Terms of Service

1. Agreement and order of precedence

These review-draft terms describe intended conditions for access to OrganAlert. A customer's executed order form and services agreement establish the contracting entities, fees, service scope, term, and negotiated remedies. The BAA controls PHI matters; an applicable DPA controls the personal-data matters it covers. No website notice expands permission to process PHI beyond those agreements.

Users must be authorized by the responsible organization. A user without authority to bind that organization cannot execute a customer contract simply by using the website.

2. Clinical use and limitations

OrganAlert structures and presents information to assist qualified professionals. Outputs may be incomplete or incorrect and must be checked against source records before a clinical decision. The customer remains responsible for its clinical review, escalation, organ acceptance, and treatment decisions. The service is not an emergency communication channel.

Descriptions of clinical decision support do not by themselves determine regulatory status. Use must remain within the intended purpose and approvals agreed with the customer. No unverified claim of medical-device exemption, certification, or clinical performance is made by these terms.

3. Accounts and acceptable use

Use individual authorized credentials and required authentication protections. Protect credentials, promptly report suspected compromise, and remove access when no longer needed. Do not bypass access controls, access another customer's data without authorization, upload unlawfully obtained material, or use the service to send unsolicited texts.

Clinical information must stay within approved workflows. Do not enter patient or donor details into public website forms, ordinary email, source-code repositories, or SMS replies.

4. Customer data

The customer retains its rights in submitted data. It grants OrganAlert only the processing rights needed for the contracted service and those permitted by the applicable BAA and DPA. The customer is responsible for having authority to submit and disclose the data. OrganAlert does not acquire a right to sell PHI or use it to train models.

5. Direct dashboard sharing

Before sharing, verify the recipient, disclosure authority, dashboard contents, and appropriate scope. The link is a credential and may permit access without account sign-in after the notice is accepted. Do not forward it. Acceptance of the notice is not proof of identity or a patient authorization, and does not shift away OrganAlert's own legal obligations.

Use expiration and revocation controls and report a misdirected link promptly. A dashboard link may also be texted from the Share dialog to a colleague's verified number or to a US mobile number the sharer enters, including a person without an OrganAlert account. The sharer is responsible for who receives the text and the information shared; the link always shows the share notice before the dashboard.

6. Text message (SMS) notifications

Users may opt in to receive text messages from OrganAlert at the mobile number they provide. Messages are secure links to dashboards a colleague shares with them and a one-time verification code; a user may also text a shared dashboard link to a US mobile number they enter (see section 5). Message frequency varies with clinical activity. Message and data rates may apply. Reply HELP for help or STOP to cancel at any time; texts can also be disabled in account settings. Consent is not a condition of using the service. Carriers are not liable for delayed or undelivered messages.

The SMS Terms and SMS Privacy Policy give the full details.

7. Availability and changes

Support hours, service levels, maintenance, feature availability, and any remedies are set out in the signed agreement. Do not assume uninterrupted availability, a particular response time, or a verified delivery merely from a dashboard or send acknowledgment. Material changes affecting contracted service or privacy will follow the agreement and applicable law.

8. Suspension, termination, and liability

The signed agreement governs suspension, termination, warranties, liability allocation, and dispute procedures. Nothing here waives an obligation or liability that cannot legally be waived. At termination, return or destruction of PHI is governed by the BAA, including safeguards where destruction is infeasible.

9. Contact

For account, terms, or messaging questions, contact Viraj at viraj@organalert.com. Do not include PHI, passwords, or active dashboard links in email.