IMPORTANT NOTICE

This Acceptable Use Policy (“Policy” or “AUP”) governs access to and use of the websites, hosted platform, applications, administrative interfaces, application programming interfaces, software development kits, documentation, scoring services, reports, analytical outputs, Personal Lockers, testing environments, webhooks, and related products and services made available by The Senior Wellness Company, as the operator of MedQuiry (“MedQuiry,” “we,” “our,” or “us”) (collectively, the “Services”). MedQuiry is a service operated by The Senior Wellness Company.

This Policy applies to every individual or organization that accesses or uses the Services, including individual users, customers, enterprise customers, Authorized Users, administrators, contractors, developers, integration partners, and any person acting on their behalf.

By accessing or using the Services, you agree to comply with this Policy. If you access or use the Services on behalf of an organization, you represent that you have authority to bind that organization, and references to “you” and “your” include both you and the organization.

You must not access or use the Services if you do not agree to this Policy.

1. PURPOSE

MedQuiry provides an artificial intelligence-assisted platform for evaluating the methodological characteristics of published medical and scientific research.

This Policy is intended to:

1. promote lawful, ethical, secure, and responsible use of the Services;

1. protect users, customers, third parties, and MedQuiry;

1. preserve the confidentiality, security, availability, integrity, and reliability of the Services;

1. protect MedQuiry’s proprietary scoring methodologies, rubrics, prompts, models, algorithms, validation rules, and related intellectual property;

1. reduce the risk of deceptive, harmful, abusive, or misleading use of MedQuiry Results and API Outputs;

1. support research integrity and responsible scientific communication; and

1. establish conduct that may result in investigation, restriction, suspension, or termination.

This Policy does not describe every activity that may be prohibited. Conduct may violate this Policy if it creates a material risk to the Services, MedQuiry, another customer, a user, or a third party, even if the conduct is not specifically identified below.

2. RELATIONSHIP TO OTHER AGREEMENTS

This Policy supplements the agreement governing your use of the Services, which may include:

1. the MedQuiry Terms of Service (the “Terms”);

1. an Enterprise License Agreement;

1. an Order Form, subscription agreement, statement of work, or other commercial agreement;

1. the MedQuiry API Terms of Use;

1. a Data Processing Addendum;

1. a Business Associate Agreement;

1. applicable service-level, security, implementation, or data-handling schedules;

1. the MedQuiry Privacy Policy (the “Privacy Notice”);

1. the Documentation; and

1. the Copyright and DMCA Policy and any other terms or policies expressly incorporated into the applicable agreement.

Together, the applicable documents constitute the “Agreement.”

Unless an executed agreement expressly provides otherwise, this Policy does not:

• expand MedQuiry’s warranties;

• create a service-level commitment;

• create a professional, fiduciary, healthcare-provider, physician-patient, research-collaboration, or advisory relationship;

• authorize the submission of sensitive or regulated information;

• grant rights to MedQuiry Technology;

• modify applicable payment obligations; or

• limit any rights or remedies available to MedQuiry under the Agreement or applicable law.

This Policy supplements, and does not replace, the acceptable-use provisions of the Terms and any applicable enterprise or API agreement. In the event of a conflict, the applicable agreement’s order of precedence governs. A separately executed agreement controls only with respect to the specific subject matter it addresses, and a Data Processing Addendum or Business Associate Agreement controls solely with respect to the subject matter it governs. The Privacy Notice governs MedQuiry’s personal-information practices, subject to applicable law and any applicable separately executed data-processing agreement. Procedures for copyright notifications and counter-notifications are governed by the Copyright and DMCA Policy and applicable law.

Capitalized terms not defined in this Policy have the meanings assigned to them in the applicable Agreement. References in this Policy to “User Content” mean the submitted materials described in Article 11 of the Terms, including materials called “Customer Content” in an applicable enterprise or API agreement. References to “Results” include MedQuiry Scores and Analytical Outputs under the Terms; “API Outputs” retains its meaning under the applicable API agreement. These references do not modify ownership, license rights, or separately negotiated definitions.

Nothing in this Policy waives, restricts, or excludes any right or remedy that cannot lawfully be waived under the GDPR or other applicable data-protection law. Mandatory requirements of applicable law control to the extent of any conflict.

3. GENERAL STANDARD OF USE

You may use the Services only:

1. for lawful purposes;

1. for the purposes authorized by the Agreement;

1. within the purchased or approved scope, subscription, project, environment, territory, quota, capacity, and usage limits;

1. in accordance with the Documentation;

1. in accordance with applicable professional, institutional, ethical, contractual, and regulatory requirements; and

1. in a manner that does not compromise the security, availability, integrity, performance, reputation, or lawful operation of the Services.

