Terms of Service

1. Definitions

"AnyCura" or "Company" means the operator of the Service.

"Service" means the AnyCura cloud-based healthcare management software-as-a-service platform and related services.

"Personal Account Holder" means an individual who creates or uses a personal AnyCura Partners account, whether or not the individual has joined a business workspace.

"User" means a hospital, clinic, medical facility, healthcare organization, or other business or organization, operated by an individual or a legal entity, that registers for or uses the Service.

"Partner" means a User that offers, books, manages, or provides healthcare, wellness, beauty, clinic, consultation, examination, diagnosis, treatment, procedure, prescription, recommendation, or other services through or in connection with the Service.

"System User" means any individual authorized by a User to access the Service, including doctors, nurses, administrative staff, managers, contractors, or other personnel.

"Patient Data" means any personal data, health data, medical records, appointment data, billing data, insurance-related data, and related information submitted to, stored in, or processed through the Service by or on behalf of the User.

"Data Controller" and "Data Processor" have the meanings given under applicable data protection law.

"Subscription" means the service plan selected by the User for access to and use of the Service.

"Content" means all text, data, information, software, graphics, and materials uploaded to, stored in, or generated through the Service.

"Subprocessor" means any third party engaged by AnyCura to process personal data in connection with the provision of the Service.

2. Eligibility and Registration

You must be at least 18 years of age to register a personal account. Personal registration does not require you to act on behalf of a business or organization.

If you create or manage a workspace on behalf of a User, you must be legally authorized to act for that User. Joining an existing workspace requires authorization from that User and remains subject to the applicable membership, role, and branch permissions.

A personal account alone does not grant access to a business workspace, Patient Data, or clinical tools. Account or workspace creation does not replace any required business, medical, service, or public-listing approval.

You agree to provide accurate, complete, and current information during registration and while using the Service.

You are responsible for maintaining the confidentiality of your account credentials and for activities occurring under your account. If you administer a User's workspace, you are also responsible for the accounts of System Users you authorize within that workspace.

You must not:

• share credentials with unauthorized persons
• attempt to gain unauthorized access to the Service or other users' accounts
• use the Service in a misleading, fraudulent, or unlawful manner
• create multiple accounts for the same User in violation of AnyCura's policies

AnyCura may suspend or terminate accounts that violate these Terms or present a security, fraud, or compliance risk.

3. Nature of the Service and Medical Disclaimer

The Service is a software platform that provides healthcare management and administrative tools.

AnyCura does not provide medical advice, diagnosis, treatment, or healthcare services.

All medical decisions, diagnoses, prescriptions, treatments, and patient care are solely the responsibility of licensed healthcare professionals employed by, engaged by, or otherwise associated with the User.

The Service is intended to support healthcare facilities in managing workflows and records and does not replace the professional judgment of qualified medical practitioners.

AnyCura does not verify the clinical accuracy, completeness, or appropriateness of medical or Patient Data entered into the Service by Users or System Users.

AnyCura provides a technology platform, booking tools, clinic management tools, communication tools, record-management tools, billing support, Thai ID registration support, and related software features only. AnyCura does not provide medical services, medical advice, diagnosis, treatment, prescription, clinical judgment, emergency care, or professional healthcare services, and does not supervise, control, or assume responsibility for the professional acts or omissions of any Partner or healthcare professional.

4. Data Protection Roles and Responsibility

The User determines the purposes and means of processing Patient Data entered into the Service and generally acts as the Data Controller for such Patient Data, unless otherwise expressly agreed in writing.

AnyCura generally acts as the Data Processor for Patient Data and processes such Patient Data only on the User's documented instructions, except where otherwise required by applicable law.

The User is responsible for ensuring that Patient Data is collected, used, disclosed, and otherwise processed lawfully, including:

• providing any required privacy notices
• obtaining any required consents or other lawful bases
• complying with applicable healthcare, privacy, and data protection laws

AnyCura does not independently verify the accuracy, completeness, or legal sufficiency of Patient Data submitted by the User or System Users. AnyCura will implement appropriate technical and organizational measures and provide reasonable assistance to the User in relation to applicable data protection obligations, to the extent required by law and the nature of the Service.

5. Use of the Service

The Service may include role-based access controls, audit logging, permissions management, and workflow tools.

