A calmer way to run and grow your private practice

1. Scope and Privacy Roles

This Privacy Policy explains how Clara collects, uses, discloses, retains, and protects Personal Information through Clara's websites, applications, software, support, and related services. It applies to Clara's Services in Canada and the United States.

Clara provides practice-management software to practices and providers. For Client records entered by a practice, the practice is generally the organization responsible for the record. Depending on the jurisdiction, the practice may be the health information custodian, trustee, controller, covered entity, business associate, or similar regulated organization. Clara generally acts as a service provider, processor, agent, or HIPAA business associate when a valid agreement is in place.

Clients, patients, family members, and guardians should direct requests about their client record, treatment file, billing file, consent, correction, or access rights to the practice or provider that provides care. Clara does not respond on a practice's behalf unless a signed agreement or mandatory law requires Clara to perform a specific task.

This Policy does not replace a practice's own privacy notice, informed consent, telehealth consent, messaging consent, AI notice, fee policy, emergency instructions, or professional disclosures. Practices are responsible for providing those notices where required.

2. Information Clara Collects

Clara may collect the following categories of information, depending on how the Services are used:

• Account information, such as name, email address, phone number, role, practice affiliation, login credentials, preferences, and authentication information.
• Practice and provider information, such as practice name, address, professional details, licensing information, specialties, services, availability, booking settings, profile content, public booking content, and staff permissions.
• Client and care-administration information submitted by practices, such as contact details, sessions, intake forms, consents, charting or session notes, diagnoses or care details where entered, billing details, payments, communications, documents, and related health information.
• Public and promotional content submitted through the Services, such as public profiles, booking-page content, credentials, biographies, images, service descriptions, pricing, testimonials, reviews, links, and other information intended for publication.
• Billing and transaction information, such as subscription plan, invoices, payment status, taxes, usage, add-ons, and limited payment metadata from payment processors. Clara should not receive full card numbers through ordinary use.
• Communications and support information, such as messages sent to Clara, support requests, call or meeting details, feedback, and troubleshooting context. Users should not send PHI to Clara support except through approved secure support channels.
• Usage, device, and log information, such as IP address, device identifiers, browser, operating system, pages viewed, feature usage, timestamps, security events, audit logs, administrator actions, import and export events, error reports, and approximate location derived from technical data.
• Compliance, dispute, and integrity information, such as identity or authority checks, credential or insurance documentation, account-control evidence, abuse reports, complaints, chargeback records, sanctions screening results, legal requests, and investigation notes.
• Cookie and analytics information from Clara websites and applications, where permitted by law and configured by Clara.

3. Sources of Information

Clara collects information directly from Customers, Authorized Users, and website visitors; from practices that enter or import Client information; from Clients who complete forms or booking flows; from integrations selected by Customer; from payment, email, SMS, telehealth, hosting, analytics, and security providers; and from technical systems that operate the Services.

Clara does not control the accuracy or completeness of information that a practice, provider, Client, or integration submits to the Services.

4. How Clara Uses Information

Clara uses Personal Information for the following purposes:

• to provide, operate, secure, maintain, troubleshoot, and support the Services;
• to create and manage accounts, authenticate users, enforce permissions, and administer practice workspaces;
• to process sessions, intake forms, reminders, communications, billing workflows, payments, reports, documents, telehealth workflows, and related practice operations selected by Customer;
• to publish and operate public profiles, booking pages, forms, reviews, testimonials, service pages, and Client-facing links when Customer enables those features;
• to respond to support requests, provide onboarding, communicate about the Services, and send administrative notices;
• to monitor security, prevent abuse, detect fraud, debug errors, maintain audit logs, and protect the rights and safety of Clients, Customers, Clara, and others;
• to evaluate eligibility, verify identity or authority, investigate complaints, request proof of licensure or insurance, enforce professional-use restrictions, remove unsafe or unlawful users, resolve administrator or ownership disputes, and protect platform integrity;
• to improve, test, and develop the Services using de-identified, aggregated, or Customer-authorized data where appropriate and lawful;
• to comply with law, enforce agreements, respond to legal requests, administer tax and accounting records, manage payment disputes, handle chargebacks, and manage legal or regulatory disputes;
• to screen for sanctions, fraud, abuse, security risk, unlawful use, payment risk, and violations of Clara's terms or third-party provider rules;
• to send marketing communications where permitted by law, with unsubscribe rights where required.

5. Canada and United States Health Privacy

In Canada, Clara is designed to support practices subject to federal, provincial, or territorial privacy and health privacy laws, including laws such as PIPEDA and provincial health privacy laws. Practices are responsible for determining the laws that apply to them, obtaining valid consent or other legal authority, providing required privacy notices, limiting collection to appropriate purposes, and responding to access, correction, withdrawal, and complaint requests.

In Ontario and similar Canadian health privacy regimes, Clara generally acts as an agent or service provider to the practice for personal health information processed under the practice's instructions. Clara does not independently decide how client records should be used for care.

In the United States, if a practice is a HIPAA covered entity or business associate and Clara creates, receives, maintains, or transmits PHI for that practice, Clara will do so only under an executed Business Associate Agreement. If no BAA is in place, practices must not submit HIPAA-regulated PHI to Clara.

Where Clara offers services that fall outside HIPAA, other US laws may apply, including state privacy laws, consumer health data laws, consumer protection laws, health breach notification laws, telehealth rules, anti-spam laws, and professional recordkeeping requirements. Customers are responsible for determining and meeting those obligations.

6. Consent, Legal Bases, and Choice

Where consent is required, Customer is responsible for obtaining and documenting valid consent from Clients for Customer's collection, use, disclosure, communications, telehealth workflows, forms, payments, and other processing through Clara. Clara relies on Customer's instructions and lawful authority for Client records unless Clara is collecting information for its own limited business purposes.

Clara may process information to perform contracts, provide requested services, comply with law, protect security, pursue legitimate business interests where permitted, and obtain consent where required. Sensitive information, including health information, is handled according to the applicable agreement and law.

Customer is responsible for consent and notices required for public profile content, testimonials, reviews, marketing claims, SMS, email, voice calls, telehealth, AI-assisted features, payment processing, cross-border processing, and third-party integrations Customer enables.

If a Customer directs Clara to process information in a way that Clara believes may be unlawful, unsafe, misleading, unsupported by consent, or inconsistent with applicable agreements, Clara may refuse, limit, suspend, or condition that processing.

