What these Terms cover.
These Terms and Conditions ("Terms") are a binding agreement between you and ORAYA Health, Inc. ("ORAYA," "we," "us") governing your use of the ORAYA platform, which includes:
-
the ORAYA clinician platform, the web application at
app.orayasolutions.comused by clinics, physicians, and clinic staff for charting, visit documentation, clinical decision support, scheduling, billing-code suggestion, and patient-record administration; - MyORAYA, the patient mobile application through which a patient can view their record, request appointments, request medication refills, message their care team, and manage their account;
- the ORAYA intake kiosk and any other ORAYA-provided software, interface, or API; and
- all messages we send in connection with the above: text (SMS) messages, emails, and mobile push notifications (collectively, "Messages"; see Section 9).
Together these are the "Platform." By creating an account, signing in, or otherwise using the Platform, you agree to these Terms. If you do not agree, do not use the Platform.
Clinicians and clinic staff
Physicians, clinicians, and staff who access the Platform under a subscription held by a clinic, practice, health system, or other organization (each, a "Clinic"). A Provider User's access is additionally governed by the agreement between ORAYA and the Clinic (the "Clinic Agreement," including any Business Associate Agreement).
Where the Clinic Agreement and these Terms conflict as to a Provider User's access, the Clinic Agreement controls.
Patients and authorized representatives
Individuals who use MyORAYA to access their own health record held by a Clinic, or the record of someone for whom they are a legally authorized representative.
These Terms apply to both kinds of user, with differences noted throughout.
2. Eligibility
You must be at least 18 years old and located in the United States to create an account. If you are accessing a record as a parent, guardian, or other legally authorized representative, you represent that you hold that authority and will notify the Clinic promptly if it ends. Provider Users represent that they are authorized by the Clinic to access the Platform and, where applicable, hold a valid professional license in good standing.
- Introduction and scope
- Eligibility
- Accounts, verification, and security
- Not medical care, not an emergency service
- Clinic subscriptions, fees, and billing
- Your health record and your content
- Acceptable use
- Availability, changes, and support
- Messaging terms (SMS, email, and push)
- Intellectual property
- Third-party services
- Privacy and HIPAA
- Disclaimers
- Limitation of liability
- Indemnification
- Term, suspension, and termination
- Changes to these Terms
- Governing law and disputes
- Miscellaneous
- Contact
Your account, and your obligations to protect it.
To create an account you must provide accurate information and keep it current. Account access is protected by a password and by one-time verification codes ("OTP codes") sent to a phone number or email address you have verified with us.
You agree to:
- keep your password and OTP codes confidential (ORAYA staff will never ask you for an OTP code, and every code we send says so);
- use only your own account and not share credentials or sessions;
- keep your verified phone number and email address current, including when you change or give up a mobile number (see Section 9.7); and
- notify us and your Clinic promptly at info@orayasolutions.com if you believe your account has been accessed without your authorization.
We may suspend an account, require re-verification, or sign out active sessions when we detect suspicious activity, and we will notify you of material account-security events as described in Section 9.2.
3.1 Connecting a MyORAYA account to a patient record
A MyORAYA account is connected to a Clinic's patient record only after an identity-matching and verification process, which may include verification codes, knowledge-based questions, and review by Clinic staff. You must provide truthful identifying information. If you believe your account has been connected to the wrong record, report it immediately through the app or to your Clinic; we will remove the connection while it is reviewed.
The Platform does not provide medical advice, diagnosis, or treatment.
Using it does not create a physician–patient relationship with ORAYA.
For Patient Users
Information shown in MyORAYA comes from your Clinic's record. It may be incomplete, delayed, or superseded by newer information your clinician has. Always talk to your clinician before acting on anything you see in the app.
For Provider Users
ORAYA features that summarize, draft, code, chart, suggest, calculate, or otherwise generate clinical content are clinical decision support. They are intended to support, not replace, your independent professional judgment. You remain solely responsible for reviewing and verifying any generated content before relying on it, entering it in the medical record, submitting it for billing, or acting on it. Generated content may contain errors or omissions.
