Terms of service. The short version.

1. Who can use the product

You may use GetMax only if you are at least 18 and can form a binding contract. You must use it on behalf of an organisation that has accepted these terms or signed an order form. Individuals using the product on behalf of a covered entity confirm they have authority to bind that entity.

2. Accounts and access

• You are responsible for what happens under your account credentials.
• MFA is required and enforced for all administrative roles.
• Don't share credentials, use someone else's account, or scrape the product.
• Tell us within 24 hours if you suspect a credential is compromised. Email sriram@getmaxrcm.com.

3. Acceptable use

You agree not to use GetMax to:

• Break the law, infringe rights, or run any operation we reasonably believe is fraudulent.
• Submit fake or test PHI as if it were real, or real PHI without a BAA.
• Attempt to access another tenant's data, probe our infrastructure for vulnerabilities without an authorised testing agreement, or interfere with the service.
• Resell or sublicense the product without a written reseller agreement.
• Use our outputs (e.g. AI-generated coding suggestions, voice transcripts) to train your own AI products or those of third parties.
• Send unlawful, harassing, or spam communications using Echo, Storm, or Flux.

We may suspend or terminate access for a serious or repeated violation. Where we can, we'll tell you first; where we can't (safety, legal, or active abuse), we'll explain after the fact.

4. The order of agreements

If multiple documents apply, this is the order of precedence (highest first):

1. Signed Master Services Agreement or Order Form.
2. Signed Business Associate Agreement (BAA) and Data Processing Addendum (DPA).
3. This Terms of Service page.
4. The Privacy Policy and Security pages.

5. Subscriptions, fees, and billing

• Pricing is on the pricing page or your signed order form. Plans are month-to-month unless an annual term is specified.
• Fees are due in advance. Usage overages are billed in arrears.
• Late payments accrue interest at the lesser of 1.5%/month or the legal maximum.
• We may change list pricing on 30 days' notice; your current term is honoured at the price you signed for.
• Refunds: pro-rated only where required by law. Otherwise, no refunds.

6. Intellectual property

What we own

The software, infrastructure, models, dashboards, runbooks, brand, and documentation are owned by GetMax. Nothing here transfers any IP to you. You get a non-exclusive, non-transferable, revocable licence to use the product during your subscription.

What you own

Your data — customer data, your patient PHI, your uploaded documents, your prompts, your configured workflows — is yours. We hold a limited licence to process it on your behalf so we can run the product. We don't sell it, train third-party models on it, or share it across customers.

Outputs

Outputs generated for you (e.g. an appeal draft, a coding suggestion, a call transcript) are yours to use for your business purposes. You are responsible for reviewing AI-generated outputs before submitting them to a payer or billing them to a patient.

Feedback

If you send us feature ideas, bug reports, or product feedback, we may use them without restriction. You don't get paid for feedback.

4a. Healthcare-specific obligations

GetMax is a business associate when handling PHI. We will execute a BAA before PHI flows. You will execute the BAA before uploading PHI. If you upload PHI without a BAA, you must remove it immediately and email us at sriram@getmaxrcm.com.

See the HIPAA page for the safeguards we implement.

7. Confidentiality

Each party will protect the other's confidential information with at least reasonable care and use it only to perform under these terms. Confidentiality survives termination for 5 years; trade secrets and PHI are protected indefinitely.

8. Termination

• Convenience. Either party may cancel a month-to-month plan at any time from inside the dashboard or by emailing sriram@getmaxrcm.com.
• For cause. Either party may terminate for material breach not cured within 30 days of written notice.
• Immediate. We may suspend or terminate immediately for non-payment past 30 days, security incidents, or violations of the acceptable use rules.
• What happens to your data. You get a 30-day window to export. After 90 days we delete from primary systems; backup purges complete within 35 days after that, unless a legal hold or HIPAA audit-log obligation requires longer retention.

9. Warranty disclaimer

The product is provided "as is" and "as available." To the maximum extent permitted by law, we disclaim all warranties, express or implied, including merchantability, fitness for a particular purpose, and non-infringement.

AI-generated content (coding hints, denial classifications, drafted appeals, voice agent statements) is a tool, not a clinical, legal, or financial decision. Your billers and clinicians remain the responsible decision-makers. Review outputs before acting on them.

10. Limitation of liability

To the maximum extent permitted by law, neither party will be liable for indirect, incidental, special, consequential, or punitive damages, or for lost profits, revenue, goodwill, or data, even if advised of the possibility.

Each party's total liability for any claim relating to these terms is capped at the fees you paid us in the 12 months before the event giving rise to the claim. These caps do not apply to: (a) breach of confidentiality, (b) your payment obligations, (c) your indemnity obligations, or (d) gross negligence, wilful misconduct, or fraud.

11. Indemnification

You agree to indemnify and hold GetMax harmless from third-party claims arising out of your data, your use of the product in violation of these terms, your violation of law, or your infringement of a third party's rights.

We will indemnify you against third-party claims that our product, used as permitted, infringes a US patent, copyright, or trademark, subject to standard process and remedy provisions in our MSA.

12. Governing law and disputes

These terms are governed by the laws of the State of Texas, United States, without regard to conflict-of-law rules. The federal and state courts located in Travis County, Texas have exclusive jurisdiction over any dispute that cannot be resolved informally. Either party may seek injunctive relief in any court of competent jurisdiction to protect IP or confidential information.

Before filing, the parties will try in good faith to resolve any dispute by escalation to senior executives within 30 days. Class actions and class-wide arbitrations are not permitted to the extent allowed by law.

13. Force majeure

Neither party is liable for failure caused by events beyond reasonable control, including natural disasters, war, civil unrest, internet or carrier failures, cloud provider outages, or government actions. The affected party will use reasonable efforts to mitigate.

14. General

• Entire agreement. These terms (plus any signed MSA / BAA / DPA) are the entire agreement and supersede prior discussions.
• Assignment. You may not assign without our consent; we may assign in a merger, acquisition, or sale of substantially all assets.
• Notices. Email is fine for routine notices. sriram@getmaxrcm.com for us; the billing email on file for you.
• Severability. If a clause is unenforceable, the rest stays.
• No waiver. A delay in enforcing a right is not a waiver.
• Independent contractors. Nothing here creates a partnership, joint venture, or employment relationship.

15. Contact

Email sriram@getmaxrcm.com. Postal mail on request.