StreamCase AI, Inc. — Terms of Service Effective Date: July 14, 2026 Last Updated: July 14, 2026 Version: 2026-07-14 ──────────────────────────────────────────────────────────────────────── 1. INTRODUCTION These Terms of Service ("Terms") constitute a legally binding agreement between you ("Customer," "you," or "your") and StreamCase AI, Inc., a Florida corporation ("StreamCase," "Company," "we," "us," or "our"). These Terms govern your access to and use of the StreamCase platform, including all related services, features, and applications (collectively, the "Service"). By creating an account, accessing, or using the Service, you acknowledge that you have read, understood, and agree to be bound by these Terms. If you are accepting these Terms on behalf of an organization, you represent and warrant that you have the authority to bind that organization to these Terms. If you do not agree to these Terms, you may not access or use the Service. ──────────────────────────────────────────────────────────────────────── 2. DESCRIPTION OF SERVICE StreamCase is a cloud-based medical document review and case management platform. The Service enables users to: - Upload, organize, and manage medical records and legal documents - Categorize and annotate document pages using AI-assisted and manual workflows - Extract structured data from medical documents - Generate reports for Independent Medical Examination (IME) cases - Manage case information and collaborate within authorized roles The Service is designed to process Protected Health Information ("PHI") in compliance with the Health Insurance Portability and Accountability Act of 1996 ("HIPAA") and its implementing regulations. ──────────────────────────────────────────────────────────────────────── 3. ACCOUNT REGISTRATION AND SECURITY 3.1 Account Creation To use the Service, you must create an account with accurate, complete, and current information. You agree to update your information promptly if it changes. 3.2 Account Security You are responsible for: - Maintaining the confidentiality of your login credentials - All activity that occurs under your account - Notifying us immediately at info@streamcaseai.com if you suspect unauthorized access to your account 3.3 Role-Based Access The Service implements role-based access controls. You agree to assign user roles appropriate to each individual's job function and to remove access promptly when an individual no longer requires it. ──────────────────────────────────────────────────────────────────────── 4. PRICING, PAYMENT, AND BILLING 4.1 Fees The Service is provided on a prepaid, usage-based model measured in page credits. One (1) page credit entitles you to processing of one (1) page of a document uploaded to the Service, including AI-assisted categorization, data extraction, and related processing. The price per credit is as set forth at the time of purchase. There is no monthly minimum fee. A "page" is defined as one page of a document uploaded to and processed by the Service. 4.2 Prepaid Credits Page credits must be purchased in advance and are drawn down as pages are processed. When your credit balance is insufficient, additional document processing will be unavailable until you purchase more credits. 4.3 Payment Credit purchases are processed through Stripe, Inc., and are subject to Stripe's terms of service. You authorize StreamCase to charge your selected payment method for the credits you purchase. 4.4 Price Changes StreamCase may modify credit pricing prospectively. A change in pricing does not affect credits already purchased. 4.5 Taxes All fees are exclusive of taxes. You are responsible for all applicable sales, use, VAT, or other taxes arising from your use of the Service, excluding taxes based on StreamCase's net income. 4.6 Refunds Purchased page credits are non-refundable except as required by applicable law. Enterprise and other custom-billed accounts may be governed by a separate written order or agreement that supersedes the pricing and payment terms of this Section 4. ──────────────────────────────────────────────────────────────────────── 5. ACCEPTABLE USE 5.1 Permitted Use You may use the Service solely for lawful purposes related to medical document review, case management, and related professional activities. 5.2 Prohibited Conduct You agree not to: - Use the Service for any purpose that violates applicable law or regulation - Upload content that is unlawful, defamatory, or infringing on third-party rights - Attempt to gain unauthorized access to the Service, other accounts, or related systems - Interfere with or disrupt the integrity or performance of the Service - Reverse engineer, decompile, or disassemble any aspect of the Service - Use the Service to develop a competing product or service - Share account credentials with unauthorized individuals - Upload documents for which you do not have lawful authorization to possess or process - Use automated means (bots, scrapers) to access the Service except through provided APIs ──────────────────────────────────────────────────────────────────────── 6. CUSTOMER DATA AND INTELLECTUAL PROPERTY 6.1 Customer Data Ownership You retain all right, title, and interest in and to the documents, records, and data you upload to the Service ("Customer Data"). StreamCase does not claim ownership of Customer Data. 6.2 License to Customer Data You grant StreamCase a limited, non-exclusive license to process, store, and transmit Customer Data solely as necessary to provide the Service and as permitted under the HIPAA provisions in Section 8. 