PLATFORM TERMS OF SERVICE
Last Updated: April 1, 2025
These Platform Terms of Service (hereinafter referred to as "Terms of Service") constitute a legal agreement between you and Moments Journal, Inc. ("Moments," "we," "us," or "our"). These Terms of Service outline the conditions under which you may access and utilize our proprietary software as a service (SaaS) platform, provided to you as a web application and/or mobile application (if any) (the "Platform").
PLEASE READ THESE TERMS OF SERVICE CAREFULLY. BY ACCESSING AND/OR USING THE PLATFORM, YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTOOD, AND AGREE TO BE LEGALLY BOUND BY THESE TERMS OF SERVICE, ALONG WITH THE TERMS AND CONDITIONS OF OUR PRIVACY POLICY (THE "PRIVACY POLICY"), WHICH IS HEREBY INCORPORATED INTO THESE TERMS OF SERVICE BY REFERENCE AND MADE A PART HEREOF (COLLECTIVELY, THE "AGREEMENT"). IF YOU DO NOT AGREE TO ANY OF THE TERMS IN THIS AGREEMENT, YOU ARE ADVISED NOT TO USE THE PLATFORM.
If you accept or agree to this Agreement on behalf of a corporation or other legal entity, you represent and warrant that you possess the authority to bind that entity to this Agreement, and in such circumstances, the terms "you" and "your" shall apply to that entity.
We reserve the right, at our sole discretion, to modify, discontinue, or terminate the Platform, or amend the Agreement, at any time and without prior notice. If we modify the Agreement, we will post the modification on the Platform. By continuing to access or use the Platform after a modification has been posted, you indicate that you agree to be bound by the amended Agreement. If the modified Agreement is unacceptable to you, your sole recourse is to discontinue using the Platform.
THE SECTIONS BELOW TITLED "BINDING ARBITRATION" AND "CLASS ACTION WAIVER" CONTAIN A BINDING ARBITRATION AGREEMENT AND CLASS ACTION WAIVER. THEY AFFECT YOUR LEGAL RIGHTS. PLEASE REVIEW THEM CAREFULLY.
Capitalized terms not defined in these Terms of Service shall have the meanings assigned to them in our Privacy Policy.
1. RIGHT TO ACCESS AND USE THE PLATFORM
Subject to the terms and conditions of this Agreement, Moments hereby grants you a limited, non-exclusive, non-transferable, non-sublicensable, and revocable right during the Term of this Agreement to permit your Authorized Users to access and use the Platform solely for your internal business purposes to evaluate the Platform.
You shall not (and shall not authorize, permit, or encourage any third party to): (i) reverse engineer, decompile, disassemble, or otherwise attempt to discern the source code or interface protocols of the Platform; (ii) modify, adapt, or translate the Platform, or any portion or component thereof; (iii) reproduce any copies of the Platform, or any portion or component thereof; (iv) resell, distribute, or sublicense the Platform, or any portion or component thereof; (v) remove or modify any proprietary markings or restrictive legends placed on the Platform; (vi) use the Platform, or any portion or component thereof, in violation of any applicable law, to create a competitive product or service, or for any purpose not expressly permitted in this Agreement; (vii) introduce, post, or upload to the Platform any virus, worm, "black door," Trojan Horse, or similar harmful code; (viii) save, store, or archive any portion of the services (including, without limitation, any data contained therein) outside the Platform, other than outputs generated through the intended functionality of the Platform, without prior written consent from Moments in each instance; (ix) use the Platform in connection with service bureau, timeshare, service provider, or similar activity whereby you operate the Platform for the benefit of a third party; or (x) circumvent any processes, procedures, or technologies that we have implemented to protect the Platform.
In the event of a violation of this section, Moments reserves the right, in its sole discretion, to immediately deny you access to the Platform, or any portion thereof, without notice. Moments reserves the right to modify the availability of any feature, function, or content related to the Platform at any time, without notice or liability to you.
2. AUTHORIZED USERS
Your employees and contractors who access and use the Platform on your behalf are herein referred to as "Authorized Users." Each Authorized User must create an account by providing their email address and creating a password (collectively, "Login Credentials"). Login Credentials are personal to each Authorized User and may not be shared with others, including other Authorized Users or third parties. Login Credentials must be kept confidential. You agree to notify us immediately of any unauthorized use or suspected unauthorized use of any Login Credentials. You bear full responsibility for all activities and misuse of the Platform associated with any Authorized User's Login Credentials. You are also responsible for ensuring that your Authorized Users comply with these Terms of Service. You will promptly notify us of any need to deactivate or change any Login Credentials. We reserve the right to disable any Platform account username or password at any time for any reason, including, in our sole discretion, if we believe that you have violated these Terms of Service.
