PatientLXA Terms of Service

Introduction and Acceptance

Welcome to PatientLXA. These Terms of Service ("Terms") govern your access to and use of the PatientLXA website and platform, along with any related services that link to these Terms (together, the "Service"). The Service is operated by Patient LXA LLC ("PatientLXA," "we," "us," and "our") from the United States.

PatientLXA is a digital health platform that supports osteoporosis care by engaging healthcare providers, clinicians, and pharmaceutical partners. The Service is intended for use within the United States only.

By accessing or using the Service, you agree to be bound by these Terms and by our Privacy Policy, which is incorporated here by reference. If you are using the Service on behalf of an organization, you confirm that you have authority to bind that organization to these Terms. If you do not agree to these Terms, please do not use the Service.

The Platform and Who May Use It

PatientLXA is an analytical and informational platform. It compares de-identified data against published reference information to produce educational and analytical outputs for professional audiences.

The Service is intended for healthcare providers, clinicians, and authorized partners. It is not designed for use by patients or the general public as a source of personal medical guidance.

You must be at least 18 years old and capable of forming a binding contract to use the Service. Access to certain features may require prior approval from PatientLXA.

Account Terms

If you are given access to an account, you agree to the following:

• Provide accurate, current, and complete information when requesting access or creating an account.
• Keep your login credentials confidential and do not share them with others.
• You are responsible for all activity that occurs under your account.
• Notify us promptly at info@patientlxa.com if you believe your account has been accessed without authorization.

We may suspend or limit access to accounts to protect the security and integrity of the Service.

Acceptable Use

When using the Service, you agree not to:

• Use the Service in any way that violates applicable law or regulation.
• Attempt to re-identify any individual from de-identified data, or combine data in a way designed to identify a person.
• Upload, submit, or transmit protected health information (PHI) or other directly identifying information except under a separate written agreement that expressly permits it.
• Interfere with, disrupt, probe, or attempt to gain unauthorized access to the Service, its systems, or related networks.
• Copy, scrape, reverse engineer, or create derivative works from the Service except as permitted by law or with our written consent.
• Use the Service to develop a competing product or to misuse the content or outputs we provide.

Medical Disclaimer

PatientLXA does not provide medical advice. The Service provides educational, informational, and analytical content only. It is not a substitute for professional medical judgment, diagnosis, or treatment, and it does not create a provider-patient relationship.

The Service does not make treatment decisions and is not a clinical decision support tool. Outputs are analytical comparisons against published reference information and are intended to support, not replace, the independent judgment of a qualified healthcare professional.

Healthcare professionals remain solely responsible for any decisions made in the course of care. Nothing in the Service should be relied upon as the sole basis for any clinical decision. In a medical emergency, contact emergency services or a qualified professional directly.

De-Identified Data and No PHI by Default

Under these default Terms, PatientLXA works only with de-identified data that meets the HIPAA Safe Harbor de-identification standard. This applies across all service tiers. No protected health information (PHI) is collected or processed under these default Terms.

Any handling of real PHI is outside the scope of these default Terms. It requires a separate written change order and executed Business Associate Agreements (BAAs) with our infrastructure and data partners (for example, AWS, Metriport, and Flexpa) before any such handling begins. We also collect limited device, analytics, and usage data as described in our Privacy Policy.

Third-Party Data Terms (Flexpa)

The Service may use data sourced from third-party providers, including Metriport and Flexpa. Under these default Terms, any such data is processed in de-identified form that meets the HIPAA Safe Harbor standard.

Flexpa-sourced data is used to support the educational and analytical purposes of the Service. It is not used to identify, contact, or locate any individual.

If Flexpa-sourced data is ever used for marketing or targeted advertising, PatientLXA obtains separate informed opt-in consent before any such use, distinct from the consent you give to use the product, and discloses this use in its privacy notice. Your use of third-party-sourced data through the Service is also subject to the requirements described in the Consent section below and in our Privacy Policy.

