1. Parties, acceptance, and scope

Effective date: October 10, 2026. The Service is offered only for use in the United States.

These Terms govern access to the Service. These Terms of Service ("Terms") are between Reliable Betel Corp. ("Provider," "we," or "us"), and the organization identified in the registration or applicable order ("Customer"). Care Staff Manager, its web and mobile applications, APIs, and included services are collectively the "Service."

The individual accepting represents that they have authority to bind Customer. Customer accepts by affirmatively accepting the identified version during registration or by signing an order incorporating it. Users act under Customer's authorization. Acceptance does not make an employee personally responsible for Customer's subscription charges.

An "Order" means an accepted subscription checkout or written order identifying the plan, fees, billing period, and additional terms. The Business Associate Agreement ("BAA") governs protected health information ("PHI") when applicable. The Privacy Policy describes our handling of personal information. If documents conflict, applicable law controls, followed by the BAA for PHI, a signed amendment expressly addressing the conflict, the Order for commercial particulars, and these Terms. An Order cannot reduce mandatory privacy or security duties.

2. Access and accounts

During an active subscription or permitted trial, Provider grants Customer a limited, nonexclusive, nontransferable right to use the Service for lawful business operations within purchased features and limits. Customer may authorize personnel and other permitted users through the Service's access controls.

Customer must provide accurate registration information, maintain an authorized administrator and current billing contact, grant only necessary access, remove access when no longer justified, and ensure users comply with these Terms. Users must protect credentials, recovery codes, and devices and promptly report suspected compromise to support@carestaffmanager.com. Customer is responsible for its users' authorized activity; this does not relieve Provider of responsibility for its own security failures.

Customer must not access another organization's records, bypass permissions or subscription controls, share individual credentials, introduce malicious code, conduct unauthorized security testing, interfere with availability, unlawfully scrape personal information, or infringe others' rights. Restrictions on reverse engineering apply only to the extent lawful. Coordinated security testing requires Provider's written authorization.

3. Customer data and operational responsibilities

"Customer Data" means information submitted by or on behalf of Customer and customer-specific records generated in delivering the Service. Customer retains its rights in Customer Data. Customer grants Provider only the rights reasonably needed to deliver, secure, support, and administer the Service and perform permitted legal obligations, subject to the BAA and applicable privacy requirements.

Customer is responsible for accurate and lawful collection of records, notices and permissions, workforce classifications, clinical decisions, credential verification, service authorizations, coding, claims, payroll decisions, recordkeeping, and legally required review of outputs. Customer must verify schedules, care instructions, time records, exports, and submissions before relying on them. Provider remains responsible for its contractual duties.

Modules depend on Customer's plan, configuration, and permissions. A displayed status, compliance indicator, claim validation, eligibility response, or electronic visit verification record does not guarantee regulatory compliance, reimbursement, credential validity, attendance, or correct clinical care. Electronic billing does not replace payer enrollment, trading-partner agreements, or Customer's approval of submissions.

The Service is not an emergency dispatch or medical advice service. Customer must maintain appropriate clinical supervision, emergency procedures, and continuity arrangements independent of Service availability.

4. Sensitive information and the BAA

Customer may submit personal and healthcare information only within its authority and the agreed scope and must limit it to what is necessary. PHI may be processed only after the applicable BAA is effective and required production safeguards and subcontractor arrangements are in place.

The BAA supplements these Terms. Privacy acknowledgment is not a patient's HIPAA authorization. Customer must not submit records subject to additional restrictions, including substance use disorder records governed by 42 CFR Part 2, unless the parties expressly agree in writing to required processing arrangements. Customer must not put PHI, passwords, payment credentials, or authentication secrets in public contact forms or ordinary support messages.

Provider will not sell Customer Data, use it for targeted advertising, or train general-purpose artificial intelligence models with it. Additional processing requires a lawful, separately documented arrangement consistent with the BAA; a general change to these Terms does not supply that authority.

5. Plans, trials, and fees

The Order and checkout disclose the selected plan, currency, recurring amount, billing frequency, limits, and selected add-ons. A separately selected electronic billing add-on increases the total disclosed before payment authorization. Advertising a plan does not authorize charges.

A trial lasts for the period shown at registration or checkout. Creating a trial workspace alone does not authorize recurring charges. When Customer affirmatively authorizes a paid subscription during a trial, checkout identifies whether the first charge is deferred until a stated trial end or is due immediately. Customer must review that disclosure; an expired trial does not imply an additional free period.

Paid subscriptions renew monthly unless the Order specifies otherwise. Customer authorizes the payment processor to charge the accepted recurring total and disclosed applicable taxes using the selected payment method. Customer must maintain a valid payment method. Payment method collection or authentication alone is not an additional subscription agreement.