3. USE OF PERSONAL INFORMATION
Your use of the Platform may involve the transmission of certain personal information to us. Our policies regarding the collection and use of such personal information are governed by our Privacy Policy, which is hereby incorporated by reference in its entirety.
4. OWNERSHIP
The Platform contains materials such as software, text, graphics, images, sound recordings, audiovisual works, and other materials provided by or on behalf of Moments (collectively referred to as the "Content"). The Content may be owned by us or by third parties. The Content is protected under United States and foreign laws. Unauthorized use of the Content may violate copyright, trademark, and other laws. You have no rights in or to the Content, and you shall not use the Content except as permitted under this Agreement. Any other use is prohibited without prior written consent from us. You must retain all copyright and other proprietary notices contained in the original Content on any copy you make of the Content. You shall not sell, transfer, assign, license, sublicense, modify, reproduce, display, publicly perform, create derivative works from, distribute, or otherwise use the Content in any manner for any public or commercial purpose. The use or posting of the Content on any other website or in a networked computer environment for any purpose is expressly prohibited.
In the event of a violation of any part of this Agreement, your permission to access and/or use the Content and the Platform automatically terminates, and you must immediately destroy any copies you have made of the Content. The trademarks, service marks, and logos of Moments (the "Moments Trademarks") used and displayed on the Platform are registered and unregistered trademarks or service marks of Moments. Other company, product, and service names found on the Platform may be trademarks or service marks owned by others (the "Third-Party Trademarks," and collectively with Moments Trademarks, the "Trademarks"). Nothing on the Platform should be construed as granting, by implication, estoppel, or otherwise, any license or right to use the Trademarks without our prior written consent specific to each such use. Use of the Trademarks as part of a link to or from any website is prohibited unless the establishment of such a link is approved in advance by us in writing. All goodwill generated from the use of Moments Trademarks inures to our benefit.
Elements of the Platform are protected by trade dress, trademark, unfair competition, and other state and federal laws and may not be copied or imitated in whole or in part by any means, including but not limited to, the use of framing or mirrors. None of the Content may be retransmitted without our express written consent for each and every instance.
5. YOUR DATA; USAGE DATA; DE-IDENTIFIED DATA; AGGREGATE DATA; AND OUTPUT
For purposes of this Agreement, "Your Data" refers to any data and information that you and your Authorized Users submit to the Platform, including but not limited to, Patient Recordings (as defined below) and the personal information of Authorized Users; "Patient Recordings" refers to: (i) the audio recordings of the sessions between you (or your Authorized Users) and a patient (and the patient’s parents, or other family members or friends, to the extent participating in such sessions) that you or your Authorized Users conduct and upload to the Platform; and (ii) the information and data collected and/or gathered by you (or your Authorized Users) during such sessions that you or your Authorized Users upload to the Platform; "Protected Health Information" or "PHI" refers to the meaning of the term under the Health Insurance Portability and Accountability Act of 1996, as amended, and related regulations ("HIPAA"); "Usage Data" refers to anonymous, analytical data that Moments collects regarding the performance and use of the Platform by you and your Authorized Users, including, without limitation, the date and time you access the Platform, the sections of the Platform visited, the frequency and number of times such pages are accessed, the number of times the Platform is used in a given period, and other usage and performance data; "Output" refers to the medical documentation generated by processing Your Data through the Platform and provided to you and your Authorized Users through the Platform.
You retain all rights, title, and interest in and to Your Data and Output, including all modifications, improvements, adaptations, enhancements, or translations thereof, and all associated intellectual property rights. You hereby grant Moments a non-exclusive, worldwide, fully paid-up, royalty-free license, with the right to grant sublicenses, to reproduce, execute, use, store, archive, modify, perform, display, and distribute Your Data: (i) during the term of this Agreement, to fulfill Moments's obligations hereunder; and (ii) for Moments's internal business purposes, including using such data to analyze, update, and improve the Platform and Moments's analytics capabilities. We will process any PHI included in Your Data in accordance with the Business Associate Agreement attached hereto as Schedule A ("BAA"). You will bear sole responsibility for the accuracy, quality, and legality of Your Data. In the event of any conflict between the terms of this Agreement and the BAA, the terms of the BAA shall control solely with respect to the processing of PHI. By providing Your Data, you agree to be legally bound by the terms and conditions of the BAA, which is incorporated by reference into this Agreement.
Pursuant to Section 2a of the BAA, we reserve the right to use De-identified Data and to disclose such De-identified Data to third parties at our discretion. We will also link your De-identified Data with your customer ID and use it to customize and train our Platform based on your specific styles and requirements identified from Your Data.
