Acceptable Use Policy

2. Prohibited Conduct

You agree not to, and not to permit any third party to:

Privacy & PHI

• Access, use, or disclose Protected Health Information (PHI) or personal information without proper authorization.
• Use PHI for marketing, fundraising, sale, or any purpose not permitted by HIPAA, CCPA/CPRA, or other applicable law.
• Re-identify de-identified data or combine data sets in a manner designed to identify individuals without authorization.

Security & Integrity

• Probe, scan, or test the vulnerability of any system or network without our prior written permission.
• Reverse engineer, decompile, disassemble, or attempt to derive source code, except to the extent expressly permitted by law.
• Bypass, disable, or interfere with security, authentication, rate-limiting, or access-control features.
• Introduce malware, ransomware, worms, trojans, time bombs, or other harmful code.
• Conduct denial-of-service attacks or otherwise disrupt the platform or its underlying infrastructure.

Scraping & Automation

• Use crawlers, scrapers, bots, or other automated means to access or extract data, except through APIs we expressly provide for that purpose and subject to their documented limits.
• Train artificial intelligence or machine-learning models on PHI or other platform data without our express prior written consent.

Communications Abuse

• Send spam, unsolicited bulk communications, or messages that violate the TCPA, CAN-SPAM, 10DLC requirements, or analogous laws.
• Use the platform to transmit content that is harassing, defamatory, threatening, obscene, or otherwise unlawful.

Identity, Fraud & Misuse

• Impersonate any person or entity, or misrepresent your identity, credentials, professional license, or affiliation.
• Share, sell, or transfer your account credentials, or allow anyone else to use your account.
• Submit forged, fraudulent, or materially misleading information, including in liens, billing records, or intake documents.

Regulatory & Professional

• Use the platform to violate any law, regulation, or professional rule applicable to you, including HIPAA, HITECH, CCPA/CPRA, FTC Act, FDCA, state medical practice acts, attorney rules of professional conduct, anti-kickback laws (federal AKS and California Business & Professions Code §§ 650, 650.01), Stark Law, and California Insurance Code.
• Use the platform to engage in the unauthorized practice of medicine, law, or any other licensed profession.

3. Enforcement

We may investigate suspected violations of this AUP and take any action we consider appropriate, including:

• Issuing a warning or requiring remediation.
• Removing or disabling access to specific content.
• Suspending or terminating your account, with or without notice.
• Cooperating with law enforcement and reporting violations to the appropriate authorities or licensing bodies.
• Pursuing civil remedies, including injunctive relief and damages.

We may suspend access without notice where we believe a violation poses a security or legal risk. Termination for violation of this AUP does not entitle you to a refund.