6.3 StreamCase Intellectual Property The Service, including all software, algorithms, user interfaces, designs, documentation, and AI models, is and remains the exclusive property of StreamCase AI, Inc. These Terms do not grant you any ownership interest in the Service. You are granted a limited, non-exclusive, non-transferable, revocable license to access and use the Service during the term of your subscription. 6.4 Feedback If you provide suggestions, ideas, or feedback regarding the Service ("Feedback"), you grant StreamCase an unrestricted, perpetual, irrevocable, royalty-free license to use, modify, and incorporate such Feedback without obligation to you. 6.5 Aggregated and De-identified Data StreamCase may generate aggregated, anonymized, and de-identified data derived from your use of the Service ("Aggregated Data") that does not identify you or any individual. StreamCase may use Aggregated Data for product improvement, analytics, and business purposes. All de-identification shall comply with the HIPAA de-identification standard under 45 C.F.R. Section 164.514. ──────────────────────────────────────────────────────────────────────── 7. AI-ASSISTED PROCESSING 7.1 Nature of AI Processing The Service uses artificial intelligence and machine learning to assist with document categorization, data extraction, and analysis. AI-generated outputs are provided as aids to professional judgment and are not a substitute for independent professional review. 7.2 No Guarantee of Accuracy StreamCase does not warrant that AI-assisted outputs will be error-free, complete, or accurate. You are solely responsible for reviewing, verifying, and validating all AI-generated categorizations, extractions, and analyses before relying on them for any professional, legal, or medical purpose. 7.3 Third-Party AI Services The Service may utilize third-party AI providers (such as Google Gemini) for document processing. All such processing is conducted in accordance with the HIPAA provisions in Section 8 and applicable Business Associate Agreements with sub-processors. ──────────────────────────────────────────────────────────────────────── 8. HIPAA COMPLIANCE AND BUSINESS ASSOCIATE PROVISIONS This Section 8 constitutes the Business Associate Agreement ("BAA") between the parties as required by HIPAA, the Health Information Technology for Economic and Clinical Health Act ("HITECH Act"), and their implementing regulations at 45 C.F.R. Parts 160 and 164. 8.1 Definitions For purposes of this Section, capitalized terms not otherwise defined shall have the meanings set forth in HIPAA, the HITECH Act, and their implementing regulations. "Protected Health Information" or "PHI" means any information that (a) relates to the past, present, or future physical or mental health condition of an individual, the provision of health care to an individual, or payment for health care provided to an individual; (b) identifies the individual or could reasonably be used to identify the individual; and (c) is transmitted or maintained in any form or medium. 8.2 Obligations of StreamCase (Business Associate) StreamCase agrees to: (a) Not use or disclose PHI other than as permitted or required by these Terms or as required by law. (b) Use appropriate administrative, physical, and technical safeguards to prevent use or disclosure of PHI other than as provided by these Terms, including but not limited to: - AES-256 encryption of PHI at rest and in transit - Role-based access controls - Audit logging of all access to PHI - Secure, access-controlled infrastructure hosted on Google Cloud Platform - Session timeouts and authentication controls (c) Report to Customer any use or disclosure of PHI not provided for by these Terms of which StreamCase becomes aware, including any Security Incident or Breach of Unsecured PHI, without unreasonable delay and in no event later than sixty (60) calendar days after discovery. (d) In accordance with 45 C.F.R. Section 164.502(e)(1)(ii), ensure that any subcontractors or agents that create, receive, maintain, or transmit PHI on behalf of StreamCase agree to the same restrictions and conditions that apply to StreamCase under these Terms with respect to such PHI. (e) Make available PHI in accordance with 45 C.F.R. Section 164.524 to the extent StreamCase maintains PHI in a Designated Record Set. (f) Make available PHI for amendment and incorporate any amendments to PHI in accordance with 45 C.F.R. Section 164.526. (g) Make available the information required to provide an accounting of disclosures in accordance with 45 C.F.R. Section 164.528. (h) Make its internal practices, books, and records relating to the use and disclosure of PHI available to the Secretary of the U.S. Department of Health and Human Services for purposes of determining Customer's compliance with HIPAA. 8.3 Permitted Uses and Disclosures StreamCase may use and disclose PHI solely for the following purposes: - To perform the Service as described in these Terms - For the proper management and administration of StreamCase, provided that any disclosure is required by law or StreamCase obtains reasonable assurances that the information will be held confidentially - To provide Data Aggregation services, as permitted by 45 C.F.R. Section 164.504(e)(2)(i)(B), provided that all aggregation complies with the HIPAA de-identification standard StreamCase shall not use or disclose PHI for marketing, sale of PHI, or any purpose not expressly authorized under these Terms. 8.4 Obligations of Customer (Covered Entity) Customer agrees to: (a) Not request that StreamCase use or disclose PHI in any manner that would violate HIPAA if done by Customer. (b) Notify StreamCase of any restrictions on the use or disclosure of PHI that Customer has agreed to in accordance with 45 C.F.R. Section 164.522, to the extent such restrictions may affect StreamCase's use or disclosure of PHI. (c) Notify StreamCase of any changes in, or revocation of, permission by an individual to use or disclose PHI, to the extent such changes may affect StreamCase's use or disclosure of PHI. (d) Obtain all necessary consents, authorizations, and permissions from individuals whose PHI will be uploaded to the Service. 8.5 Term and Termination of BAA Provisions The BAA provisions of this Section 8 shall remain in effect for the duration of these Terms and shall survive termination to the extent necessary to complete the return or destruction of PHI. Upon termination: - StreamCase shall return or destroy all PHI received from Customer, or created or received by StreamCase on behalf of Customer, within ninety (90) days of termination. - If return or destruction is not feasible, StreamCase shall extend the protections of this Section 8 to such PHI and limit further uses and disclosures to those purposes that make the return or destruction infeasible. 8.6 Breach Notification In the event of a Breach of Unsecured PHI, StreamCase shall: - Notify Customer without unreasonable delay and in no event later than sixty (60) calendar days after discovery of the Breach - Include in the notification: identification of each individual affected (if known), a description of the type of PHI involved, recommended steps individuals should take, a description of what StreamCase is doing to investigate and mitigate the Breach, and contact procedures ──────────────────────────────────────────────────────────────────────── 9. DATA SECURITY 9.1 Security Measures StreamCase implements and maintains commercially reasonable administrative, physical, and technical safeguards designed to protect Customer Data, including: - Encryption at rest (AES-256) and in transit (TLS 1.2+) - Role-based access controls with principle of least privilege - Comprehensive audit logging of all access to PHI - Session management with automatic timeout after 30 minutes of inactivity - Secure file upload validation and handling 9.2 Infrastructure The Service is hosted on Google Cloud Platform with data stored in the United States. StreamCase utilizes Cloud SQL (PostgreSQL) for database services and Google Cloud Storage for document storage. 9.3 No Absolute Security Guarantee While StreamCase employs industry-standard security measures, no method of electronic transmission or storage is 100% secure. StreamCase cannot guarantee absolute security of Customer Data. ──────────────────────────────────────────────────────────────────────── 10. DISCLAIMER OF WARRANTIES THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, OR STATUTORY. STREAMCASE SPECIFICALLY DISCLAIMS ALL IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT. STREAMCASE DOES NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, SECURE, OR FREE OF VIRUSES OR OTHER HARMFUL COMPONENTS. STREAMCASE DOES NOT WARRANT THE ACCURACY, COMPLETENESS, OR RELIABILITY OF ANY AI-GENERATED OUTPUTS, CATEGORIZATIONS, OR DATA EXTRACTIONS. ──────────────────────────────────────────────────────────────────────── 11. LIMITATION OF LIABILITY 11.1 Exclusion of Consequential Damages TO THE MAXIMUM EXTENT PERMITTED BY LAW, IN NO EVENT SHALL STREAMCASE BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING BUT NOT LIMITED TO LOSS OF PROFITS, DATA, BUSINESS OPPORTUNITIES, OR GOODWILL, ARISING OUT OF OR RELATED TO THESE TERMS OR THE SERVICE, REGARDLESS OF THE THEORY OF LIABILITY. 11.2 Cap on Liability STREAMCASE'S TOTAL AGGREGATE LIABILITY ARISING OUT OF OR RELATED TO THESE TERMS OR THE SERVICE SHALL NOT EXCEED THE TOTAL FEES PAID BY CUSTOMER TO STREAMCASE DURING THE TWELVE (12) MONTHS IMMEDIATELY PRECEDING THE EVENT GIVING RISE TO THE CLAIM. 11.3 Exceptions The limitations in this Section 11 shall not apply to: (a) StreamCase's obligations under Section 8 (HIPAA/BAA provisions); (b) StreamCase's gross negligence or willful misconduct; or (c) any liability that cannot be limited under applicable law. ──────────────────────────────────────────────────────────────────────── 12. TERM AND TERMINATION 12.1 Term These Terms are effective upon your acceptance and continue on a month-to-month basis until terminated by either party. 12.2 Termination by Customer You may terminate your account at any time by providing written notice to info@streamcaseai.com. Termination is effective at the end of the current billing cycle. You remain responsible for all fees incurred through the effective date of termination. 12.3 Termination by StreamCase StreamCase may terminate or suspend your access to the Service: - Immediately, if you breach any material provision of these Terms - Immediately, if required by law or government order - Upon thirty (30) days' written notice for any reason or no reason 12.4 Effect of Termination Upon termination: - Your right to access the Service ceases immediately (or at end of billing cycle, as applicable) - StreamCase will make Customer Data available for export for thirty (30) days following the effective date of termination - After the 30-day export period, StreamCase will delete or destroy Customer Data in accordance with the HIPAA provisions in Section 8.5 - Sections 6 (Intellectual Property), 8 (HIPAA/BAA), 10 (Disclaimers), 11 (Limitation of Liability), 13 (Indemnification), and 14 (Dispute Resolution) survive termination ──────────────────────────────────────────────────────────────────────── 13. INDEMNIFICATION 13.1 By Customer You agree to indemnify, defend, and hold harmless StreamCase and its officers, directors, employees, and agents from and against any claims, liabilities, damages, losses, and expenses (including reasonable attorneys' fees) arising out of or in any way connected with: (a) your use of the Service; (b) your violation of these Terms; (c) your violation of any applicable law or regulation; or (d) your uploading of documents for which you lacked proper authorization. 13.2 By StreamCase StreamCase agrees to indemnify, defend, and hold harmless Customer from and against any claims, liabilities, damages, losses, and expenses (including reasonable attorneys' fees) arising out of StreamCase's material breach of the HIPAA provisions in Section 8. ──────────────────────────────────────────────────────────────────────── 14. DISPUTE RESOLUTION 14.1 Informal Resolution Before initiating any formal dispute resolution proceeding, the parties agree to first attempt to resolve disputes informally by contacting info@streamcaseai.com. The parties shall negotiate in good faith for a period of thirty (30) days before pursuing other remedies. 14.2 Arbitration Any dispute, controversy, or claim arising out of or relating to these Terms that cannot be resolved informally shall be settled by binding arbitration administered by the American Arbitration Association ("AAA") under its Commercial Arbitration Rules. Arbitration shall take place in the State of Florida. The arbitrator's decision shall be final and binding and may be entered as a judgment in any court of competent jurisdiction. 14.3 Exceptions Nothing in this Section 14 shall prevent either party from seeking injunctive or other equitable relief in a court of competent jurisdiction to protect its intellectual property rights or confidential information. ──────────────────────────────────────────────────────────────────────── 15. GOVERNING LAW These Terms shall be governed by and construed in accordance with the laws of the State of Florida, without regard to its conflict of laws principles. Any legal proceedings not subject to arbitration shall be brought exclusively in the state or federal courts located in Florida. ──────────────────────────────────────────────────────────────────────── 16. GENERAL PROVISIONS 16.1 Entire Agreement These Terms, together with any Order Forms or amendments executed by the parties, constitute the entire agreement between the parties and supersede all prior and contemporaneous agreements, representations, and understandings. 16.2 Severability If any provision of these Terms is held to be invalid or unenforceable, such provision shall be modified to the minimum extent necessary to make it valid and enforceable, and the remaining provisions shall continue in full force and effect. 16.3 Waiver The failure of either party to enforce any right or provision of these Terms shall not constitute a waiver of such right or provision. 16.4 Assignment You may not assign or transfer these Terms without StreamCase's prior written consent. StreamCase may assign these Terms in connection with a merger, acquisition, or sale of all or substantially all of its assets. 16.5 Force Majeure StreamCase shall not be liable for any failure or delay in performance due to causes beyond its reasonable control, including but not limited to natural disasters, acts of government, pandemic, power or internet outages, or third-party service provider failures. 16.6 Notices All notices under these Terms shall be sent to: - To StreamCase: info@streamcaseai.com - To Customer: The email address associated with your account Notices are deemed received upon successful electronic delivery. 16.7 Amendments StreamCase may update these Terms from time to time. Material changes will be communicated via email or prominent notice within the Service at least thirty (30) days before taking effect. Your continued use of the Service after the effective date of any changes constitutes acceptance of the updated Terms. ──────────────────────────────────────────────────────────────────────── 17. CONTACT INFORMATION For questions about these Terms, please contact: StreamCase AI, Inc. Email: info@streamcaseai.com ──────────────────────────────────────────────────────────────────────── By using the StreamCase platform, you acknowledge that you have read, understood, and agree to be bound by these Terms of Service.