Terms of service

MediSend is provided by Karizo EOOD, Bulgarian company number 207562809, 150 Sveti Knyaz Boris Street, entrance B, floor 4, Stara Zagora 6000. Contact: [email protected]; +359 895 88 66 45. The customer is the organization named in an order; a user is the individual with their own login.

Personal receiving for a doctor or specialist is free. It needs no clinic, personal subscription or payment card. Organization services have a separate contract and billing for each clinic. The person creating an organization confirms their authority to bind it. The privacy notice provides information; acknowledging it is not blanket consent to processing.

An individual order sets agreed commercial terms. The DPA and mandatory data-protection rules govern clinical-data processing. An anonymous recipient does not become a subscriber by opening a protected link. Mandatory rights under applicable law remain unaffected.

One login can have a personal workspace and memberships in several organizations. Personal examinations, team permissions, notifications and billing follow the selected workspace. Activating personal receiving creates no clinic or subscription and does not consume a clinic team seat.

Two existing logins with different emails can be connected only after independent authentication and explicit confirmation from both. Passwords, MFA, memberships, medical permissions, subscriptions, invoices and history remain separate. Switching requires a valid login for the other account. Unlinking revokes switching sessions without deleting independent accounts or records.

Use an individual login and the minimum necessary permissions. Do not share passwords, PINs or authentication codes. The organization manages invitations and promptly removes memberships when roles change. Revoke unfamiliar connections and active sessions, change your password and contact support if compromise is suspected.

MediSend sends files to specified recipients, receives requested uploads and manages granted access, Patient Keys, history and archives. It is not a healthcare provider, diagnostic system, permanent medical record or emergency channel. The customer retains clinical responsibility and its required statutory archive.

The customer checks the recipient and the legal basis for sending health data. Unauthorized access, malicious files, bypassing limits, unsolicited bulk sending and extracting other patients’ or organizations’ data are prohibited. Do not put clinical content into billing details, support messages or notification text.

Access depends on explicit grants, expiry, use limits and retained content. Registration, saved contacts, professional verification, directory listing or account linking creates no medical permission. Recipients can open a supplied code/PIN without registration.

Support cannot reveal a lost PIN. The sender reissues the key or access and invalidates the previous credentials. Renewing expired access is a separate sender decision and does not recover deleted content. Provider acceptance of an SMS is not confirmed delivery.

Professional profiles and organizations are reviewed separately. An authorized independent reviewer can request corrections, refuse, suspend or revoke verification with a recorded reason. A badge indicates the review and its validity, not a guarantee of competence, clinical outcome or file access.

The professional directory is opt-in and requires current verification. Turning visibility off stops discovery; it does not delete a lawful existing handover or copies of previously public information. A clinic chooses a doctor and explicitly sends the particular files.

Before creation, the plan, price and currency, limits, available trial-review or paid path, payment-method requirement and automatic-billing authorization are displayed. Eligibility follows the independently verified legal organization and its recorded history, including deleted workspaces. A different genuine verified organization may receive its own trial despite sharing an owner. A declared company number is not evidence of registry verification.

A 30-day trial starts after independent approval and your separate explicit acceptance of current Billing terms. Requesting review does not start it or promise start/end dates before approval. If review is incomplete or its trial has already been used, the clinic can be created with new sending restricted and choose a paid plan without awaiting trial approval. Creation alone does not charge a card, authorize automatic billing or prove invoice settlement.

Without valid payment, the displayed grace period follows the trial, normally 14 days, then restricted and archive modes under the retention policy. New sending, uploads and invitations may be restricted. Non-payment does not immediately destroy medical records; existing access remains subject to grants and dates. Card renewal requires a separately completed payment flow with valid authorization.

Each clinic has its own subscription, usage and documents. A proforma requests payment; it is not a final invoice or proof of received funds. Issued documents are immutable; corrections and credit notes are recorded separately after accounting review. A refund request is not a completed refund. Billing shows the applicable cancellation date; cancellation does not automatically waive amounts already due. The existing policy provides no general prorated refund except under agreement, our error or mandatory rights; this draft does not change it.

We may proportionately restrict affected functionality for abuse, security risk or legal obligations and record the reason. Applicable review, export, support and data-subject rights remain available where lawful and safe. Deleting a personal account does not automatically delete organization files, invoices or required audit records.

Material contractual changes receive a new version and separate notification. Visiting, choosing a language, switching workspaces or continuing a session does not accept a new document. An authorized owner or administrator explicitly confirms any required renewal; previous evidence remains unchanged. Notice, export, liability and dispute terms require final legal review.

Without a separate service-level agreement, uninterrupted availability or delivery within clinical deadlines is not guaranteed. Applicable information is provided for maintenance or material restriction; urgent risks may require immediate action. Healthcare organizations maintain a separate reliable emergency channel.

The customer retains rights in its content and grants only the rights needed for agreed processing. The parties protect non-public information and disclose it only as necessary, legally required or instructed. Subscriptions transfer no ownership of MediSend or its software; received content is used only within the granted authority.

Mandatory rights and liability under Bulgarian law remain, including where limitations are prohibited. The existing B2B model addresses foreseeable direct losses and a service cap tied to fees paid/due for the relevant 12-month period without defeating mandatory liability or confidentiality and data protection. Applicability and final wording, including free receiving, require qualified legal review; this draft introduces no new limitation.

Bulgarian law applies. The parties first seek a good-faith resolution and then use the competent court under applicable mandatory rules. Contract notices go to the verified owner or contractual contact; keep these details current. On future approval, the Bulgarian text is contractually authoritative; the English reading adaptation changes no mandatory rights.