Notwithstanding anything to the contrary herein, we may use, and may permit our third-party service providers to access and use, Your Data, as well as any Usage Data that we may collect, in an anonymous and aggregated form ("Aggregate Data") for the purposes of operating, maintaining, managing, and improving our products and services, including the Platform. Aggregate Data does not identify you. You hereby agree that we may collect, use, publish, disseminate, sell, transfer, and otherwise exploit such Aggregate Data.
6. RETENTION OF YOUR DATA
You have the option to delete Your Data at any time, otherwise, we will retain Your Data in the Platform for the Term of this Agreement. Following deletion, Your Data will continue to be retained as part of our backup system for an additional seven (7) days, after which it will be deleted in accordance with our data retention policies. You have full control over the retention and deletion of Your Data, and you bear sole responsibility for the retention and/or deletion of it.
7. FEES
In consideration for your access to and use of the Platform, you agree to pay the fees for the applicable subscription plan selected at registration within thirty (30) days of receiving the invoice. We reserve the right to update and modify our pricing structure with reasonable notice, with any updated pricing for your subscription plan to take effect in the next year of service. We reserve the right to impose new or additional fees at any time upon notice to you. By purchasing a subscription, you agree to pay us through a third-party payment processor of our choosing. We reserve the right to change our third-party payment processor at any time.
8. PLATFORM RULES
By accessing and/or using the Platform, you agree to comply with the following guidelines:
- You will not use the Platform for any unlawful purpose;
- You will not access or use the Platform to collect any market research for a competing business;
- You will not upload, post, e-mail, transmit, or otherwise make available any content that: infringes any copyright, trademark, right of publicity, or other proprietary rights of any person or entity; or constitutes promotion or advertising of any third-party website, product, or service; or is defamatory, libelous, indecent, obscene, pornographic, sexually explicit, invasive of another’s privacy, promotes violence, or contains hate speech (i.e., speech that attacks or demeans a group based on race or ethnic origin, religion, disability, gender, age, veteran status, and/or sexual orientation/gender identity); or discloses any sensitive information about another person, including that person’s e-mail address, postal address, phone number, credit card information, or any similar information;
- You will not impersonate any person or entity or falsely state or otherwise misrepresent your affiliation with a person or entity;
- You will not decompile, reverse engineer, or disassemble any software or other products or processes accessible through the Platform;
- You will not cover, obscure, block, or in any way interfere with any advertisements and/or safety features on the Platform;
- You will not circumvent, remove, alter, deactivate, degrade, or thwart any of the protections in the Platform;
- You will not use automated means, including spiders, robots, crawlers, data mining tools, or the like, to download or scrape data from the Platform, directly or indirectly, except for Internet search engines (e.g., Google) and non-commercial public archives (e.g., archive.org) that comply with our robots.txt file;
- You will not take any action that imposes or may impose (in our sole discretion) an unreasonable or disproportionately large load on our technical infrastructure; and
- You will not interfere with or attempt to interrupt the proper operation of the Platform through the use of any virus, device, information collection or transmission mechanism, software or routine, or access or attempt to gain access to any data, files, or passwords related to the Platform through hacking, password or data mining, or any other means.
We reserve the right, in our sole and absolute discretion, to deny you (or any device) access to the Platform, or any portion thereof, without notice.
9. RESTRICTIONS
The Platform is available only to individuals aged 18 years or older. If you are under 18 years of age, you are prohibited from accessing and/or using the Platform. By entering into this Agreement, you represent and warrant that you are 18 years or older.
10. FEEDBACK
We welcome and encourage you to provide feedback, comments, and suggestions for improvements to the Platform and our services ("Feedback"). Although we encourage you to e-mail us, we request that you refrain from e-mailing us any content that contains confidential information. With respect to any Feedback you provide, we shall be free to use and disclose any ideas, concepts, know-how, techniques, or other materials contained in your Feedback for any purpose whatsoever, including, but not limited to, the development, production, and marketing of products and services that incorporate such information, without compensation or attribution to you.
