Terms of Service
Effective date: July 30, 2026 · Last updated: July 30, 2026
1. Acceptance of these Terms
By accessing or using the Services, creating an account, or clicking to accept these Terms, you agree to these Terms of Service (“Terms”) and our Privacy Policy. If you use the Services on behalf of a clinic, company, or other organization (“Customer”), you represent that you have authority to bind that Customer, and “you” includes that Customer.
If you do not agree, do not use the Services.
2. What Rhodium provides
Rhodium is a B2B multi-tenant software platform for medical spas, aesthetic clinics, and related healthcare businesses. Depending on your subscription and configuration, the Services may include staff portal access; patient and lead CRM, inbox, and messaging; scheduling, treatments, loyalty, surveys, and clinic operations tools; marketing campaign tools; integrations with third-party systems; and AI-assisted features that help draft, recommend, or automate clinic workflows you configure.
Rhodium provides software and related support. Rhodium is not a medical provider, does not practice medicine, and does not replace clinical judgment, licensed healthcare professionals, or your obligations under applicable healthcare, privacy, advertising, or consumer-protection laws.
3. Accounts and eligibility
You must provide accurate registration information and keep it updated.
You are responsible for safeguarding credentials, including MFA if enabled, and for activity under your accounts.
Staff users typically authenticate via our identity provider. Do not share passwords or API tokens.
We may suspend or terminate access for security, abuse, non-payment, or Terms violations.
4. Customer data; roles of the parties
4.1 Customer as controller / covered entity (as applicable)
Customer retains ownership of Customer Data, including clinic configuration, staff accounts Customer manages, patient and lead records Customer imports or creates, EMR-synced data, message content, and marketing content. Where Customer Data includes protected health information (“PHI”) or other regulated personal data, Customer is generally the controller / covered entity (or business associate of a covered entity, as applicable). Rhodium acts as a processor / service provider / business associate solely to provide the Services.
4.2 Business Associate Agreement
If you require a HIPAA Business Associate Agreement (“BAA”), contact info@rhodiumsoftware.com. Use of PHI features may be conditioned on an executed BAA and configuration that matches your compliance program.
4.3 Your responsibilities
You are solely responsible for lawful collection and use of patient and lead data; obtaining required consents; clinical and advertising compliance; accuracy of privacy policy URLs, terms links, and consent language; configuring contact rights and opt-outs; and your content, campaigns, creatives, and targeting decisions.
5. Acceptable use
You will not, and will not allow others to: use the Services unlawfully, for fraud, spam, harassment, or deceptive advertising; attempt to access other customers’ tenants or data; reverse engineer, scrape, or overload the Services except as allowed by law; upload malware or interfere with security or monitoring; misrepresent affiliation with Rhodium or other platforms; use advertising integrations to violate platform policies; resell raw API access to Rhodium credentials; or circumvent platform security. We may investigate and suspend Service for suspected violations.
6. Third-party products and advertising platforms
The Services may interoperate with third-party products you enable, including EMR systems, processors, telephony providers, CRM tools, e-commerce services, Google Ads, Meta, Amazon Ads, analytics, and error-monitoring tools. Third-party products are governed by their own terms and privacy policies. Enabling an integration authorizes Rhodium to exchange data with that provider as needed to provide the feature. Rhodium does not control third-party uptime, policy changes, or approval of ads or developer tokens.
Google Ads specifically
If you connect Google Ads, you authorize Rhodium to use Google OAuth with tokens stored encrypted for your company. Campaigns, audiences, and conversion uploads run against your Google Ads customer accounts; you remain the account owner and advertiser of record. Rhodium’s platform developer token stays on Rhodium infrastructure and is not provided to clinics for independent API use. You must comply with Google Ads policies and applicable healthcare advertising rules.
7. AI features
Some features use machine learning or third-party AI providers to generate recommendations, drafts, transcripts, images, or similar outputs. Outputs may be inaccurate or incomplete. You must review AI outputs before clinical, legal, or advertising use. Do not rely on AI as a sole source of medical advice.
8. Fees and taxes
Paid plans are subject to the order form, subscription page, or other commercial agreement between you and Rhodium. Fees are non-refundable except as required by law or expressly stated in writing. You are responsible for applicable taxes.
9. Intellectual property
Rhodium and its licensors own the Services, software, branding, and documentation. You own Customer Data and Customer content. You grant Rhodium a limited license to host, process, transmit, display, and create de-identified or aggregated insights from Customer Data solely to provide, secure, and improve the Services, and as described in the Privacy Policy. Feedback you provide may be used by Rhodium without obligation to you.
10. Confidentiality
Each party may receive Confidential Information from the other. The receiving party will use it only for purposes of the relationship and protect it with reasonable care. Exceptions include information that is public, independently developed, or required to be disclosed by law, with notice where legally permitted.
11. Disclaimers
THE SERVICES ARE PROVIDED “AS IS” AND “AS AVAILABLE.” TO THE MAXIMUM EXTENT PERMITTED BY LAW, RHODIUM DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. WE DO NOT WARRANT UNINTERRUPTED OR ERROR-FREE OPERATION, OR THAT THE SERVICES WILL MEET YOUR CLINICAL, REGULATORY, OR ADVERTISING GOALS.
12. Limitation of liability
TO THE MAXIMUM EXTENT PERMITTED BY LAW, RHODIUM AND ITS AFFILIATES WILL NOT BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR LOST PROFITS, REVENUE, DATA, OR GOODWILL, EVEN IF ADVISED OF THE POSSIBILITY.
RHODIUM’S AGGREGATE LIABILITY ARISING OUT OF OR RELATED TO THE SERVICES WILL NOT EXCEED THE AMOUNTS PAID BY YOU TO RHODIUM FOR THE SERVICES IN THE TWELVE (12) MONTHS BEFORE THE EVENT GIVING RISE TO LIABILITY.
Some jurisdictions do not allow certain limitations; in those cases, our liability is limited to the fullest extent permitted.
13. Indemnification
You will defend and indemnify Rhodium against claims arising from: Customer Data and your content; your ads, messaging, and consent practices; your violation of law or these Terms; and your use of third-party products through the Services.
14. Suspension and termination
Either party may terminate according to the commercial agreement. We may suspend immediately for security risk, non-payment, or material breach. Upon termination, your right to access the Services ends. Retrieval of Customer Data will follow the commercial agreement or our then-current offboarding process, subject to legal retention requirements.
15. Changes
We may update these Terms by posting a revised version with a new “Last updated” date. Material changes may also be communicated through the portal or email. Continued use after the effective date constitutes acceptance, except where mandatory law requires additional consent.
16. Governing law
These Terms are governed by the laws of the State of Delaware, USA, excluding conflict-of-law rules, unless your order form specifies otherwise. Courts in Delaware, or as specified in your order form, will have exclusive jurisdiction, except that Rhodium may seek injunctive relief in any jurisdiction.
17. Miscellaneous
These Terms, the Privacy Policy, and any order form or BAA constitute the entire agreement regarding the Services and supersede conflicting prior terms for the same subject. If a provision is unenforceable, the remainder remains in effect. Failure to enforce a provision is not a waiver. You may not assign these Terms without our consent; we may assign to an affiliate or successor.