IMPORTANT NOTICE

This Acceptable Use Policy ("Policy" or "AUP") governs access to and use of the websites, hosted platform, applications, administrative interfaces, application programming interfaces, software development kits, documentation, scoring services, reports, analytical outputs, testing environments, webhooks, and related products and services made available by The Senior Wellness Company, doing business as MedQuiry ("MedQuiry," "we," "our," or "us") (collectively, the "Services").

This Policy applies to every individual or organization that accesses or uses the Services, including individual users, customers, enterprise customers, Authorized Users, administrators, contractors, developers, integration partners, and any person acting on their behalf.

By accessing or using the Services, you agree to comply with this Policy. If you access or use the Services on behalf of an organization, you represent that you have authority to bind that organization, and references to "you" and "your" include both you and the organization.

You must not access or use the Services if you do not agree to this Policy.

1. PURPOSE

MedQuiry provides an artificial intelligence-assisted platform for evaluating the methodological characteristics of published medical and scientific research.

This Policy is intended to:

1. promote lawful, ethical, secure, and responsible use of the Services;
2. protect users, customers, third parties, and MedQuiry;
3. preserve the confidentiality, security, availability, integrity, and reliability of the Services;
4. protect MedQuiry's proprietary scoring methodologies, rubrics, prompts, models, algorithms, validation rules, and related intellectual property;
5. reduce the risk of deceptive, harmful, abusive, or misleading use of MedQuiry Results and API Outputs;
6. support research integrity and responsible scientific communication; and
7. establish conduct that may result in investigation, restriction, suspension, or termination.

This Policy does not describe every activity that may be prohibited. Conduct may violate this Policy if it creates a material risk to the Services, MedQuiry, another customer, a user, or a third party, even if the conduct is not specifically identified below.

2. RELATIONSHIP TO OTHER AGREEMENTS

This Policy supplements the agreement governing your use of the Services, which may include:

1. the MedQuiry Terms of Service;
2. an Enterprise License Agreement;
3. an Order Form, subscription agreement, statement of work, or other commercial agreement;
4. the MedQuiry API Terms of Use;
5. a Data Processing Addendum;
6. a Business Associate Agreement;
7. applicable service-level, security, implementation, or data-handling schedules;
8. the MedQuiry Privacy Policy;
9. the Documentation; and
10. any other terms or policies expressly incorporated into the applicable agreement.

Together, the applicable documents constitute the "Agreement."

Unless an executed agreement expressly provides otherwise, this Policy does not:

• expand MedQuiry's warranties;
• create a service-level commitment;
• create a professional, fiduciary, healthcare-provider, physician-patient, research-collaboration, or advisory relationship;
• authorize the submission of sensitive or regulated information;
• grant rights to MedQuiry Technology;
• modify applicable payment obligations; or
• limit any rights or remedies available to MedQuiry under the Agreement or applicable law.

If this Policy conflicts with a separately executed agreement, the separately executed agreement will control to the extent of the conflict. A Data Processing Addendum or Business Associate Agreement will control solely with respect to the subject matter it governs.

Capitalized terms not defined in this Policy have the meanings assigned to them in the applicable Agreement.

3. GENERAL STANDARD OF USE

You may use the Services only:

1. for lawful purposes;
2. for the purposes authorized by the Agreement;
3. within the purchased or approved scope, subscription, project, environment, territory, quota, capacity, and usage limits;
4. in accordance with the Documentation;
5. in accordance with applicable professional, institutional, ethical, contractual, and regulatory requirements; and
6. in a manner that does not compromise the security, availability, integrity, performance, reputation, or lawful operation of the Services.

You are responsible for determining whether the Services and any Results or API Outputs are appropriate for your intended use.

You remain responsible for all decisions, publications, representations, communications, products, services, workflows, and actions based on or incorporating the Services, Results, or API Outputs.

4. COMPLIANCE WITH LAW AND PROFESSIONAL OBLIGATIONS

You must not use the Services in violation of any applicable:

• federal, state, local, or international law;
• privacy or data-protection requirement;
• healthcare or professional-licensing requirement;
• intellectual-property law;
• consumer-protection law;
• research-integrity or scientific-misconduct standard;
• export-control or sanctions law;
• accessibility requirement;
• employment, education, housing, insurance, credit, or anti-discrimination law;
• contractual, confidentiality, or institutional obligation;
• court order, regulatory restriction, or governmental directive; or
• professional code, publication standard, funding requirement, or research-governance obligation applicable to you.

