Legal

Terms of Service & Privacy Policy

Effective date: March 2026  ·  Governing law: British Columbia, Canada  ·  Applies to previsit.ca and all PreVisit services

⚠ Beta Product — No Real Patient Data PreVisit is currently in beta and has not completed compliance review for use in live clinical settings. Do not submit or process real patient information. This product is available for evaluation and demonstration purposes only. Clinician accounts detected using real patient data during the beta period are subject to immediate suspension.
All Users
Everyone
Sections 1–8, 11, 15–20, and all of Part 2 apply to all users.
Clinician
Clinician Users
Sections 5, 9, 10, 12–14, 17 impose additional obligations on clinicians and clinic operators.
Patient
Patient Users
Section 4, 6, and Part 2 (Sections 21–30) are particularly relevant to patients completing intake forms.
Table of Contents
  1. Definitions
  2. Nature of the Service
  3. Regulatory Status
  4. Not a Medical Device
  5. Clinical Liability & Accountability
  6. AI Output — Limitations
  7. Acceptance of Terms
  8. Eligibility & Beta Lifecycle
  9. Prohibited Uses
  10. Account Security Obligations
  11. Intellectual Property
  12. Suspension & Termination
  13. Force Majeure
  14. Feedback License
  15. Disclaimer of Warranties
  16. Limitation of Liability
  17. Indemnification
  18. Dispute Resolution & Arbitration
  19. Changes to Terms
  20. Governing Law
  21. Privacy Framework & Roles
  22. Information We Collect
  23. How We Use Information
  24. AI Processing Disclosure
  25. Data Residency & Cross-Border Transfer
  26. Third-Party Sub-Processors
  27. Data Retention & Deletion
  28. Security & Breach Response
  29. Your Rights Under PIPA BC
  30. Contact & Complaints
Part 1 — Terms of Service

1. Definitions All Users

"PreVisit"The software service operated at previsit.ca and its subdomains, including the patient intake form, the clinician workspace, and associated backend infrastructure.
"Operator"The individual or entity operating PreVisit, incorporated or based in British Columbia, Canada.
"Clinician User"Any registered healthcare professional — including physicians, nurse practitioners, and other regulated health professionals — who accesses the PreVisit clinician workspace, whether as an individual practitioner or on behalf of a clinic.
"Clinic Operator"Any clinic, institution, or organisation whose staff or practitioners use PreVisit. Where a Clinician User accesses PreVisit on behalf of a Clinic Operator, these Terms bind both the individual and the organisation.
"Patient User"Any individual who completes a PreVisit intake questionnaire.
"Intake Submission"The structured health history data submitted by a Patient User through the intake form.
"AI-Generated Summary"A draft clinical summary generated by a third-party large language model (Anthropic Claude) from an Intake Submission. This is an unverified administrative draft, not a clinical document or diagnosis.
"Clinician Workspace"The authentication-protected interface accessible only to authorised Clinician Users, where Intake Submissions and AI-Generated Summaries can be reviewed, annotated, and managed.
"Data Controller"The entity that determines the purposes and means of processing personal information. In the PreVisit context, the Clinician User and their Clinic Operator are the Data Controller for patient Intake Submissions.
"Data Processor"The entity that processes personal information on behalf of a Data Controller. PreVisit acts as a Data Processor with respect to patient Intake Submissions, under the instructions of the Clinician User / Clinic Operator.
"Personal Information"Information about an identifiable individual, as defined under the Personal Information Protection Act, SBC 2003, c. 63 (PIPA BC).
"Beta Period"The current phase of the service, during which PreVisit is available for demonstration and evaluation only, and real patient data must not be processed.
"Clinical Release"A future phase formally announced by the Operator, following compliance review, during which use with real patient data is permitted under updated obligations.
"Feedback"Any suggestion, idea, enhancement request, or other input provided by a user regarding the service.

2. Nature of the Service All Users

PreVisit is an administrative pre-visit intake tool designed to collect structured patient history before a clinical appointment and present that information to a clinician in a structured format. It is a workflow efficiency product, not a clinical care platform.

