Terms of Service
Effective date: July 30, 2026 · Last updated: July 30, 2026
1. Acceptance of these Terms
By accessing or using the Services, creating an account, or clicking to accept these Terms, you agree to these Terms of Service (“Terms”) and our Privacy Policy. If you use the Services on behalf of a clinic, company, or other organization (“Customer”), you represent that you have authority to bind that Customer, and “you” includes that Customer.
If you do not agree, do not use the Services.
2. What MoonFall provides
MoonFall is a B2B multi-tenant software platform for medical spas, aesthetic clinics, and related healthcare businesses. Depending on your subscription and configuration, the Services may include staff portal access; patient and lead CRM, inbox, and messaging; scheduling, treatments, loyalty, surveys, and clinic operations tools; marketing campaign tools; integrations with third-party systems; and AI-assisted features that help draft, recommend, or automate clinic workflows you configure.
MoonFall provides software and related support. MoonFall is not a medical provider, does not practice medicine, and does not replace clinical judgment, licensed healthcare professionals, or your obligations under applicable healthcare, privacy, advertising, or consumer-protection laws.
3. Accounts and eligibility
You must provide accurate registration information and keep it updated.
You are responsible for safeguarding credentials, including MFA if enabled, and for activity under your accounts.
Staff users typically authenticate via our identity provider. Do not share passwords or API tokens.
We may suspend or terminate access for security, abuse, non-payment, or Terms violations.
4. Customer data; roles of the parties
4.1 Customer as controller / covered entity (as applicable)
Customer retains ownership of Customer Data, including clinic configuration, staff accounts Customer manages, patient and lead records Customer imports or creates, EMR-synced data, message content, and marketing content. Where Customer Data includes protected health information (“PHI”) or other regulated personal data, Customer is generally the controller / covered entity (or business associate of a covered entity, as applicable). MoonFall acts as a processor / service provider / business associate solely to provide the Services.
4.2 Business Associate Agreement
If you require a HIPAA Business Associate Agreement (“BAA”), contact info@moonfallsoftware.com. Use of PHI features may be conditioned on an executed BAA and configuration that matches your compliance program.
4.3 Your responsibilities
You are solely responsible for lawful collection and use of patient and lead data; obtaining required consents; clinical and advertising compliance; accuracy of privacy policy URLs, terms links, and consent language; configuring contact rights and opt-outs; and your content, campaigns, creatives, and targeting decisions.
5. Acceptable use
You will not, and will not allow others to: use the Services unlawfully, for fraud, spam, harassment, or deceptive advertising; attempt to access other customers’ tenants or data; reverse engineer, scrape, or overload the Services except as allowed by law; upload malware or interfere with security or monitoring; misrepresent affiliation with MoonFall or other platforms; use advertising integrations to violate platform policies; resell raw API access to MoonFall credentials; or circumvent platform security. We may investigate and suspend Service for suspected violations.
6. Third-party products and advertising platforms
The Services may interoperate with third-party products you enable, including EMR systems, processors, telephony providers, CRM tools, e-commerce services, Google Ads, Meta, Amazon Ads, analytics, and error-monitoring tools. Third-party products are governed by their own terms and privacy policies. Enabling an integration authorizes MoonFall to exchange data with that provider as needed to provide the feature. MoonFall does not control third-party uptime, policy changes, or approval of ads or developer tokens.
Google Ads specifically
If you connect Google Ads, you authorize MoonFall to use Google OAuth with tokens stored encrypted for your company. Campaigns, audiences, and conversion uploads run against your Google Ads customer accounts; you remain the account owner and advertiser of record. MoonFall’s platform developer token stays on MoonFall infrastructure and is not provided to clinics for independent API use. You must comply with Google Ads policies and applicable healthcare advertising rules.
7. AI features
Some features use machine learning or third-party AI providers to generate recommendations, drafts, transcripts, images, or similar outputs. Outputs may be inaccurate or incomplete. You must review AI outputs before clinical, legal, or advertising use. Do not rely on AI as a sole source of medical advice.
8. Fees and taxes
Paid plans are subject to the order form, subscription page, or other commercial agreement between you and MoonFall. Fees are non-refundable except as required by law or expressly stated in writing. You are responsible for applicable taxes.
9. Intellectual property
MoonFall and its licensors own the Services, software, branding, and documentation. You own Customer Data and Customer content. You grant MoonFall a limited license to host, process, transmit, display, and create de-identified or aggregated insights from Customer Data solely to provide, secure, and improve the Services, and as described in the Privacy Policy. Feedback you provide may be used by MoonFall without obligation to you.
10. Confidentiality
Each party may receive Confidential Information from the other. The receiving party will use it only for purposes of the relationship and protect it with reasonable care. Exceptions include information that is public, independently developed, or required to be disclosed by law, with notice where legally permitted.
11. Disclaimers
THE SERVICES ARE PROVIDED “AS IS” AND “AS AVAILABLE.” TO THE MAXIMUM EXTENT PERMITTED BY LAW, MoonFall DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. WE DO NOT WARRANT UNINTERRUPTED OR ERROR-FREE OPERATION, OR THAT THE SERVICES WILL MEET YOUR CLINICAL, REGULATORY, OR ADVERTISING GOALS.
12. Limitation of liability
TO THE MAXIMUM EXTENT PERMITTED BY LAW, MoonFall AND ITS AFFILIATES WILL NOT BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR LOST PROFITS, REVENUE, DATA, OR GOODWILL, EVEN IF ADVISED OF THE POSSIBILITY.
MoonFall’S AGGREGATE LIABILITY ARISING OUT OF OR RELATED TO THE SERVICES WILL NOT EXCEED THE AMOUNTS PAID BY YOU TO MoonFall FOR THE SERVICES IN THE TWELVE (12) MONTHS BEFORE THE EVENT GIVING RISE TO LIABILITY.
Some jurisdictions do not allow certain limitations; in those cases, our liability is limited to the fullest extent permitted.
13. Indemnification
You will defend and indemnify MoonFall against claims arising from: Customer Data and your content; your ads, messaging, and consent practices; your violation of law or these Terms; and your use of third-party products through the Services.
14. Suspension and termination
Either party may terminate according to the commercial agreement. We may suspend immediately for security risk, non-payment, or material breach. Upon termination, your right to access the Services ends. Retrieval of Customer Data will follow the commercial agreement or our then-current offboarding process, subject to legal retention requirements.
15. Changes
We may update these Terms by posting a revised version with a new “Last updated” date. Material changes may also be communicated through the portal or email. Continued use after the effective date constitutes acceptance, except where mandatory law requires additional consent.
16. Governing law
These Terms are governed by the laws of the State of Delaware, USA, excluding conflict-of-law rules, unless your order form specifies otherwise. Courts in Delaware, or as specified in your order form, will have exclusive jurisdiction, except that MoonFall may seek injunctive relief in any jurisdiction.
17. Miscellaneous
These Terms, the Privacy Policy, and any order form or BAA constitute the entire agreement regarding the Services and supersede conflicting prior terms for the same subject. If a provision is unenforceable, the remainder remains in effect. Failure to enforce a provision is not a waiver. You may not assign these Terms without our consent; we may assign to an affiliate or successor.