You must not use the Services to facilitate conduct that would be unlawful or prohibited if performed without the Services.

You are solely responsible for obtaining all licenses, authorizations, notices, permissions, consents, and lawful bases required for your use of the Services and your submission or processing of Customer Content.

5. ACCOUNT, ACCESS, AND CREDENTIAL SECURITY

You must:

1. provide accurate, current, and complete account and registration information;
2. maintain the confidentiality of passwords, API Credentials, tokens, signing secrets, certificates, service identities, and other authentication materials;
3. restrict access to persons who are authorized and have a legitimate need to use the Services;
4. apply reasonable access controls and least-privilege principles;
5. use separate credentials, projects, and environments when required;
6. promptly revoke access that is no longer required;
7. monitor your accounts, integrations, and systems for suspicious or unauthorized activity;
8. promptly notify MedQuiry of suspected unauthorized access, credential compromise, misuse, or security incidents; and
9. reasonably cooperate with investigation, containment, credential rotation, remediation, and legally required notification activities.

You must not:

• share credentials with unauthorized persons;
• transfer credentials to an unrelated organization;
• publish credentials in public repositories;
• embed secret credentials in publicly distributed software or client-side code;
• use another person's account without authorization;
• obtain or attempt to obtain credentials through deception, social engineering, credential stuffing, phishing, or other improper means;
• create accounts using false, stolen, deceptive, or misleading information;
• create accounts or projects to evade enforcement, billing, quotas, restrictions, or prior suspension; or
• permit an account, credential, project, or environment to be used outside its authorized scope.

You are responsible for activity occurring through your accounts and credentials, except to the extent the applicable Agreement expressly provides otherwise.

6. UNLAWFUL, DECEPTIVE, HARMFUL, OR ABUSIVE CONDUCT

You must not use the Services to:

1. engage in or facilitate fraud, deception, forgery, impersonation, identity theft, or misrepresentation;
2. submit false identity, account, billing, authorization, or affiliation information;
3. harass, threaten, intimidate, stalk, exploit, or abuse another person;
4. promote, facilitate, or meaningfully assist violence, terrorism, or criminal activity;
5. exploit or abuse children or other vulnerable individuals;
6. unlawfully discriminate against an individual or group;
7. defame another person or organization;
8. violate another person's privacy, publicity, confidentiality, contractual, or intellectual-property rights;
9. distribute malware, ransomware, spyware, destructive code, malicious instructions, or harmful payloads;
10. conceal unlawful conduct or evade lawful investigation;
11. create deceptive evidence, fabricated records, or falsified documentation;
12. misrepresent the source, nature, authorship, provenance, accuracy, or limitations of content or outputs; or
13. assist another person in engaging in prohibited conduct.

7. MEDICAL, CLINICAL, AND OTHER HIGH-IMPACT USES

The Services are informational, educational, research, and analytical tools. They are not medical advice, diagnosis, treatment, a clinical standard of care, legal advice, regulatory approval, or a substitute for qualified professional judgment.

You must not use the Services or Results to:

1. diagnose a patient or determine whether a patient has a medical condition;
2. prescribe, recommend, initiate, modify, or discontinue treatment or medication;
3. determine whether emergency care is required;
4. replace the independent judgment of a licensed healthcare professional;
5. make an autonomous clinical decision;
6. communicate to a patient that a Result constitutes individualized medical advice;
7. represent that MedQuiry has approved or endorsed a medical treatment, clinical protocol, product, device, drug, intervention, or healthcare decision;
8. establish or represent a clinical standard of care;
9. make a decision that creates an unreasonable risk of death, bodily injury, or significant harm;
10. delay emergency care or professional consultation; or
11. represent that use of the Services creates a physician-patient, healthcare-provider, therapist-patient, pharmacist-patient, attorney-client, fiduciary, or other professional relationship with MedQuiry.

You must independently review the underlying research and exercise appropriate professional judgment before relying on any Result or API Output.

You must not use a Result or API Output as the sole basis for a material decision concerning an identifiable individual's healthcare, employment, credit, housing, education, insurance, eligibility for essential services, or other similarly significant interest.