Data Roles

The Clinician User and their Clinic Operator are the Data Controller for all Intake Submissions — they determine why patient data is collected and how it is used. PreVisit acts solely as a Data Processor, processing personal information only on documented instructions from the Data Controller and for no independent purpose beyond delivering the service. The Operator reserves the right to independently process limited, non-identifiable metadata (e.g., aggregate usage counts, session timing data) for service security, performance monitoring, and billing.

PreVisit does not:

All clinical interpretation, judgment, and decision-making rests exclusively with the treating Clinician User.

3. Regulatory Status All Users

Health Canada — Software as a Medical Device (SaMD)

PreVisit is designed and operated as an administrative software tool and does not meet the definition of a medical device under the Food and Drugs Act (Canada) or the Medical Devices Regulations (SOR/98-282). It is not licensed, approved, cleared, or regulated as a medical device by Health Canada.

Health Canada's guidance on Software as a Medical Device (SaMD) explicitly excludes software intended for administrative support of a healthcare facility, patient registration, workflow management, and tools that collect and transmit health information without making or driving clinical decisions. PreVisit operates within these excluded categories.

Clinician Users are responsible for ensuring their use of PreVisit complies with any applicable college or regulatory body guidance regarding the use of AI tools in clinical settings, including but not limited to:

Artificial Intelligence and Data Act (AIDA)

Canada's proposed Artificial Intelligence and Data Act (Bill C-27) is before Parliament as of the effective date of these Terms and is not yet in force. PreVisit will monitor its progression and update its practices accordingly upon enactment.

Provincial Health Information Law

PreVisit operates as a private-sector service governed by PIPA BC. PHIPA is an Ontario statute and does not apply in British Columbia. Clinician Users who are subject to FIPPA (BC public sector) or the E-Health (Personal Health Information Access and Protection of Privacy) Act should assess whether their institutional policies permit use of private-sector tools for pre-visit intake, and obtain any required institutional approvals before using PreVisit with real patient data.

4. Not a Medical Device — Clinical Disclaimer All Users

⚠ Critical Disclaimer PreVisit is not a medical device, clinical decision support system, diagnostic tool, or treatment recommendation system. AI-Generated Summaries are unverified administrative drafts. They may contain errors, omissions, misinterpretations, or clinically inappropriate language. They must not be used in isolation or as the sole basis for any clinical decision.

Every AI-Generated Summary produced by PreVisit must be independently reviewed, verified, and validated by the treating Clinician User prior to being relied upon in any clinical context. The Clinician User bears full professional and legal responsibility for the accuracy of any information entered into a medical record and for all clinical decisions made during or following a patient encounter.

Patients should be aware that the responses they provide through PreVisit are collected for the purpose of preparing a structured intake summary for their clinician. These responses do not constitute a clinical assessment, and the AI-assisted summary they generate does not represent a diagnosis, prognosis, or medical opinion.

5. Clinical Liability & Professional Accountability Clinician

Clinician accountability

The Clinician User is solely and exclusively responsible for all clinical decisions, clinical documentation, and patient care outcomes arising from or associated with the use of PreVisit. This responsibility is non-delegable and cannot be transferred to PreVisit or its Operator by virtue of using this service.

In accordance with the CPSBC's interim guidance on AI in medicine (April 2024), Clinician Users must:

Patient consent warranty

By sending an intake link to any patient, the Clinician User legally represents and warrants that they have, prior to sending the link:

Breach of this warranty constitutes a material breach of these Terms and may result in immediate account suspension.

No clinician–patient relationship with the Operator

Use of PreVisit does not create any clinical, therapeutic, or duty-of-care relationship between the Patient User and the Operator. The Operator is a software service provider, not a healthcare provider. Any duty of care arising from a clinical encounter rests entirely with the Clinician User and their employing or contracting institution.

Malpractice and professional liability

The Operator assumes no liability for any adverse clinical outcome, patient harm, documentation error, or professional regulatory proceeding arising from a Clinician User's reliance on PreVisit output. Clinician Users are strongly advised to ensure their professional liability insurance covers the use of AI-assisted workflow tools.

Emergency situations

PreVisit is not designed for use in emergency or urgent care situations. If a patient's responses indicate a medical emergency, the Clinician User must follow appropriate emergency protocols. PreVisit includes logic to surface potential red flags for clinician awareness, but this feature does not replace clinical triage and must not be relied upon as a screening tool for acute emergencies.

