Acceptable Use Policy

In short

• Use your own login, and look only at the records you need for your work.
• Don't try to get at anything that isn't yours, including another clinic's data.
• Don't test, scrape or overload Stator without our written permission.
• If you think something is wrong, tell your clinic and us.
• Breaking these rules can get an account locked, and serious cases can end the clinic's agreement.

1. Who this policy applies to

1.1. This policy applies to everyone who uses Stator: each clinic's staff users and its patient users, including family members with access to a patient's app.

1.2. It forms part of the Terms of Service. Each clinic is responsible for making sure its users follow it.

2. Your login

• Use only your own login, and keep your password to yourself. Don't share a login, even inside the clinic.
• Sign out, or lock the screen, on a computer or phone other people use.
• If you think someone else knows your password or has used your account, change the password and tell your clinic's admin straight away.
• Clinic admins: give each person the role that matches their job, and lock or deactivate an account as soon as the person leaves or no longer needs it.

3. Patient records

• Open and use a patient's record only when your work for that patient needs it.
• Record only patients who are the clinic's own patients, and only what the clinic needs for their care, billing and administration.
• Don't copy, photograph, download or export records except for the clinic's own work, and keep any copy as safe as the record itself.
• Share records outside the clinic only when the clinic's own rules and the law allow it.

4. Things you must not do

• Try to reach data you aren't allowed to see, including another clinic's data, or another user's account.
• Try to get around Stator's roles, limits or security checks.
• Scan, probe or test Stator for weaknesses, or load-test it, without our written permission. The security page explains how to report a weakness you find by chance.
• Scrape Stator, or reach it with bots or automated scripts, other than the exports and features Stator provides.
• Upload anything that contains malware, or anything unlawful, or files that aren't related to the clinic's work.
• Use Stator's messages or email to send spam, harassment or anything unlawful.
• Use Stator for a business or patients other than the clinic's own, or resell it.
• Copy, change, take apart or reverse-engineer Stator's software, except where the law allows it.

5. Patient app users

• The patient app is for you, or for a family member the patient has given access to. Don't share your sign-in.
• Messages to the clinic through the app are for questions about your care and appointments. In an emergency, call the clinic or emergency services, not the app.

6. If something goes wrong

If you see something that looks like a security problem, a record in the wrong place, or someone using Stator in a way this policy forbids, tell your clinic's admin. Clinic admins and anyone else can tell us at hello@statorhealth.com, with "Security" in the subject.

7. What happens if the rules are broken

7.1. Depending on how serious it is, we may warn the clinic, lock a user's account, or suspend access under clause 11 of the Terms of Service. We tell the clinic's admin what happened and why, unless the risk makes it impossible to tell them first.

7.2. A serious or repeated breach may lead to the clinic's agreement ending under clause 12.4 of the Terms of Service.

7.3. Where a breach involves a crime or a personal data breach, the clinic or we may have to report it to the authorities or the Nigeria Data Protection Commission.

8. Changes

We may update this policy under clause 21 of the Terms of Service. Questions go to hello@statorhealth.com, with "Legal" in the subject.