Individuals may have the right to withdraw consent, opt out of marketing, control certain cookies, limit certain uses of sensitive information, or request access, correction, deletion, portability, or restriction. Rights may be limited by legal, contractual, professional, security, or record-retention obligations.

7. How Clara Discloses Information

Clara may disclose information in the following circumstances:

• to Authorized Users within a Customer's practice according to practice roles and permissions;
• to Clients, contacts, guardians, or recipients when Customer uses the Services to communicate, book, bill, send forms, share links, or otherwise interact with them;
• to the public, search engines, social platforms, preview tools, directories, or other visitors when Customer publishes public profiles, booking pages, reviews, testimonials, links, or similar public content;
• to subprocessors and service providers that help host, store, secure, support, analyze, communicate, process payments, provide telehealth, monitor errors, or operate the Services;
• to integrations, applications, or third-party services that Customer enables or instructs Clara to use;
• to professional advisors, insurers, auditors, legal counsel, and compliance providers under confidentiality obligations;
• to government, law enforcement, courts, regulators, professional bodies, colleges, boards, insurers, emergency responders, practice administrators, or other parties when Clara believes disclosure is required or permitted by law, contract, safety need, or professional reporting obligation;
• as part of a merger, financing, acquisition, reorganization, sale of assets, bankruptcy, or similar business transaction, subject to appropriate confidentiality and privacy protections;
• to protect rights, safety, security, integrity, Clients, Customers, Clara, and others.

Clara does not sell Personal Information in the ordinary meaning of that term. Clara does not use Client PHI for third-party advertising. Clara does not share Client PHI for cross-context behavioral advertising. If Clara changes these practices, it will provide notice and choices required by law.

8. Public Profiles, Booking Pages, and Published Content

If Customer enables public profiles, booking pages, public forms, reviews, testimonials, service listings, or similar features, the information Customer chooses to publish may be visible to Clients, prospective Clients, search engines, social platforms, caching services, preview tools, and other third parties. Published information may be copied, indexed, cached, screenshotted, shared, or retained outside Clara's control.

Removing information from Clara may not remove copies from search engines, browser caches, screenshots, email previews, social posts, third-party archives, or other services. Customer should not publish confidential, sensitive, regulated, misleading, or third-party information unless Customer has authority and accepts the public exposure risk.

Public profile and booking content is generally Customer-submitted. Clara does not generally verify provider credentials, availability, insurance, specialty claims, testimonials, reviews, or professional standing. Individuals should verify those matters directly with the practice, provider, insurer, or relevant regulator.

9. Safety, Licensing, and Platform Integrity

Clara may collect, review, preserve, and disclose limited information related to account eligibility, identity, authority, licensure, registration, supervision, insurance, complaints, disciplinary matters, security events, misuse, unsafe practice, Client harm, or alleged unlawful conduct where Clara believes it is necessary or appropriate to operate the Services, enforce terms, protect safety, comply with law, or cooperate with a practice, regulator, professional body, law enforcement agency, court, insurer, or emergency responder.

Clara may request documentation from Customers or Providers, including proof of identity, practice authority, professional status, licensure, supervision, insurance, consent, or compliance. Clara may restrict or remove access if information is not provided or appears inaccurate, incomplete, unsafe, unlawful, or misleading.

Clara does not generally verify provider credentials, monitor care quality, supervise Providers, or endorse practices. Public profiles and booking pages may display Customer-submitted information. Individuals should verify a provider's credentials, professional status, insurance, and suitability directly with the provider or relevant regulator.

Information preserved or disclosed for safety, legal, regulatory, insurance, audit, or dispute purposes may be retained longer than ordinary account information where permitted or required by law.

10. Practice Administrators, Exports, and Account Control

Practice owners, workspace administrators, billing contacts, and other Authorized Users may be able to access, export, modify, delete, disclose, or control information within a Customer workspace according to settings and permissions. Clara may rely on the authority of administrators and users authenticated with Customer credentials.

Customer is responsible for configuring permissions, removing former staff, reviewing exports, controlling shared links, managing calendar subscriptions, and protecting downloaded, printed, screenshotted, emailed, synced, or exported information after it leaves Clara-controlled systems.

If there is an ownership, employment, contractor, billing, legal, or control dispute, Clara may preserve, freeze, or restrict information while determining how to proceed and may request documentation before changing access or control.

Exports, downloads, printouts, local files, browser caches, calendar subscriptions, email inboxes, phones, and third-party integrations may fall outside Clara-controlled systems. Customer is responsible for protecting information in those locations.

11. Subprocessors, Integrations, and Cross-Border Processing

Clara may use cloud hosting, database, storage, payment, email, SMS, voice, telehealth, analytics, error monitoring, security, support, document, AI, and infrastructure providers. These providers may process information in Canada, the United States, or other jurisdictions, subject to contracts and safeguards appropriate to their role.

Information processed outside a person's province, state, or country may be accessible to foreign courts, governments, regulators, or law enforcement according to local law. Customers are responsible for making any required disclosures to Clients about cross-border processing and for selecting configurations appropriate for their practice.

Customer is responsible for third-party integrations it enables, including reviewing their privacy, security, consent, and contractual terms. Clara is not responsible for third-party services outside Clara's control.

Clara may add, replace, remove, or change subprocessors and infrastructure providers as the Services evolve, subject to any specific notice, objection, or agreement process in an applicable BAA, DPA, or Order Form.

12. De-Identified and Aggregated Information

Clara may create, receive, and use de-identified, aggregated, statistical, or usage information to operate, secure, analyze, support, and improve the Services, develop new features, understand adoption, and report high-level trends. Clara will not use this information to identify a Client or disclose it in a way that identifies Customer, Authorized Users, Clients, or another person unless permitted by law and applicable agreement.

Where a BAA, DPA, or law applies special rules to de-identification, Clara will handle de-identified or aggregated information according to those rules for the data covered by that agreement or law.

13. AI and Automated Features

Clara may offer AI-assisted or automated features only where enabled and configured. These features may draft, summarize, classify, search, suggest, or automate administrative workflows. Outputs may be inaccurate or incomplete and must be reviewed by qualified users before reliance.

Customer should not enter PHI or other sensitive information into AI features unless the feature is intended for that use, the required agreement is in place, and Customer has confirmed that the use is lawful and professionally appropriate.

