Introduction
These Terms of Use for Healthcare Providers ("Provider Terms") constitute a legally binding agreement ta between Reporty ("Reporty," "we," "us," or "our") and any licensed clinic, hospital, dental clinic, pharmacy, physician group, or other healthcare entity ("Healthcare Provider," "You," or "Your") that registers for, accesses, or uses the Reporty Platform (www.reporty.sa) and its AI-powered Services. These Provider Terms supplement and should be read together with Reporty's general Website Terms and Conditions and Privacy Policy, which are incorporated herein by reference. In the event of any conflict between these Provider Terms and the general Terms and Conditions, these Provider Terms shall prevail with respect to Healthcare Provider obligations. By registering an account, subscribing to our Services, or otherwise using the Platform, you confirm that you have read, understood, and agree to be bound by these Provider Terms.
1. Definitions
1.1 "AT Agent" means any Reporty-powered artificial intelligence persona deployed on the Platform on behalf of a Healthcare Provider, including but not limited to Maha (virtual receptionist), Dr. Norah and Dr. Aziz (virtual doctors), Dr. Hamad (virtual pharmacist), and Badr (virtual marketing specialist).
1.2 "AI Imaging Analysis" means Reporty's AI-powered tool for analyzing dental radiographs and other medical imaging data uploaded by Healthcare Providers.
1.3 "BAA" means a Business Associate Agreement governing the handling of Protected Health Information in compliance with HIPAA.
1.4 "Campaign" means any outbound patient messaging initiative, including appointment reminders, follow- up messages, medication reminders, promotional content, or educational messages distributed through Meta Platforms or other digital channels via Reporty's Platform.
1.5 "Clinical Decision" means any medical, dental, pharmaceutical, or clinical judgment, diagnosis, treatment plan, prescription, referral, or recommendation made in connection with a patient's care.
1.6 "Covered Entity" has the meaning given under HIPAA (45 CFR § 160.103), referring to healthcare providers, health plans, and healthcare clearinghouses that transmit any health information in electronic form.
1.7 "GDPR" means the General Data Protection Regulation (EU) 2016/679.
1.8 "HIPAA" means the Health Insurance Portability and Accountability Act of 1996 and all implementing regulations, including the Privacy Rule, Security Rule, and Breach Notification Rule.
1.9 "Patient Data" means all information relating to a patient, including Personal Data, Protected Health Information, appointment records, clinical notes, medical imaging, consent forms, and communication histories.
1.10 "PHI" means Protected Health Information as defined under 45 CFR § 160.103.
1.11 "Platform" means Reporty's website, applications, AI Services, and all related technology.
1.12 "Saudi PDPL" means the Personal Data Protection Law of the Kingdom of Saudi Arabia issued by Royal Decree M/19.
1.13 "Subscription" means the paid access plan selected by the Healthcare Provider for use of the Platform.
2. Eligibility And Registration
2.1 Eligibility Requirements To register as a Healthcare Provider on the Platform, you must: a) Be a licensed clinic, hospital, dental clinic, pharmacy, physician, dentist, pharmacist, or other duly authorized healthcare entity; b) Hold all required licenses, permits, and registrations mandated by applicable law in your jurisdiction; c) Have the legal authority to enter into binding agreements on behalf of your organization; d) Ensure that all staff members who access the Platform have received appropriate training on data protection and patient privacy obligations.
2.2 Registration Information You must provide accurate and complete registration information, including your legal entity name, license number, physical address, contact email, and phone number. You must promptly update this information whenever it changes.
2.3 Account Access You are responsible for all activities that occur under your account, including the actions of your employees, contractors, and any other individuals to whom you grant access. You must implement appropriate internal access controls to prevent unauthorized use.
2.4 Verification Reporty reserves the right to verify your healthcare credentials and licensing status at any time. Submission of false or misleading credentials may result in immediate account termination and legal action.
3. AI Services — Scope And Limitations
3.1 Permissible Use Healthcare Providers may use Reporty's AI Services for: e Automated patient appointment scheduling, confirmation, and reminder communications; ¢ Post-visit follow-up and patient health status monitoring communications; e Patient education messaging approved and reviewed by the Healthcare Provider; ¢ Dental and medical imaging pre-screening and analysis support (for licensed dental clinics and medical facilities); ¢ WhatsApp, Instagram, and other digital channel marketing campaigns targeting existing patients; e Pharmaceutical reminders and medication adherence communications (for licensed pharmacies); ¢ Collection of remote patient consent for procedures and treatments.