11. NO WARRANTIES; LIMITATION OF LIABILITY
THE PLATFORM, THE CONTENT, AND OUR SERVICES ARE PROVIDED ON AN "AS IS" AND "AS AVAILABLE" BASIS, AND NEITHER MOMENTS NOR MOMENTS’ SUPPLIERS MAKE ANY WARRANTIES REGARDING THE SAME OR OTHERWISE IN CONNECTION WITH THIS AGREEMENT. MOMENTS HEREBY DISCLAIMS ANY AND ALL EXPRESS, IMPLIED, OR STATUTORY WARRANTIES, INCLUDING, WITHOUT LIMITATION, ANY WARRANTIES OF NON-INFRINGEMENT, MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AVAILABILITY, ERROR-FREE OR UNINTERRUPTED OPERATION, AND ANY WARRANTIES ARISING FROM A COURSE OF DEALING, COURSE OF PERFORMANCE, OR USAGE OF TRADE. TO THE EXTENT THAT MOMENTS AND MOMENTS' SUPPLIERS MAY NOT AS A MATTER OF APPLICABLE LAW DISCLAIM ANY IMPLIED WARRANTY, THE SCOPE AND DURATION OF SUCH WARRANTY WILL BE THE MINIMUM PERMITTED UNDER SUCH LAW. THE PLATFORM, THE CONTENT, AND THE OUTPUT ARE NOT INTENDED TO DIAGNOSE, TREAT, CURE, OR PREVENT ANY DISEASE OR HEALTH CONDITION. YOU AND YOUR AUTHORIZED USERS ARE SOLELY RESPONSIBLE AND LIABLE FOR ANY MEDICAL CONCLUSIONS OR TREATMENT DECISIONS YOU MAKE BASED UPON ANY OUTPUT PROVIDED AND/OR MADE AVAILABLE THROUGH THE PLATFORM. THE PLATFORM, THE CONTENT, AND THE OUTPUT ARE NOT INTENDED TO BE A SUBSTITUTE FOR PROFESSIONAL MEDICAL ADVICE, DIAGNOSIS, OR TREATMENT. MOMENTS DOES NOT WARRANT, GUARANTEE, OR MAKE ANY REPRESENTATION TO YOU OR ANY AUTHORIZED USER REGARDING THE USE OR PERFORMANCE OF THE PLATFORM, OR ANY COMPONENT THEREOF, OR ANY OUTPUT PRODUCED BY THE PLATFORM. MOMENTS WILL NOT BE LIABLE FOR ANY HARM OR DAMAGE ARISING OUT OF OR IN CONNECTION WITH ANY USE OF THE PLATFORM, AND/OR THE OUTPUT. MOMENTS IS NOT RESPONSIBLE FOR ANY DECISIONS TAKEN BY YOU OR ANY OF YOUR AUTHORIZED USERS BASED ON THE OUTPUT PRODUCED AND/OR MADE AVAILABLE THROUGH THE PLATFORM. YOU AND EACH OF YOUR AUTHORIZED USERS AGREE THAT YOUR USE OF THE PLATFORM, THE OUTPUT, OR ANY COMPONENT THEREOF IS ENTIRELY AT YOUR OWN RISK.
WITHOUT LIMITING THE FOREGOING, WE DO NOT WARRANT, GUARANTEE, OR MAKE ANY REPRESENTATION, NOR SHALL WE BE RESPONSIBLE FOR (A) THE CORRECTNESS, ACCURACY, RELIABILITY, COMPLETENESS, OR CURRENCY OF THE PLATFORM; OR (B) ANY RESULTS ACHIEVED OR ACTION TAKEN BY YOU IN RELIANCE ON THE PLATFORM OR THE OUTPUT OF THE PLATFORM. ANY DECISION, ACT, OR OMISSION OF YOURS THAT IS BASED ON THE PLATFORM OR OUTPUT OF THE PLATFORM IS AT YOUR OWN AND SOLE RISK. THE PLATFORM AND THE OUTPUT ARE PROVIDED AS A CONVENIENCE ONLY AND DO NOT REPLACE THE NEED TO REVIEW THE OUTPUT FOR ACCURACY, COMPLETENESS, AND CORRECTNESS.
IN CONNECTION WITH ANY WARRANTY, CONTRACT, OR COMMON LAW TORT CLAIMS: (I) WE SHALL NOT BE LIABLE FOR ANY INCIDENTAL OR CONSEQUENTIAL DAMAGES, LOST PROFITS, OR DAMAGES RESULTING FROM LOST DATA OR BUSINESS INTERRUPTION RESULTING FROM THE USE OR INABILITY TO ACCESS AND USE THE PLATFORM, THE CONTENT, THE OUTPUT, OR ANY RELATED SERVICES, EVEN IF WE HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES; AND (II) ANY DIRECT DAMAGES THAT YOU AND YOUR AUTHORIZED USERS MAY SUFFER AS A RESULT OF YOUR USE OF THE PLATFORM, THE CONTENT, THE OUTPUT, OR ANY RELATED SERVICES SHALL BE LIMITED TO THE GREATER OF ONE HUNDRED DOLLARS ($100) OR THE TOTAL FEES PAID BY YOU TO US IN THE THREE (3) MONTHS IMMEDIATELY PRECEDING THE DATE ON WHICH THE CLAIM ARISES.