Clara will not intentionally use Client PHI to train general-purpose AI models unless Customer has expressly enabled that use and the use is lawful under the applicable agreement and privacy law. AI subprocessors, if used, should be governed by appropriate data protection, confidentiality, and health privacy terms.

14. Security Safeguards

Clara uses technical, administrative, and organizational safeguards designed to protect information, such as access controls, authentication, authorization, audit logging, encryption in transit, infrastructure controls, backup and recovery processes, monitoring, and security procedures. The exact safeguards may evolve over time.

No system can be guaranteed to be perfectly secure, available, or error-free. Customers and Authorized Users must use strong credentials, keep devices secure, configure permissions carefully, avoid sharing accounts, remove former staff promptly, review unusual activity, and manage security incidents affecting Customer-controlled systems.

Security safeguards do not make Clara responsible for Customer-controlled devices, networks, browsers, downloads, exports, printed records, email inboxes, phone numbers, calendar subscriptions, passwords, passkeys, shared links, integrations, staff behavior, or local storage outside Clara-controlled systems.

15. Retention, Export, and Deletion

Clara retains information for as long as needed to provide the Services, meet legal and contractual obligations, maintain security and audit logs, resolve disputes, enforce agreements, support backups, and comply with professional or regulatory requirements.

Retention periods vary by data type, Customer settings, law, backup cycles, and legal holds.

Practices are responsible for determining legally required retention periods for client records, billing records, tax records, consent records, and communications. Clara's backup systems are not a substitute for a practice's legal recordkeeping obligations.

Upon termination, Clara may provide export tools where available and may delete, de-identify, or retain information according to the applicable agreement, retention schedule, backup cycle, legal hold, and law. Deleted information may persist in backups for a limited period before being overwritten or purged.

Information related to security incidents, privacy incidents, licensing concerns, platform abuse, Client harm allegations, payment disputes, chargebacks, legal claims, regulatory inquiries, or account-control disputes may be retained longer where Clara believes retention is necessary or permitted.

16. Individual Privacy Rights

Individuals may have privacy rights depending on where they live and the type of information involved. These may include rights to access, correct, delete, receive a copy of, restrict, object to, withdraw consent for, opt out of certain processing, limit certain sensitive information uses, or complain to a regulator.

For client records, requests should usually be sent to the practice or provider that provides care. Clara does not handle practice record requests on a practice's behalf unless a signed agreement or mandatory law requires Clara to perform a specific task.

For Clara account information, website information, or marketing information controlled by Clara, requests may be sent to support@startclara.com.

Clara may need to verify identity and authority before responding. Clara may deny or limit requests where permitted or required by law, including for security, legal privilege, professional recordkeeping, billing, tax, fraud prevention, safety, regulatory, legal hold, or other legitimate obligations.

Authorized agents may submit requests where required by law, but Clara may require proof of authority and identity. Where appeal rights are required by law, Clara will provide the required appeal process.

17. United States State Privacy Notices

Where US state privacy laws apply, residents may have rights to know or access Personal Information, correct inaccuracies, delete information, obtain a portable copy, opt out of sale, opt out of sharing for cross-context behavioral advertising, opt out of certain profiling, limit certain uses of sensitive Personal Information, and avoid discrimination for exercising rights.

Clara does not sell Personal Information or share Client PHI for cross-context behavioral advertising. Clara may use service providers and analytics tools to operate and improve the Services. State privacy requests may be submitted to support@startclara.com. If the request concerns a practice's Client record, Clara may direct the request to the practice.

18. Cookies, Analytics, and Marketing

Clara websites and applications may use cookies, local storage, pixels, analytics, and similar technologies to operate the Services, remember settings, secure sessions, understand usage, diagnose errors, and improve the product. Users may control some cookies through browser settings or preference tools where available.

Clara may send administrative messages about the Services. Clara may send marketing messages where permitted by law.

Recipients can unsubscribe from marketing emails using the link in the message or by contacting Clara. Transactional, security, billing, and service messages may continue where necessary.

19. Communications, SMS, Email, and Telehealth

When Customer uses Clara to send email, SMS, voice, telehealth, calendar, or other communications, Customer is responsible for obtaining required consent, confirming recipient contact information, honoring opt-outs, and ensuring message content is appropriate. Communications may be transmitted through third-party networks and may not be encrypted end to end unless specifically stated.

Customer is responsible for compliance with CASL, TCPA, CAN-SPAM, state mini-TCPA laws, carrier rules, professional communication rules, quiet-hour restrictions, do-not-contact requests, unsubscribe requirements, and consent records for messages Customer sends or instructs Clara to send.

Clients should not use Clara reminders, emails, SMS, booking forms, or telehealth links for emergencies. Practices should provide emergency instructions and crisis resources directly to Clients.

20. Children and Minors

Clara is a business service for practices and providers. It is not directed to children for independent use. Practices may enter information about minors where lawful and appropriate for care, billing, guardianship, consent, and recordkeeping. Practices are responsible for parental, guardian, mature minor, and substitute decision-maker requirements that apply to their practice.

21. Security Incidents and Breach Notices

If Clara becomes aware of a security incident involving Personal Information, Clara will investigate and take steps it considers appropriate under the circumstances. Clara will notify affected Customers, regulators, individuals, or others when required by applicable law or an applicable agreement.

Where HIPAA applies and a BAA is in place, breach notice obligations will be governed by the BAA and HIPAA. Where Canadian privacy, health privacy, or non-HIPAA US health breach rules apply to Clara directly, Clara will follow applicable notification duties for its own role.

Customer remains responsible for investigating, documenting, remediating, and providing required notices for incidents involving Customer credentials, Customer-controlled exports, integrations, local devices, staff actions, Client communications, or other systems and people outside Clara-controlled systems.

22. Changes to This Policy

Clara may update this Privacy Policy from time to time. Clara will post the updated version with a new effective date and will provide additional notice or obtain consent where required by law. Continued use after an update means the updated Privacy Policy applies to the Services from its effective date, subject to any additional rights required by law or an applicable signed agreement.

23. Contact and Complaints

Privacy questions, requests, or complaints may be sent to support@startclara.com. Legal notices may be sent to support@startclara.com. If an Order Form, BAA, DPA, or signed agreement lists a different privacy or legal notice contact, that contact controls for notices under that agreement.

Individuals may also have the right to contact a privacy commissioner, attorney general, health privacy regulator, professional college, or other authority in their jurisdiction. Clara encourages Clients to first contact their practice for questions about client records or care.