3.2 Restrictions on AI Use Healthcare Providers must not use AI Services to: a) Issue or imply definitive medical diagnoses, clinical judgments, or treatment decisions without qualified clinician review; b) Replace or circumvent required in-person clinical examinations; c) Communicate with patients regarding emergency medical situations — emergency care must always be directed to appropriate emergency services (911, 112, or equivalent); d) Process patient data for purposes unrelated to the delivery of healthcare services; e) Use AI Imaging Analysis results as the sole basis for any clinical decision without independent clinician review; f) Send unsolicited communications to individuals who have not consented to receive messages from your organization; g) Deploy AI Agents in a manner that could mislead patients into believing they are communicating with a human healthcare professional, unless the AI nature of the interaction is clearly disclosed.
3.3 AI Disclosure Obligation Healthcare Providers are required to ensure that patients are clearly informed that they are interacting with an AJ agent and not a human. Disclosure may be made at the commencement of each AI interaction or through a standing notice in your patient consent documentation.
3.4 Clinical Responsibility All Clinical Decisions remain the sole responsibility of the licensed Healthcare Provider and its qualified clinical staff. Reporty's AI Services are decision-support and engagement tools only. The Healthcare Provider assumes full clinical and legal responsibility for all patient care outcomes, and Reporty shall not be liable for any adverse outcome resulting from reliance on AI-generated outputs.
3.5 AI Imaging Analysis The AI Imaging Analysis feature is designed to assist, not replace, the clinical judgment of licensed dental and medical professionals. Results generated by the AI Imaging tool: e Are intended as supplementary diagnostic support only; ¢ Must be reviewed and validated by a licensed clinician before being used in any clinical decision; e Are not guaranteed to be free from errors or inaccuracies; ¢ Do not constitute a definitive diagnosis.
4. Patient Data And Privacy Obligations
4.1 Healthcare Provider as Data Controller Where the Healthcare Provider collects and submits Patient Data to the Platform for processing by Reporty, the Healthcare Provider acts as the Data Controller (or equivalent under applicable law), and Reporty acts as the Data Processor or Business Associate. The Healthcare Provider is responsible for: a) Ensuring a lawful basis for processing Patient Data under applicable law; b) Obtaining all required patient consents, authorizations, and approvals before transmitting Patient Data to the Platform; c) Providing patients with required privacy notices disclosing the use of AI technology and third-party processing; d) Honoring patient rights requests (access, deletion, correction, etc.) with Reporty's assistance; e) Complying with all applicable data protection laws, including HIPAA, GDPR, Saudi PDPL, and equivalent regulations in the Healthcare Provider's jurisdiction.
4.2 HIPAA Compliance and Business Associate Agreement If you are a Covered Entity or Business Associate under HIPAA, you must execute a Business Associate Agreement (BAA) with Reporty before transmitting any PHI through the Platform. You may request a BAA by contacting privacy@reporty.sa. Transmission of PHI to the Platform without an executed BAA is a violation of these Provider Terms.
4.3 GDPR Compliance If you process the data of individuals located in the European Union or European Economic Area, you must ensure that a Data Processing Agreement (DPA) is in place with Reporty. Please contact legal@reporty.sa to establish a DPA.
4.4 Saudi PDPL Compliance Healthcare Providers processing personal data of individuals in the Kingdom of Saudi Arabia must comply with the Saudi Personal Data Protection Law, including requirements relating to data subject consent, cross-border transfer, and data retention.
4.5 Patient Consent for Messaging Campaigns Before initiating any outbound patient messaging campaign via WhatsApp, Instagram, or other digital channels through Reporty's Platform, you must: a) Obtain explicit, documented opt-in consent from each patient to receive messages from your healthcare organization via the relevant channel; b) Provide patients with a clear and easy means to opt out of receiving further messages; c) Honor opt-out requests promptly and ensure they are reflected in your Platform settings; d) Retain records of patient consent for the period required by applicable law.
4.6 Data Minimization You must limit the Patient Data shared with Reporty's Platform to the minimum necessary to achieve the intended purpose of each use case.
4.7 Data Security Responsibilities You are responsible for: e Maintaining secure access to your Platform account; e Ensuring that only authorized personnel access Patient Data through the Platform; e Promptly notifying Reporty at privacy@reporty.sa in the event of any unauthorized access to your account or a suspected data breach affecting Patient Data processed through the Platform.