12. EXTERNAL SITES
The Platform may contain links to third-party websites ("External Sites"). These links are provided solely as a convenience to you and do not constitute an endorsement by us of the content on such External Sites. The content of such External Sites is developed and provided by others. You should contact the website administrator or webmaster for those External Sites if you have any concerns regarding such links or any content located on such External Sites. We are not responsible for the content of any linked External Sites and do not make any representations regarding the content or accuracy of materials on such External Sites. You should take precautions when downloading files from all websites to protect your computer from viruses and other destructive programs. If you decide to access linked External Sites, you do so at your own risk.
13. REPRESENTATIONS AND WARRANTIES
You represent and warrant that you have: (i) all rights and permissions necessary to provide us with or grant us access to and use of Your Data; and (ii) obtained all necessary and appropriate consents, permissions, and authorizations in accordance with all applicable laws and regulations with respect to Your Data provided hereunder, including but not limited to, consents from patients, their parents, and/or legal guardians, including consents to record the patient's visit sessions and authorization for the use, exchange, and disclosure of any applicable PHI (collectively, "Consents").
14. INDEMNIFICATION
You agree to indemnify, defend, and hold Moments, its affiliates, and our and their respective shareholders, members, officers, directors, employees, agents, and representatives (collectively, "Moments Indemnitees") harmless from and against any and all damages, liabilities, losses, costs, and expenses, including reasonable attorney’s fees (collectively, "Losses"), incurred by any Moments Indemnitee in connection with a third-party claim, action, or proceeding (each, a "Claim") arising from your or your Authorized Users' (i) breach of this Agreement, including but not limited to, any breach of your representations and warranties; (ii) misuse of the Platform, the Output, and/or the Content; (iii) negligence, gross negligence, willful misconduct, fraud, misrepresentation, or violation of law; or (iv) violation of any third-party right, including, without limitation, any copyright, trademark, property, or privacy right. The foregoing obligations shall be subject to our: (i) promptly notifying you of the Claim; (ii) providing you, at your expense, with reasonable cooperation in the defense of the Claim; and (iii) providing you with sole control over the defense and negotiations for a settlement or compromise.
15. COMPLIANCE WITH APPLICABLE LAWS
The Platform is based in the United States. We make no claims as to whether the Platform may be viewed or is appropriate for use outside of the United States. If you access the Platform from outside of the United States, you do so at your own risk. Whether inside or outside of the United States, you are solely responsible for ensuring compliance with the laws of your specific jurisdiction.
16. TERM; TERMINATION
Your right to access and use the Platform will commence upon your acceptance of these Terms of Service and will continue for the duration of the subscription plan you selected at registration (the "Term"). Thereafter, the Term will automatically renew for consecutive terms equivalent to the duration of your subscription plan, unless either of us notifies the other at least thirty (30) days prior to the expiration of the then-current renewal term of its intention not to renew.
We reserve the right to change, suspend, discontinue, or terminate your access and use of all or any part of the Platform at any time without prior notice or liability. Sections 4, 5, 6, 7, and 9-21 shall survive the termination of these Terms of Service.
17. BINDING ARBITRATION
In the event of a dispute arising under or relating to this Agreement or the Platform (each, a "Dispute"), such Dispute will be finally and exclusively resolved by binding arbitration governed by the Federal Arbitration Act ("FAA"). NEITHER PARTY SHALL HAVE THE RIGHT TO LITIGATE SUCH CLAIM IN COURT OR TO HAVE A JURY TRIAL, EXCEPT THAT EITHER PARTY MAY BRING ITS CLAIM IN ITS LOCAL SMALL CLAIMS COURT, IF PERMITTED BY THAT SMALL CLAIMS COURT'S RULES AND IF WITHIN SUCH COURT'S JURISDICTION. ARBITRATION IS DIFFERENT FROM COURT, AND DISCOVERY AND APPEAL RIGHTS MAY BE LIMITED IN ARBITRATION. All Disputes will be resolved before a neutral arbitrator selected jointly by the parties, whose decision will be final, except for a limited right of appeal under the FAA. The arbitration shall be commenced and conducted by JAMS pursuant to its then-current Comprehensive Arbitration Rules and Procedures and in accordance with the Expedited Procedures in those rules, or, where appropriate, pursuant to JAMS' Streamlined Arbitration Rules and Procedures. All applicable JAMS' rules and procedures are available on the JAMS website www.jamsadr.com. Each party will be responsible for paying any JAMS filing, administrative, and arbitrator fees in accordance with JAMS rules. Judgment on the arbitrator's award may be entered in any court having jurisdiction. This clause shall not preclude parties from seeking provisional remedies in aid of arbitration from a court of appropriate jurisdiction. The arbitration may be conducted in person, through the submission of documents, by phone, or online. If conducted in person, the arbitration shall take place in the United States county where you reside. The parties may litigate in court to compel arbitration, to stay a proceeding pending arbitration, or to confirm, modify, vacate, or enter judgment on the award entered by the arbitrator. The parties shall cooperate in good faith in the voluntary and informal exchange of all non-privileged documents and other information (including electronically stored information) relevant to the Dispute immediately after commencement of the arbitration. As set forth in Section 19 below, nothing in this Agreement will prevent us from seeking injunctive relief in any court of competent jurisdiction as necessary to protect our proprietary interests.
