Acceptable Use Policy

You may use MedSpaOS to manage authorized clinic operations, patient and appointment workflows, staff access, transactions, communications, and approved integrations in accordance with your plan and applicable law.

• Accessing another tenant, account, device, or record without authorization.
• Uploading malware, harmful code, unlawful content, or information you do not have the right to process.
• Attempting to probe, scan, reverse engineer, bypass controls, or disrupt the service.
• Using the service for fraud, harassment, discrimination, unlawful surveillance, or deceptive marketing.
• Using AI output as a replacement for qualified clinical judgment or required review.
• Sharing credentials, evading usage limits, or reselling access without written permission.

Only authorized personnel may enter or access patient information. Customers must configure role permissions, obtain required notices and consents, follow applicable retention rules, and use approved integrations. Do not place secrets, payment-card data outside supported payment fields, or highly sensitive information in free-text fields unless the workflow is designed for it.

We may investigate suspected violations and restrict, suspend, or terminate access when reasonably necessary to protect users, data, or the service, comply with law, or prevent harm. Where practical, we will provide notice and an opportunity to remediate. We may preserve and disclose relevant information when legally required.

Report suspected abuse, compromised credentials, or security issues to security@medspaos.com. For privacy requests, contact privacy@medspaos.com.