1. Acceptance, Scope, and Document Order

These Terms and Conditions (the "Terms") govern access to and use of Clara's websites, software, applications, workflows, support, and related services (collectively, the "Services"). By creating an account, signing an order form, clicking to accept, or using the Services, the practice, practice, organization, or individual accepting these Terms (the "Customer") agrees to be bound by them.

If a Customer uses Clara on behalf of a practice, professional corporation, group practice, or other organization, the person accepting these Terms represents that they have authority to bind that organization. If they do not have that authority, they must not use the Services for the organization.

If there is a conflict, the following order applies unless the applicable document states otherwise: an executed order form or written enterprise agreement, an executed Business Associate Agreement or Data Processing Agreement, these Terms, and then posted product documentation. Privacy-related rights in the Privacy Policy do not reduce Clara's obligations under an executed BAA, DPA, or mandatory privacy law.

Clara may offer Services in Canada and the United States. These Terms are intended for business use by practices and providers and are not a consumer health app end-user license for patients or clients.

These Terms are written to allocate risk between Clara and business Customers. They do not waive rights that cannot legally be waived, but every disclaimer, limit, defense, and allocation of responsibility applies to the maximum extent permitted by law.

2. Key Definitions

• "Authorized User" means a person invited by Customer to use the Services, including owners, administrators, providers, contractors, billers, and support staff.
• "Client" means an individual patient, client, family member, guardian, contact, or other person whose information is entered into the Services by or for Customer.
• "Customer Data" means data, content, files, notes, records, communications, sessions, billing data, and other materials submitted to Clara by or for Customer or its Authorized Users.
• "Personal Information" includes personal information, personal data, personal health information, protected health information, and similar information regulated by Canadian, United States, state, provincial, or territorial privacy laws.
• "PHI" means protected health information under HIPAA when Customer is a HIPAA covered entity or business associate and the information is subject to an executed Business Associate Agreement with Clara.
• "Provider" means an Authorized User or other person who provides, offers, supervises, advertises, or is listed as providing health care, therapy, counselling, coaching, wellness, care, or professional services through or in connection with the Services.
• "Order Form" means a Clara order, checkout, subscription page, quote, statement of work, or other written ordering document accepted by Clara.

3. Health Care, Professional, and Legal Responsibilities

Clara provides administrative software for therapy and health practices. Clara is not a health care provider, practice, professional regulator, payer, emergency service, crisis line, law firm, accounting firm, or tax advisor. The Services do not replace professional judgment, care supervision, compliance review, legal advice, financial advice, or emergency care.

Customer and its Authorized Users are solely responsible for the care they provide, the content they enter, their professional licensing and supervision obligations, their documentation, billing decisions, session policies, informed consent, treatment plans, diagnosis or assessment decisions, record retention, mandatory reporting, and communications with Clients.

Customer must ensure that use of the Services is lawful in each jurisdiction where Customer, its Authorized Users, and Clients are located. This includes professional college rules, consent requirements, privacy notices, telehealth rules, recordkeeping laws, billing and tax obligations, and any restrictions on cross-border processing or data residency.

Customer represents and warrants that each Provider using or listed in the Services is properly licensed, registered, certified, supervised, insured, and legally permitted to provide the services they offer in every jurisdiction where they provide services or advertise availability, unless the person is using Clara only in a administrative administrative role and is clearly identified as such.

Customer must promptly remove, suspend, restrict, or appropriately supervise any Provider whose license, registration, supervision relationship, insurance coverage, professional standing, legal authority to practice, or safety status no longer permits the Provider to use the Services or provide services lawfully and safely.

Customer must maintain insurance appropriate for its practice, including professional liability or malpractice coverage, privacy or cyber coverage where commercially reasonable, commercial general liability, employment or contractor coverage where applicable, and any insurance required by law, contract, regulator, college, board, insurer, or professional association.

Clara does not verify credentials, supervise Providers, credential providers, endorse any practice or Provider, guarantee the quality or legality of care, or guarantee that public profile information is accurate unless Clara expressly states otherwise in a separate written verification program. Public profiles, booking pages, services, credentials, modalities, fees, availability, and descriptions are Customer-submitted content.

Customer is the provider of record for its Clients and is responsible for emergency protocols, crisis instructions, care coverage, intake suitability, scope-of-practice limits, supervision, delegation, mandatory reporting, Client abandonment risk, and handoff procedures if access to Clara is interrupted, suspended, or terminated.

Customer must train its staff and contractors on lawful use of the Services. Clara is not responsible for Customer's hiring, background checks, credential checks, supervision, staffing levels, employee misconduct, contractor misconduct, workplace disputes, or failure to remove a person who should no longer have access.

Customer must provide its own Client-facing privacy notices, informed consent forms, telehealth consents, fee and cancellation policies, emergency instructions, messaging consents, AI notices where required, and any professional disclosures required by law, regulator, college, board, insurer, or payer. Clara's templates and booking pages are tools, not substitutes for Customer's legal and professional notices.

4. Platform Safety, Removal, and Deplatforming

Clara may, with or without prior notice, reject, suspend, restrict, remove, terminate, block, disable, unpublish, downgrade, or refuse access to any Customer, account, Authorized User, Provider, Client-facing link, public profile, booking page, integration, content, feature, workspace, or subscription if Clara reasonably believes that doing so is necessary or appropriate.

Reasons may include actual or suspected unlicensed practice, misrepresented credentials, unsafe care, Client harm or threatened harm, unlawful conduct, professional misconduct, privacy or security risk, failure to cooperate, non-payment, fraud, abuse, harassment, spam, misleading content, regulatory inquiry, subpoena, law enforcement request, breach of these Terms, breach of a BAA or DPA, violation of professional rules, reputational risk to Clara, or risk to Clients, Customers, Clara, the Services, or third parties.

Clara may request proof of identity, licensure, registration, supervision, insurance, authority to bind a practice, consent, compliance, or lawful practice. Failure to provide satisfactory proof may result in immediate restriction or removal. Clara may also remove or demote public content that Clara believes is false, misleading, unsafe, unlawful, exploitative, discriminatory, or likely to confuse Clients about Clara's role.

Clara may preserve records, disable editing, restrict exports, require administrator approval, notify practice administrators, notify affected Customers, cooperate with regulators or law enforcement, make legally required reports, or disclose information where Clara believes it is required or permitted by law, professional reporting rules, subpoena, court order, regulator request, emergency, or safety need.

