B2B Terms of Service

1. Contracting Parties, B2B Status & Commercial Scope

• Contracting Entity: This legally binding B2B SaaS agreement is entered into between Solid Solutions Ltd (trading as SmileShot), a company registered in England and Wales under Company Registration Number 6425612, with registered office at 19 Linfields, Amersham, Buckinghamshire, HP7 9QH ("SmileShot", "Platform", "we", "us", or "Data Processor"), and the subscribing entity or clinician ("Subscriber", "Customer", "you", or "Data Controller").
• Authorised Users & Professional Standing: SmileShot is provided strictly for professional and commercial use by dental practices, clinics, and individual dental healthcare practitioners (including practice owners, self-employed associates, and clinical team members). The platform is not available to individual consumers.
• Service Scope (Lite Model Only): Access is limited strictly to the baseline clinical photo organisation model (Lite Tier). SmileShot provides an administrative, indexing, and workflow interface designed to organise, catalogue, and structure dental photography directories.

2. Regulatory Perimeter & Medical Device Disclaimer (MHRA / SaMD)

• Non-Diagnostic Classification: SmileShot is an administrative organisation tool. It is not Software as a Medical Device (SaMD) under UK Medicines and Healthcare products Regulatory Agency (MHRA) regulations or EU Medical Device Regulations (MDR).
• Architectural Absence of Diagnostic Capability: Because SmileShot lacks the technical capability to view, render, inspect, or analyze raw image data, the platform does not and cannot evaluate clinical imagery, trace anatomical landmarks, measure soft-tissue or skeletal angles, or perform automated caries or pathology detection.
• Clinical Record-Keeping Reference: Stored photographic files serve solely as visual reference records maintained under the clinician’s independent professional judgement. Full, non-delegable clinical and diagnostic responsibility remains entirely with the treating registered dental practitioner.

3. Photo Organisation & Third-Party Cloud Storage Architecture

• Bring Your Own Storage (BYOS) Model: SmileShot does not provide primary hosting, backup repositories, or cloud storage for raw clinical photography. All visual assets reside within the Subscriber's independently managed third-party cloud storage provider (e.g., Google Drive, Microsoft OneDrive, Dropbox).
• Restricted Sandboxed Access ("SmileShot" Folder Only): Upon account authorisation, the Subscriber grants SmileShot technical access strictly and exclusively to a single, designated root folder labelled "SmileShot". SmileShot does not request, hold, or execute permissions to access any directories outside this folder.
• Metadata-Only Architecture & Technical Inability to View Imagery: SmileShot’s platform infrastructure lacks the technical capability, access permissions, and functionality to view, open, inspect, render, or visually process underlying image files. Platform operations are technically restricted solely to directory paths, folder names, timestamps, and indexing metadata.
• Patient Photography Consent Warranty: The Subscriber warrants that all required patient consents for clinical dental imagery—in compliance with GDC Standards for the Dental Team and Caldicott Principles—have been lawfully obtained prior to cataloguing imagery.

4. Data Protection & UK GDPR Compliance

• Subscriber: Data Controller for all Patient Identifiable Data (PID) and clinical healthcare data.
• Solid Solutions Ltd: Data Processor acting exclusively under documented instructions.
• Security Safeguards: Platform metadata and API tokens are encrypted in transit via TLS 1.3 and at rest using AES-256 within certified UK/EEA infrastructure.
• Strict Model Training Restrictions: Practice metadata and folder structures are never ingested, scraped, or utilized to train external or public AI models.
• Security Incident Notification: Notice provided without undue delay (and within 48 hours) upon confirming any security breach compromising credentials or platform databases.

5. Subscriptions, Fees & Data Retention

• Billing & Renewal: Subscriptions renew automatically on a monthly/annual basis unless cancelled in writing at least 30 days prior to renewal.
• Continuous Ownership & Offboarding: Because raw clinical photographs remain continuously inside the Subscriber's own cloud repository, the Subscriber retains uninterrupted possession of all original photos upon contract termination. SmileShot revokes OAuth tokens and permanently purges indexing metadata within 30 days of account closure.

6. Intellectual Property Rights

• Platform IP: Solid Solutions Ltd retains exclusive ownership of software code, interface workflows, organizational logic, taxonomy models, and trademarks.
• Subscriber Content Ownership: The Subscriber retains absolute, unrestricted ownership of all clinical imagery, folder naming structures, and practice branding.

7. Limitation of Liability, Warranties & Indemnity

• "As-Is" Service Standard: SmileShot is provided on an "as-is" and "as-available" basis using commercially reasonable skill and care.
• Third-Party Infrastructure Disclaimer: Solid Solutions Ltd disclaims liability for interruptions, outages, or data loss occurring within the Subscriber's third-party cloud storage environment.
• Clinical Outcome Disclaimer: Solid Solutions Ltd is not liable for clinical decisions or diagnostic interpretations made by practitioners using indexed imagery.
• Aggregate Liability Cap: Total aggregate liability arising out of this agreement is strictly capped at the total subscription fees paid by the Subscriber in the 12 months preceding the claim.

8. Governing Law & Dispute Resolution

This agreement is governed by and construed in accordance with the laws of England and Wales, and the parties submit to the exclusive jurisdiction of the English courts.