Patient clinical-history access through Clinic OS is available only to verified medical facilities that have purchased the Clinic OS add-on and have active access, and to users with the required organization, branch, role, and clinical permissions. Facility verification, add-on access, platform listing review, and government approval of an individual medical advertisement are separate requirements. AnyCura's review or publication does not by itself establish the authenticity of an advertising approval number or guarantee treatment results.

Where Thai law requires prior approval of a medical advertisement, the Partner must obtain and maintain that approval before publication and display the required advertising approval number. The actual text, claims, images, audio, prices, promotion conditions, media, and language versions must comply with the approval's scope, conditions, and validity period. Changes outside that scope require the applicable government approval and a new platform review before publication. Statutory exceptions, such as the permitted display of a facility's licensed name and address, remain subject to their legal limits.

Do not submit false or exaggerated medical claims, guaranteed or 100% treatment results, unsupported superiority claims, or misleading statements about practitioners, available services, medicines, or equipment. Patient images, before-and-after material, and testimonials must not be altered or presented in a way that misleads customers about expected results and must meet applicable advertising requirements.

Before publishing identifiable patient images, testimonials, or health information for advertising, obtain the required specific permission and lawful basis for that publication separately from booking or treatment consent. Access to clinical records does not authorize their use in public advertising.

Medical promotions must clearly state the included services, payable price, additional or excluded charges, eligibility, and applicable period or other material conditions, within the approved advertising scope. Catalogue or advertisement changes do not by themselves change the services or prices already agreed in a confirmed booking. A proposed price increase or change to medical services applies only after the required customer acceptance through the applicable booking workflow.

Withdrawal, expiry, or removal of an advertisement does not by itself cancel existing bookings, rewrite agreed prices, or authorize deletion of clinical records. Existing bookings remain subject to applicable law, clinical safety, and agreed cancellation terms; records remain subject to lawful retention and access requirements.

Each Partner is solely responsible for the operation of its business and for ensuring that all services offered, booked, managed, or provided through or in connection with the Service are lawful, appropriate, and performed by duly licensed, qualified, and authorized personnel. Without limitation, each Partner is solely responsible for verifying each Customer's or patient's identity, age, legal capacity, and, where applicable, parental or legal guardian authority; explaining the nature, risks, benefits, alternatives, and consequences of the relevant services; obtaining and retaining legally valid informed consent and all other required consents; maintaining proper records; protecting personal information; and handling all complaints, complications, adverse events, claims, and disputes arising from the services.

A Partner must not list, advertise, offer, book, manage, or provide any regulated medical, healthcare, dental, therapeutic, diagnostic, prescription, injection, laser, surgical, or other regulated service through or in connection with the Service unless AnyCura has given prior written approval for that Partner, branch, practitioner, service, and listing content.

Each Partner represents and warrants that it holds and will maintain all licences, permits, registrations, approvals, professional qualifications, authorisations, consents, and insurance required to provide its listed services, and that all profile content, service descriptions, prices, promotions, claims, images, and booking information are accurate, not misleading, and compliant with applicable law.

AnyCura may require a Partner to provide supporting documents, licence numbers, registry references, permits, registrations, practitioner credentials, affiliation confirmations, advertising approvals, or other evidence within the timeframe specified by AnyCura.

AnyCura may reject, hide, suspend, remove, unpublish, restrict, or require changes to any Partner, branch, practitioner, service, promotion, profile, public offering, or listing if AnyCura believes it may be unlawful, misleading, unsafe, regulated, unsupported, unverifiable, expired, or unsuitable for the Service.

A Partner must immediately notify AnyCura of any expiry, suspension, revocation, limitation, material change, or investigation affecting any licence, permit, registration, professional qualification, authorisation, approval, insurance, practitioner affiliation, or service scope relevant to the Service.

The User is responsible for:

• properly configuring roles and permissions
• ensuring that System Users have appropriate access for their duties
• maintaining internal operational and security controls
• ensuring that use of the Service complies with applicable law

You must not:

• use the Service for unlawful purposes
• store or transmit malicious code
• interfere with the integrity, availability, or performance of the Service
• reproduce, copy, sell, resell, reverse engineer, decompile, or exploit the Service except as expressly permitted by law or by written agreement

Where the Service supports access to Patient Data across branches, such access is intended only for authorized personnel within the same healthcare organization or clinic group, subject to role-based access controls, audit logging, and the User's compliance with applicable notice requirements, lawful bases, consent requirements where applicable, and other legal obligations.