Consent

We ask for your explicit consent before collecting or using personal data. Before you give consent, we clearly inform you of what data is collected and how it will be used, as described in our Privacy Policy.

If Flexpa-sourced data is used for marketing or targeted advertising, PatientLXA obtains separate informed opt-in consent, distinct from the consent users give to use the product, before any such use, and discloses this in its privacy notice.

User Rights

Subject to applicable law and reasonable verification, you may exercise the following rights regarding personal data associated with you:

To make a request, contact us at info@patientlxa.com. We will respond within a reasonable time and consistent with applicable law.

Because de-identified data is not intended to identify a specific individual, we generally cannot retrieve, correct, or delete records from de-identified datasets based on a personal request.

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete personal data.
• Request deletion of personal data you have provided to us.
• Request portability of personal data in a commonly used, machine-readable format where applicable.
• Withdraw consent for processing that relies on your consent.

We keep you informed about how your data is handled through our Privacy Policy and these Terms. If we make material changes to how we handle personal data, we will update the relevant document and, where appropriate, provide additional notice through the Service or another reasonable channel.

Security and Breach Response

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach affecting personal data occurs, we will investigate, take reasonable steps to mitigate it, and notify affected parties and any relevant authorities without undue delay and within the timelines required by applicable law.

Intellectual Property

The Service, including its content, design, text, graphics, software, and analytical outputs, is owned by PatientLXA or its licensors and is protected by intellectual property laws.

We grant you a limited, non-exclusive, non-transferable, revocable right to access and use the Service for its intended professional purposes, subject to these Terms.

You may not use our names, logos, or trademarks without our prior written permission. All rights not expressly granted to you are reserved by PatientLXA.

Disclaimers of Warranties

The Service is provided on an "as is" and "as available" basis without warranties of any kind, whether express or implied. To the fullest extent permitted by law, we disclaim all implied warranties, including merchantability, fitness for a particular purpose, and non-infringement.

We do not warrant that the Service will be uninterrupted, error-free, or secure, or that any output is complete, accurate, or suitable for a particular use. You use the Service and its outputs at your own discretion and risk, consistent with the Medical Disclaimer above.

Limitation of Liability

To the fullest extent permitted by law, PatientLXA and its affiliates, officers, employees, and partners will not be liable for any indirect, incidental, special, consequential, or punitive damages, or for any loss of profits, data, goodwill, or other intangible losses, arising out of or related to your use of the Service.

To the fullest extent permitted by law, our total liability for any claim arising out of or related to the Service will not exceed the greater of the amount you paid us for the Service in the twelve months before the claim, or one hundred U.S. dollars. Some jurisdictions do not allow certain limitations, so some of these limitations may not apply to you.

Termination

We may suspend or terminate your access to the Service at any time, with or without notice, if we believe you have violated these Terms, if required by law, or to protect the security or integrity of the Service.

You may stop using the Service at any time. You may request deletion of personal data you provided to us as described in the User Rights section.

Provisions that by their nature should survive termination will continue to apply, including intellectual property, disclaimers, limitation of liability, and governing law.

Governing Law

These Terms are governed by the laws of the State of [Governing State/Jurisdiction] and the applicable laws of the United States, without regard to conflict-of-law principles. The Service is intended for use within the United States only.

You agree that any dispute arising out of or related to these Terms or the Service will be subject to the exclusive jurisdiction of the state and federal courts located in [Governing State/Jurisdiction], unless otherwise required by applicable law.

Changes to These Terms

We may update these Terms from time to time. When we do, we will revise the "Last updated" date above. If changes are material, we may provide additional notice through the Service or another appropriate channel.

Your continued use of the Service after updated Terms are posted means the updated Terms apply going forward. If you do not agree to the updated Terms, please stop using the Service.

Contact Information

If you have questions about these Terms or the Service, contact us at: