Acceptable Use Policy

Version 1.11 — effective 28 October 2026

Scope

This policy applies to all IMORAY accounts, features, APIs and materials. Use must be lawful and consistent with the Intended Purpose.

Permitted use

Adult individuals may purchase and use IMORAY in their own name, as may professionals and organisations. Clinical reporting features and any output used in a clinical workflow are intended solely for authorised professionals and must be reviewed by them before use.

Data and confidentiality

You must not:

• provide patient names, national identification numbers, contact details, case numbers or other direct identifiers;
• upload images, previous reports or documents that have not been anonymised;
• send patient data through email, Xira, tickets, demo or another unapproved channel;
• process data without authority, legal basis or confidentiality measures;
• extract or reconstruct another user's data.

Prohibited clinical uses

Do not use IMORAY for:

• autonomously generated diagnosis, treatment, triage, prioritisation, urgency or patient-specific recommendations;
• automated interpretation of medical images;
• replacing professional review or issuing an unsupervised final report;
• communicating AI output directly to a patient as medical advice;
• signing, professionally stamping or attributing a document to someone who did not review it;
• hiding an error or falsifying a report, source or approval.

Security and integrity

The following are prohibited:

• unauthorised access, intrusive testing without written permission and circumvention of controls;
• credential sharing, limit evasion, scraping or unauthorised automation;
• malware, destructive code, denial-of-service activity or attempts to extract secrets;
• spam, fraud, unlawful discrimination, harassment or infringement of third-party rights;
• resale, sublicensing or integration without written agreement.

AI feature use

Do not attempt to make the system ignore safety limits, invent clinical facts, advise a patient, reproduce protected material in full, or disclose internal data and instructions. Sources and citations must be preserved and reviewed where the feature displays them.

Enforcement

We may investigate suspected abuse, limit a feature, suspend or terminate an account and retain necessary evidence. Measures will be proportionate to risk; where safe and lawful, we will inform the customer and allow an explanation or remedy.

Appeals and reports go to legal@imoray.app. Security issues go to security@imoray.app, without patient data in the email.