You are responsible for determining whether the Services and any Results or API Outputs are appropriate for your intended use.

You remain responsible for all decisions, publications, representations, communications, products, services, workflows, and actions based on or incorporating the Services, Results, or API Outputs.

4. COMPLIANCE WITH LAW AND PROFESSIONAL OBLIGATIONS

You must not use the Services in violation of any applicable:

• federal, state, local, or international law;

• privacy or data-protection requirement;

• healthcare or professional-licensing requirement;

• intellectual-property law;

• consumer-protection law;

• research-integrity or scientific-misconduct standard;

• export-control or sanctions law;

• accessibility requirement;

• employment, education, housing, insurance, credit, or anti-discrimination law;

• contractual, confidentiality, or institutional obligation;

• court order, regulatory restriction, or governmental directive; or

• professional code, publication standard, funding requirement, or research-governance obligation applicable to you.

You must not use the Services to facilitate conduct that would be unlawful or prohibited if performed without the Services.

You are solely responsible for obtaining all licenses, authorizations, notices, permissions, consents, and lawful bases required for your use of the Services and your submission or processing of User Content.

5. ACCOUNT, ACCESS, AND CREDENTIAL SECURITY

You must:

1. provide accurate, current, and complete account and registration information;

1. maintain the confidentiality of passwords, API Credentials, tokens, signing secrets, certificates, service identities, and other authentication materials;

1. restrict access to persons who are authorized and have a legitimate need to use the Services;

1. apply reasonable access controls and least-privilege principles;

1. use separate credentials, projects, and environments when required;

1. promptly revoke access that is no longer required;

1. monitor your accounts, integrations, and systems for suspicious or unauthorized activity;

1. promptly notify MedQuiry of suspected unauthorized access, credential compromise, misuse, or security incidents; and

1. reasonably cooperate with investigation, containment, credential rotation, remediation, and legally required notification activities.

You must not:

• share credentials with unauthorized persons;

• transfer credentials to an unrelated organization;

• publish credentials in public repositories;

• embed secret credentials in publicly distributed software or client-side code;

• use another person’s account without authorization;

• obtain or attempt to obtain credentials through deception, social engineering, credential stuffing, phishing, or other improper means;

• create accounts using false, stolen, deceptive, or misleading information;

• create accounts or projects to evade enforcement, billing, quotas, restrictions, or prior suspension; or

• permit an account, credential, project, or environment to be used outside its authorized scope.

You are responsible for activity occurring through your accounts and credentials, except as provided in the applicable Agreement, including the exception in Section 7.3 of the Terms for activity resulting solely from MedQuiry’s negligence or willful misconduct.

6. UNLAWFUL, DECEPTIVE, HARMFUL, OR ABUSIVE CONDUCT

You must not use the Services to:

1. engage in or facilitate fraud, deception, forgery, impersonation, identity theft, or misrepresentation;

1. submit false identity, account, billing, authorization, or affiliation information;

1. harass, threaten, intimidate, stalk, exploit, or abuse another person;

1. promote, facilitate, or meaningfully assist violence, terrorism, or criminal activity;

1. exploit or abuse children or other vulnerable individuals;

1. unlawfully discriminate against an individual or group;

1. defame another person or organization;

1. violate another person’s privacy, publicity, confidentiality, contractual, or intellectual-property rights;

1. distribute malware, ransomware, spyware, destructive code, malicious instructions, or harmful payloads;

1. conceal unlawful conduct or evade lawful investigation;

1. create deceptive evidence, fabricated records, or falsified documentation;

1. misrepresent the source, nature, authorship, provenance, accuracy, or limitations of content or outputs; or

1. assist another person in engaging in prohibited conduct.

7. MEDICAL, CLINICAL, AND OTHER HIGH-IMPACT USES

The Services are informational, educational, research, and analytical tools. They are not medical advice, diagnosis, treatment, a clinical standard of care, legal advice, regulatory approval, or a substitute for qualified professional judgment.

You must not use the Services or Results to:

1. diagnose a patient or determine whether a patient has a medical condition;

1. prescribe, recommend, initiate, modify, or discontinue treatment or medication;

1. determine whether emergency care is required;

1. replace the independent judgment of a licensed healthcare professional;

1. make an autonomous clinical decision;

1. communicate to a patient that a Result constitutes individualized medical advice;

1. represent that MedQuiry has approved or endorsed a medical treatment, clinical protocol, product, device, drug, intervention, or healthcare decision;

1. establish or represent a clinical standard of care;

1. make a decision that creates an unreasonable risk of death, bodily injury, or significant harm;

1. delay emergency care or professional consultation; or

1. represent that use of the Services creates a physician-patient, healthcare-provider, therapist-patient, pharmacist-patient, attorney-client, fiduciary, or other professional relationship with MedQuiry.