Clara has no obligation to monitor Customers, Providers, credentials, licenses, Client outcomes, profile content, messages, client records, or care quality. Any review, investigation, suspension, removal, notice, verification request, or cooperation by Clara is discretionary and does not create a duty to monitor, supervise, warn, rescue, protect, credential, audit, or control Customers, Providers, or Clients.

If a non-licensed, improperly licensed, unsupervised, underinsured, impaired, negligent, incompetent, fraudulent, or otherwise unauthorized Provider uses the Services or harms a Client, Customer and that Provider are solely responsible. Clara is not liable for the Provider, the care, the failure to verify credentials, the decision to allow access, or any Client harm, except to the limited extent liability cannot be excluded by law.

Any identity check, credential request, verification badge, trust label, review process, abuse review, or profile approval by Clara is limited, discretionary, and point-in-time. It is not an endorsement, guarantee, insurance policy, professional reference, regulator approval, ongoing monitoring commitment, or promise that a Provider remains qualified, licensed, safe, insured, or suitable.

Suspension or removal for cause does not entitle Customer to a refund. Clara is not responsible for losses arising from suspension, removal, depublication of booking pages, interrupted sessions, lost leads, lost revenue, reputational harm, or regulatory consequences, subject to mandatory law and the liability limits in these Terms.

5. Privacy, PHI, and Regulated Health Information

Customer remains the organization primarily responsible for determining whether and how Customer Data may be collected, used, disclosed, retained, corrected, and deleted. In Canadian health privacy terms, Customer is generally the health information custodian, trustee, public body, organization, or controller for the Client record. Clara acts as a service provider, agent, processor, or similar role for Customer when processing Customer Data under Customer's instructions.

In the United States, if Customer is a HIPAA covered entity or business associate and Clara will create, receive, maintain, or transmit PHI for Customer, Customer must have an executed Business Associate Agreement with Clara before submitting PHI subject to HIPAA. If there is no executed BAA, Customer must not submit HIPAA-regulated PHI to the Services.

In Canada, Customer must have legal authority, consent where required, and appropriate notices for the collection, use, disclosure, and cross-border processing of Personal Information and personal health information. Customer is responsible for responding to Client access, correction, portability, withdrawal of consent, complaint, and similar requests unless an applicable agreement assigns a task to Clara.

Customer must not use the Services to process information that is prohibited by law or by Clara's documentation, including information subject to special government, military, highly classified, or other restricted data regimes unless Clara has expressly agreed in writing.

Customer must not submit data subject to heightened restrictions, such as substance-use-disorder treatment records, education records, genetic data, biometric identifiers, government identity documents, criminal justice data, child protection records, or similarly sensitive information, unless Customer has confirmed that use is lawful and Clara has expressly agreed in writing where required.

If Customer asks Clara to sign a BAA, DPA, data sharing agreement, or similar document, that document governs only the regulated data-processing obligations it expressly covers. It does not create care duties, professional duties, product warranties, service levels, insurance obligations, or liability beyond those expressly stated in that document and these Terms.

6. Accounts, Administration, and Authorized Users

Customer is responsible for all activity under its account, including actions by Authorized Users and anyone using Customer's credentials. Customer must keep credentials confidential, use reasonable access controls, promptly remove users who no longer need access, review permissions, and take prompt remedial action if Customer suspects unauthorized access.

Customer is responsible for designating administrators, assigning roles, configuring practice settings, setting session and billing policies, and reviewing audit logs and reports made available through the Services. Clara may rely on instructions from Customer's administrators.

Clara may rely on the apparent authority of the account owner, billing contact, practice owner, workspace administrator, or person using Customer's verified credentials. Clara is not responsible for losses caused by internal ownership disputes, employment disputes, contractor disputes, divorce or partnership disputes, administrator mistakes, role misconfiguration, incorrect settings, unauthorized staff sharing, or failure to remove access promptly.

If there is a dispute about ownership, control, authority, payment, employment, practice records, or access to a workspace, Clara may freeze, limit, or preserve the account while the parties resolve the dispute. Clara may require court orders, corporate records, professional records, identity documents, payment proof, or other evidence before changing account control.

Authorized Users must use the Services only for Customer's internal business purposes and in accordance with these Terms, Customer's policies, and applicable law.

7. Customer Data and License to Process

As between Customer and Clara, Customer retains all rights in Customer Data. Customer grants Clara and its subprocessors a non-exclusive, worldwide license to host, copy, transmit, process, display, and otherwise use Customer Data only as needed to provide, secure, support, improve, and maintain the Services, comply with law, enforce these Terms, and perform obligations under applicable agreements.

Customer is responsible for the accuracy, quality, legality, completeness, and appropriateness of Customer Data. Clara does not verify care accuracy, billing accuracy, diagnosis, treatment suitability, consent validity, or compliance of Customer Data.

Customer must not submit passwords, payment card numbers outside approved payment fields, highly sensitive identifiers unless necessary for Customer's lawful care operations, or information Customer is not authorized to process.

Data imports, migrations, exports, syncs, duplicate merges, templates, automations, bulk edits, and integrations may be incomplete, inaccurate, delayed, duplicated, corrupted, or incompatible. Customer must review and validate data before relying on it and must maintain independent records where required. Clara is not responsible for Customer's failure to review imported, exported, synced, or transformed data.

Reports, dashboards, exports, analytics, audit trails, logs, balances, availability, reminders, and calculations are operational aids.

Customer must verify them before using them for care, legal, tax, payroll, payout, billing, disciplinary, reporting, insurance, regulatory, or professional purposes.

Clara may create and use de-identified, aggregated, statistical, or usage data derived from the Services to operate, secure, analyze, and improve Clara, provided it does not identify Customer, Authorized Users, Clients, or any person and is not used in a way prohibited by an applicable BAA, DPA, or law.

8. Public Profiles, Booking Pages, Reviews, and Search

Customer is solely responsible for public profile content, booking pages, services, prices, credentials, images, bios, specialties, claims, availability, forms, testimonials, reviews, links, and other Client-facing content. Customer must ensure that public content is accurate, current, lawful, non-misleading, appropriately substantiated, and compliant with advertising, endorsement, health, professional, anti-discrimination, accessibility, and consumer protection rules.