6. AI-Generated Output — Limitations and Obligations All Users

AI-Generated Summaries are produced by a large language model (Anthropic Claude) based on patient-reported information. They are probabilistic outputs with the following known limitations:

The Clinician User accepts these limitations by using PreVisit and agrees that no AI-Generated Summary will be entered into a medical record, shared with a patient, or used to inform clinical decisions without independent clinician review and validation.

7. Acceptance of Terms All Users

By accessing or using PreVisit — including completing an intake form as a Patient User or accessing the clinician workspace as a Clinician User — you agree to be bound by these Terms of Service and the Privacy Policy set out in Part 2.

If you do not agree to these Terms, do not use PreVisit. If you are a Clinician User accessing PreVisit on behalf of a Clinic Operator, you represent that you have authority to bind that organisation to these Terms and that the organisation has reviewed and accepts them.

8. Eligibility, Permitted Use & Beta Lifecycle All Users

Who may use PreVisit

PreVisit is intended for use by:

Service lifecycle & obligations by stage

PreVisit is developed in defined stages. The obligations associated with each stage apply automatically upon transition:

Current Stage
🔶 Beta
Demonstration and evaluation only. No real patient data. Accounts found processing patient data are subject to immediate suspension.
Next Stage
⬜ Early Access
Limited clinical pilots with consenting clinics. Updated Terms, DPA, and patient disclosure requirements apply. Announced formally by the Operator.
Future Stage
⬜ Clinical Release
General availability with full compliance review completed. All obligations under updated Terms and Privacy Policy apply. Clinicians must re-accept updated Terms at this stage.

PreVisit is intended for use in Canada. Users accessing PreVisit from outside Canada are responsible for ensuring their use complies with the laws of their jurisdiction.

9. Prohibited Uses All Users

You agree not to use PreVisit to:

10. Account Security Obligations Clinician

Access to the PreVisit Clinician Workspace is controlled by a unique authentication key issued to each Clinician User or Clinic Operator. The security of that credential is the sole responsibility of the account holder. By accessing the Clinician Workspace, you agree to:

11. Intellectual Property All Users

All software, design, question logic, workflow architecture, and other proprietary content comprising PreVisit is owned by the Operator and is protected by applicable intellectual property laws. No licence to the Operator's intellectual property is granted by these Terms beyond the right to use the service as described herein.

Patient data

Intake Submissions (patient-reported health information) remain the personal information of the Patient User and are processed by the Operator as a Data Processor on behalf of the Clinician User and their Clinic Operator. Intake Submissions are not used to train AI models or for any purpose other than generating the intake summary and operating the service.

AI-Generated Summaries — IP Assignment

Upon a Clinician User reviewing an AI-Generated Summary in the Clinician Workspace, all intellectual property rights in the raw output generated by Anthropic Claude from that Intake Submission are hereby assigned to and vested in the Clinician User. The Operator does not retain, claim, or assert any intellectual property interest in AI-Generated Summaries after review. AI-Generated Summaries reviewed and adopted by a Clinician User become part of the clinician's professional documentation and are treated accordingly.

Feedback

Intellectual property rights in any Feedback submitted to the Operator are governed by Section 14 (Feedback License).

12. Service Suspension & Termination Clinician

Operator's right to suspend

The Operator may immediately suspend access to the Clinician Workspace, without prior notice, if:

The Operator will provide written notice of suspension as soon as practicable after taking such action and will work in good faith to restore access once the underlying issue is resolved.

Termination by either party

Either party may terminate use of the service at any time. The Clinician User may cease using the service and request deletion of all associated data by contacting hello@previsit.ca. The Operator may terminate access on 14 days' written notice for any reason, or immediately for material breach. Upon termination, the Clinician User has 30 days to export any data they require before it is deleted per Section 27.

Survival

Sections 4, 5, 6, 11, 15, 16, 17, 18, and 20 survive termination of these Terms.

