authorised users for their organisation. You may not share credentials, permit access by unauthorised persons or circumvent access controls.

You are responsible for:

• Using the Services only for lawful, authorised and documented purposes.
• Ensuring you have all rights, notices, consents, permissions and legal bases required for data you provide or connect.
• Configuring user access appropriately and maintaining the security of your systems and endpoints.
• Reviewing outputs and making your own professional, clinical, research and business decisions.
• Complying with privacy, healthcare, research, employment, export and other laws applicable to your activities.
• Following documentation, reasonable technical requirements and restrictions in an applicable Additional Agreement.

Our handling of personal information is also described in the Privacy Policy.

You may not, and may not assist another person to:

• Use the Services unlawfully, fraudulently, deceptively or in violation of another person’s rights.
• Access, use, disclose or attempt to identify data without appropriate authorisation.
• Upload malicious code, interfere with service integrity, probe vulnerabilities or bypass security or usage controls.
• Reverse engineer, decompile, disassemble or attempt to derive source code, models or non-public methods, except where law expressly permits.
• Scrape, copy, resell, sublicense or use the Services to build a materially competing product except as expressly authorised.
• Use outputs as the sole basis for diagnosis, treatment, patient eligibility or another decision with legal or similarly significant effects.
• Misrepresent generated, de-identified, statistical or research outputs as individually verified clinical facts.
• Use the Services in a way that could harm patients, research participants, customers, systems or the public.

We may investigate suspected misuse and preserve or disclose information when reasonably necessary to protect the Services, comply with law or enforce these Terms, subject to applicable privacy and contractual obligations.

The Services may produce analytics, cohorts, classifications, predictions, summaries, computer- vision assessments, reports or other generated outputs. Outputs may contain errors, omissions or uncertainty and may change as data, methods and Services evolve.

You are responsible for reviewing outputs, validating fitness for your intended purpose, maintaining appropriate human oversight and complying with any laws or professional standards that apply to your use.

InPractice Health and its licensors retain all rights in the Services, including software, interfaces, designs, documentation, models, methods, trademarks and improvements. Except for the limited right to use the Services during the applicable term, no rights are granted by implication or otherwise.

Rights in Customer Data and generated outputs are governed by the applicable Additional Agreement. If no Additional Agreement addresses an output, you may use the output for your internal lawful business purpose, subject to underlying data, third-party and InPractice Health rights.

If you provide suggestions or feedback, you grant InPractice Health a worldwide, perpetual, irrevocable, royalty-free right to use it without restriction or obligation, provided we do not identify you publicly without permission.

Each party may receive non-public information that is identified as confidential or should reasonably be understood to be confidential. The receiving party will use it only to perform or receive the Services, protect it using reasonable care, and disclose it only to people who need to know and are bound by confidentiality obligations. These duties do not apply to information that is public without breach, already lawfully known, independently developed, or lawfully received without restriction.

If disclosure is legally required, the receiving party may disclose the minimum required and, where legally permitted, will provide advance notice. Additional security and confidentiality commitments may be stated in an MSA, DPA, BAA or security exhibit.

We may maintain, update, modify or discontinue features. We will use commercially reasonable efforts to avoid material disruption to contracted Services and provide notice where required by an Additional Agreement. Service levels apply only if expressly stated in a signed agreement.

Preview, pilot, beta, evaluation and “coming soon” features may be incomplete, changed or withdrawn at any time. They are provided for testing and feedback, may have additional restrictions and should not be used for production or high-risk decisions unless expressly authorised.

A customer may terminate as provided in its Additional Agreement. We may suspend access when reasonably necessary to address a security risk, unlawful use, material breach, non-payment, harm to the Services or users, or a legal requirement. Where practicable, we will limit the suspension and provide notice and an opportunity to cure.

On termination, access rights end. Data return, export, deletion and transition obligations are governed by the applicable Additional Agreement, DPA or BAA. Provisions that by their nature should survive, including payment obligations, confidentiality, intellectual property, disclaimers, liability limits, indemnity and general terms, will survive.

Some jurisdictions do not allow certain exclusions or limitations, so parts of this section may not apply.