AI-generated content
Parts of the Platform use automated and AI-assisted processing, including transcription of visits and generation of draft clinical and billing content. Such output must be reviewed by a qualified clinician before use.
Who pays for what.
Provider User access is provided under a paid subscription held by the Clinic. Fees, seat counts, subscription term, renewal, and payment terms are set out in the applicable order form or Clinic Agreement. Unless that agreement says otherwise: subscriptions renew automatically for successive terms; fees are non-refundable except as required by law; and we may change pricing effective at the start of a renewal term with prior notice.
MyORAYA is provided to Patient Users at no charge by their Clinic. Your mobile carrier may still charge you for data and messages (see Section 9.5).
Your Clinic owns the record; you own what you submit.
Your medical record is maintained by your Clinic, which is the covered entity responsible for it. ORAYA processes that record on the Clinic's behalf as a business associate under HIPAA.
- Corrections. Requests to amend or correct information in your medical record go to your Clinic; ORAYA cannot unilaterally change a Clinic's record. Some contact and demographic details can be updated by you directly in MyORAYA, subject to verification.
- Self-reported information. Information you enter yourself (including self-reported allergies, medications, symptoms, and intake answers) is labeled as patient-reported and is reviewed by your care team before it becomes part of the clinical record.
- Your content. You retain ownership of content you submit. You grant ORAYA a limited licence to host, process, transmit, and display that content solely to operate and support the Platform and as permitted by the Clinic Agreement, the BAA, and the Privacy Policy.
What you agree not to do.
You agree not to:
- access, attempt to access, or request any record other than your own or one you are authorized to access;
- misrepresent your identity, licensure, or authority;
- share, export, or publish another person's health information without a lawful basis;
- probe, scan, penetration-test, disrupt, or overload the Platform, or circumvent any authentication, rate limit, audit log, or access control;
- scrape, bulk-download, or use automated means to extract data except through interfaces we expressly provide;
- reverse-engineer, decompile, or create derivative works from the Platform, except where that restriction is unenforceable by law;
- use the Platform to develop a competing product, or to train machine learning models on Platform data;
- upload malware, or content that is unlawful, harassing, or infringing; or
- use the Platform in violation of HIPAA, state privacy or telehealth law, professional licensure requirements, or any other applicable law.
8. Availability, changes, and support
We aim to keep the Platform available but do not guarantee uninterrupted access. We may modify, suspend, or discontinue features, and may perform maintenance, with reasonable notice where practicable. Emergency maintenance and security actions may be taken without advance notice. Support is provided as described in the Clinic Agreement, or for Patient Users on a commercially reasonable-efforts basis through the app or info@orayasolutions.com.
SMS, email, and push.
This section is the messaging program agreement between you and ORAYA. It applies to every text message, email, and push notification we send you.
9.1 Your consent
Consent is collected directly by ORAYA, from you. By entering your own mobile phone number in the Platform, whether in the MyORAYA app or at an ORAYA patient check-in kiosk, checking the consent box displayed with the number field (unchecked by default), and verifying the number with a one-time passcode, you consent to receive text (SMS) messages from ORAYA at that number for the purposes described in this section, including messages sent using an automatic telephone dialing system. No one may enroll a number on your behalf, and ORAYA does not enroll numbers obtained from any other source. Consent to receive text messages is not a condition of receiving care, of any purchase, or of using the Platform; email-based verification is available as an alternative, and you may decline or withdraw SMS consent at any time as described in Section 9.6.
By providing an email address and creating an account, you consent to receive service emails at that address. By enabling notifications in the MyORAYA app you consent to receive push notifications on that device.
9.2 Messages you cannot turn off (security and transactional)
Some messages are required to operate your account securely. If you have a verified phone number, we may send these by SMS; we also send the equivalent by email. These are the only categories of SMS ORAYA sends today:
| # | Text (SMS) message | When it is sent |
|---|---|---|
| 1 | Sign-in verification code | Each time you request a code to sign in or verify your identity |
| 2 | New-contact confirmation code | When you add or change a phone number or email address |
| 3 | Contact-change notice | To your previous number when a contact detail is changed, so an unauthorized change is visible to you |
| 4 | Account-recovery notice | When your account is recovered on a new device and prior sessions are signed out |
Verification codes are single-use, time-limited, and never shared. Notices (3 and 4) deliberately contain no clinical information.