5. Meta Platforms — AI Service Delivery Channels
5.1 WhatsApp, Facebook Messenger, and Instagram DM as Service Channels Reporty uses Meta Platforms (WhatsApp Business API, Facebook Messenger, and Instagram Direct Messages) as primary channels through which its AI-powered Services are delivered to patients on behalf of Healthcare Providers. Unlike a conventional marketing tool, these channels are the core interface through which patients interact with Reporty's AI virtual agents — scheduling appointments, receiving follow-ups, accessing health information, and engaging with the Healthcare Provider's clinical communications in real time. By enabling any Meta-channel feature on the Platform, the Healthcare Provider agrees that: a) Reporty's AI agents will communicate with patients via WhatsApp conversations, Facebook Messenger threads, and/or Instagram DMs on the Healthcare Provider's behalf; b) Messages delivered through these channels may include appointment reminders, post-visit instructions, health follow-up queries, medical guidance, medication reminders, and other patient engagement content; c) All clinical content delivered through these channels is generated on the basis of the Healthcare Provider's own clinical input, configurations, templates, and protocols — and the Healthcare Provider bears full and exclusive responsibility for the clinical accuracy, appropriateness, and lawfulness of such content; d) Reporty does not autonomously create or introduce clinical information into patient communications; all medical content reflects the Healthcare Provider's own direction.
5.2 Compliance with Meta Platform Policies Healthcare Providers using Meta-channel Services must: a) Comply with the WhatsApp Business Terms of Service, Facebook Platform Terms, and Instagram Platform Policies, as applicable; b) Ensure all message templates submitted for Meta approval are accurate and compliant with Meta's healthcare and messaging policies; c) Not use Meta channels to send unauthorized commercial messages, spam, or content that violates Meta's policies or applicable law; d) Obtain and document valid patient opt-in consent before enabling any AI agent interaction through a Meta channel.
5.3 Platform Dependency Reporty's Meta-integrated features are dependent on Meta's continued provision of API access and platform services. Reporty shall not be liable for any disruption, feature limitation, policy change, or termination of Meta's platforms or APIs.
6. Subscription, Fees, And Payment
6.1 Healthcare Providers must purchase a valid Subscription to access the Platform's full features. Subscription plans, features, and pricing are as published on the Platform and may be updated with reasonable notice.
6.2 Subscription fees are non-refundable unless otherwise required by applicable law or as specified in Reporty's Refund Policy.
6.3 Failure to pay applicable fees may result in suspension or termination of your account and loss of access to patient data stored on the Platform. Reporty recommends Healthcare Providers regularly back up patient data through the Platform's export features.
6.4 All pricing is exclusive of applicable taxes. You are responsible for all applicable taxes in your jurisdiction.
7. Intellectual Property
7.1 The Platform, including all AI models, algorithms, software, designs, and content, is and remains the exclusive intellectual property of Reporty. No license to Reporty's intellectual property is granted to Healthcare Providers beyond the limited right to use the Platform as described herein.
7.2 User Content and Patient Data uploaded by Healthcare Providers remain the intellectual property of the Healthcare Provider and/or patients, as applicable. By uploading content to the Platform, you grant Reporty a limited license to process such content solely to provide the Services.
7.3 Healthcare Providers must not reverse-engineer, decompile, disassemble, or attempt to extract the source code of any Reporty software or AI model.
7.4 Any improvements, feedback, or suggestions provided by Healthcare Providers regarding the Platform may be used by Reporty to improve its Services without any obligation of compensation.
8. Confidentiality
8.1 Each party may have access to confidential information of the other in connection with the use of the Platform. Each party agrees to maintain the confidentiality of the other's confidential information and not to disclose it to third parties without prior written consent, except as required by law.
8.2 Patient Data is considered confidential information of the Healthcare Provider and shall be handled by Reporty in accordance with its Privacy Policy and any applicable BAA or DPA.
8.3 Healthcare Providers must ensure that their employees and contractors who access the Platform are bound by appropriate confidentiality obligations.
9. Compliance With Laws And Professional Standards
9.1 Healthcare Providers are solely responsible for ensuring that their use of the Platform complies with all applicable laws, regulations, and professional standards, including: e Healthcare licensing and professional conduct regulations in their jurisdiction; e Patient privacy and data protection laws (HIPAA, GDPR, Saudi PDPL, and equivalents); e Electronic communication and anti-spam laws; e Healthcare advertising and promotion regulations; ¢ Informed consent requirements under applicable medical law.
9.2 The use of AI agents in patient communication must comply with any applicable telehealth, digital health, or AlI-in-healthcare regulations in your jurisdiction.
9.3 Reporty does not provide legal, medical, or regulatory compliance advice. Healthcare Providers are encouraged to consult qualified legal and regulatory counsel regarding their obligations.
10. Representations And Warranties
By using the Platform, you represent and warrant that: a) You hold all required professional licenses and permits to operate as a healthcare provider in your jurisdiction; b) All information provided during registration and throughout your use of the Platform is accurate, current, and complete; c) You have obtained all required patient consents before submitting Patient Data to the Platform; d) Your use of the Platform will comply with all applicable laws and these Provider Terms; e) You will not use the Platform in any manner that endangers patient safety, violates patient rights, or causes harm to any individual.