You must independently review the underlying research and exercise appropriate professional judgment before relying on any Result or API Output.

You must not use a Result or API Output as the sole basis for a material decision concerning an identifiable individual’s healthcare, employment, credit, housing, education, insurance, eligibility for essential services, or other similarly significant interest.

8. ARTIFICIAL INTELLIGENCE AND AUTOMATED ANALYSIS

You acknowledge that Results and API Outputs may be generated through artificial intelligence, machine learning, natural language processing, statistical algorithms, proprietary analytical models, and other automated processes.

You must not:

1. represent an automated Result as a definitive, error-free, complete, current, or universally accepted determination;

1. conceal the automated nature of an output where disclosure is legally, professionally, contractually, or ethically required;

1. represent that a Result has been individually reviewed, approved, or verified by a clinician, researcher, statistician, editor, or other professional unless that review actually occurred;

1. use automated outputs without appropriate human review where the use could materially affect another person;

1. use the Services to generate deceptive scientific, clinical, regulatory, editorial, academic, or professional materials;

1. use the Services to create fabricated sources, nonexistent citations, falsified evidence, or misleading claims of scientific support;

1. manipulate prompts, inputs, files, metadata, or workflows for the purpose of causing the Services to disregard safeguards or produce unauthorized information;

1. conduct prompt-injection, jailbreak, adversarial-input, extraction, or safeguard-circumvention attacks;

1. attempt to cause the Services to disclose system prompts, hidden instructions, credentials, confidential information, proprietary methods, or information concerning another customer;

1. use automated agents to perform actions outside the permissions granted to you;

1. deploy the Services in a fully autonomous workflow where meaningful human oversight is required by law, professional standards, the Agreement, or the intended use; or

1. misrepresent the capabilities, accuracy, provenance, or limitations of MedQuiry’s artificial intelligence systems.

9. RESEARCH INTEGRITY AND SCIENTIFIC USE

You must use the Services in a manner consistent with research integrity, responsible scientific communication, and applicable publication or institutional standards.

You must not use the Services to:

1. fabricate, falsify, or manipulate research data, findings, sources, citations, analyses, or study characteristics;

1. conceal known errors, retractions, corrections, conflicts of interest, or material methodological limitations;

1. misrepresent that MedQuiry independently validated, reproduced, endorsed, certified, or peer reviewed a study;

1. create a false impression that a MedQuiry Score is an objective fact, regulatory determination, clinical conclusion, or universally accepted scientific judgment;

1. selectively quote, crop, alter, summarize, or present a Result in a materially misleading manner;

1. alter a score, report, explanation, category assessment, provenance record, or version identifier and attribute the altered material to MedQuiry;

1. use a Result to falsely discredit, defame, harass, or target an author, researcher, journal, institution, sponsor, or publisher;

1. submit substantially identical, manipulated, or synthetic versions of a study to obtain a desired score or infer proprietary decision rules;

1. use the Services to facilitate plagiarism, ghostwriting, undisclosed authorship, fraudulent publication, citation manipulation, paper-mill activity, or deceptive academic conduct;

1. represent that use of the Services satisfies a publication, regulatory, peer-review, funding, institutional, or research-ethics requirement unless the responsible organization has expressly accepted that use;

1. falsely state or imply that MedQuiry is a co-author, collaborator, sponsor, investigator, reviewer, certifying body, regulator, or endorser; or

1. use Results in a manner that materially obscures their version, date, scope, source, assumptions, or limitations.

Accurate academic citation, legitimate scholarly discussion, criticism, academic debate, and fair commentary are permitted in accordance with Sections 8.9 and 8.11 of the Terms and applicable law. Public references must accurately identify the study and score, provide appropriate attribution to MedQuiry, and avoid implying endorsement or attributing altered or fabricated outputs to MedQuiry.

10. USER CONTENT AND SUBMITTED MATERIALS

“User Content” includes the research studies, PDF files, identifiers, citations, manuscripts, comments, correspondence, feedback, data, text, and other materials described in Article 11 of the Terms, including uploaded study PDFs submitted to, stored in, or processed through the Services by or for you.

When you upload a study PDF for scoring, MedQuiry retains the uploaded PDF and automatically stores it in the personal document locker associated with your account (the “Personal Locker”) so that it remains available to you through the Services.

The Personal Locker is provided as part of the Services for storing study PDFs and related materials made available through authorized MedQuiry functionality. You must not use the Personal Locker as a general-purpose file-storage service or to store material that you are prohibited from submitting under this Policy or the Agreement.