Provider uses Stripe for subscription payments and receives transaction and subscription information needed for administration. Customer must not send full card numbers or security codes to support. Payment processing may be subject to the processor's applicable terms and notices.

6. Cancellation, changes, and refunds

Customer may cancel at any time. An authorized administrator may cancel renewal from Settings > Billing using the available cancellation control or payment portal. If unavailable, Customer may request cancellation through support@carestaffmanager.com. Provider will acknowledge the request and effective date. The payment is final and covers the current paid monthly billing period, whose end date is shown in the account; it does not necessarily end on the last calendar day of the month. Access continues until that period expires, then the Service is suspended and no further monthly renewal charge is made. For billing deferred until trial end, cancellation before the disclosed first charge prevents that renewal charge. Legally required access or return of records remains available through the secure request process.

Uninstalling the app, removing users, ceasing use, or allowing a card to expire does not cancel a subscription. Cancellation does not itself request deletion of Customer Data.

All completed subscription payments are final. Provider offers no voluntary refunds, credits, or prorated reimbursement for cancellation, unused time, or discontinued use. This does not exclude a remedy or refund that applicable law makes mandatory, or correction of an unauthorized, duplicate, or erroneous charge. Report disputed charges promptly to support@carestaffmanager.com; legally protected dispute rights are unaffected.

Plan and add-on changes take effect at the date and charges or credits disclosed before confirmation. Provider will give at least 30 days' advance notice of an increase to an existing subscription's recurring price. An increase applies no earlier than the next renewal after that notice period. Customer may cancel before it takes effect. Provider will obtain any additional authorization required by law.

The processor may retry failed payments. Provider may suspend access for nonpayment after notice and a reasonable opportunity to resolve it. These Terms authorize no undisclosed late fee or penalty. Provider will not withhold PHI that law requires it to make available as leverage for payment.

7. Operation and third parties

Provider will use reasonable care in delivering and supporting the Service. Maintenance, connectivity failures, customer systems, and third-party outages may interrupt availability. No specific uptime percentage, recovery time, support response time, or service credit is promised unless included in a signed service-level agreement.

Customer is responsible for its devices, connectivity, and independently contracted integrations. Customer authorizes transfers it instructs to payers, clearinghouses, payroll systems, or other recipients only within its legal authority. Provider remains responsible for subcontractors as required by the BAA and these Terms. Third-party availability does not excuse mandatory legal duties.

Provider may update the Service to maintain security and functionality and will give reasonable advance notice of a material reduction to purchased functionality, except for urgent security or legal changes. Customer may cancel renewal before the change takes effect. Any remedies required by applicable law remain available; this provision does not create a voluntary refund program.

8. Confidentiality and security

Each party will protect the other's nonpublic business information using reasonable care, use it only for the relationship, and restrict access to personnel and providers who need it and have appropriate confidentiality duties. These duties exclude information independently developed, lawfully received without restriction, or already public without a breach.

Where disclosure is legally required, the receiving party will, where permitted, give notice and limit disclosure to what is required. PHI remains governed by the BAA regardless of those exclusions. Provider will maintain safeguards appropriate to the information and its legal duties. Customer must promptly report suspected unauthorized activity. Neither party promises absolute security.

9. Suspension and termination

Provider may suspend affected access when reasonably necessary to address a material security threat, unlawful use, legal requirement, or material violation. Suspension will be proportionate where practicable. Provider will give notice and a reasonable opportunity to cure unless that would increase the threat, violate law, or defeat the protective purpose. Access will be restored when the grounds are resolved.

Either party may terminate for a material breach not cured within 30 days after written notice, or immediately where cure is impossible or law requires it. Customer's additional BAA termination rights remain effective. The final-payment condition does not exclude remedies that law makes mandatory for a breach. Lawfully incurred payment obligations remain payable.

10. Data return and retention

An authorized administrator may request return of Customer Data at support@carestaffmanager.com. Provider will verify identity and authority and arrange secure delivery in a reasonably usable format. The post-termination request window is 30 calendar days. Export completion is due within 30 calendar days after a verified request, or sooner where law requires.

Provider will delete or return terminated workspace data according to the completed Privacy Policy retention schedule and applicable BAA. Legal holds, mandatory recordkeeping, and documented technical limitations may restrict deletion. Provider will identify exceptions and protect retained data. An internal draft retention policy does not authorize indefinite retention of PHI. Backups follow the disclosed expiration schedule and cannot be repurposed for ordinary business use.

Required return or access to PHI is not extinguished by the administrative request window above. Confidentiality, data protection, accrued payment duties, and provisions intended to survive remain effective after termination.

11. Intellectual property

Provider and its licensors retain rights in the Service, software, documentation, and branding. Customer retains rights in its data. Provider may use voluntarily supplied nonconfidential feedback to improve the Service without compensation. That permission does not include Customer Data or PHI or transfer Customer's ownership of records.