Clara is not a referral service, marketplace, professional directory, credentialing body, insurer, professional regulator, or endorsement platform unless Clara expressly says otherwise in a separate written agreement. Clara does not guarantee leads, bookings, rankings, search visibility, conversion, availability, Client suitability, Client attendance, or any particular placement on a practice or public booking page.

Clara may change, randomize, personalize, limit, remove, or discontinue search, ranking, filters, profile layouts, booking flows, profile visibility, SEO settings, snippets, badges, reviews, and public listing features. Customer has no right to a particular ranking, placement, display order, domain, URL, metadata, or search-engine treatment.

Clients and other visitors may view, copy, screenshot, cache, index, share, or rely on public profile and booking content. Search engines and third parties may retain copies after Clara or Customer removes content. Customer should not publish confidential, sensitive, misleading, or regulated information unless Customer has authority and accepts that public exposure risk.

If Customer publishes testimonials, reviews, outcomes, endorsements, before-and-after claims, specialty claims, pricing claims, insurance claims, or credential claims, Customer is responsible for required consent, disclosures, substantiation, typical-results notices, professional permissions, and removal of misleading or non-compliant content.

9. Acceptable Use

Customer and Authorized Users must not misuse the Services. Prohibited conduct includes:

• accessing or attempting to access another practice's data or any non-public Clara system without authorization;
• providing, advertising, enabling, or arranging care without legally required licensure, registration, certification, supervision, consent, insurance, or authority;
• misrepresenting credentials, specialties, training, supervision, professional status, availability, identity, fees, outcomes, insurance coverage, or practice affiliation;
• using the Services to send unlawful, misleading, harassing, discriminatory, abusive, or unsolicited communications;
• introducing malware, attempting denial-of-service attacks, probing vulnerabilities without written authorization, or bypassing security controls;
• scraping, copying, reselling, sublicensing, or reverse engineering the Services except as allowed by mandatory law;
• using the Services to build or train a competing product, benchmark for publication without written consent, or misrepresent Clara's capabilities;
• using the Services for emergency response, crisis intervention, suicide prevention, urgent medical advice, or other situations where immediate professional or emergency help is required;
• sending messages without required consent, after opt-out, outside allowed hours, or in violation of CASL, TCPA, CAN-SPAM, state mini-TCPA laws, carrier rules, professional rules, or similar anti-spam and communications laws;
• submitting data or using workflows in a way that violates privacy, health, professional, export-control, anti-spam, sanctions, or consumer protection laws.

Clara may investigate suspected misuse and may suspend access where reasonably necessary to protect Clients, Customers, Clara, subprocessors, or the Services.

10. Scheduling, Communications, Telehealth, Billing, and AI Features

Scheduling, reminders, confirmations, waitlists, cancellation tools, calendar feeds, and similar features are administrative tools only. Customer remains responsible for verifying session times, time zones, consent, cancellation policies, fees, and professional availability.

Email, SMS, voice, calendar, and other communications may be delayed, blocked, filtered, misdirected, or unavailable due to third-party networks, device settings, carrier rules, client preferences, or inaccurate contact information. Clara does not guarantee delivery, receipt, or timeliness of any communication.

Telehealth, video, payment, email, SMS, voice, analytics, storage, hosting, and other integrations may be provided by third parties. Customer must use those features only where lawful and with required consent, notice, and documentation.

Payment features are administrative tools and may be provided by a payment processor. Clara is not a bank, money transmitter, insurer, collection agency, escrow agent, claims processor, or tax advisor. Customer is responsible for fees charged to Clients, refunds, chargebacks, disputes, taxes, invoices, receipts, insurance reimbursement, payer rules, payment consents, and compliance with payment network and processor rules.

Payment processors, banks, card networks, app stores, telecommunications providers, telehealth vendors, AI vendors, email providers, SMS carriers, and other third parties may delay, reject, reverse, reserve, suspend, freeze, refund, withhold, or fail to process transactions, messages, calls, video sessions, payouts, or data. Clara is not responsible for those third-party actions, omissions, fees, disputes, rules, or outages.

Any AI, automation, summarization, drafting, coding, analytics, or recommendation features are assistive tools. Outputs may be incomplete, inaccurate, biased, outdated, or unsuitable. Customer and Authorized Users must independently review outputs before using them in care, billing, legal, regulatory, or operational decisions. Clara does not provide medical, care, legal, or financial advice.

Customer must not use AI or automation features as the sole basis for care decisions, emergency decisions, legal determinations, adverse decisions about Clients, diagnosis, treatment, risk assessment, billing, insurance, employment, or mandatory reporting. Customer is responsible for consent, disclosure, professional review, and documentation before using automated outputs.

Clara is not a medical device, care decision support system, diagnostic tool, risk scoring service, utilization review service, emergency response system, suicide-prevention tool, or payer adjudication system unless Clara expressly states otherwise in a written agreement approved by Clara.

Clara support, onboarding, templates, prompts, automations, documentation, and product suggestions are for product use only.

They are not professional advice or compliance services and do not shift responsibility for care, legal, privacy, billing, tax, employment, licensing, supervision, or Client safety obligations away from Customer.

Clients are not third-party beneficiaries of these Terms, and Clara does not create a therapist-client, provider-patient, fiduciary, professional, or emergency-care relationship with Clients through booking pages, reminders, forms, profiles, telehealth links, billing tools, or communications.

11. Security, Backups, Availability, and Data Loss

Clara uses commercially reasonable technical, administrative, and organizational safeguards designed to protect the Services. No internet, cloud, storage, software, or communication service is perfectly secure, available, or error-free. Clara does not guarantee that the Services will be uninterrupted, free of vulnerabilities, immune from unauthorized access, or free from data loss.

Clara may maintain backups, logs, audit trails, and disaster recovery processes for the Services. Backups are designed for service continuity and incident response, not as Customer's independent archive or permanent record system. Customer remains responsible for maintaining legally required records, exporting data when needed, and preserving copies required by professional, insurance, tax, or legal obligations.

Customer is responsible for securing its own devices, browsers, downloads, exports, printouts, screenshots, calendar subscriptions, email inboxes, phone numbers, passwords, passkeys, shared links, local networks, integrations, and staff behavior.

Clara is not responsible for data exposure, deletion, misrouting, or misuse caused by Customer-controlled systems or people.

To the maximum extent permitted by law, Clara is not responsible for data loss, corruption, unauthorized access, misconfiguration, mistaken deletion, missed sessions, failed reminders, billing errors, lost revenue, business interruption, reputational harm, or professional consequences except to the limited extent caused by Clara's breach of these Terms and subject to the liability limits below.