Your responsibility for User Content continues while that content remains stored in your Personal Locker. You remain responsible for ensuring that you have the rights and authority necessary for MedQuiry to receive, host, store, reproduce, process, analyze, and transmit an uploaded study for the limited purposes authorized by Sections 11.2 and 11.6 of the Terms and the Privacy Notice. Storage and processing do not transfer ownership of your User Content or the underlying publication to MedQuiry.

MedQuiry may access, process, copy, or transmit a stored study only as reasonably necessary to provide requested scoring or other user-initiated functionality, re-score studies and conduct internal quality assurance of MedQuiry Scores, operate and secure the Personal Locker and the Services, provide support at your request, investigate fraud or security incidents, comply with applicable law or legal process, or enforce the Terms. Neither this Policy nor the act of uploading or storing a study grants MedQuiry broader rights in its contents.

You must not submit User Content unless you own or have obtained all rights, licenses, permissions, notices, consents, and lawful bases necessary for MedQuiry to process it as contemplated by the Agreement.

MedQuiry does not use submitted or stored study contents to train, fine-tune, or improve its scoring rubric, scoring model, or artificial intelligence models, and does not authorize service providers to use those contents for general-purpose model training. MedQuiry does not use stored studies for its own independent research, product development, benchmarking, dataset creation, licensing, commercialization, or analyses not requested or authorized by you. These limitations do not prevent the uses of non-content operational information, independently obtained public materials, synthetic data, authorized testing materials, or user Feedback permitted by the Terms and Privacy Notice.

You must not submit User Content that:

1. infringes copyright, trademark, trade-secret, database, contractual, privacy, publicity, or other rights;

1. is unlawfully obtained or disclosed;

1. contains malware, malicious instructions, or destructive payloads;

1. contains confidential information you are not authorized to provide;

1. contains personal information or regulated data prohibited by the Agreement;

1. is materially false, deceptive, manipulated, or submitted for a fraudulent purpose;

1. violates publication-access terms, institutional restrictions, licensing terms, or database conditions;

1. contains credentials, passwords, private keys, authentication secrets, or other security information;

1. is subject to export-control restrictions or sanctions-related limitations that prohibit processing; or

1. would cause MedQuiry’s processing to violate law or third-party rights.

You remain responsible for the legality, accuracy, quality, completeness, provenance, and appropriateness of User Content.

Stored studies, deletion requests, account closure, retention exceptions, and temporary backup copies are governed by Section 11.6 of the Terms and Section 9 of the Privacy Notice. A stored study generally remains in your Personal Locker until you delete it, request deletion where applicable, or your account is closed, subject to applicable legal, contractual, security, fraud-prevention, dispute-resolution, recordkeeping, backup, and disaster-recovery exceptions. A copy of the text extracted from each scored study is retained, linked to its score report, for re-scoring and internal quality assurance, and is deleted when that report is deleted; temporary technical copies may remain for limited periods under the retention practices described in the Privacy Notice.

11. PERSONAL INFORMATION, PHI, AND SENSITIVE DATA

You must minimize personal information submitted through the Services and limit submissions to information reasonably necessary for authorized use. Because uploaded study PDFs are retained in Personal Lockers, you must review the material before submission and must not upload or store patient-identifiable information, PHI, confidential clinical records, or other information prohibited by the Terms or Privacy Notice.

You must not submit patient-identifiable information, PHI, or confidential clinical records. You also must not submit the following sensitive information unless the applicable Agreement expressly authorizes the specific data category, environment, and use case, consistently with applicable law and the Privacy Notice:

• patient-identifiable information;

• protected health information under the Health Insurance Portability and Accountability Act and its implementing regulations (“PHI”);

• identifiable medical records;

• clinical charts;

• laboratory records associated with identifiable patients;

• diagnostic images associated with identifiable patients;

• health-insurance information;

• Social Security numbers;

• government identification numbers;

• complete payment-card information;

• bank-account credentials;

• passwords or authentication secrets;

• biometric identifiers;

• precise geolocation information;

• personal information concerning children;

• genetic information associated with an identifiable individual; or

• other similarly sensitive or specially regulated information.

This Policy does not authorize PHI processing. Any proposed exception to the prohibition on patient-identifiable information, PHI, or confidential clinical records requires a separately executed agreement expressly addressing and superseding that prohibition for the specific processing, together with any legally required Business Associate Agreement and approved safeguards, environments, and workflows.

An enterprise, API, subscription, or commercial agreement, written operational approval, or Business Associate Agreement alone does not authorize PHI submission or establish that a particular environment is suitable for PHI.

