Terms of Service

By accessing or using the Eman Clinic platform (the "Services") you agree to these Terms of Service (the "Terms"). If you use the Services on behalf of an organization, you represent that you have authority to bind that entity, and "you" includes that organization. If you do not agree, do not access or use the Services.

• "User" means any individual with an authenticated account (e.g. clinician, staff, admin).
• "Patient Data" means clinical or demographic information stored or processed for care delivery.
• "Content" includes text, data, files, reports, analytics, UI components, and configuration produced by the Services.
• "Authorized Role" refers to the mapped RBAC role (e.g. SUPER_ADMIN, NURSE, LABORATORIST, PHARMACIST).

• Accounts must be created through approved onboarding or administrative invitation.
• You are responsible for safeguarding credentials and enabling multi‑factor authentication where available.
• You must promptly notify us of suspected unauthorized access or account compromise.
• We may suspend or revoke access to protect system integrity or patient safety.

We grant you a limited, non-exclusive, non-transferable, revocable license to use the Services solely for legitimate clinical, administrative, or operational purposes within your authorized role. Reverse engineering, scraping, automated bulk extraction, or derivative platform creation is prohibited except where explicitly permitted by applicable law that cannot be contractually waived.

Access to patient modules, inventory, reports, and billing features is governed by predefined roles. Users must not attempt to bypass or elevate privileges. Administrative users must regularly review and deactivate unused or inappropriate accounts.

• You confirm you have lawful authority (consent, treatment mandate, or legal basis) to input or process Patient Data.
• You will not upload unrelated personal data or sensitive information beyond clinical necessity.
• You will respect minimum necessary and confidentiality principles.
• Exported data should be handled with equivalent safeguards once it leaves the platform.

Certain modules may require subscription or usage fees under a separate ordering document or plan selection. Unless otherwise stated: (a) fees are exclusive of taxes; (b) invoices are due within 30 days; (c) late amounts may incur lawful interest or suspension. Third‑party payment processors handle card data; we do not store full card numbers.

We aim for high availability with reasonable scheduled maintenance windows announced in advance when practical. We may implement emergency maintenance (e.g. security patching) without prior notice. Features evolve over time; non‑material UI/UX changes do not constitute a breach.

• No introducing malware, probes, denial-of-service, or load testing without prior written consent.
• No sharing accounts or harvesting other users' data beyond intended workflows.
• We may log and audit access for compliance and forensic purposes.
• Reported vulnerabilities should be disclosed responsibly to our security contact.

The platform (software code, design, trademarks, documentation) is owned or licensed by Eman Clinic. No IP rights transfer except limited use rights. Feedback, suggestions, or improvement ideas may be used by us without obligation, provided they do not include patient-identifiable data.

Processing of personal and Patient Data is governed by our Privacy Policy. In case of conflict between these Terms and the Privacy Policy regarding data handling, the Privacy Policy prevails solely for that topic.

The Services are provided on an "AS IS" and "AS AVAILABLE" basis without warranties of uninterrupted operation, fitness for a particular purpose, or non‑infringement. Clinical judgment remains solely with licensed professionals. We do not provide medical diagnosis or treatment decisions; the platform is a facilitative tool.

To the maximum extent permitted by law, neither Eman Clinic nor its suppliers are liable for indirect, incidental, or consequential damages, loss of profits, lost data, or business interruption. Aggregate liability for direct damages will not exceed fees paid (if any) in the preceding 12 months. Some jurisdictions may not allow certain limitations; in such cases the limitation applies to the fullest extent allowed.

You agree to defend and indemnify Eman Clinic against claims arising from: (a) misuse of the Services; (b) breach of these Terms; (c) violation of law or third-party rights; (d) unauthorized disclosure or mishandling of Patient Data attributable to your actions.

We may suspend or terminate access immediately for material breach, security risk, suspected fraud, or legal compliance reasons. You may terminate by discontinuing use. Certain clauses (IP, limitation of liability, indemnity, dispute resolution) survive termination.

These Terms are governed by applicable local laws where the contracting entity is established, without regard to conflict of law rules. Disputes will be resolved in the competent courts of that jurisdiction, unless mandatory healthcare or data protection tribunals apply.

We may modify these Terms for legitimate business, legal, or security reasons. Material changes will be signaled via in‑app notice or email. Continued use after effective date constitutes acceptance. If you object, discontinue use before the new Terms apply.

Questions about these Terms may be directed to legal@emanclinic.example (replace with operational address).