Terms of Service

These Terms of Service (the “Terms”) govern your access to and use of Humenis, a secure file transfer service operated by DentalVault Inc. (“we,” “us,” “our”). By creating an account or using the service, you agree to be bound by these Terms.

1. Eligibility

You must be (a) at least 18 years old, (b) a regulated dental professional licensed to practice in Canada, or staff acting on behalf of one, and (c) responsible for ensuring you have any consents required under PIPEDA, Law 25, or other applicable health-information legislation before transmitting any personal information through the service.

2. Your account

You are responsible for keeping your credentials confidential and for all activity that occurs under your account. You must notify us immediately at security@dentalvault.ca if you suspect unauthorized access. We use argon2id to hash passwords and do not store them in any reversible form.

3. Individual accountability

Each account is tied to an individual practitioner's professional responsibility. Your account is yours alone, and every transfer made under your credentials is recorded against you in the audit trail required under PIPEDA and Quebec Law 25.

Please do not share your login with colleagues or staff. Shared credentials break the link between a transfer and the person who actually made it, which undermines the audit trail. In the event of a patient complaint, regulatory inquiry, or investigation, the account holder is personally accountable for all activity carried out under their credentials. If others on your team need to send files, each person should hold their own account.

4. Acceptable use

You agree not to use Humenis to:

• Transmit a patient's personal health information without that patient's informed consent
• Transmit malware, payloads designed to compromise the recipient, or content unrelated to clinical care
• Circumvent or attempt to circumvent the platform's encryption, two-factor download, or audit mechanisms
• Probe, scan, or test the vulnerability of the platform without prior written authorization (see our Security page for responsible disclosure)
• Resell, white-label, or rebadge the service without a separate written agreement
• Use the service in violation of any applicable law, including the Criminal Code of Canada, PIPEDA, Quebec Law 25, or any applicable provincial health-information statute

5. The free tier

We currently offer ten (10) successful transfers at no cost to help new users evaluate the service. Free-tier limits, scope, and pricing are subject to change with 14 days' notice; changes do not apply retroactively to transfers initiated before the change.

6. Humenis Starter subscription

Humenis Starter is offered at a recurring price of CAD $49.99 per month, plus applicable Canadian sales tax (GST/HST and any provincial sales tax). Billing is handled by Stripe.

• The subscription renews automatically each month until canceled.
• You may cancel at any time from the customer portal accessible at /billing. Cancellation takes effect at the end of the current paid period; service continues until then.
• Refunds are issued at our discretion. Partial-period cancellations are not refunded by default.
• If a payment fails and is not cured within 14 days, the account reverts to the free tier and the free-tier limits apply.

7. File handling and deletion

Files uploaded for transfer are encrypted at rest using AWS KMS (AES-256-GCM, SSE-KMS) and are deleted automatically the moment the recipient successfully downloads them. As a failsafe, every object is also subject to a 24-hour S3 lifecycle expiration. We do not access, scan, index, or process file contents for any purpose other than secure transmission to the recipient you specify.

Transfer metadata (sender, recipient email, patient name, timestamps) is retained as part of the audit log required under PIPEDA's accountability principle. See our Privacy Policy for full retention terms.

8. Termination

You may delete your account at any time by contacting support@dentalvault.ca. We may suspend or terminate your account if you materially breach these Terms; where the breach is curable, we will give you a reasonable opportunity to cure first.

9. Disclaimer and limitation of liability

Humenis is provided as is and as available. Although we engineer for high availability and data integrity, we do not warrant that the service will be uninterrupted, error-free, or perfectly secure against every conceivable threat. To the maximum extent permitted by law, our aggregate liability to you for any claim arising out of or relating to the service is limited to the amount you paid to us in the twelve (12) months preceding the event giving rise to the claim.

Nothing in these Terms limits liability for fraud, willful misconduct, or any liability that cannot be limited under Quebec law.

10. Indemnification

You agree to indemnify and hold us harmless from any claim arising out of your breach of these Terms, your violation of applicable law, or your failure to obtain required patient consent before using the service.

11. Governing law and jurisdiction

These Terms are governed by the laws of the Province of Quebec and the federal laws of Canada applicable therein. The courts sitting in the judicial district of Montreal have exclusive jurisdiction to hear any dispute, subject to any non-waivable statutory consumer protections.

12. Changes

We may amend these Terms from time to time. Material changes will be announced by email to active account holders at least 14 days before they take effect. Continued use of the service after the effective date constitutes acceptance.

13. Contact

DentalVault Inc. support@dentalvault.ca