8. ARTIFICIAL INTELLIGENCE AND AUTOMATED ANALYSIS

You acknowledge that Results and API Outputs may be generated through artificial intelligence, machine learning, natural language processing, statistical algorithms, proprietary analytical models, and other automated processes.

You must not:

1. represent an automated Result as a definitive, error-free, complete, current, or universally accepted determination;
2. conceal the automated nature of an output where disclosure is legally, professionally, contractually, or ethically required;
3. represent that a Result has been individually reviewed, approved, or verified by a clinician, researcher, statistician, editor, or other professional unless that review actually occurred;
4. use automated outputs without appropriate human review where the use could materially affect another person;
5. use the Services to generate deceptive scientific, clinical, regulatory, editorial, academic, or professional materials;
6. use the Services to create fabricated sources, nonexistent citations, falsified evidence, or misleading claims of scientific support;
7. manipulate prompts, inputs, files, metadata, or workflows for the purpose of causing the Services to disregard safeguards or produce unauthorized information;
8. conduct prompt-injection, jailbreak, adversarial-input, extraction, or safeguard-circumvention attacks;
9. attempt to cause the Services to disclose system prompts, hidden instructions, credentials, confidential information, proprietary methods, or information concerning another customer;
10. use automated agents to perform actions outside the permissions granted to you;
11. deploy the Services in a fully autonomous workflow where meaningful human oversight is required by law, professional standards, the Agreement, or the intended use; or
12. misrepresent the capabilities, accuracy, provenance, or limitations of MedQuiry's artificial intelligence systems.

9. RESEARCH INTEGRITY AND SCIENTIFIC USE

You must use the Services in a manner consistent with research integrity, responsible scientific communication, and applicable publication or institutional standards.

You must not use the Services to:

1. fabricate, falsify, or manipulate research data, findings, sources, citations, analyses, or study characteristics;
2. conceal known errors, retractions, corrections, conflicts of interest, or material methodological limitations;
3. misrepresent that MedQuiry independently validated, reproduced, endorsed, certified, or peer reviewed a study;
4. create a false impression that a MedQuiry Score is an objective fact, regulatory determination, clinical conclusion, or universally accepted scientific judgment;
5. selectively quote, crop, alter, summarize, or present a Result in a materially misleading manner;
6. alter a score, report, explanation, category assessment, provenance record, or version identifier and attribute the altered material to MedQuiry;
7. use a Result to falsely discredit, defame, harass, or target an author, researcher, journal, institution, sponsor, or publisher;
8. submit substantially identical, manipulated, or synthetic versions of a study to obtain a desired score or infer proprietary decision rules;
9. use the Services to facilitate plagiarism, ghostwriting, undisclosed authorship, fraudulent publication, citation manipulation, paper-mill activity, or deceptive academic conduct;
10. represent that use of the Services satisfies a publication, regulatory, peer-review, funding, institutional, or research-ethics requirement unless the responsible organization has expressly accepted that use;
11. falsely state or imply that MedQuiry is a co-author, collaborator, sponsor, investigator, reviewer, certifying body, regulator, or endorser; or
12. use Results in a manner that materially obscures their version, date, scope, source, assumptions, or limitations.

Accurate academic citation and legitimate scholarly discussion are permitted, subject to the Agreement and applicable intellectual-property, attribution, and publication requirements.

10. CUSTOMER CONTENT AND SUBMITTED MATERIALS

"Customer Content" includes data, text, files, metadata, manuscripts, abstracts, identifiers, citations, URLs, prompts, instructions, uploaded study PDFs, and other materials submitted to, stored in, or processed through the Services by or for you.

Where the Services provide a personal document locker associated with your account (the "Personal Locker"), an uploaded study PDF may be retained and automatically stored in your Personal Locker so that it remains available to you through the Services.

The Personal Locker is provided as part of the Services for storing study PDFs and related materials made available through authorized MedQuiry functionality. You must not use the Personal Locker as a general-purpose file-storage service or to store material that you are prohibited from submitting under this Policy or the Agreement.

Your responsibility for Customer Content continues while that content remains stored in your Personal Locker. You remain responsible for ensuring that you have the rights and authority necessary for MedQuiry to host, store, access, process, copy, and transmit an uploaded study as contemplated by the Agreement and Privacy Policy.

You must not submit Customer Content unless you own or have obtained all rights, licenses, permissions, notices, consents, and lawful bases necessary for MedQuiry to process it as contemplated by the Agreement.

You must not submit Customer Content that:

1. infringes copyright, trademark, trade-secret, database, contractual, privacy, publicity, or other rights;
2. is unlawfully obtained or disclosed;
3. contains malware, malicious instructions, or destructive payloads;
4. contains confidential information you are not authorized to provide;
5. contains personal information or regulated data prohibited by the Agreement;
6. is materially false, deceptive, manipulated, or submitted for a fraudulent purpose;
7. violates publication-access terms, institutional restrictions, licensing terms, or database conditions;
8. contains credentials, passwords, private keys, authentication secrets, or other security information;
9. is subject to export-control restrictions or sanctions-related limitations that prohibit processing; or
10. would cause MedQuiry's processing to violate law or third-party rights.

You remain responsible for the legality, accuracy, quality, completeness, provenance, and appropriateness of Customer Content.

11. PERSONAL INFORMATION, PHI, AND SENSITIVE DATA

You must minimize the personal information submitted through the Services and limit submissions to information reasonably necessary for the authorized use. Because an uploaded study PDF may be retained in your Personal Locker, you must review the material you submit and must not upload or store prohibited personal information, PHI, confidential clinical records, or other sensitive or regulated data except where expressly authorized under the Agreement.

Unless MedQuiry has expressly authorized the applicable data category, environment, and use case in writing, you must not submit:

• patient-identifiable information;
• protected health information under the Health Insurance Portability and Accountability Act and its implementing regulations ("PHI");
• identifiable medical records;
• clinical charts;
• laboratory records associated with identifiable patients;
• diagnostic images associated with identifiable patients;
• health-insurance information;
• Social Security numbers;
• government identification numbers;
• complete payment-card information;
• bank-account credentials;
• passwords or authentication secrets;
• biometric identifiers;
• precise geolocation information;
• personal information concerning children;
• genetic information associated with an identifiable individual; or
• other similarly sensitive or specially regulated information.

PHI may be submitted only when:

1. MedQuiry has expressly approved the specific use case;
2. the parties have executed a Business Associate Agreement, if required;
3. the applicable Order Form or other written agreement authorizes PHI processing;
4. you use only the approved environment, endpoints, integrations, and workflows;
5. required technical, administrative, and contractual safeguards are in place; and
6. you have a lawful basis and all necessary authorizations to process the PHI.

Execution of an enterprise, API, subscription, or commercial agreement alone does not make the Services or any particular environment suitable for PHI.

You must not use sandbox, preview, beta, evaluation, testing, or development environments to process production personal information, PHI, confidential third-party information, or regulated data unless MedQuiry expressly authorizes that environment for the applicable data.

12. SECURITY AND PLATFORM INTEGRITY

You must not:

1. attempt unauthorized access to the Services, accounts, systems, networks, data, reports, projects, credentials, or infrastructure;
2. probe, scan, test, or exploit vulnerabilities without MedQuiry's prior written authorization;
3. conduct penetration testing, security testing, red-team testing, or adversarial testing without authorization;
4. bypass, disable, interfere with, or circumvent authentication, authorization, access-control, entitlement, billing, security, monitoring, logging, or fraud-prevention mechanisms;
5. introduce malware, ransomware, spyware, viruses, worms, logic bombs, malicious code, destructive instructions, or harmful payloads;
6. conduct or facilitate denial-of-service, distributed denial-of-service, resource-exhaustion, amplification, flooding, or similar attacks;
7. interfere with, overload, degrade, impair, or disrupt the Services or another user's access;
8. access data or resources outside your authorized scope;
9. intercept, modify, replay, forge, or improperly redirect communications, API requests, webhook events, tokens, signatures, or responses;
10. conceal or falsify the origin of requests;
11. tamper with logs, usage records, provenance data, metering events, audit records, or security evidence;
12. attempt to defeat malware scanning, file validation, content controls, or abuse-detection systems;
13. use compromised systems, botnets, anonymization infrastructure, rotating addresses, or distributed accounts to conceal abuse or avoid enforcement; or
14. knowingly maintain an integration or deployment that creates a material security risk to the Services or another person.

You must promptly remediate security risks identified by MedQuiry as a condition of continued access.