13. Force Majeure All Users

The Operator shall not be liable for any failure or delay in performing its obligations under these Terms to the extent that such failure or delay is caused by circumstances beyond the Operator's reasonable control, including but not limited to: acts of God; pandemic or epidemic; war, terrorism, or civil unrest; governmental or regulatory actions; power outages; internet or telecommunications disruptions; third-party service outages (including outages affecting Anthropic, Supabase, Railway, Resend, or Netlify); cyberattacks; or other events that could not have been reasonably anticipated or mitigated.

In the event of a force majeure event, the Operator will use commercially reasonable efforts to notify affected users and to restore service as quickly as practicable.

14. Feedback License All Users

If you provide Feedback to the Operator — whether through in-product prompts, email, or any other channel — you grant the Operator a perpetual, worldwide, royalty-free, sublicensable, irrevocable licence to use, reproduce, modify, adapt, distribute, and incorporate that Feedback into the service or any other products or services, without compensation to you and without restriction. This licence does not grant the Operator any right to use your name, likeness, or identifying information without your separate consent.

You represent that any Feedback you provide is your own and does not infringe the intellectual property rights of any third party.

15. Disclaimer of Warranties All Users

PreVisit is provided "as is" and "as available," without warranty of any kind, express or implied, including but not limited to warranties of merchantability, fitness for a particular purpose, accuracy, reliability, or non-infringement.

The Operator does not warrant that:

16. Limitation of Liability All Users

To the fullest extent permitted by applicable law, the Operator, its directors, officers, employees, contractors, and affiliates shall not be liable for any direct, indirect, incidental, special, consequential, exemplary, or punitive damages arising from or related to:

Aggregate Liability Cap Where liability cannot be excluded by applicable law, the Operator's total aggregate liability to any user arising out of or related to these Terms shall not exceed the greater of: (a) CAD $1,000; or (b) the total fees paid by that user to the Operator in the twelve (12) months immediately preceding the event giving rise to the claim. For users who have not paid any fees (including during the Beta Period), the aggregate cap is CAD $1,000.

The parties acknowledge that this limitation reflects a reasonable allocation of risk and that the Operator would not provide the service on the terms set out herein without these limitations.

17. Indemnification Clinician

Clinician User indemnification of Operator

The Clinician User agrees to indemnify, defend, and hold harmless the Operator and its personnel from any claim, demand, loss, liability, or expense (including reasonable legal fees) arising from: (a) the Clinician User's use of PreVisit in violation of these Terms; (b) the Clinician User's violation of any applicable law or professional obligation; (c) any clinical decision made by the Clinician User in connection with use of the service; (d) the Clinician User's failure to obtain patient consent as required by Section 5; or (e) the Clinician User's breach of account security obligations under Section 10.

Operator indemnification of Clinician Users

The Operator agrees to indemnify, defend, and hold harmless Clinician Users and Clinic Operators from any third-party claim alleging that the PreVisit software, as provided by the Operator, infringes a third-party intellectual property right, provided that: (a) the Clinician User promptly notifies the Operator of the claim; (b) the Operator has sole control of the defence and any settlement; and (c) the Clinician User provides reasonable cooperation at the Operator's expense.

Mutual carve-outs

Neither party's indemnification obligation applies to claims arising from or attributable to: (a) the indemnified party's own gross negligence or wilful misconduct; (b) fraud or fraudulent misrepresentation by the indemnified party; or (c) the indemnified party's breach of these Terms.

18. Dispute Resolution & Arbitration All Users

Step 1 — Negotiation (30 days)

Before initiating any formal proceeding, the disputing party must provide written notice to the other describing the nature and basis of the dispute. The parties agree to negotiate in good faith for a period of 30 days from the date of that notice.

Step 2 — Mediation (60 days)

If negotiation does not resolve the dispute within 30 days, either party may refer the dispute to non-binding mediation administered by the BC Mediator Roster Society or another mutually agreed mediator. The costs of mediation shall be shared equally unless otherwise agreed.

Step 3 — Binding Arbitration (Clinician Users & Clinic Operators)

Arbitration & Class-Action Waiver — B2B This section applies to Clinician Users and Clinic Operators. If mediation fails to resolve the dispute within 60 days, the dispute shall be submitted to final and binding arbitration administered by the BC International Commercial Arbitration Centre (BCICAC) in accordance with its Domestic Commercial Arbitration Rules. Arbitration shall be conducted in English in Vancouver, BC, before a single arbitrator. You waive any right to commence, participate in, or recover through any class action, collective claim, or representative proceeding.

