Last Update: 19 Feb 2026

This RoseRx Services Agreement, together with the Order Form (Agreement), is between you (Customer) and Rosemary Health Pty Ltd, trading as RoseRx (ABN 72 632 003 377) (RoseRx, we or our). If you are agreeing to this Agreement not as an individual but on behalf of your company, government, or other entity for which you are acting (for example, as an employee or government representative), then ‘you’ or the ‘Customer’ means your entity and you are binding your entity to this Agreement.

Term

1. This Agreement is effective beginning on the earlier of any Start Date or when you first download, install, access or use our Services (Commencement Date), and continues in full force and effect for the Term, unless terminated earlier in accordance with its terms.
2. On expiry of the Initial Subscription Term or then-current Extension Period, this Agreement will automatically extend for further periods equivalent to the Extension Subscription Term (each an Extension Period) on (subject to clause 1(c)) the terms and conditions in effect as at the expiry of the Initial Subscription Term or then-current Extension Period, unless either party notifies the other in writing that it does not wish to renew the Order Form at least 60 days before the end of the Initial Subscription Term or then-current Extension Period (as applicable).
3. On the start of any Extension Period, the Fees in effect at the expiry of the Initial Subscription Term or preceding Extension Term (as applicable) will automatically increase by the amount specified in the Order Form unless you are notified otherwise by RoseRx.
   
   

Provision of the Services

• Access to the Services

1. RoseRx grants you a non-exclusive, non-transferable right to access and use, and to allow each Authorised User to access and use, the Services during the Term, in accordance with the Documentation.
2. RoseRx will issue user names and passwords that allow Authorised Users to access and use the Services. You must ensure that Authorised Users keep their user names and passwords safe, not disclose them to anyone and only use their own user name and password, and you must tell RoseRx immediately if you suspect any unauthorised use of any user name or password. RoseRx will assume any person using such user names and passwords are Authorised Users.

• Restrictions

You must not, and must not permit any other person to:

1. decompile, reverse engineer or otherwise attempt to discover any source code of the Services
2. sell, assign, sublicense, or otherwise transfer any rights in relation to, the Services, without RoseRx’s prior written consent (which will not unreasonably be withheld);
3. use the Services to store material. You are responsible for keeping copies of any material you upload to or download from the Services;
4. upload or distribute any files that contain Harmful Code;
5. probe, scan, test the vulnerability of, or circumvent any security mechanisms used by, the sites, servers, or networks connected to the Services;
6. take any action that imposes an unreasonably or disproportionately large load on the sites, servers, or networks connected to the Services;
7. copy or reproduce any part of the Services in a manner which is inconsistent with this Agreement;
8. access or use any other RoseRx clients' or third-party users' data through the Services;
9. reduce or impair the accessibility of the Services;
10. use outputs generated through AI Services for clinical decision-making in the absence of independent professional decision-making.
11. attempt to manipulate, jailbreak, or bypass safety mechanisms contained within the AI Services;
12. use the AI Services to generate, distribute, or facilitate harmful, misleading, or deceptive information, including health information.

• Rights in the Services and Platforms

Except as may be specified in any Order Form, you acknowledge and agree that:

1. all rights, title and interest in or to the Services, Platform, Deliverables and Documentation, including all Intellectual Property rights, are RoseRx’s property or the property of RoseRx’s licensors; and
2. this Agreement does not transfer to you any proprietary rights in the Services, Platform, Deliverables or Documentation or derivatives thereof.

• Services for Customer’s Benefit

You must not, and must not permit any other person to:

1. Without limiting clause 2.2, you acknowledge and agree that the Services are provided solely for your use as set out in clause 2.1(a) and, unless expressly permitted under this Agreement, required to comply with Law or with RoseRx’s prior written consent, you may not:

1. show or provide a Deliverable to any third party or include or refer to a Deliverable or RoseRx’s name or logo in a public document; or
2. make any public statement about RoseRx or the Services.