You cannot opt out of receiving equivalent security notices altogether (if you opt out of SMS, we deliver them by email and in the app's security history) because they are how you learn about unauthorized access to your health record.
9.3 Emails you may receive
| Category | Examples | Can you turn it off? |
|---|---|---|
| Account security | Verification code, password reset, contact-change code and notice, account-recovery notice | No, required to operate the account |
| Record connection | Connection request approved or declined; an account was connected to your record; a connection was removed | No, security-relevant |
| Appointments | Request received, confirmed, declined, cancelled | Yes, in app notification settings |
| Provider workflow (Provider Users only) | A patient request is waiting; 24-hour reminder; 72-hour escalation to the care team | Yes, in your notification preferences |
ORAYA does not send marketing or promotional email through the Platform. We do not sell or rent your email address.
9.4 Message frequency
Message frequency varies and depends on your activity. ORAYA does not run recurring or campaign-based messaging; there is no fixed weekly or monthly send. Text messages are sent only in response to an action you take (such as requesting a sign-in code or changing your contact details) or a security-relevant event on your account. In ordinary use most people receive fewer than 10 text messages per month, and many months none at all; a month in which you sign in frequently from new devices will be higher.
Email frequency likewise varies with your activity. Appointment emails are sent per appointment event. For Provider Users, each patient request generates at most three emails (initial notice, a reminder after 24 hours, and an escalation after 72 hours if the request is still unaddressed).
Push notifications are sent per event: appointment updates and reminders, new documents in your record, and record-connection changes.
9.5 Message and data rates
Message and data rates may apply. ORAYA does not charge you for text messages, emails, or push notifications, but your mobile carrier or internet provider may charge you for messages sent and received and for data used. Check your plan; you are responsible for those charges.
Message delivery is subject to your carrier's network and is not guaranteed. Carriers are not liable for delayed or undelivered messages.
9.6 Opting out: STOP and HELP
- To stop text messages, reply STOP to any text message from ORAYA. You will receive a single confirmation that no further texts will be sent to that number. You can also remove or replace your mobile number in the MyORAYA app.
- To resume, reply START or re-verify the number in the app.
- For help, reply HELP to any message, email info@orayasolutions.com, or call 332-323-0287.
What opting out means. If you stop text messages, SMS-based verification codes will no longer be available on that number. You will need to use email verification to sign in, and security notices will be delivered by email and in the app. Opting out of SMS does not opt you out of email or push notifications, and does not affect your care.
Push notifications can be turned off at any time in your device settings or in the MyORAYA app. Optional email categories can be turned off in your notification settings.
9.7 Changing or giving up your number
You agree to notify us (by updating your number in the app) before you give up, transfer, or change a mobile number you have given us, so messages intended for you (including verification codes and security notices) are not delivered to someone else. You represent that you are the subscriber or customary user of any number you provide.
9.8 Supported carriers
Messaging is supported on major U.S. wireless carriers. Carrier support may change, and carriers are not liable for delayed or undelivered messages.
Ownership, dependencies, and how HIPAA applies.
10. Intellectual property
The Platform, including its software, interfaces, models, prompts, content, and trademarks (including "ORAYA," "MyORAYA," and "VERA"), is owned by ORAYA or its licensors and is protected by intellectual property law. Subject to these Terms, we grant you a limited, non-exclusive, non-transferable, revocable licence to use the Platform for its intended purpose. No other rights are granted.
Feedback you send us may be used without restriction or obligation to you.
11. Third-party services
The Platform relies on third-party service providers (for example cloud hosting, database, messaging, transcription, and AI model providers) and may integrate with third-party systems such as your Clinic's EHR. Those services are governed by their own terms, and where they process health information on our behalf we contract with them accordingly. A current list of subprocessors is available in the Privacy Policy. We are not responsible for the content or practices of third-party systems we do not control.
