Powerful EMR Integration for Modern Partners

1. Introduction

NaturaeSoft LLC ("NaturaeSoft", "we", "us", or "our") is committed to protecting the privacy and security of the information processed through our OfficePro EMR API. This Privacy Policy describes how we collect, use, and disclose information when marketing partners, developers, and other third parties ("Partners", "you") integrate with our API.

2. Information We Collect

• Partner Information: When you request API access, we collect your company name, contact name, email address, and intended use case.
• API Usage Data: We log all calls made to our API, including IP addresses, timestamps, endpoints accessed, and response times.
• Authentication Credentials: We store and manage API keys and tokens to secure access.

3. Information Accessed via API

Our API provides access to data stored within a Clinic's (our "Customer") OfficePro environment. This data may include patient names, contact information, scheduling availability, and other Protected Health Information (PHI). This data is owned by the Clinic. NaturaeSoft acts as a service provider (and Business Associate) to the Clinic.

4. How We Use Information

• To provide, maintain, and improve the API.
• To monitor for security threats, fraud, and unauthorized access.
• To facilitate the integration requested by the Clinic and the Partner.

5. Data Sharing and Disclosure

• We do not sell or rent API usage data or Partner information.
• We may share information with the respective Clinic to keep them informed of how their data is being accessed.
• We may disclose information as required by law or to protect our legal rights.

6. Security

We implement industry-standard administrative, physical, and technical safeguards to protect information from unauthorized access, disclosure, or destruction.

1. Acceptance of Terms

By accessing or using the OfficePro EMR API, you agree to be bound by these Terms of Service. If you do not agree, you may not use the API.

2. License Grant

NaturaeSoft grants you a limited, non-exclusive, non-transferable, revocable license to access and use the API solely for the purpose of integrating your services with the OfficePro EMR platform as authorized by a mutual Clinic Customer.

3. API Access and Security

• You must request access and receive an API key.
• You are responsible for maintaining the confidentiality of your API keys and tokens.
• You must notify us immediately of any unauthorized use of your credentials.

4. Prohibited Conduct

• You may not use the API for any illegal or unauthorized purpose.
• You may not attempt to circumvent any security measures or rate limits.
• You may not reverse engineer or attempt to extract source code from the API.
• You may not bulk-scrape or "harvest" data from the EMR without explicit authorization.

5. Data Protection and Compliance

You acknowledge that the API may provide access to Protected Health Information (PHI) subject to HIPAA regulations. You agree to enter into a Business Associate Agreement (BAA) if required by law or requested by NaturaeSoft or the Clinic. You must comply with all applicable privacy and data protection laws.

6. Termination

We reserve the right to suspend or terminate your access to the API at any time, with or without cause, and without notice.

7. Disclaimer of Warranties

The API is provided "as is" and "as available" without warranties of any kind.

1. Definitions

Terms used, but not otherwise defined, in this Agreement shall have the same meaning as those terms in the HIPAA Rules.

2. Obligations of Business Associate

The Partner (Business Associate) agrees to:

• Not use or disclose protected health information other than as permitted or required by the Agreement or as required by law.
• Use appropriate safeguards, and comply with Subpart C of 45 CFR Part 164 with respect to electronic protected health information, to prevent use or disclosure of protected health information other than as provided for by the Agreement.
• Report to NaturaeSoft and the Covered Entity any use or disclosure of protected health information not provided for by the Agreement of which it becomes aware, including breaches of unsecured protected health information.
• In accordance with 45 CFR 164.502(e)(1)(ii) and 164.308(b)(2), if applicable, ensure that any subcontractors that create, receive, maintain, or transmit protected health information on behalf of the business associate agree to the same restrictions, conditions, and requirements that apply to the business associate with respect to such information.

3. Permitted Uses and Disclosures by Business Associate

Business Associate may only use or disclose protected health information as necessary to perform the services for which they have been granted API access by the Clinic.

4. Termination

Upon termination of this Agreement for any reason, Business Associate, with respect to protected health information received from NaturaeSoft or the Covered Entity, shall return or destroy all protected health information.

---

Note: This is a summary of the BAA terms applicable to Partner integrations. A signed copy may be required for full production access.