You must not use sandbox, preview, beta, evaluation, testing, or development environments to process production personal information, confidential third-party information, or regulated data unless the applicable Agreement expressly authorizes that environment and data. The prohibition on patient-identifiable information, PHI, and confidential clinical records remains subject only to the separately executed exception described above.

Published studies may contain case descriptions, demographic information, or other information included by their authors. MedQuiry processes studies as research materials; publication alone does not establish that you are authorized to submit identifiable or sensitive information. You remain responsible for applicable privacy, confidentiality, copyright, institutional, contractual, and professional obligations. If prohibited information is submitted or stored, promptly notify MedQuiry without resending the sensitive information and cooperate with lawful removal or remediation.

12. SECURITY AND PLATFORM INTEGRITY

You must not:

1. attempt unauthorized access to the Services, accounts, systems, networks, data, reports, projects, credentials, or infrastructure;

1. probe, scan, test, or exploit vulnerabilities without MedQuiry’s prior written authorization;

1. conduct penetration testing, security testing, red-team testing, or adversarial testing without authorization;

1. bypass, disable, interfere with, or circumvent authentication, authorization, access-control, entitlement, billing, security, monitoring, logging, or fraud-prevention mechanisms;

1. introduce malware, ransomware, spyware, viruses, worms, logic bombs, malicious code, destructive instructions, or harmful payloads;

1. conduct or facilitate denial-of-service, distributed denial-of-service, resource-exhaustion, amplification, flooding, or similar attacks;

1. interfere with, overload, degrade, impair, or disrupt the Services or another user’s access;

1. access data or resources outside your authorized scope;

1. intercept, modify, replay, forge, or improperly redirect communications, API requests, webhook events, tokens, signatures, or responses;

1. conceal or falsify the origin of requests;

1. tamper with logs, usage records, provenance data, metering events, audit records, or security evidence;

1. attempt to defeat malware scanning, file validation, content controls, or abuse-detection systems;

1. use compromised systems, botnets, anonymization infrastructure, rotating addresses, or distributed accounts to conceal abuse or avoid enforcement; or

1. knowingly maintain an integration or deployment that creates a material security risk to the Services or another person.

You must promptly remediate security risks identified by MedQuiry as a condition of continued access.

13. AUTOMATED ACCESS, SCRAPING, AND AGENTS

Unless expressly authorized through an officially supported API or a written agreement, you must not access, query, collect from, or interact with the Services using automated means, including:

• bots;

• crawlers;

• spiders;

• browser automation;

• robotic process automation;

• automated scripts;

• bulk-extraction tools;

• data-mining or harvesting tools;

• API emulation;

• autonomous software;

• artificial intelligence agents; or

• similar technologies.

Authorized automated access must remain within the scopes, endpoints, environments, rate limits, quotas, permissions, and purposes approved by MedQuiry.

You must not use automated means to:

1. scrape or systematically extract platform content;

1. create or maintain an unauthorized repository of Results or API Outputs;

1. collect information concerning other customers or users;

1. evade user-interface, subscription, token, entitlement, or API restrictions;

1. create synthetic or duplicate accounts;

1. generate excessive, abusive, duplicative, or commercially unreasonable request volumes;

1. repeatedly submit variations designed to infer proprietary methods;

1. interfere with service availability or increase infrastructure costs unreasonably;

1. conceal the identity, origin, purpose, or beneficiary of automated activity; or

1. perform actions that a human user would not be authorized to perform.

14. API-SPECIFIC RESTRICTIONS

Authorized API users remain subject to the API Terms of Use and applicable Documentation.

You must not:

1. access an API without MedQuiry’s approval;

1. use an API outside the approved business purpose;

1. use credentials issued to another customer, project, application, or environment;

1. transfer, sell, sublicense, distribute, lease, timeshare, or disclose API access or credentials to an unauthorized third party;

1. use one customer account or credential to provide access for an unrelated organization;

1. rotate credentials, projects, accounts, environments, network addresses, or integrations to evade a rate limit, quota, entitlement, billing control, restriction, or enforcement action;

1. improperly repeat, suppress, duplicate, cancel, manipulate, or misclassify requests to avoid fees;

1. interfere with usage metering, Billable Events, Usage Events, or billing records;

1. use unauthorized endpoints, parameters, schemas, authentication methods, or undocumented functionality;

1. use testing credentials or sandbox environments for unauthorized production activity;

1. intentionally generate invalid, malicious, excessive, or wasteful traffic;

1. ignore required retry logic, backoff requirements, timeout handling, idempotency controls, error handling, or request pacing;

1. forge, replay, suppress, or improperly manipulate webhooks;

1. fail to validate webhook signatures or protect signing secrets;

1. expose API Outputs, credentials, or confidential information through insecure endpoints;

1. use API Outputs outside the purposes authorized by the Agreement; or

1. permit another person to engage in prohibited API conduct.