12. Privacy and HIPAA
Our handling of personal and health information is described in the Privacy Policy, which is incorporated into these Terms. For protected health information, ORAYA acts as a business associate of your Clinic under HIPAA, and your Clinic's Notice of Privacy Practices governs how your health information is used and disclosed for treatment, payment, and health care operations.
Warranties, limits, and indemnification.
13. Disclaimers
EXCEPT AS EXPRESSLY STATED IN A WRITTEN AGREEMENT WITH A CLINIC, THE PLATFORM IS PROVIDED "AS IS" AND "AS AVAILABLE," WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT, AND ANY WARRANTY THAT THE PLATFORM WILL BE UNINTERRUPTED, ERROR-FREE, OR THAT CONTENT IT GENERATES WILL BE ACCURATE OR COMPLETE. ORAYA DOES NOT WARRANT ANY CLINICAL OUTCOME.
Some jurisdictions do not allow the exclusion of certain warranties, so parts of this section may not apply to you.
14. Limitation of liability
TO THE MAXIMUM EXTENT PERMITTED BY LAW, ORAYA AND ITS OFFICERS, EMPLOYEES, AND SUPPLIERS WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR FOR LOST PROFITS, REVENUE, DATA, OR GOODWILL, ARISING OUT OF OR RELATING TO THE PLATFORM, EVEN IF ADVISED OF THE POSSIBILITY. ORAYA'S TOTAL AGGREGATE LIABILITY ARISING OUT OF OR RELATING TO THESE TERMS WILL NOT EXCEED THE GREATER OF (A) THE AMOUNTS PAID TO ORAYA FOR THE PLATFORM IN THE TWELVE MONTHS BEFORE THE EVENT GIVING RISE TO THE CLAIM, OR (B) ONE HUNDRED U.S. DOLLARS ($100).
These limitations do not apply to liability that cannot be limited by law, and nothing in these Terms limits either party's obligations under an executed Business Associate Agreement.
15. Indemnification
You agree to indemnify and hold ORAYA harmless from claims, damages, and expenses (including reasonable legal fees) arising from your breach of these Terms, your misuse of the Platform, your violation of law, or, for Provider Users, your clinical decisions and professional conduct.
How these Terms start, change, and end.
16. Term, suspension, and termination
These Terms apply for as long as you use the Platform. You may stop using the Platform at any time and may ask your Clinic to disconnect your MyORAYA account from your record. We may suspend or terminate access for breach of these Terms, suspected unauthorized access to records, non-payment under a Clinic Agreement, or where required by law.
Termination does not delete your medical record; that record belongs to your Clinic and is retained, returned, or destroyed as set out in the Clinic Agreement, our BAA, and applicable law. Sections 6, 7, 10, and 12 through 18 survive termination.
17. Changes to these Terms
We may update these Terms. We will post the updated version at orayasolutions.com/terms and update the "Last updated" date. For material changes we will give notice in the Platform or by email before they take effect. Continued use after the effective date means you accept the updated Terms. If you do not accept them, stop using the Platform.
18. Governing law and disputes
These Terms are governed by the laws of the State of Delaware, without regard to conflict-of-laws rules. The parties submit to the exclusive jurisdiction of the state and federal courts located in Delaware. Nothing in these Terms limits any right you have under mandatory consumer protection or health privacy law in your state of residence.
19. Miscellaneous
These Terms, together with the Privacy Policy and any Clinic Agreement, constitute the entire agreement between you and ORAYA regarding the Platform. If any provision is unenforceable, the remainder stays in effect. Our failure to enforce a provision is not a waiver. You may not assign these Terms; we may assign them in connection with a merger, acquisition, or sale of assets.
Where to send notices and questions.
ORAYA Health, Inc.
- Support: info@orayasolutions.com · 332-323-0287
- Privacy: info@orayasolutions.com
- Legal notices: info@orayasolutions.com
These Terms work alongside our Privacy Policy.
Read the Privacy Policy for how we handle your information, or return to the ORAYA overview.