13. AUTOMATED ACCESS, SCRAPING, AND AGENTS

Unless expressly authorized through an officially supported API or a written agreement, you must not access, query, collect from, or interact with the Services using automated means, including:

• bots;
• crawlers;
• spiders;
• browser automation;
• robotic process automation;
• automated scripts;
• bulk-extraction tools;
• data-mining or harvesting tools;
• API emulation;
• autonomous software;
• artificial intelligence agents; or
• similar technologies.

Authorized automated access must remain within the scopes, endpoints, environments, rate limits, quotas, permissions, and purposes approved by MedQuiry.

You must not use automated means to:

1. scrape or systematically extract platform content;
2. create or maintain an unauthorized repository of Results or API Outputs;
3. collect information concerning other customers or users;
4. evade user-interface, subscription, token, entitlement, or API restrictions;
5. create synthetic or duplicate accounts;
6. generate excessive, abusive, duplicative, or commercially unreasonable request volumes;
7. repeatedly submit variations designed to infer proprietary methods;
8. interfere with service availability or increase infrastructure costs unreasonably;
9. conceal the identity, origin, purpose, or beneficiary of automated activity; or
10. perform actions that a human user would not be authorized to perform.

14. API-SPECIFIC RESTRICTIONS

Authorized API users remain subject to the API Terms of Use and applicable Documentation.

You must not:

1. access an API without MedQuiry's approval;
2. use an API outside the approved business purpose;
3. use credentials issued to another customer, project, application, or environment;
4. transfer, sell, sublicense, distribute, lease, timeshare, or disclose API access or credentials to an unauthorized third party;
5. use one customer account or credential to provide access for an unrelated organization;
6. rotate credentials, projects, accounts, environments, network addresses, or integrations to evade a rate limit, quota, entitlement, billing control, restriction, or enforcement action;
7. improperly repeat, suppress, duplicate, cancel, manipulate, or misclassify requests to avoid fees;
8. interfere with usage metering, Billable Events, Usage Events, or billing records;
9. use unauthorized endpoints, parameters, schemas, authentication methods, or undocumented functionality;
10. use testing credentials or sandbox environments for unauthorized production activity;
11. intentionally generate invalid, malicious, excessive, or wasteful traffic;
12. ignore required retry logic, backoff requirements, timeout handling, idempotency controls, error handling, or request pacing;
13. forge, replay, suppress, or improperly manipulate webhooks;
14. fail to validate webhook signatures or protect signing secrets;
15. expose API Outputs, credentials, or confidential information through insecure endpoints;
16. use API Outputs outside the purposes authorized by the Agreement; or
17. permit another person to engage in prohibited API conduct.

MedQuiry may reject, throttle, delay, queue, restrict, or suspend API requests that exceed limits or threaten the security, reliability, integrity, availability, performance, or cost structure of the Services.

15. PROTECTION OF MEDQUIRY TECHNOLOGY

"MedQuiry Technology" includes the Services and their underlying software, source code, object code, models, workflows, prompts, rubrics, weights, journal-scoring logic, orchestration, validation rules, methods, interfaces, designs, Documentation, taxonomies, algorithms, databases, report formats, and related improvements.

You must not:

1. reverse engineer, decompile, disassemble, decode, translate, or attempt to derive source code;
2. discover, extract, reproduce, or infer system prompts, hidden instructions, rubrics, weights, scoring logic, validation rules, taxonomies, model configurations, or nonpublic methods;
3. use repeated querying, synthetic inputs, adversarial inputs, controlled variations, benchmarking, statistical analysis, or other techniques to reconstruct system behavior;
4. create datasets intended to replicate, approximate, or substitute for MedQuiry's scoring methodology;
5. copy, reproduce, modify, or create derivative versions of MedQuiry's analytical framework;
6. remove, obscure, modify, or falsify copyright notices, trademarks, attributions, identifiers, disclaimers, provenance information, or version information;
7. use the Services or Results to develop, train, fine-tune, validate, benchmark, or improve a competing product, scoring system, model, dataset, or service without MedQuiry's prior written consent;
8. publish benchmarks designed to disclose or infer confidential or proprietary system behavior without authorization;
9. use the Services to create a product or service that substantially replicates, substitutes for, or competes with MedQuiry, except as expressly authorized;
10. obtain or attempt to obtain nonpublic Documentation, architecture information, security materials, pricing, usage limits, or confidential technical information without authorization; or
11. assist another person in engaging in any of the foregoing.