18. CLASS ACTION WAIVER
You agree that any arbitration or proceeding shall be limited to the Dispute between us and you individually. To the full extent permitted by law, (i) no arbitration or proceeding shall be joined with any other; (ii) there is no right or authority for any Dispute to be arbitrated or resolved on a class action basis or to utilize class action procedures; and (iii) there is no right or authority for any Dispute to be brought in a purported representative capacity on behalf of the general public or any other persons. YOU AGREE THAT YOU MAY BRING CLAIMS AGAINST US ONLY IN YOUR INDIVIDUAL CAPACITY AND NOT AS A PLAINTIFF OR CLASS MEMBER IN ANY PURPORTED CLASS OR REPRESENTATIVE PROCEEDING.
19. EQUITABLE RELIEF
You acknowledge and agree that in the event of a breach or threatened violation of our intellectual property rights and confidential and proprietary information by you, we will suffer irreparable harm and will therefore be entitled to injunctive relief to enforce this Agreement. We may, without waiving any other remedies under this Agreement, seek from any court having jurisdiction any interim, equitable, provisional, or injunctive relief necessary to protect our rights and property pending the outcome of the arbitration referenced above. You hereby irrevocably and unconditionally consent to the personal and subject matter jurisdiction of the federal and state courts in the State of California for purposes of any such action by us.
20. CONTROLLING LAW; EXCLUSIVE FORUM
This Agreement and any action related thereto will be governed by the laws of the State of California without regard to its conflict of laws provisions. The parties hereby consent and agree to the exclusive jurisdiction of the state and federal courts located in the State of California for all suits, actions, or proceedings directly or indirectly arising out of or relating to this Agreement, and waive any and all objections to such courts, including, but not limited to, objections based on improper venue or inconvenient forum, and each party hereby irrevocably submits to the exclusive jurisdiction of such courts in any suits, actions, or proceedings arising out of or relating to this Agreement.
21. MISCELLANEOUS
You may not assign any of your rights, duties, or obligations under these Terms of Service to any person or entity, in whole or in part, without written consent from Moments. Our failure to act on or enforce any provision of the Agreement shall not be construed as a waiver of that provision or any other provision in this Agreement. No waiver shall be effective against us unless made in writing, and no such waiver shall be construed as a waiver in any other or subsequent instance. Except as expressly agreed by us and you in writing, the Agreement constitutes the entire agreement between you and us with respect to the subject matter and supersedes all previous or contemporaneous agreements, whether written or oral, between the parties with respect to the subject matter. The section headings are provided merely for convenience and shall not be given any legal import. This Agreement will inure to the benefit of our successors, assigns, licensees, and sublicensees.
SCHEDULE A
BUSINESS ASSOCIATE AGREEMENT
This Business Associate Agreement ("BAA") is entered into by and between Moments Journal, Inc. ("Business Associate"), and Customer ("Covered Entity"), and is effective as of the Effective Date.
WHEREAS, pursuant to these Terms of Use, Business Associate will provide certain services to, for, or on behalf of Covered Entity involving the use or disclosure of Protected Health Information ("PHI"), and pursuant to such Terms of Use, Business Associate may be considered a "business associate" of Covered Entity; and
WHEREAS, Covered Entity and Business Associate intend to protect the privacy and ensure the security of PHI disclosed to Business Associate pursuant to the Provider Agreement in compliance with the Health Insurance Portability and Accountability Act of 1996, Public Law 104-191 ("HIPAA") and the Standards for Privacy of Individually Identifiable Health Information promulgated thereunder by the U.S. Department of Health and Human Services at 45 CFR § 160 and § 164 (the "HIPAA Rules"), and the Health Information Technology for Economic and Clinical Health Act of 2009 (the "HITECH Act"), as amended from time to time; and
WHEREAS, the purpose of this BAA is to satisfy certain standards and requirements of the HIPAA Rules and the HITECH Act, as amended from time to time.
NOW, THEREFORE, in consideration of the mutual promises below and the exchange of information pursuant to this BAA, the parties agree as follows:
Definitions.
Terms used but not otherwise defined in this BAA shall have the same meanings as set forth in 45 CFR Parts 160, 162, and 164, or the HITECH Act.
Obligations of Business Associate.
a. Permitted Uses and Disclosures.