The arbitrator's award shall be final and binding and may be entered as a judgment in any court of competent jurisdiction. Either party may seek urgent interim or injunctive relief from the BC Supreme Court without waiving the right to arbitrate.

Patient Users — Courts

Patient Users may bring disputes in the courts of British Columbia. Nothing in these Terms prevents a Patient User from bringing an individual claim in BC Small Claims Court.

19. Changes to Terms All Users

30-Day Written Notice Required For any material change to these Terms or the Privacy Policy, the Operator will provide at least 30 days' advance written notice to active Clinician Users via the email address on file, before the change takes effect. Non-material changes (such as typographical corrections or clarifications that do not alter rights or obligations) may be made without notice.

Material changes include, but are not limited to: changes to data retention periods, sub-processor additions or removals, modifications to liability limits, alterations to dispute resolution procedures, and changes to the nature or scope of the service.

A revised effective date will be posted at this URL. If a Clinician User does not accept a material change, they may terminate use of the service before the change takes effect and request deletion of their data under Section 27. Continued use of PreVisit after a change takes effect constitutes acceptance of the revised Terms.

Given that PreVisit is in active development and the regulatory landscape for AI health tools is evolving rapidly, these Terms are expected to be substantively updated upon each lifecycle stage transition (Section 8).

20. Governing Law All Users

These Terms are governed by the laws of the Province of British Columbia and the federal laws of Canada applicable therein, without regard to conflict of law principles. Subject to the arbitration provisions in Section 18, the parties irrevocably submit to the exclusive jurisdiction of the courts of British Columbia for any matter not subject to arbitration.


Part 2 — Privacy Policy
Applicable Law This Privacy Policy is governed by the Personal Information Protection Act, SBC 2003, c. 63 (PIPA BC), applicable to private-sector organisations in British Columbia. PIPA BC has been deemed substantially similar to Canada's federal Personal Information Protection and Electronic Documents Act (PIPEDA). PHIPA is an Ontario statute and does not apply. Clinician Users in other provinces should assess the laws of their jurisdiction.

21. Privacy Framework & Roles All Users

Data Controller and Data Processor

For each patient Intake Submission, the Clinician User and their Clinic Operator are the Data Controller: they determine why patient information is being collected and what it is used for (clinical intake preparation). PreVisit acts solely as a Data Processor: it processes the personal information only to deliver the service and only on the documented instructions of the Data Controller.

As a Data Processor, the Operator will:

Independent metadata processing

Separately from its role as Data Processor for patient information, the Operator independently processes limited, non-identifiable operational metadata (e.g., aggregate session counts, feature usage statistics, server performance metrics) as a Data Controller for the purposes of service security, performance monitoring, and billing. This metadata cannot be used to identify individual patients.

22. Information We Collect All Users

Patient intake data

When a patient completes a PreVisit intake form, we collect the health information they voluntarily provide, which may include:

We do not request names, date of birth, health card numbers, provincial health identifier numbers, or government-issued identification. Patients should not enter identifying information beyond what the intake form requests. Any such information entered voluntarily in free-text fields is collected incidentally and handled as personal information under PIPA BC.

AI-Generated Summary data

Patient intake responses are processed by a third-party AI system (Anthropic Claude) to produce an AI-Generated Summary. This summary, together with the original intake data, is stored and made available in the password-protected Clinician Workspace.

Clinician workspace data

Clinician Users may add annotations, edited summaries, and clinical notes through the workspace. This information is stored alongside the intake submission. Clinicians are responsible for ensuring they do not enter information in the workspace beyond what is appropriate for an administrative system of this type.

Technical and operational data

We collect standard server logs including IP addresses, browser type, device type, and timestamps. This information is used for service security, reliability monitoring, and debugging. It is not linked to the content of intake submissions for any purpose other than identifying security incidents.

23. How We Use Information All Users

Information collected through PreVisit is used solely for the following purposes:

We do not use intake data for marketing, advertising, research publication, sale to third parties, or any purpose other than those listed above. We do not use intake submissions to train AI models.