Clara may perform maintenance, updates, migrations, security work, or emergency repairs that affect availability. Clara may modify, suspend, replace, discontinue, or limit features where reasonably necessary for security, compliance, reliability, product improvement, or business reasons.

Any stated backup, recovery, support, response, availability, or incident timeline is a target unless expressly stated as a binding service level in an Order Form. Clara does not guarantee recovery point objectives, recovery time objectives, data restoration, or restoration of any particular deleted, overwritten, corrupted, or exported item.

12. Fees, Taxes, Billing, and Future Price Changes

Customer must pay all fees, usage charges, overages, add-ons, implementation charges, support charges, taxes, and other amounts described in the applicable Order Form or checkout flow. Unless an Order Form states otherwise, subscription fees are billed in advance and usage-based fees may be billed in arrears.

Fees are non-cancellable and non-refundable except where required by law or expressly stated in an Order Form. Customer authorizes Clara and its payment processors to charge the payment method on file. Customer must keep billing information current and pay undisputed amounts when due.

Clara may change prices, packaging, included usage, add-on fees, currency treatment, tax handling, discount programs, or billing terms. Unless an Order Form states otherwise, Clara will use reasonable efforts to provide advance notice of material subscription price increases, and the change may apply at renewal, at the next billing period, or when Customer changes plans, adds seats, increases usage, or accepts an updated Order Form.

Promotional, beta, free, discounted, grandfathered, or trial pricing may be temporary and may be changed, limited, or discontinued. Taxes, exchange rates, card network fees, app-store fees, telecommunications fees, AI usage costs, storage costs, and third-party vendor costs may be passed through or reflected in updated pricing.

Customer is responsible for chargebacks, failed payments, payment processor holds, reserves, disputes, refunds to Clients, negative balances, taxes, banking errors, inaccurate tax information, and any fees or losses caused by Customer's transactions, Client disputes, or payment method issues.

If payment is late, Clara may charge interest or late fees where lawful, suspend access, downgrade features, pause support, or terminate the account after reasonable notice unless prohibited by law or an applicable agreement.

13. Trials, Beta Features, and Pre-Release Services

Trials, demos, free plans, beta features, experimental tools, previews, and pre-release services are provided as-is, may be changed or withdrawn at any time, may not be covered by all support or availability commitments, and should not be used for critical workflows unless Clara has expressly approved that use in writing.

Customer is responsible for deciding whether a beta or preview feature is appropriate for Personal Information or care workflows. Clara may impose extra restrictions, disable beta features, or delete beta data as described in applicable notices.

14. Confidentiality

Each party may receive non-public information from the other party that is identified as confidential or should reasonably be understood to be confidential. The receiving party will use the same degree of care it uses to protect its own similar information, and at least reasonable care, and will use confidential information only to perform or receive the Services.

Confidentiality obligations do not apply to information that is public through no fault of the receiving party, already known without a duty of confidentiality, independently developed, or lawfully received from a third party. A party may disclose confidential information when required by law, subpoena, court order, regulator, or professional obligation, after giving notice when legally permitted.

15. Intellectual Property and Feedback

Clara and its licensors retain all rights, title, and interest in the Services, software, designs, workflows, documentation, templates, know-how, algorithms, models, reports, and Clara content. No rights are granted except the limited right to access and use the Services during the subscription term in accordance with these Terms.

Customer may provide suggestions, ideas, requests, feedback, or recommendations. Clara may use feedback without restriction or compensation, provided Clara does not disclose Customer's confidential information or Personal Information except as permitted by these Terms and applicable law.

16. Suspension and Termination

Customer may stop using the Services at any time, but fees remain payable as described in the applicable Order Form. Clara may suspend or terminate access if Customer breaches these Terms, fails to pay, creates security or legal risk, misuses the Services, violates applicable law, or if continued service would expose Clara or others to material risk.

Clara may immediately suspend, remove, or terminate access for a Customer, Authorized User, or Provider if Clara reasonably believes the person is unlicensed, improperly licensed, unsupervised where supervision is required, uninsured where insurance is required, impersonating another person, misrepresenting credentials, engaged in unsafe or unlawful practice, responsible for Client harm, under investigation, or creating risk to Clients, Clara, Customers, or the Services.

On termination or expiration, Customer's access may end and Clara may delete or retain Customer Data according to the Order Form, Privacy Policy, retention schedules, backup cycles, legal holds, and applicable law. Customer should export required records before termination where available.

Sections that by their nature should survive will survive, including payment obligations, confidentiality, privacy and data protection obligations, intellectual property, disclaimers, limitations of liability, indemnities, dispute terms, and audit or record-retention obligations.

17. Disclaimers

Except as expressly stated in an Order Form or required by law, the Services are provided "as is" and "as available." Clara disclaims all warranties, conditions, representations, and guarantees, whether express, implied, statutory, or otherwise, including merchantability, fitness for a particular purpose, title, non-infringement, accuracy, availability, security, uninterrupted operation, error-free operation, and suitability for care, billing, regulatory, or professional use.

Customer is responsible for determining whether the Services meet Customer's needs and legal obligations. Clara does not warrant that the Services will satisfy the requirements of any professional college, insurer, payer, regulator, government program, court, or accrediting body.

18. Limitation of Liability

To the maximum extent permitted by law, Clara's total aggregate liability arising out of or related to the Services, these Terms, or any Order Form will not exceed the greater of the fees paid by Customer to Clara for the Services giving rise to the claim during the three months before the event giving rise to liability or one hundred dollars.

To the maximum extent permitted by law, Clara will not be liable for indirect, incidental, special, consequential, exemplary, punitive, or enhanced damages, or for lost profits, lost revenue, lost savings, lost goodwill, lost data, data restoration costs, business interruption, care consequences, professional discipline, substitute services, or third-party claims, even if Clara knew or should have known those damages were possible.

To the maximum extent permitted by law, Clara will not be liable for Client harm, malpractice, negligence, professional misconduct, unlicensed or unauthorized practice, credential misrepresentation, inadequate supervision, incorrect care content, failed care follow-up, billing disputes, insurance denial, workplace misconduct, or a Customer's decision to invite, retain, supervise, remove, or fail to remove a Provider.

To the maximum extent permitted by law, Clara will not be liable for public-profile reliance, search ranking, booking-page ordering, review or testimonial content, credential badge reliance, Customer configuration mistakes, administrator disputes, import or export errors, third-party payment holds, chargebacks, carrier filtering, anti-spam claims, or third-party integration failures.