12. Warranties and liability

Each party represents it has authority to enter into these Terms. Provider warrants reasonable professional care in performing the Service. Subject to that warranty and nonwaivable duties, the Service is provided without additional implied warranties, including merchantability, fitness for a particular purpose, and uninterrupted or error-free operation, to the extent lawful. No disclaimer reduces express BAA duties.

To the extent lawful, neither party is liable to the other for indirect, incidental, special, or consequential damages. Reasonable incident investigation, required notifications, restoration of affected records, and legally required remediation caused by a party's breach of confidentiality or data protection duties are treated as direct damages under these Terms.

Each party's aggregate liability is limited to fees paid or payable under the affected Order during the 12 months preceding the event giving rise to the claim. For breach of confidentiality or data protection duties, including the BAA, the limit is three times that amount. Limits do not apply to fraud, willful misconduct, gross negligence, Customer's lawful payment obligations, or liability that law does not permit limiting. They do not limit regulatory authority, third parties' statutory rights, or required reporting, access, return, or destruction of PHI. A signed Order may expressly provide different limits subject to those exclusions.

13. Notices, changes, and disputes

Provider sends account and contract notices to Customer's designated administrator or billing contact. Customer must keep them current. Legal notices to Provider go to support@carestaffmanager.com. Incident reporting uses support@carestaffmanager.com.

Provider will identify changed versions and effective dates and give at least 30 days' notice before material changes, except where a shorter period is legally required or necessary for an urgent security issue. Material changes require acceptance sufficient under applicable law; continued use alone is not substituted for affirmative acceptance where required. Changes do not retroactively authorize new uses of previously collected information or rewrite prior acceptance records. BAA amendments follow its amendment provision.

These Terms are governed by the laws of the United States, excluding conflict-of-law rules, except that applicable federal law and nonwaivable rights control. The parties will first attempt good-faith resolution through their contacts. Unless law requires another forum, proceedings will be brought in the competent courts of the United States. These Terms impose no mandatory arbitration or class-action waiver.

Neither party may assign without the other's reasonable consent, except to a successor in a merger, reorganization, or sale of substantially all relevant assets that assumes these obligations. Assignment does not independently authorize new use of personal information or PHI. Events beyond reasonable control may excuse performance delays, but not accrued payment or required data protection duties.

If a provision is unenforceable, the remainder survives to the extent lawful. Failure to enforce is not a waiver. These Terms, the Order, BAA, and signed amendments constitute the agreement for the Service. Electronic acceptance records may evidence acceptance of the identified version.

Appendix A: Care Staff Manager Authorized Representative Declaration

Effective date: October 10, 2026.

I confirm that the organization and representative information I provided is accurate and that I am authorized to enter into agreements on behalf of the organization identified in this registration. I understand that accepting the separately identified Terms of Service and, where applicable, Business Associate Agreement binds that organization.

I will provide my legal name, organizational title, and work email as evidence of authority. I understand that the Service records the organization, accepting account, document versions, acceptance time, and related electronic acceptance evidence. If my authority changes, I will notify the organization and arrange for an authorized administrator to manage its account.

This declaration does not give me authority over another organization's records, grant patient consent, authorize charges by itself, or make me a personal guarantor of subscription fees. Recurring charges require separate checkout authorization.

Appendix B: Care Staff Manager Recurring Billing Authorization

Effective date: October 10, 2026.

I am authorized to act for the organization identified in checkout. I authorize Reliable Betel Corp., through Stripe, to charge the selected payment method for the subscription plan and separately selected add-ons shown in the summary, at the disclosed recurring total and monthly frequency, plus applicable taxes disclosed before confirmation.

If checkout states no subscription payment is due today and identifies a remaining trial, the first charge begins on the displayed trial end unless cancelled beforehand. If payment is due today, I authorize that payment and monthly renewals. Selecting a plan or entering payment details without the required authorization and completed checkout does not independently authorize a subscription.

The organization may cancel at any time through an authorized administrator in Settings > Billing or the available Stripe portal; if unavailable, contact support@carestaffmanager.com. Payment is final and covers the current paid monthly billing period shown in the account. Service remains available until that period expires, then is suspended and no further monthly renewal charge is made. Cancellation before a disclosed deferred first charge prevents that renewal charge. Uninstalling or stopping use does not cancel renewal.

There are no voluntary refunds, credits, or prorated reimbursements for cancellation or unused time. Legally mandatory remedies and correction of unauthorized, duplicate, or erroneous charges remain available. The Terms govern disputes, failures, and changes. Price increases require the Terms' notice and any authorization required by law. This authorization permits no undisclosed fees and creates no personal guarantee by the representative.

I reviewed the plan, add-ons, recurring total, amount due today or first charge date, and cancellation terms and agree on behalf of the organization to the identified Terms of Service.