Acceptable Use Policy

Scope

This policy applies to the clearstars.ai website, the free Star Ratings dashboard, and any access granted through the pilot cohort. It is incorporated into our Terms of Use.

Where a signed agreement governs your use of a ClearStars product, that agreement controls and this policy supplements it.

Do not send us protected health information

This is first because it is the one that matters most.

Do not submit protected health information, member-level data, patient-level data, credentials, or secrets through this website. Not in a form, not in the chat widget, not in an email attachment sent from a link on this site.

This is not a formality. The public site and the free dashboard operate without a Business Associate Agreement, deliberately, because they never need one. Sending PHI to a surface with no BAA behind it creates an exposure for your organization as well as ours, and it is the kind of exposure that is discovered during an audit rather than at the time.

Use population-level or synthetic data. If you are unsure whether something counts, stop and ask us before you send it.

If we receive PHI through this site we will delete it and tell you we have.

Do not

Break the law. Including any use that violates HIPAA, the TCPA, state privacy law, export controls, or sanctions.

Infringe rights. Copyright, trademark, trade secret, privacy, or publicity rights, ours or anyone else’s.

Scrape or bulk extract. No automated harvesting of the site or the dashboard, no crawling outside what robots.txt permits, no republishing our analysis as a dataset, and no using the output to train a model.

Reverse engineer. No decompiling, disassembling, or attempting to derive source code, methodology, or model weights from anything we publish.

Benchmark for a competitor. No using the site or the dashboard to build, train, price, or market a competing product.

Circumvent controls. No probing, scanning, or testing the vulnerability of any system without our written permission, no bypassing authentication or rate limits, and no accessing anything you were not granted.

Interfere. No malware, no denial of service, no automated request volume that degrades the site for anyone else, and no forged headers or falsified origins.

Misrepresent. No impersonating a person or an organization, no false affiliation with ClearStars, and no submitting a form under someone else’s identity or with someone else’s phone number.

Abuse messaging. No opting a number in that is not yours and not one you are authorized to consent for.

Reporting and enforcement

To report abuse or a suspected vulnerability, use the process published at /.well-known/security.txt. We welcome good-faith security research conducted within that process.

We may investigate suspected violations and may suspend or withdraw access without notice where we believe it is necessary to protect the service or another person. Where a violation is also a breach of a signed agreement, the remedies in that agreement apply.

Changes

We may update this policy. The effective date at the top tells you when the current version took effect.