6. Subscription, Fees, and Payment

The Service may be offered through different subscription plans, each with different features, usage limits, and pricing.

Paid subscriptions require payment in advance unless otherwise agreed in writing.

Subscription fees are exclusive of applicable taxes unless expressly stated otherwise.

If payment is overdue, AnyCura may suspend, restrict, downgrade, or terminate access to paid features after providing notice where appropriate.

AnyCura may change subscription pricing upon prior notice. Unless otherwise stated, pricing changes will take effect at the next renewal period.

7. Renewal and Cancellation

Paid subscriptions may renew automatically unless cancelled before the applicable renewal date.

You may cancel your subscription in accordance with the cancellation functionality made available in the Service or by contacting AnyCura, subject to any agreed notice period.

Unless otherwise required by law or expressly agreed, fees already paid are non-refundable and no prorated refunds will be provided for partial billing periods.

Cancellation of a paid subscription may result in downgrade to a lower-tier plan or termination of access to certain features.

8. Suspension and Termination

AnyCura may suspend or terminate the Service or a User's access to the Service if:

• the User materially breaches these Terms and fails to cure the breach within a reasonable period after notice
• the User uses the Service in a fraudulent, unlawful, or abusive manner
• the User's use of the Service creates a material security, legal, or operational risk
• the User fails to pay applicable fees
• AnyCura is required to do so by law, regulation, or competent authority

Either party may terminate the agreement for material breach if the breach is not cured within a reasonable period following written notice. Upon termination, the User's right to access and use the Service will cease, subject to any limited post-termination access or export rights expressly stated in the Service or agreed in writing.

9. Post-Termination Data Handling

Upon termination or cancellation, AnyCura will handle Patient Data in accordance with:

• the User's documented instructions
• applicable law
• AnyCura's retention, backup, and deletion procedures
• any legally required minimum retention periods

The User may request export of its data within the period specified in the Service or otherwise communicated by AnyCura. Where continued retention is required by law, security necessity, backup integrity, or dispute resolution requirements, AnyCura may retain relevant data for the period reasonably necessary for those purposes. After the applicable retention period expires, AnyCura will delete or irreversibly anonymize the relevant data in accordance with its deletion procedures.

10. Data Subject Requests

If AnyCura receives a request from a patient or other data subject relating to Patient Data, AnyCura may refer the request to the relevant User as Data Controller.

AnyCura will provide reasonable cooperation to assist the User in responding to such requests to the extent required by applicable law and the nature of the Service.

11. Security Incident Cooperation

AnyCura will notify the User without undue delay after becoming aware of a personal data breach affecting Patient Data and will provide reasonable cooperation in investigation, containment, remediation, and legally required notifications, to the extent relevant to the Service and AnyCura's role as Data Processor.

12. Subprocessors and Third-Party Services

The User authorizes AnyCura to engage subprocessors and third-party service providers in connection with the provision of the Service, including for hosting, storage, authentication, communications, analytics, monitoring, support, and payment processing.

AnyCura will remain responsible for ensuring appropriate contractual and security safeguards in relation to subprocessors as required by applicable law.

13. Privacy and Data Protection

Use of the Service is subject to the AnyCura Privacy Notice and any applicable Data Processing Terms made available by AnyCura.

For Patient Data processed through the Service, the User is generally the Data Controller and AnyCura is generally the Data Processor.

The User acknowledges and agrees that it is responsible for providing all necessary patient-facing privacy notices and obtaining all necessary consents or other lawful bases required under applicable law.

14. Intellectual Property

AnyCura and its licensors retain all rights, title, and interest in and to the Service, including all related software, technology, documentation, designs, trademarks, and intellectual property rights.

The User retains all rights, title, and interest in and to the User's data and Content.

The User grants AnyCura a limited, non-exclusive right to host, process, transmit, store, back up, and otherwise use the User's data solely as necessary to provide, maintain, secure, support, and improve the Service in accordance with these Terms and applicable law.

AnyCura may use aggregated and anonymized data that does not identify any individual for analytics, service improvement, research, and benchmarking purposes.

15. Confidentiality

Each party agrees to protect the other party's confidential information using reasonable safeguards and not to use or disclose such information except as necessary to perform under these Terms or as required by law.