Nothing in this Section limits rights that cannot lawfully be restricted.

16. RESULTS, API OUTPUTS, AND REDISTRIBUTION

Results and API Outputs may include scores, classifications, reports, evidence summaries, explanations, metadata, provenance information, status information, and other responses generated through the Services.

Unless expressly authorized by the Agreement, you must not:

1. sell, license, sublicense, redistribute, syndicate, monetize, or commercially exploit Results or API Outputs;
2. make Results or API Outputs available to third parties as a standalone product or service;
3. create, maintain, publish, or contribute Results or API Outputs to a repository, archive, index, benchmark collection, database, or similar resource that competes with, substitutes for, or replicates a material feature of the Services;
4. use Results or API Outputs to train or improve another artificial intelligence system or scoring product;
5. falsely attribute modified or independently created content to MedQuiry;
6. alter or remove applicable version, provenance, attribution, identifier, source, date, or disclaimer information;
7. imply that MedQuiry endorses you, your organization, your product, your publication, your research, or your conclusions;
8. use MedQuiry trademarks, names, logos, or branding without authorization;
9. present a Result outside its applicable context in a manner that is materially misleading; or
10. use Results or API Outputs beyond the scope authorized by the applicable subscription, Order Form, or other agreement.

Nothing in this Section prohibits accurate academic citation or legitimate scholarly discussion that complies with the Agreement.

17. BILLING, ENTITLEMENTS, AND RESOURCE ABUSE

You must not:

1. circumvent token requirements, subscription restrictions, usage limits, rate limits, quotas, entitlements, concurrency restrictions, environment limitations, or purchased capacity;
2. manipulate metering events, billing records, request states, completion states, retries, rescoring events, credits, reversals, or other usage records;
3. intentionally structure requests to avoid payment;
4. create duplicate accounts, projects, credentials, or organizations to obtain unauthorized trial, promotional, included, or discounted usage;
5. conceal the actual user, customer, project, application, or beneficiary of usage;
6. resell or share purchased access unless expressly authorized;
7. use excessive resources in a manner inconsistent with ordinary, documented, or approved use;
8. continue activity after being directed to reduce usage or modify an integration; or
9. use the Services in a manner that imposes unreasonable technical, operational, security, or financial burdens on MedQuiry.

18. SANDBOX, BETA, PREVIEW, AND EVALUATION SERVICES

Sandbox, testing, beta, preview, trial, early-access, and evaluation Services may be used only for their designated purposes.

You must not:

1. rely on a nonproduction environment for production, clinical, regulatory, publication, or other material activity unless expressly authorized;
2. submit prohibited production data, personal information, PHI, or confidential third-party information;
3. represent that nonproduction outputs are production-validated or generally available;
4. circumvent lower quotas, restricted features, retention limitations, or other testing controls;
5. use a testing environment to avoid fees for production use;
6. test vulnerabilities or conduct adversarial activity without authorization; or
7. make public claims regarding confidential or nonpublic beta functionality without permission.

19. THIRD-PARTY SERVICES AND CONTENT

Your use of third-party websites, databases, publishers, journals, registries, payment services, infrastructure, models, or other services remains subject to the applicable third party's terms.

You must not use MedQuiry to:

1. obtain or process third-party content in violation of access terms, copyright restrictions, license conditions, technical controls, or contractual obligations;
2. conceal unauthorized access to a third-party source;
3. bypass publisher, database, journal, institutional, authentication, or paywall controls;
4. submit content retrieved through stolen, shared, or unauthorized credentials;
5. cause MedQuiry to violate a third party's rights or applicable agreement; or
6. falsely imply that MedQuiry controls, endorses, or is responsible for a third-party source.

20. INVESTIGATIONS AND COOPERATION

MedQuiry may investigate suspected violations of this Policy or the Agreement.