No moderation, suspension, removal, credential request, support response, abuse investigation, incident response, safety action, or product warning by Clara creates a duty to continue monitoring, detect similar issues, protect any person from harm, or take the same action in other circumstances.

The liability cap does not limit Customer's payment obligations, Customer's indemnification obligations, amounts Customer owes for taxes, chargebacks, processor fees, third-party claims, or Clara's right to seek injunctive or equitable relief. Nothing in these Terms excludes liability that applicable law does not allow to be excluded.

The limits in this section apply to all theories of liability, including contract, tort, negligence, strict liability, statute, equity, and warranty. Some jurisdictions do not allow certain exclusions or limits, so the limits apply only to the fullest extent allowed by applicable law.

19. Indemnification

Customer will defend, indemnify, and hold harmless Clara and its affiliates, officers, directors, employees, contractors, subprocessors, and agents from and against claims, damages, losses, liabilities, penalties, settlements, costs, and expenses, including reasonable legal fees, arising from or related to:

• Customer Data, including alleged privacy, confidentiality, intellectual property, or professional violations;
• Customer's or Authorized Users' use or misuse of the Services;
• Customer's care, professional, billing, tax, employment, telehealth, consent, recordkeeping, supervision, insurance, licensing, credentialing, or regulatory obligations;
• Client claims related to Customer's services, communications, sessions, fees, treatment, advice, diagnosis, assessment, documentation, emergency response, supervision, credentials, advertising, public profile, or use of Clara;
• actual or alleged malpractice, negligence, incompetence, impairment, professional misconduct, unlicensed practice, unauthorized practice, inadequate supervision, failure to maintain insurance, or Client harm involving Customer, an Authorized User, a Provider, contractor, employee, or affiliate;
• public profile content, testimonials, reviews, rankings, credential claims, specialty claims, price claims, advertising claims, anti-spam or communications claims, imports, exports, configuration errors, payment disputes, chargebacks, tax disputes, or third-party integration use;
• Customer's breach of these Terms, an Order Form, a BAA, a DPA, or applicable law.

Clara will provide reasonably prompt notice of indemnified claims and may participate in the defense. Customer may not settle a claim in a way that admits fault by Clara or imposes obligations on Clara without Clara's written consent.

20. Government Requests, Legal Holds, and Compliance

Clara may preserve, access, disclose, or restrict Customer Data where Clara reasonably believes it is required or permitted by law, court order, subpoena, regulator, law enforcement request, professional obligation, sanctions rule, or to protect the rights, safety, security, or integrity of Clients, Customers, Clara, or the Services.

Customer is responsible for legal holds, litigation preservation, professional record retention, and responding to regulators, insurers, courts, colleges, and Clients unless a signed agreement expressly requires Clara to perform a specific task.

If Clara provides extraordinary data retrieval, legal response support, forensic work, remediation, or dispute support because of Customer's acts, omissions, configuration, breach, or dispute, Clara may charge Customer for that work where lawful and permitted by the applicable agreement.

21. Export Controls, Sanctions, and Anti-Corruption

Customer must comply with applicable export control, sanctions, anti-bribery, anti-corruption, anti-money-laundering, and trade laws. Customer must not use the Services in or for sanctioned countries, embargoed regions, prohibited parties, or unlawful purposes.

Customer represents that neither Customer nor any Authorized User is subject to sanctions or prohibited from receiving the Services. Clara may screen, block, suspend, or terminate access where Clara reasonably believes continued service could violate trade, sanctions, anti-corruption, payment network, or financial crime rules.

22. Force Majeure

Clara is not responsible for delay or failure to perform caused by events beyond its reasonable control, including natural disasters, war, terrorism, civil unrest, labor disputes, epidemics, pandemics, internet or telecommunications failures, cloud provider failures, cyberattacks, power failures, government action, payment processor outages, or third-party service interruptions.

23. Changes to These Terms

Clara may update these Terms from time to time. For material changes, Clara will use reasonable efforts to provide notice through the Services, by email, or by other reasonable means. Updated Terms become effective on the date stated in the notice or posted Terms. Continued use of the Services after the effective date means Customer accepts the updated Terms.

If Customer objects to updated Terms, Customer must stop using the Services and, if applicable, terminate according to the Order Form. Updated Terms do not retroactively reduce Clara's obligations under an executed BAA, DPA, or written enterprise agreement unless that agreement permits the change.

24. Notices, Assignment, and General Terms

Clara may provide notices through the Services, by email, by posting, by account message, or by other reasonable means.

Customer consents to electronic communications, electronic records, and electronic signatures for the Services and these Terms.

Customer may not assign, delegate, transfer, or sublicense these Terms, an account, or access to the Services without Clara's prior written consent. Clara may assign or transfer these Terms, accounts, Customer Data, and the Services to an affiliate or in connection with a merger, financing, acquisition, reorganization, sale of assets, change of control, or similar transaction.

If any part of these Terms is held invalid or unenforceable, the remaining parts remain in effect and the invalid part will be interpreted or replaced to best accomplish its original purpose to the extent permitted by law. A failure to enforce a provision is not a waiver. These Terms and applicable Order Forms are the entire agreement for the Services unless a signed agreement expressly says otherwise.

The parties are independent contractors. These Terms do not create a partnership, joint venture, franchise, agency relationship, fiduciary relationship, employment relationship, health care relationship, or professional relationship between Clara and Customer, Authorized Users, Providers, or Clients.

25. Governing Law, Venue, and Disputes

Unless an Order Form or mandatory law states otherwise, these Terms are governed by the laws of the Province of Ontario and the federal laws of Canada applicable there, without regard to conflict-of-law rules. The parties consent to the exclusive jurisdiction and venue of the courts located in Toronto, Ontario for disputes arising from these Terms or the Services.

Each party waives trial by jury to the extent allowed by law. Claims must be brought individually and not as a class, collective, representative, or private attorney general action to the extent allowed by law. Nothing in this section limits either party's right to seek urgent injunctive or equitable relief or to comply with mandatory privacy, health, consumer, or employment laws that cannot be waived.

26. Contact

Questions about these Terms may be sent to support@startclara.com. Privacy questions may be sent to support@startclara.com. If an Order Form or signed agreement lists a different legal notice address, that address controls for formal legal notices.