Subject to the applicable Agreement and its notice requirements, MedQuiry may reject, throttle, delay, queue, restrict, or suspend API requests that exceed authorized limits or threaten the security, reliability, integrity, availability, or performance of the Services.

15. PROTECTION OF MEDQUIRY TECHNOLOGY

“MedQuiry Technology” includes the Services and their underlying software, source code, object code, models, workflows, prompts, rubrics, weights, journal-scoring logic, orchestration, validation rules, methods, interfaces, designs, Documentation, taxonomies, algorithms, databases, report formats, and related improvements.

You must not:

1. reverse engineer, decompile, disassemble, decode, translate, or attempt to derive source code;

1. discover, extract, reproduce, or infer system prompts, hidden instructions, rubrics, weights, scoring logic, validation rules, taxonomies, model configurations, or nonpublic methods;

1. use repeated querying, synthetic inputs, adversarial inputs, controlled variations, benchmarking, statistical analysis, or other techniques to reconstruct system behavior;

1. create datasets intended to replicate, approximate, or substitute for MedQuiry’s scoring methodology;

1. copy, reproduce, modify, or create derivative versions of MedQuiry’s analytical framework;

1. remove, obscure, modify, or falsify copyright notices, trademarks, attributions, identifiers, disclaimers, provenance information, or version information;

1. use the Services or Results to develop, train, fine-tune, validate, benchmark, or improve a competing product, scoring system, model, dataset, or service without MedQuiry’s prior written consent;

1. publish benchmarks designed to disclose or infer confidential or proprietary system behavior without authorization;

1. use the Services to create a product or service that substantially replicates, substitutes for, or competes with MedQuiry, except as expressly authorized;

1. obtain or attempt to obtain nonpublic Documentation, architecture information, security materials, pricing, usage limits, or confidential technical information without authorization; or

1. assist another person in engaging in any of the foregoing.

Nothing in this Section limits rights that cannot lawfully be restricted or legitimate scholarly discussion, criticism, academic debate, or fair commentary permitted by Section 8.11 of the Terms. This protection does not authorize extraction of confidential methods, unauthorized competitive use, or misattribution of altered or fabricated outputs.

16. RESULTS, API OUTPUTS, AND REDISTRIBUTION

Results and API Outputs may include scores, classifications, reports, evidence summaries, explanations, metadata, provenance information, status information, and other responses generated through the Services.

Unless expressly authorized by the Agreement, you must not:

1. sell, license, sublicense, redistribute, syndicate, monetize, or commercially exploit Results or API Outputs;

1. make Results or API Outputs available to third parties as a standalone product or service;

1. create, maintain, publish, or contribute Results or API Outputs to a repository, archive, index, benchmark collection, database, or similar resource that competes with, substitutes for, or replicates a material feature of the Services;

1. use Results or API Outputs to train or improve another artificial intelligence system or scoring product;

1. falsely attribute modified or independently created content to MedQuiry;

1. alter or remove applicable version, provenance, attribution, identifier, source, date, or disclaimer information;

1. imply that MedQuiry endorses you, your organization, your product, your publication, your research, or your conclusions;

1. use MedQuiry trademarks, names, logos, or branding without authorization;

1. present a Result outside its applicable context in a manner that is materially misleading; or

1. use Results or API Outputs beyond the scope authorized by the applicable subscription, Order Form, or other agreement.

Nothing in this Section prohibits accurate academic citation, legitimate scholarly discussion, criticism, academic debate, or fair commentary permitted by Sections 8.9 and 8.11 of the Terms. Public references must accurately represent the score, identify the study, provide appropriate attribution to MedQuiry, and avoid implying endorsement. Authorized enterprise display, integration, and redistribution rights remain governed by the applicable written agreement.

17. BILLING, ENTITLEMENTS, AND RESOURCE ABUSE

You must not:

1. circumvent token requirements, subscription restrictions, usage limits, rate limits, quotas, entitlements, concurrency restrictions, environment limitations, or purchased capacity;

1. manipulate metering events, billing records, request states, completion states, retries, rescoring events, credits, reversals, or other usage records;

1. intentionally structure requests to avoid payment;

1. create duplicate accounts, projects, credentials, or organizations to obtain unauthorized trial, promotional, included, or discounted usage;

1. conceal the actual user, customer, project, application, or beneficiary of usage;

1. resell or share purchased access unless expressly authorized;

1. use excessive resources in a manner inconsistent with ordinary, documented, or approved use;

1. continue activity after being directed to reduce usage or modify an integration; or

1. use the Services in a manner that imposes unreasonable technical, operational, security, or financial burdens on MedQuiry.