To the extent permitted by law and the applicable Agreement, MedQuiry may:

1. review relevant account, access, request, security, billing, usage, and audit information;
2. require information concerning your use case, integration, architecture, data flows, users, credentials, safeguards, retention practices, or presentation of Results;
3. require you to preserve relevant records;
4. request reasonable cooperation in an investigation;
5. require credential rotation, integration changes, risk mitigation, or remediation;
6. limit or disable affected features, environments, projects, credentials, accounts, or integrations;
7. remove or restrict access to prohibited content;
8. preserve evidence;
9. notify an enterprise administrator or contracting customer;
10. cooperate with lawful governmental, judicial, regulatory, or law-enforcement requests; and
11. exercise other rights available under the Agreement or applicable law.

You must provide accurate information and must not obstruct, conceal, falsify, destroy, or manipulate information relevant to an investigation.

MedQuiry's review or investigation does not create a duty to monitor all activity or prevent every violation.

21. ENFORCEMENT

MedQuiry may restrict, throttle, suspend, or terminate access when MedQuiry reasonably determines that action is necessary to:

1. protect the security, stability, integrity, availability, or performance of the Services;
2. prevent unauthorized access, fraud, misuse, or abuse;
3. address a credential compromise or security incident;
4. enforce usage limits, quotas, entitlements, billing controls, or technical requirements;
5. investigate a suspected violation;
6. prevent excessive resource consumption;
7. address unlawful or prohibited activity;
8. respond to a legal, regulatory, judicial, or governmental request;
9. address nonpayment;
10. prevent harm to MedQuiry, a customer, a user, or a third party;
11. protect MedQuiry Technology, confidential information, or intellectual property; or
12. enforce the Agreement.

Depending on the nature, seriousness, duration, and recurrence of the conduct, MedQuiry may:

• issue a warning;
• request corrective action;
• require deletion or removal of prohibited materials;
• impose additional limits or safeguards;
• revoke credentials;
• restrict features, projects, environments, or integrations;
• temporarily suspend access;
• permanently terminate access;
• terminate the applicable agreement as permitted by its terms;
• decline future service;
• preserve and disclose information where legally permitted or required; or
• pursue legal or equitable remedies.

Where reasonably practicable, MedQuiry may provide notice and information concerning steps required for restoration. MedQuiry may act immediately where delay could increase security, legal, financial, operational, or third-party risk.

Suspension or termination does not relieve you of payment obligations or liabilities accrued under the Agreement.

22. REPORTING VIOLATIONS

You should promptly report suspected misuse, security incidents, credential compromise, prohibited content, or violations of this Policy.

Reports should include, where available:

• the affected account, project, organization, or integration;
• a description of the suspected conduct;
• relevant dates and times;
• supporting screenshots, logs, request identifiers, URLs, or records;
• the identity of the reporting organization or individual; and
• contact information for follow-up.

Reports may be submitted to:

Security matters: security@medquiry.com

Legal or policy matters: legal@medquiry.com

Privacy matters: privacy@medquiry.com

Do not include passwords, private keys, complete payment information, PHI, or other unnecessary sensitive information in a report.

23. NO WAIVER

MedQuiry's failure to enforce any provision of this Policy does not waive its right to enforce that provision or another provision later.

A waiver is effective only if made in writing by an authorized representative of MedQuiry.

24. SEVERABILITY

If any provision of this Policy is determined to be unlawful, invalid, or unenforceable, that provision will be enforced to the maximum extent permitted, and the remaining provisions will remain in effect.

25. CHANGES TO THIS POLICY

MedQuiry may update this Policy from time to time to reflect:

• changes to the Services;
• new features, APIs, integrations, or environments;
• evolving security threats or abuse patterns;
• operational requirements;
• changes in law or regulation;
• changes in professional, scientific, or industry standards; or
• other legitimate business needs.

When this Policy is updated, MedQuiry will revise the Effective Date or "Last Updated" date.

If a change is material, MedQuiry may provide notice through the Services, by email, through an account notification, in the Documentation, or by another reasonable method.

Changes may take effect immediately where reasonably necessary to address security, legal compliance, fraud, abuse, third-party rights, or service-integrity risks.

Your continued use of the Services after the effective date of an updated Policy constitutes acceptance of the updated Policy, except where applicable law or an executed agreement requires another form of notice or acceptance.

26. CONTACT INFORMATION

Questions regarding this Acceptable Use Policy may be directed to:

The Senior Wellness Company

d/b/a MedQuiry

P.O. Box 24

Califon, New Jersey 07830

Email: legal@medquiry.com

Privacy: privacy@medquiry.com