Business Associate agrees to use or disclose PHI solely as necessary to perform the services set forth in the Provider Agreement, as permitted under this BAA, or as required by law. Business Associate shall have the right to de-identify any and all PHI, provided that Business Associate implements a de-identification process that conforms to the requirements of 45 C.F.R. 164.514(a)-(c) ("De-identified Data"). Business Associate may use or disclose such De-identified Data to third parties at its discretion, as such De-identified Data does not constitute PHI and is not subject to the terms of this BAA. Business Associate shall own all rights, title, and interest in and to such De-identified Data.
b. Nondisclosure.
Business Associate shall not use or further disclose PHI other than as permitted or required by this BAA.
c. Safeguards.
Business Associate shall implement appropriate safeguards to prevent use or disclosure of PHI other than as provided for by this BAA. Business Associate shall maintain a comprehensive written information privacy and security program that includes administrative, technical, and physical safeguards appropriate to the size and complexity of Business Associate's operations and the nature and scope of its activities.
d. Reporting of Disclosures; Mitigation.
Business Associate shall report to Covered Entity any use or disclosure of PHI not provided for by this BAA of which Business Associate becomes aware. Business Associate agrees to mitigate, to the extent practicable, any harmful effect that is known to Business Associate of a use or disclosure of PHI by Business Associate in violation of the requirements of this BAA.
e. Business Associate's Agents.
Business Associate shall ensure that any subcontractors, to whom it provides PHI received from (or created or received by Business Associate on behalf of) Covered Entity, agree to the same restrictions and conditions that apply to Business Associate with respect to such PHI.
f. Availability of Information to Covered Entity.
Business Associate shall make available to Covered Entity (or, as directed by Covered Entity, to an Individual) such information as Covered Entity may request, and in the time and manner designated by Covered Entity, to fulfill Covered Entity's obligations (if any) to provide access to, provide a copy of, and account for disclosures with respect to PHI pursuant to HIPAA and the HIPAA Rules, including, but not limited to, 45 CFR §§ 164.524 and 164.528. Requests for information must be submitted at least 14 days in advance of the due date.
g. Amendment of PHI.
Business Associate shall make any amendments to PHI in a Designated Record Set that the Covered Entity directs or agrees to at the request of Covered Entity or an Individual, and in the time and manner designated by Covered Entity, to fulfill Covered Entity's obligations (if any) to amend PHI pursuant to HIPAA and the HIPAA Rules, including, but not limited to, 45 CFR § 164.526. Business Associate shall, as directed by Covered Entity, incorporate any amendments to PHI into copies of such PHI maintained by Business Associate.
h. Internal Practices.
Business Associate shall make its internal practices, books, and records relating to the use and disclosure of PHI received from Covered Entity (or created or received by Business Associate on behalf of Covered Entity) available to the Secretary, in a time and manner designated by Covered Entity or the Secretary, for purposes of the Secretary determining Covered Entity's compliance with HIPAA and the HIPAA Rules.
i. Documentation of Disclosures for Accounting.
Business Associate agrees to document such disclosures of PHI and information related to such disclosures as would be required for Covered Entity to respond to a request by an Individual for an accounting of disclosures of PHI in accordance with 45 CFR § 164.528.
j. Access to Documentation for Accounting.
Business Associate agrees to provide to Covered Entity or an Individual, in a time and manner designated by Covered Entity, information documented in accordance with Section 2(i) of this BAA in a time and manner as to permit Covered Entity to respond to a request by an Individual for an accounting of disclosures of PHI in accordance with 45 CFR § 164.528.
k. Notification of Breach.
During the Term of this BAA, Business Associate shall notify Covered Entity within ten (10) days of Discovery of any Breach of Unsecured PHI. Business Associate further agrees, consistent with Section 13402 of the HITECH Act, to provide Covered Entity with information necessary for Covered Entity to meet the requirements of said section, and in a manner and format to be specified by Covered Entity.
l. Minimum Necessary.
When using, disclosing, or requesting PHI from the Covered Entity, or in accordance with any provision of this BAA, Business Associate shall limit PHI to the minimum necessary to accomplish the intended purpose of the use, disclosure, or request.
Obligations of Covered Entity.
a. Covered Entity shall be responsible for using appropriate safeguards to maintain and ensure the confidentiality, privacy, and security of PHI transmitted to Business Associate pursuant to the BAA and this BAA, in accordance with the standards and requirements of HIPAA and the HIPAA Rules, until such PHI is received by Business Associate.
b. Upon request, Covered Entity shall provide Business Associate with the notice of privacy practices that Covered Entity produces in accordance with 45 CFR § 164.520, as well as any changes to such notice.
c. Covered Entity shall provide Business Associate with any changes in, or revocation of, permission by an Individual to use or disclose PHI, if such changes affect Business Associate's permitted or required uses or disclosures.
d. Covered Entity shall notify Business Associate of any restriction on the use or disclosure of PHI that Covered Entity has agreed to in accordance with 45 CFR § 164.522 if such restriction affects Business Associate's permitted or required uses or disclosures.
