Terms of Service

1. Agreement and authorized users

These Terms apply to access to IASORA and iasorahealth.com. By using a clinic account, you confirm that you are authorized by that clinic and can bind it to these Terms. Clinic-specific commercial terms are set out in the applicable order form or service agreement.

Accounts are individual. Users must keep credentials confidential, use appropriate device security and notify IASORA promptly about suspected unauthorized access. A clinic is responsible for assigning the correct roles and promptly removing access that is no longer required.

2. The IASORA service

IASORA provides reception, booking, clinic scheduling, patient workflow, transactional communication and optional third-party integrations. Available functions depend on the agreed Standard or Pro package, configuration, rollout state and external provider availability.

IASORA may improve the service and its security controls while preserving contracted core functionality. Material reductions to a paid service are handled under the clinic agreement.

3. Clinic responsibilities

• maintain accurate services, durations, providers, locations, working hours, closures and contact information;
• review booking and care workflows and retain professional control over clinical decisions;
• provide required patient notices, legal bases and instructions for processing patient data;
• use the service only for lawful healthcare administration and not upload data that the clinic is not permitted to process;
• keep connected calendar and communication accounts authorized and promptly reconnect or disable integrations when access changes.

4. No medical advice or emergency service

IASORA is operational software, not a healthcare provider. It does not diagnose, prescribe treatment or replace professional clinical judgment. Clinics remain solely responsible for medical care, triage, regulatory duties and the accuracy of their services.

IASORA is not an emergency channel. Patient-facing flows may direct a person to emergency services when defined safety language is detected, but no automated system should be relied on as the sole method for identifying or managing an emergency.

5. Google Calendar and other integrations

A clinic connects an external service only through an authorized account. The clinic grants IASORA the permissions displayed during authorization and can revoke them at any time. IASORA uses Google Calendar data only for the connected scheduling features described in the Privacy Policy.

Third-party services may change, suspend or interrupt their APIs. IASORA uses retries, safe fallbacks and visible operational alerts, but cannot control the availability or policies of Google, Resend, Stripe, Supabase, Vercel or another external provider.

6. Acceptable use

You must not:

• access another clinic's data or bypass account permissions;
• probe, disrupt, overload or reverse engineer protected systems;
• use IASORA for spam, deception, unlawful discrimination or abuse;
• introduce malicious code or disclose credentials and API secrets;
• use patient or Google data for advertising, data brokerage, surveillance or unrelated AI model training.

7. Fees, billing and suspension

Fees, onboarding, package, taxes, payment dates and renewal terms are stated in the clinic's order form. Where Stripe billing is enabled, payment details are handled by Stripe and IASORA receives only the identifiers and billing state needed to administer the subscription.

IASORA may limit or suspend access for a material security risk, unlawful use, prolonged non-payment or a serious breach of these Terms. Where reasonably possible, the clinic will receive notice and an opportunity to cure the issue. Patient safety and lawful data handling take priority during any suspension.

8. Data protection and confidentiality

Each party must protect confidential information and use it only for the service relationship. Processing of clinic-controlled personal data is governed by the clinic's data-processing agreement, including security, subprocessors, assistance with rights requests, incident notification, return or deletion, and international transfer terms.

9. Intellectual property

IASORA and its licensors retain rights in the software, design, documentation and service technology. The clinic retains rights in its data and grants IASORA only the rights needed to operate, secure and support the contracted service. No patient or Google user data is sold.

10. Availability, warranties and liability

IASORA is developed and operated with production monitoring, recovery controls and tested safeguards. Scheduled maintenance, external provider outages and circumstances beyond reasonable control can still affect availability. Service levels and support commitments, if purchased, are stated in the clinic agreement.

To the extent permitted by mandatory law, implied warranties and liability are limited as described in the clinic agreement. Nothing in these Terms excludes liability that cannot lawfully be excluded or limits a person's statutory data-protection rights.

11. Termination and changes

On termination, access ends and data is returned, retained or deleted according to the clinic agreement, documented instructions and legal obligations. Provisions concerning confidentiality, payment, intellectual property, data protection and accrued rights survive as necessary.

Updated Terms will show a new effective date. Material changes will be communicated where required. The governing law and dispute process are specified in the clinic's commercial agreement; mandatory local law continues to apply.

12. Contact

Questions about these Terms can be sent to vlahinjatin@gmail.com. Before paid onboarding, the clinic receives the contracting operator's full legal identity and commercial details in its order form.