Purchased tokens do not expire merely because of the passage of time. Promotional credits may be subject to separate disclosed terms. Dormancy, restrictions on locker access, account deletion, and treatment of unused tokens are governed by the Terms and applicable account-lifecycle disclosures; this Policy does not create an additional expiration or forfeiture rule.

18. SANDBOX, BETA, PREVIEW, AND EVALUATION SERVICES

Sandbox, testing, beta, preview, trial, early-access, and evaluation Services may be used only for their designated purposes.

You must not:

1. rely on a nonproduction environment for production, clinical, regulatory, publication, or other material activity unless expressly authorized;

1. submit prohibited production data, personal information, PHI, or confidential third-party information;

1. represent that nonproduction outputs are production-validated or generally available;

1. circumvent lower quotas, restricted features, retention limitations, or other testing controls;

1. use a testing environment to avoid fees for production use;

1. test vulnerabilities or conduct adversarial activity without authorization; or

1. make public claims regarding confidential or nonpublic beta functionality without permission.

19. THIRD-PARTY SERVICES AND CONTENT

Your use of third-party websites, databases, publishers, journals, registries, payment services, infrastructure, models, or other services remains subject to the applicable third party’s terms.

You must not use MedQuiry to:

1. obtain or process third-party content in violation of access terms, copyright restrictions, license conditions, technical controls, or contractual obligations;

1. conceal unauthorized access to a third-party source;

1. bypass publisher, database, journal, institutional, authentication, or paywall controls;

1. submit content retrieved through stolen, shared, or unauthorized credentials;

1. cause MedQuiry to violate a third party’s rights or applicable agreement; or

1. falsely imply that MedQuiry controls, endorses, or is responsible for a third-party source.

Nothing in this Policy limits lawful fair use, licensed use, public-domain use, or other uses permitted by applicable law. Copyright complaints, counter-notifications, removal, restoration, and the treatment of repeat infringers are governed by Article 13 of the Terms, the Copyright and DMCA Policy, and applicable law. Acceptance, scoring, or storage of a study does not establish that its use is authorized or non-infringing.

20. INVESTIGATIONS AND COOPERATION

MedQuiry may investigate suspected violations of this Policy or the Agreement in accordance with applicable law, the Agreement, and the Privacy Notice. Investigation does not authorize access to or use of stored studies beyond the limited purposes stated in Sections 11.2 and 11.6 of the Terms.

To the extent permitted by law and the applicable Agreement, MedQuiry may:

1. review relevant account, access, request, security, billing, usage, and audit information;

1. require information concerning your use case, integration, architecture, data flows, users, credentials, safeguards, retention practices, or presentation of Results;

1. require you to preserve relevant records;

1. request reasonable cooperation in an investigation;

1. require credential rotation, integration changes, risk mitigation, or remediation;

1. limit or disable affected features, environments, projects, credentials, accounts, or integrations;

1. remove or restrict access to prohibited content;

1. preserve evidence;

1. notify an enterprise administrator or contracting customer;

1. cooperate with lawful governmental, judicial, regulatory, or law-enforcement requests; and

1. exercise other rights available under the Agreement or applicable law.

You must provide accurate information and must not obstruct, conceal, falsify, destroy, or manipulate information subject to a lawful and applicable preservation requirement or reasonably requested in an investigation under the Agreement. This provision does not restrict valid privacy requests, lawful deletion, protected complaints, or other non-waivable rights.

MedQuiry’s review or investigation does not create a duty to monitor all activity or prevent every violation.

21. ENFORCEMENT

Subject to applicable law and the suspension, termination, and notice provisions of the applicable Agreement, MedQuiry may restrict, throttle, suspend, or terminate access when it reasonably determines that action is necessary to:

1. protect the security, stability, integrity, availability, or performance of the Services;

1. prevent unauthorized access, fraud, misuse, or abuse;

1. address a credential compromise or security incident;

1. enforce usage limits, quotas, entitlements, billing controls, or technical requirements;

1. investigate a suspected violation;

1. prevent excessive resource consumption;

1. address unlawful or prohibited activity;

1. respond to a legal, regulatory, judicial, or governmental request;

1. address nonpayment;

1. prevent harm to MedQuiry, a customer, a user, or a third party;

1. protect MedQuiry Technology, confidential information, or intellectual property; or

1. enforce the Agreement.

Depending on the nature, seriousness, duration, and recurrence of the conduct, MedQuiry may:

• issue a warning;

• request corrective action;

• require deletion or removal of prohibited materials;

• impose additional limits or safeguards;

• revoke credentials;

• restrict features, projects, environments, or integrations;

• temporarily suspend access;

• permanently terminate access;

• terminate the applicable agreement as permitted by its terms;

• decline future service;

• preserve and disclose information where legally permitted or required; or

• pursue legal or equitable remedies.

