Terms of Service

These Terms of Service (“Terms”) govern your access to and use of the websites, applications, APIs, and related services operated by Hebrah, Inc. (“Hebrah,” “we,” “us,” or “our”), including:

• the public marketing website at hebrah.com (the “Site”);
• the operator dashboard and integrator documentation (the “Dashboard”);
• the Hebrah control plane API and hosted MCP endpoint (together with the Dashboard, the “Platform”); and
• any other products or services we make available that reference these Terms.

By accessing or using the Site or Platform, or by creating an account, you agree to these Terms. If you use the Platform on behalf of an organization, you represent that you have authority to bind that organization, and “you” refers to that organization.

If you do not agree, do not use our services.

1. Eligibility and accounts

You must be at least 18 years old and able to form a binding contract. You are responsible for:

• maintaining the confidentiality of your login credentials and API keys;
• all activity under your account and organization; and
• ensuring team members and agents you authorize comply with these Terms.

API keys and personal access tokens are issued for your use only. You must not share them publicly or embed them in client-side code. Plaintext keys are shown once at creation; you are responsible for storing them securely.

We may suspend or terminate accounts that violate these Terms or pose a security risk.

2. The Site vs the Platform

Site. The Site provides general product information, developer resources, demo request forms, and contact forms. Information on the Site is for informational purposes and may change without notice.

Platform. The Platform provides healthcare integration tooling, including synthetic sandbox environments, webhook delivery, configuration versioning, and (where available) governed promotion to Live environments. Access to Platform features requires account registration and, for paid plans, a valid payment method.

Product features, pricing, and availability may vary by plan and are described on our pricing page and in your order or subscription.

3. Sandbox and Live environments

Sandbox environments use synthetic, generated healthcare data. Sandbox is intended for development, testing, and configuration. You must not submit real protected health information (“PHI”) to Sandbox unless we explicitly authorize it in writing.

Live environments, where available, may process PHI subject to a separate Business Associate Agreement (“BAA”) and additional compliance requirements. Live access may be disabled until required compliance steps are completed, including BAA execution and verification.

You are solely responsible for ensuring your use of Live environments complies with HIPAA and other applicable laws.

4. Acceptable use

You agree not to:

• use the Site or Platform for any unlawful purpose or in violation of applicable healthcare, privacy, or security laws;
• submit real PHI to Sandbox environments;
• probe, scan, or test the vulnerability of our systems without written permission;
• interfere with or disrupt the Site or Platform, including via denial-of-service, excessive automated requests, or circumvention of rate limits;
• scrape or harvest data from the Site without permission;
• reverse engineer, decompile, or attempt to extract source code except where prohibited by law;
• misrepresent your identity or affiliation;
• use the Platform to build a competing product using unauthorized access to our proprietary systems; or
• submit false, abusive, or misleading content through our forms or support channels.

We may investigate violations and cooperate with law enforcement where appropriate.

5. API, webhooks, and third-party systems

You are responsible for:

• how you integrate with the Platform, including your applications, agents, and MCP clients;
• verifying webhook signatures and securing your webhook endpoints;
• compliance with third-party EHR, payer, and vendor terms when connecting Live environments; and
• the accuracy and legality of data you send to or receive from the Platform in Live environments.

The Platform may impose rate limits, connection limits, and usage metering. Current limits and pricing are described on our pricing page.

6. Fees and payment

Paid Platform access requires a valid payment method. Unless otherwise stated:

• a monthly platform subscription fee applies per organization;
• compute, storage, and egress are metered for running sandbox VMs and related infrastructure;
• there is no free trial unless we explicitly offer one in writing; and
• fees are billed in advance or arrears as described at checkout or in your subscription.

You authorize us and our payment processor (e.g., Stripe) to charge applicable fees. Fees are non-refundable except where required by law or expressly stated in a separate agreement.

We may change pricing with reasonable notice. Continued use after a price change constitutes acceptance of the new pricing.