Confidential information does not include information that:

• is or becomes public through no fault of the receiving party
• was lawfully known to the receiving party before disclosure
• is independently developed without use of the disclosing party's confidential information
• is lawfully obtained from a third party without confidentiality restriction

16. Warranties and Disclaimer

AnyCura warrants that it will provide the Service in a professional and commercially reasonable manner.

Except as expressly stated in these Terms, the Service is provided on an "as is" and "as available" basis.

To the maximum extent permitted by law, AnyCura disclaims all implied warranties, including warranties of merchantability, fitness for a particular purpose, and non-infringement.

AnyCura does not warrant that the Service will be uninterrupted, error-free, or completely secure.

17. Limitation of Liability; Partner Responsibility for Services and Consent

To the maximum extent permitted by applicable law, AnyCura and its directors, officers, managers, shareholders, employees, contractors, agents, representatives, licensors, service providers, and affiliates shall not be liable to any Partner, Customer, patient, user, or third party for any loss, claim, liability, damage, cost, or expense arising out of or in connection with: (a) any healthcare, wellness, beauty, clinic, consultation, examination, diagnosis, treatment, procedure, prescription, recommendation, or other service provided, offered, arranged, delayed, cancelled, refused, or performed by a Partner or its personnel; (b) any interaction, communication, appointment, booking, payment, refund, cancellation, dispute, act, omission, negligence, misconduct, breach of law, or breach of professional duty by any Partner, Customer, patient, user, healthcare professional, employee, contractor, agent, or representative; (c) any Partner's failure to verify a Customer's or patient's identity, age, legal capacity, guardianship status, or authority to consent; (d) any Partner's failure to obtain, document, retain, renew, or verify valid informed consent, parental or guardian consent, medical consent, authorization, approval, prescription, licence, permit, or medical record required under applicable law, regulation, professional rule, ethical standard, or clinic policy; or (e) any misuse, unauthorized use, incomplete use, incorrect input, inaccurate information, or improper reliance on the AnyCura platform or system.

In no event shall AnyCura be liable for any indirect, incidental, special, exemplary, punitive, or consequential damages, including loss of profits, loss of revenue, loss of business, loss of goodwill, loss of data, business interruption, loss of opportunity, or cost of substitute services, whether based on contract, tort, negligence, strict liability, statutory duty, or otherwise, even if AnyCura has been advised of the possibility of such damages.

Subject to the foregoing, and to the maximum extent permitted by applicable law, AnyCura's total aggregate liability arising out of or in connection with the platform, the services, or these Terms shall not exceed the fees actually paid by the Partner to AnyCura during the three months immediately preceding the event giving rise to the claim.

Nothing in these Terms shall exclude or limit any liability that cannot legally be excluded or limited under applicable law, including liability arising from AnyCura's own fraud, wilful misconduct, or gross negligence to the extent such exclusion or limitation is prohibited by law.

18. Indemnification

19. Force Majeure

Neither party shall be liable for any delay or failure to perform due to causes beyond its reasonable control, including natural disasters, epidemics, war, civil unrest, government action, telecommunications failures, infrastructure outages, cyberattacks, or failures of third-party providers.

The affected party shall use reasonable efforts to mitigate the impact of the event.

If the force majeure event continues for an extended period and materially prevents performance, either party may terminate the affected services on written notice.

20. Assignment

Neither party may assign these Terms without the other party's prior written consent, except that AnyCura may assign these Terms in connection with a merger, acquisition, corporate reorganization, or sale of substantially all of its assets, provided the assignee agrees to be bound by these Terms.

21. Governing Law and Dispute Resolution

These Terms are governed by the laws of the Kingdom of Thailand.

Any dispute arising out of or in connection with these Terms or the Service shall be subject to the jurisdiction of the courts of Thailand, unless otherwise agreed in writing.

Before initiating formal legal proceedings, the parties will attempt in good faith to resolve the dispute through discussions for a reasonable period.

22. Changes to These Terms

AnyCura may update these Terms from time to time.

Where appropriate, AnyCura will provide notice of material changes through the Service, by email, or by other reasonable means. Continued use of the Service after the effective date of the updated Terms constitutes acceptance of the updated Terms.

23. Contact Information

If you have questions about these Terms, please contact: