These terms govern your use of the RegIntel Rota platform provided by __COMPANY_NAME__. They are separate from the open-source MIT licence covering the underlying source code in the sapopo93/Regintel_rota repository — the licence permits reuse of the code, but operating an instance of the deployed product or accessing our hosted service is governed by these terms.

The service is intended for staff of UK domiciliary-care providers, the providers themselves, and authorised auditors. You must have an account issued by your employer or an admin to access the service. You must not share credentials.

Your provider (or you, if you are the provider) is the controller of personal data you put into the platform. We process that data on your behalf as set out in the Data Processing Agreement (docs/legal/DPA_TEMPLATE.md). You are responsible for the accuracy of the data you upload and for the lawful basis to do so.

• Do not attempt to bypass authentication, rate limits, or audit logging.
• Do not upload data you have no lawful basis to process.
• Do not use the service to harass, defame, or unlawfully monitor staff or service users.
• Do not use the API in a way that materially degrades service for other tenants.
• Do not attempt to re-identify pseudonymised demo data or test pseudo-records.
• Do not use the service to make solely-automated decisions producing legal or similarly significant effects without human review.

We aim for high availability but do not guarantee uninterrupted access. Maintenance windows will be announced in advance where reasonably possible. Emergency maintenance may be carried out without notice.

The platform maintains a hash-chained audit log of compliance-relevant events. You agree not to attempt to alter, truncate, or back-date these records. Tampering will void the integrity attestation and may be a regulatory matter under CQC Regulation 17.

The platform's name, logo, and product assets are owned by __COMPANY_NAME__. The source code is licensed under the MIT licence (see the repository's LICENSE). Customer data remains the customer's property; we claim no rights to it beyond those needed to operate the service.

To the extent permitted by law, our aggregate liability under these terms is limited to the fees paid in the 12 months preceding the claim. We do not exclude liability for death, personal injury caused by negligence, fraud, or anything else that cannot be excluded by law. The platform is a workflow and evidencing tool — it is not a substitute for clinical judgement, statutory compliance checks, or registered manager oversight.

Either party may terminate on 30 days' written notice, or immediately for material breach that is not cured within 14 days of notice. On termination we will, on request, return or delete personal data per the DPA, subject to retention obligations.

These terms are governed by the law of England and Wales. The courts of England and Wales have exclusive jurisdiction.

Questions about these terms: legal@__DOMAIN__. Data-protection questions: dpo@__DOMAIN__.