7. Intellectual property

The Site and Platform, including software, documentation, branding, design, and content (excluding your data), are owned by Hebrah or its licensors and protected by intellectual property laws.

We grant you a limited, non-exclusive, non-transferable license to access and use the Platform during your subscription, solely for your internal business purposes and in accordance with these Terms and our documentation.

You retain ownership of data you submit to the Platform. You grant Hebrah a license to host, process, and transmit your data as necessary to provide and improve the services, subject to our Privacy Policy and any applicable BAA.

Feedback you provide may be used by Hebrah without restriction or compensation.

8. Confidentiality

Non-public information about the Platform, pricing not publicly published, and security or roadmap details we share with you are our confidential information. You agree not to disclose such information except as required by law or with our consent.

9. Privacy

Our collection and use of personal information is described in our Privacy Policy. By using the Site or Platform, you acknowledge that policy.

10. Disclaimers

THE SITE AND PLATFORM ARE PROVIDED “AS IS” AND “AS AVAILABLE.” TO THE FULLEST EXTENT PERMITTED BY LAW, HEBRAH DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.

HEBRAH DOES NOT PROVIDE MEDICAL ADVICE. SYNTHETIC SANDBOX DATA IS FOR TESTING ONLY AND MUST NOT BE USED FOR CLINICAL DECISIONS.

WE DO NOT WARRANT THAT THE PLATFORM WILL BE UNINTERRUPTED, ERROR-FREE, OR SECURE, OR THAT INTEGRATIONS WITH THIRD-PARTY SYSTEMS WILL MEET YOUR REQUIREMENTS.

11. Limitation of liability

TO THE FULLEST EXTENT PERMITTED BY LAW, HEBRAH WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS, DATA, GOODWILL, OR BUSINESS OPPORTUNITY, ARISING FROM YOUR USE OF THE SITE OR PLATFORM.

OUR TOTAL LIABILITY FOR ANY CLAIM ARISING OUT OF THESE TERMS OR THE SERVICES WILL NOT EXCEED THE GREATER OF (A) THE AMOUNTS YOU PAID TO HEBRAH IN THE TWELVE (12) MONTHS BEFORE THE CLAIM OR (B) ONE HUNDRED U.S. DOLLARS ($100).

Some jurisdictions do not allow certain limitations; in those cases, our liability is limited to the maximum extent permitted by law.

12. Indemnification

You will defend, indemnify, and hold harmless Hebrah and its officers, directors, employees, and agents from claims, damages, and expenses (including reasonable attorneys’ fees) arising from:

• your use of the Platform or Site;
• your data or integrations, including PHI handled in Live environments;
• your violation of these Terms or applicable law; or
• your violation of third-party rights.

13. Suspension and termination

You may stop using the Platform at any time. We may suspend or terminate access immediately if you breach these Terms, fail to pay fees, pose a security risk, or if required by law.

Upon termination, your right to use the Platform ends. Provisions that by their nature should survive (including IP, disclaimers, limitation of liability, indemnification, and governing law) will survive.

14. Links

The Site may link to third-party sites (such as LinkedIn, documentation hosts, or partner pages). We are not responsible for their content or practices.

15. Changes

We may update these Terms from time to time. We will post the updated Terms on the Site and update the “Last updated” date. Material changes may also be communicated via email or in-product notice. Continued use after changes become effective constitutes acceptance.

16. Governing law and disputes

These Terms are governed by the laws of the State of Delaware, USA, without regard to conflict-of-law principles. Exclusive jurisdiction for disputes arising from these Terms lies in the state or federal courts located in Delaware, unless applicable law requires otherwise.

17. General

These Terms, together with the Privacy Policy and any order form, BAA, or data processing addendum you execute with us, constitute the entire agreement regarding the Site and Platform. If any provision is unenforceable, the remainder remains in effect. Our failure to enforce a provision is not a waiver.

You may not assign these Terms without our consent. We may assign them in connection with a merger, acquisition, or sale of assets.

18. Contact

Questions about these Terms: use the contact form on our About page.