Terms of Service

1. Acceptance of Terms

By accessing or using ClinikAPI ("Service"), you agree to be bound by these Terms of Service ("Terms"). If you are using the Service on behalf of an organization, you represent and warrant that you have the authority to bind that organization to these Terms. If you do not agree, do not use the Service.

2. Service Description

ClinikAPI provides a managed healthcare infrastructure platform including: a REST API for clinical data storage and retrieval (FHIR R4 on AWS HealthLake), a TypeScript SDK for server-side integration, a React component library for client-side UI, a Developer Dashboard for API key management, analytics, billing, and webhooks, and documentation.

3. Account Responsibilities

• You are responsible for maintaining the confidentiality and security of your API keys. Never expose secret keys in client-side code, public repositories, or logs.

• You are responsible for all activity that occurs under your account and API keys, including activity by team members and sub-organizations.

• You must provide accurate and complete registration information and keep it updated.

• You must comply with all applicable laws, including HIPAA, when handling Protected Health Information (PHI) through the Service.

4. Acceptable Use

You agree not to: (a) use the Service for any unlawful purpose; (b) attempt to access other tenants' data or circumvent tenant isolation; (c) reverse engineer, decompile, or disassemble the Service; (d) exceed rate limits through automated means or abuse the API; (e) store non-clinical data in HealthLake datastores; (f) resell or redistribute the Service without written permission; (g) use the Service to build a competing product; (h) transmit malware, viruses, or malicious code through the API.

5. Pricing, Billing, and Overages

• Plans and pricing are listed at clinikapi.com. Prices are in USD and exclude applicable taxes.

• Paid plans (Starter, Pro, Team) are billed monthly or annually via Stripe. Annual plans receive a 20% discount (Pro and Team only; Starter is monthly only).

• Each plan includes a monthly request quota. Requests beyond the quota are charged at $0.003 per request, calculated at the end of each billing period and added to your next invoice.

• Sub-organizations are billed separately at $200/month each, with their own request quota and overage charges.

• You may upgrade, downgrade, or cancel your plan at any time from the Dashboard. Downgrades take effect at the end of the current billing period.

6. No Refund Policy

All payments are final and non-refundable. This includes monthly and annual subscription fees, sub-organization fees ($200/mo), and overage charges. When you cancel a subscription, you retain access until the end of the current billing period — no prorated refunds are issued for unused time. Annual subscriptions that are cancelled mid-term will not receive a refund for the remaining months. By subscribing to a paid plan, you acknowledge and agree to this no-refund policy. If you believe you were charged in error, contact [email protected] within 7 days of the charge.

7. HIPAA and Business Associate Agreement

A signed Business Associate Agreement (BAA) is required for any production use involving Protected Health Information (PHI). BAAs are available on all paid plans (Starter and above). The BAA governs all PHI processed through the Service and defines breach notification procedures, permitted uses, and safeguard requirements. Enterprise customers may negotiate custom BAA terms.

8. Data Ownership and Portability

• You retain all rights to your data. ClinikAPI does not claim ownership of any clinical data stored through the Service.

• You may export all your data at any time via the bulk export API endpoint (NDJSON format).

• Upon account termination, all your data (including PHI) is permanently deleted within 30 days per our data retention policy and BAA terms.

9. Service Level Agreement

• We target 99.9% API uptime for all paid plans, measured monthly excluding scheduled maintenance.

• Scheduled maintenance is performed during low-usage windows (typically Sunday 2-6 AM EST) with at least 48 hours advance notice via email and status.clinikapi.com.

• If we fail to meet the 99.9% uptime target in a calendar month, affected paid customers may request a service credit of 10% of that month's invoice. Credits must be requested within 30 days and are capped at 30% of the monthly fee.

• The SLA does not cover: (a) scheduled maintenance; (b) force majeure events; (c) issues caused by your code, network, or third-party services; (d) abuse or violation of these Terms.

10. Intellectual Property

The ClinikAPI platform, API, documentation, and proprietary packages (fhir-engine, dashboard) are owned by ClinikAPI and protected by intellectual property laws. The SDK (@clinikapi/sdk) and React library (@clinikapi/react) are licensed under the MIT License. You may not use our trademarks, logos, or brand assets without written permission.

11. Limitation of Liability

To the maximum extent permitted by law, ClinikAPI's total liability for any claims arising from or related to the Service is limited to the amount you paid for the Service in the 12 months preceding the claim. We are not liable for indirect, incidental, special, consequential, or punitive damages, including lost profits, data loss, or business interruption, even if advised of the possibility of such damages.

12. Indemnification

You agree to indemnify and hold harmless ClinikAPI, its officers, directors, employees, and agents from any claims, damages, losses, or expenses (including reasonable attorney's fees) arising from: (a) your use of the Service; (b) your violation of these Terms; (c) your violation of any applicable law or regulation; (d) any PHI breach caused by your application's security practices.

13. Termination

• You may close your account at any time from the Dashboard. Active subscriptions will continue until the end of the current billing period.

• We may suspend or terminate your account immediately if you violate these Terms, fail to pay invoices after 30 days, or engage in activity that threatens the security or availability of the Service.

• Upon termination, your API keys are immediately revoked. Your data is retained for 30 days to allow export, then permanently deleted.

14. Governing Law

These Terms are governed by the laws of the State of Delaware, United States, without regard to conflict of law principles. Any disputes arising from these Terms will be resolved in the state or federal courts located in Delaware.

15. Changes to Terms

We may update these Terms with at least 30 days written notice via email. Material changes (pricing, liability, data handling) will be highlighted in the notification. Continued use of the Service after the effective date constitutes acceptance of the updated Terms.

16. Contact

For questions about these Terms: [email protected]. For billing inquiries: [email protected]. For security concerns: [email protected].