§ PREAMBLE

These Terms of Service ("Terms", "Agreement") constitute a legally binding agreement between you ("User", "You", "Healthcare Professional") and Medoxa AI ("Company", "We", "Us", "Our"), governing your access to and use of the Medoxa IA platform, including all associated websites, applications, services, and content (collectively, the "Service").

1 DEFINITIONS

2 ELIGIBILITY AND ACCOUNT REGISTRATION

2.1 Professional Eligibility — The Service is intended exclusively for licensed Healthcare Professionals. By using the Service, you represent and warrant that:

• You are a duly licensed healthcare professional in your jurisdiction;
• Your medical license is valid, active, and in good standing;
• You are at least 18 years of age;
• You will use the Service solely for legitimate clinical purposes.

2.2 Account Security — You are responsible for maintaining the confidentiality of your account credentials and for all activities under your account. Notify us immediately of any unauthorized use.

3 DESCRIPTION OF SERVICE

Medoxa IA provides a medical documentation support platform utilizing artificial intelligence to:

• Transcribe audio recordings of medical consultations
• Generate structured clinical histories and documentation
• Provide patient profile management
• Offer clinical decision support tools and medical calculators

The Service is provided "as is" and "as available". We reserve the right to modify, suspend, or discontinue any aspect of the Service at any time.

5 USER OBLIGATIONS

5.1 Patient Consent — You are solely responsible for obtaining valid, informed consent from patients prior to recording consultations or processing patient data.

5.2 Data Protection Compliance — You shall comply with all applicable laws including GDPR, HIPAA (where applicable), CCPA, and other privacy laws.

5.3 Acceptable Use — You agree not to:

• Use the Service for unlawful purposes
• Attempt unauthorized access to systems
• Reverse engineer the Service
• Process data without valid consent
• Share account credentials

6 SUBSCRIPTIONS AND PAYMENTS

6.1 Billing — Paid subscriptions are billed in advance monthly or annually. Payment is processed by our secure third-party payment processor.

6.2 Automatic Renewal — Subscriptions auto-renew unless cancelled before the renewal date.

6.3 Refunds — ALL FEES ARE NON-REFUNDABLE unless required by applicable law. Upon cancellation, access continues until the end of the current billing period.

7 INTELLECTUAL PROPERTY

All intellectual property rights in the Service, including software, algorithms, designs, and trademarks, remain the exclusive property of Medoxa AI. You retain ownership of content you upload. Unauthorized copying, modification, or distribution is prohibited.

9 INDEMNIFICATION

You agree to indemnify and hold harmless Medoxa AI from all claims, damages, and expenses arising from:

• Your use or misuse of the Service
• Your violation of this Agreement or any law
• Any medical decisions or patient care activities
• Failure to obtain patient consent
• Failure to verify AI-generated content

10 TERMINATION

You may terminate at any time by cancelling your subscription. We may suspend or terminate your access for violation of Terms, fraudulent activity, non-payment, or at our discretion. Upon termination, your access ceases immediately and data may be deleted per our retention policies.

11 DATA PROCESSING

For patient data: You are the Data Controller; Medoxa AI is the Data Processor. We process data only per your instructions. Our Privacy Policy governs personal data collection and use.

12 GOVERNING LAW AND JURISDICTION

12.1 Governing Law — This Agreement is governed by the laws of Portugal and the European Union.

12.2 Jurisdiction — Disputes shall be resolved in the courts of Portugal.

12.3 EU Consumer Rights — EU consumers may access the European Online Dispute Resolution platform at ec.europa.eu/consumers/odr.

12.4 US Compliance — For US users, provisions may be modified to comply with mandatory state laws.

13 GENERAL PROVISIONS

Entire Agreement: This Agreement constitutes the entire agreement between parties.

Severability: Invalid provisions shall be severed; remaining provisions continue in effect.

Modifications: We may update these Terms with 30 days notice. Continued use constitutes acceptance.

Language: English version prevails over any translations.

14 CONTACT

1 INTRODUCTION

Medoxa AI ("Company", "We", "Us", "Our") is committed to protecting the privacy and security of personal data. This Privacy Policy describes how we collect, use, disclose, and protect information when you use our medical documentation platform (the "Service").

This Policy complies with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other applicable privacy laws in the European Union and United States.

2 DATA CONTROLLER INFORMATION

3 INFORMATION WE COLLECT

3.1 Information You Provide:

• Account Data: Name, email, password, professional credentials
• Payment Data: Billing address, payment details (processed securely by third-party)
• Audio Recordings: Voice recordings uploaded for transcription
• Patient Data: Medical information, clinical notes, health data you input

3.2 Automatically Collected:

• Device Info: Device type, OS, browser, identifiers
• Usage Data: Features used, pages viewed, actions taken
• Log Data: IP address, access times, referring URLs
• Cookies: Essential, functional, and analytics cookies

3.3 Special Categories:

We process health data (sensitive data) as necessary for healthcare provision with appropriate safeguards.

4 HOW WE USE YOUR INFORMATION

4.1 Primary Purposes:

• Provide, maintain, and improve the Service
• Process transcriptions and generate documentation
• Process payments and manage subscriptions
• Send service communications and support
• Ensure security and comply with legal obligations

4.2 Legal Bases (GDPR):

• Contract: Processing necessary for service provision (Art. 6(1)(b))
• Legal Obligation: Compliance with laws (Art. 6(1)(c))
• Legitimate Interests: Security, improvement (Art. 6(1)(f))
• Consent: Where explicitly given (Art. 6(1)(a))
• Health Data: Healthcare provision (Art. 9(2)(h))

5 DATA SHARING AND DISCLOSURE

5.1 Third-Party Providers:

• AI Service Providers: For transcription and content generation
• Cloud Infrastructure: For hosting and storage
• Payment Processors: For secure payment handling
• Authentication: For account security

5.2 Legal Requirements:

We may disclose data when required by law, court orders, or to protect rights and safety.

6 INTERNATIONAL DATA TRANSFERS

Data may be transferred outside your country. For EEA transfers, we use:

• Standard Contractual Clauses (EU Commission approved)
• Adequacy decisions
• EU-US Data Privacy Framework (where applicable)

7 DATA SECURITY

We implement appropriate security measures including:

• Encryption in transit and at rest
• Secure authentication mechanisms
• Regular security assessments
• Access controls and employee training

No method is 100% secure. We will notify authorities within 72 hours of any breach likely to risk your rights.

8 DATA RETENTION

10 COOKIES

We use:

• Essential: Required for Service operation
• Functional: Remember your preferences
• Analytics: Understand usage and improve

Manage cookies through your browser settings.

11 CHILDREN'S PRIVACY

The Service is not for individuals under 18. We do not knowingly collect data from children.

12 HEALTHCARE PROFESSIONAL RESPONSIBILITIES

As a Healthcare Professional, you must:

• Act as Data Controller for patient data
• Obtain valid patient consent before recording
• Comply with healthcare privacy laws
• Inform patients about data processing
• Respond to patient data requests

13 CHANGES AND CONTACT

Policy Updates: Material changes communicated 30 days in advance. Continued use constitutes acceptance.

Legal Compliance: This Policy complies with GDPR, CCPA, CPRA, Portuguese Data Protection Law, and ePrivacy Directive.