Whenever reasonably practicable, MedQuiry will endeavor to provide advance notice before suspending Enterprise Services, consistent with Section 12.11 of the Terms and the applicable enterprise or API agreement, except where immediate action is reasonably necessary. Any applicable contractual notice, cure, restoration, or termination requirements continue to govern. Enforcement under this Policy does not create a separate right to bypass those requirements.

Suspension or termination does not relieve you of payment obligations or liabilities accrued under the Agreement.

Removal or deletion of User Content, account closure, and retained enforcement or security records remain subject to applicable law, the Terms, the Privacy Notice, and any applicable separately executed agreement. An investigation, suspension, or termination does not itself waive applicable privacy rights or authorize indefinite retention of submitted or stored studies.

22. REPORTING VIOLATIONS

You should promptly report suspected misuse, security incidents, credential compromise, prohibited content, or violations of this Policy.

Reports should include, where available:

• the affected account, project, organization, or integration;

• a description of the suspected conduct;

• relevant dates and times;

• supporting screenshots, logs, request identifiers, URLs, or records;

• the identity of the reporting organization or individual; and

• contact information for follow-up.

Reports may be submitted to:

Security matters: use the security-reporting channel identified in the applicable Agreement or through the Services; if none is identified, contact legal@medquiry.com.

Legal or policy matters: legal@medquiry.com

Privacy matters and privacy-rights requests: privacy@medquiry.com

Do not include passwords, private keys, complete payment information, PHI, or other unnecessary sensitive information in a report.

Copyright notifications and counter-notifications must be directed to the designated Copyright Agent using the procedures and contact information in the Copyright and DMCA Policy. This general reporting section does not replace those procedures. Nothing in this Policy requires you to contact MedQuiry before exercising a non-waivable right to complain to a competent data-protection authority.

23. NO WAIVER

MedQuiry’s failure to enforce any provision of this Policy does not waive its right to enforce that provision or another provision later.

A waiver is effective only if made in writing by an authorized representative of MedQuiry.

24. SEVERABILITY

If any provision of this Policy is determined to be unlawful, invalid, or unenforceable, that provision will be enforced to the maximum extent permitted, and the remaining provisions will remain in effect.

25. CHANGES TO THIS POLICY

MedQuiry may update this Policy from time to time to reflect:

• changes to the Services;

• new features, APIs, integrations, or environments;

• evolving security threats or abuse patterns;

• operational requirements;

• changes in law or regulation;

• changes in professional, scientific, or industry standards; or

• other legitimate business needs.

When this Policy is updated, MedQuiry will revise the Effective Date or “Last Updated” date.

Material changes will become effective after reasonable notice is provided through the Services, by email where appropriate, or by another reasonable method, consistent with Section 18.2 of the Terms and any applicable executed agreement. Email notices are effective when sent, except where applicable law requires a different method or timing.

Urgent measures to address security, legal compliance, fraud, abuse, third-party rights, or service-integrity risks may be implemented immediately only to the extent permitted by applicable law and the applicable Agreement. Any required notice, consent, or contractual change procedure remains applicable.

Your continued use of the Services after the effective date of an updated Policy constitutes acceptance to the extent permitted by applicable law and the applicable Agreement. Continued use does not substitute for consent required under applicable data-protection law, waive non-waivable rights, or expand MedQuiry’s rights to use submitted or stored study contents beyond the Terms and Privacy Notice.

26. CONTACT INFORMATION

Questions regarding this Acceptable Use Policy may be directed to:

The Senior Wellness Company

MedQuiry

P.O. Box 24

Califon, New Jersey 07830

Email: legal@medquiry.com

Privacy: privacy@medquiry.com

REVISION HISTORY

• Version 1.0 (August 6, 2026): Initial counsel review draft. Harmonized with the MedQuiry Terms of Service Version 1.1, Enterprise License Agreement Version 1.0, API Terms of Use Version 1.0, and Privacy Policy Version 1.1.
• Version 1.1 (August 21, 2026): Conformed to MedQuiry Terms of Service Version 1.2 and Privacy Policy Version 1.2: added Personal Locker terminology and rules addressing retention, storage, and authorized handling of uploaded study PDFs.
• Version 1.2 (October 1, 2026): Conformed to Terms of Service v1.3 and Privacy Policy v1.3: operating entity and terminology; purpose-limited study use; Personal Locker retention, deletion, and dormancy; privacy rights; PHI restrictions; copyright procedures; scholarly commentary; enforcement and change notices. Corrected cover metadata.