24. AI Processing Disclosure Patient

Patient intake responses are transmitted to Anthropic's Claude API, a large language model operated by Anthropic PBC (a US-incorporated entity), for the purpose of generating the AI-Generated Summary. This processing occurs transiently — Anthropic does not retain API-submitted data for model training under its standard API terms of service.

By submitting an intake form, the Patient User acknowledges and consents to their responses being processed by an AI system for the purpose of generating a structured clinical summary for their healthcare provider. This disclosure satisfies the collection notice requirements under PIPA BC.

Patient Users are informed that:

25. Data Residency & Cross-Border Transfer All Users

⚠ Data Residency Disclosure Data processed and stored by PreVisit may be located outside Canada, primarily in the United States. This is disclosed in compliance with PIPA BC obligations relating to cross-border transfers of personal information.

PreVisit's current infrastructure involves the following data locations:

Under PIPA BC, organisations may transfer personal information outside British Columbia provided they take steps to ensure comparable protection. The Operator relies on contractual terms and service provider privacy commitments to fulfil this obligation.

Clinician Users employed by public sector organisations (such as health authorities) subject to FIPPA should be aware that FIPPA imposes stricter requirements on storage of personal information outside Canada. Such users should consult their institution's privacy office before using PreVisit with real patient data. Canadian data residency options (Railway Canada region; Supabase Canada region) are under assessment as part of the compliance roadmap for the Early Access and Clinical Release stages.

26. Third-Party Sub-Processors All Users

PreVisit engages the following sub-processors to deliver the service. Each operates under its own terms of service and privacy policy. Sub-processor list version 1.1 — last updated 2026-04-17.

We do not share personal information with sub-processors beyond what is necessary for service delivery. We do not sell personal information to any party.

Sub-processor change notification

The Operator will provide active Clinician Users with at least 30 days' advance written notice via the email address on file before adding, replacing, or removing any sub-processor that processes patient personal information. Notice will include the name, location, and purpose of the new or changed sub-processor. Clinician Users who object to a sub-processor change may terminate their use of the service before the change takes effect and request deletion of their data under Section 27. A current, up-to-date list of sub-processors is maintained at this URL.

27. Data Retention & Deletion All Users

Standard retention periods

The following retention periods apply to data stored in PreVisit's systems:

Backup retention

Database backups are created for disaster recovery purposes. Personal information deleted from the primary database will be purged from backup systems within 60 days of primary deletion.

Account termination

Upon termination of a Clinician User's account (whether by the user or by the Operator), the Clinician User has 30 days to export any data they require. Following that period, all submissions and associated data linked to the account will be permanently deleted, including from backup systems within the 60-day backup cycle.

Individual deletion requests

Patient Users and Clinician Users may request deletion of their personal information by contacting hello@previsit.ca. Valid deletion requests will be fulfilled within 30 days. Where intake data has already been incorporated into a clinical record by the Clinician User, the Operator's deletion obligation extends only to data held in PreVisit's own systems — the Clinician User bears responsibility for managing records within their own clinical documentation systems.

Legal holds

The Operator may retain personal information beyond the above periods where required by applicable law, regulatory order, or in connection with a bona fide legal proceeding. In such cases, the retained data will be used only for the legally required purpose.

28. Security & Breach Response Protocol All Users

Security measures

PreVisit implements the following measures to protect personal information:

No security system is impenetrable. The Operator is committed to continuous improvement of its security posture as the service matures toward Clinical Release.

Breach response protocol

In the event of a breach of security involving personal information, the Operator will follow the response protocol below:

29. Your Rights Under PIPA BC All Users

Under the Personal Information Protection Act (BC), individuals have the right to:

To exercise any of these rights, contact us using the details in Section 30. We will respond within 30 days of receiving a valid request.

30. Contact & Complaints All Users

For questions, access requests, corrections, deletion requests, security incident reports, or complaints regarding these Terms or this Privacy Policy, contact:

Suveg Tung — Privacy Officer
PreVisit  ·  British Columbia, Canada
Privacy, access, and correction requests: privacy@previsit.ca
General inquiries: hello@previsit.ca

If you are unsatisfied with our response, you may contact the Office of the Information and Privacy Commissioner for BC:

Office of the Information and Privacy Commissioner for BC
www.oipc.bc.ca  ·  1-800-663-7867