11. Indemnification
You agree to indemnify, defend, and hold harmless Reporty and its directors, officers, employees, agents, and affiliates from and against any and all claims, liabilities, damages, costs, and expenses (including reasonable legal fees) arising out of or relating to: a) Any Clinical Decision made by you or your staff, with or without reference to AI-generated outputs; b) Your processing of Patient Data in violation of applicable law or these Provider Terms; c) Unauthorized patient messaging campaigns sent through the Platform; d) Your breach of any warranty, representation, or obligation under these Provider Terms; e) Claims by patients arising from AI agent communications conducted on your behalf; f) Any violation of applicable healthcare regulations, professional standards, or licensing requirements.
12. Disclaimer Of Warranties And Limitation Of Liability
12.1 THE PLATFORM AND ALL SERVICES, INCLUDING AI SERVICES AND AI IMAGING ANALYSIS, ARE PROVIDED ON AN "AS IS" AND "AS AVAILABLE" BASIS WITHOUT WARRANTIES OF ANY KIND.
12.2 REPORTY DOES NOT WARRANT THE ACCURACY, COMPLETENESS, OR CLINICAL VALIDITY OF ANY AI-GENERATED OUTPUT, IMAGING ANALYSIS RESULT, OR PATIENT COMMUNICATION GENERATED THROUGH THE PLATFORM.
12.3 TO THE MAXIMUM EXTENT PERMITTED BY LAW, REPORTY SHALL NOT BE LIABLE FOR ANY ADVERSE CLINICAL OUTCOME, PATIENT HARM, MISDIAGNOSIS, OR OTHER CLINICAL ERROR ARISING FROM YOUR USE OF OR RELIANCE ON THE PLATFORM OR ITS AI SERVICES.
12.4 REPORTY'S TOTAL AGGREGATE LIABILITY TO YOU SHALL NOT EXCEED THE TOTAL SUBSCRIPTION FEES PAID BY YOU TO REPORTY IN THE 12-MONTH PERIOD PRECEDING THE CLAIM.
13. Termination
13.1 Either party may terminate this Agreement upon written notice if the other party materially breaches these Provider Terms and fails to cure such breach within 30 days of written notice.
13.2 Reporty may immediately terminate or suspend your account without prior notice in cases of: ¢ Serious or repeated violations of these Provider Terms; e Breach of patient privacy obligations; e Failure to pay subscription fees; e Fraudulent, illegal, or harmful use of the Platform; e Revocation of your healthcare license or professional registration.
13.3 Upon termination, you will have a period of 30 days to export your data from the Platform. After this period, Reporty may delete your data in accordance with its data retention policies and applicable law, unless a longer retention period is required by law.
14. Audit And Monitoring
14.1 Reporty reserves the right to monitor use of the Platform for compliance with these Provider Terms and applicable laws, including reviewing AI agent interaction logs for quality assurance and compliance purposes.
14.2 Reporty may conduct or commission audits of its data processing activities in connection with BAA or DPA obligations, and Healthcare Providers may be entitled to audit rights as specified in those agreements.
15. Governing Law And Dispute Resolution
15.1 These Provider Terms shall be governed by the laws of the Kingdom of Saudi Arabia, except where mandatory local laws of a Healthcare Provider's jurisdiction provide for additional protections that cannot be waived by contract.
15.2 Disputes shall be resolved by binding arbitration in Medina, Kingdom of Saudi Arabia, in English or Arabic. Healthcare Providers in the EU/UK retain the right to refer consumer-related disputes to applicable regulatory authorities.
15.3 Nothing in this clause prevents either party from seeking urgent injunctive relief before a competent court of law to prevent irreparable harm.
16. Amendments
Reporty reserves the right to amend these Provider Terms at any time. Material amendments will be communicated with at least 30 days' advance notice. Continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised Provider Terms.
17. Entire Agreement
These Provider Terms, together with the Website Terms and Conditions, Privacy Policy, and any applicable BAA or DPA, constitute the entire agreement between Reporty and the Healthcare Provider regarding the subject matter herein, and supersede all prior agreements and understandings.
18. Contact
For questions about these Provider Terms, Business Associate Agreements, Data Processing Agreements, or compliance matters, please contact: Reporty — Legal & Compliance Email: legal@reporty.sa Privacy inquiries: privacy@reporty.sa General support: support@reporty.sa Website: www.reporty.sa These Provider Terms do not constitute legal advice. Reporty recommends that Healthcare Providers obtain independent legal counsel to assess their specific regulatory obligations before using the Platform.