Term and Termination.
a. Term.
The Term of this BAA shall commence as of the Effective Date and shall terminate when all of the PHI provided by Covered Entity to Business Associate, or created or received by Business Associate on behalf of Covered Entity, is destroyed or returned to Covered Entity, or, if it is infeasible to return or destroy PHI, protections are extended to such information in accordance with the termination provisions of this Section. The provisions of this BAA shall survive termination of the BAA to the extent necessary for compliance with HIPAA and the HIPAA Rules.
b. Material Breach.
A material breach by either party of any provision of this BAA shall constitute a material breach of the BAA if such breach is not cured by the breaching party within thirty (30) days of receipt of notice describing the material breach.
c. Reasonable Steps to Cure Breach.
If either party becomes aware of an activity or practice of the other party that constitutes a material breach or violation of the other party's obligations under the provisions of this BAA, the non-breaching party shall notify the breaching party of the breach and the breaching party shall take reasonable steps to cure such breach or violation, as applicable, within a period of time that shall in no event exceed thirty (30) days. If the breaching party's efforts to cure such breach or violation are unsuccessful, the non-breaching party shall either terminate the BAA, if feasible, or if termination of the BAA is not feasible and the breaching party has violated the HIPAA Rules, the non-breaching party may report the breaching party's breach or violation to the Secretary.
d. Judicial or Administrative Proceedings.
Either party may terminate the BAA, effective immediately, if the other party is named as a defendant in a criminal proceeding for an alleged violation of HIPAA, or if a finding or stipulation that the other party has violated any standard or requirement of HIPAA or other security or privacy laws is made in any administrative or civil proceeding in which the party has been joined.
e. Effect of Termination.
Except as provided in paragraph (e)(2) of this Section or if required by law or regulation to be maintained by Business Associate, upon termination of the BAA for any reason, Business Associate shall return at Covered Entity's expense, or destroy all PHI received from Covered Entity (or created or received by Business Associate on behalf of Covered Entity) that Business Associate still maintains in any form, and shall retain no copies of such PHI. This provision shall apply to PHI that is in the possession of subcontractors or agents of Business Associate.
In the event that Business Associate determines that returning or destroying the PHI is infeasible, Business Associate shall provide notification to Covered Entity of the conditions that make return or destruction infeasible. Upon mutual agreement of the parties that return or destruction of PHI is infeasible, Business Associate shall extend the protections of this BAA to such PHI and limit further uses and disclosures of such PHI to those purposes that make the return or destruction infeasible, for so long as Business Associate maintains such PHI. The obligations of Business Associate under this Section shall survive the termination of the BAA.
Amendment to Comply with Law.
The parties acknowledge that state and federal laws relating to electronic data security and privacy are rapidly evolving and that amendment of the BAA may be necessary to provide for procedures to ensure compliance with such developments. The parties specifically agree to take such action as is necessary to implement the standards and requirements of HIPAA, the HIPAA Rules, the HITECH Act, and other applicable laws relating to the security or confidentiality of PHI. Upon the request of either party, the parties shall promptly enter into negotiations concerning the terms of an amendment to the BAA embodying written assurances consistent with the standards and requirements of HIPAA, the HIPAA Rules, the HITECH Act, or other applicable laws relating to security and privacy of PHI. Either party may terminate the BAA upon thirty (30) days' written notice in the event the other party does not promptly enter into negotiations to amend the BAA when requested pursuant to this Section, or does not enter into an amendment to the BAA providing assurances regarding the safeguarding of PHI that satisfy the standards and requirements of HIPAA, the HIPAA Rules, the HITECH Act, or any other applicable laws relating to the security and privacy of PHI.
No Third-Party Beneficiaries.
Nothing in this BAA is intended to confer, nor shall anything herein confer, upon any person other than Covered Entity, Business Associate, and their respective successors and assigns, any rights, remedies, obligations, or liabilities whatsoever, and no other person or entity shall be a third-party beneficiary of this BAA.
Effect on BAA.
Except as specifically required to implement the purposes of this BAA, or to the extent inconsistent with this BAA, all other terms of the BAA shall remain in full force and effect.
Interpretation.
This BAA shall be interpreted as broadly as necessary to implement and comply with HIPAA, the HIPAA Rules, and any other applicable law relating to the security and privacy of PHI. Any ambiguity in this BAA shall be resolved in favor of a meaning that permits Covered Entity to comply with the HIPAA Rules.
Regulatory References.
A reference in this BAA to a section in the HIPAA Rules or the HITECH Act means the section as in effect or as amended, and for which compliance is required.