1. RoseRx consents to you providing copies of Deliverables to your Associates, provided they have agreed:
1. the Deliverables are not for their use or benefit;
2. RoseRx accepts no responsibility or liability to them; and
3. to comply with the obligations in clause 2.4(a) and 10 as if they were a party to this Agreement.

• Updates to Services

RoseRx may provide Updates to the Services throughout the Term. In providing Updates, RoseRx

1. will use reasonable efforts to provide you with:
1. at least 10 Business Days’ written notice of major modifications or updates (Major Updates); and
2. where practical, notice of any other updates (which may be given after such updates have been made, if at all); and
2. acting reasonably, will not make modifications or updates that would have a material adverse effect on your use of the Services. requested by you in relation to a Major Update.

• Insight Services

RoseRx will during the Term at the frequency specified in the Order Form provide to the Customer with behavioural and clinical outcome data for improved learning in a format determined by RoseRx.

• AI Services

1. To the extent the Order Form specifies AI Services, such AI Services are governed by Schedule 2 (AI Services Addendum).
2. In the event of conflict between Schedule 2 and other MSA clauses, Schedule 2 prevails for AI Services.
3. The Customer's use of AI Services constitutes acceptance of the provisions contained in Schedule 2.

• Support Services

RoseRx will maintain a support team that will provide the Maintenance and Support Services in accordance with clause 3 and will be available to enable you and your Personnel to report Service Interruptions to support@roserx.health or a different location as nominated by RoseRx to you by notice or in the Order Form.

• Service Levels

1. The following table defines the priority levels (Priority Levels) that apply in relation to Service Interruptions.

Priority 1

A complete service outage or disruption which is within RoseRx’s control and which prevents Authorised Users from using the Services.

Priority 2

A partial service outage or disruption which is within RoseRx’s control and which has a significant impact on Authorised Users ability to use the Services.

Priority 3

• A minor performance impact which impacts on Authorised Users’ ability to use the Services;
• A minor issue impacting a group of Authorised Users’ ability to use the Services; or
• An issue impacting an individual Authorised User’s ability to use the Services, such as password resets or an investigation into accounts.
• The following table defines the priority levels (Priority Levels) that apply in relation to Service Interruptions.

1. If a Service Interruption occurs, RoseRx will:
1. allocate the Priority Level for the Service Interruption in accordance with the definitions in clause 2.11(a);
2. use commercially reasonable efforts to respond to (including notifying you of the Priority Level allocated to the Service Interruption) and resolve the Service Interruption within the time frames specified in the following table; and
3. for Priority Level 1 Service Interruptions, escalate the Service Interruption to your RoseRx account manager. Where a Response Time or Resolution Time is measured in minutes or hours, this will only be during 9am to 5pm AEST on Business Days.

Service Level

Priority 1

• Response time: 2 hours
• Resolution time: 24 hours

Priority 2

• Response time: 24 hours
• Resolution time: 2 days

Priority 3

• Response time: 24 hours
• Resolution time: 7 days
  
  
• No Exclusivity

You agree and acknowledge that RoseRx may perform services for your competitors or other third parties whose interests may conflict with yours.

Maintenance and Support Services

• Scope

RoseRx will provide the following maintenance and support services for the Platform during the Term (Maintenance and Support Services):

• Help desk

RoseRx will provide a help desk for your use of the Platform, in the form of consultation, assistance and advice in relation to:

• the operation and function of the Platform;
• the reporting and rectification of Faults in the Platform; and
• making requests for changes such as adding or removing Authorised Users.

The help desk will be accessible at support@roserx.health or an alternative location nominated by RoseRx to you by notice or in the Order Form.

For Service Interruptions raised with the help desk, RoseRx will comply with clause 2.9 (Service Levels).

• Exclusions and changes

The Maintenance and Support Services do not include the rectification of Faults that are caused by (provided that you have been given a reasonable opportunity to implement such Fix or Upgrade, and such Fix or Upgrade does not adversely affect the features, functions or performance of the Software):

1. use of the Software by you other than in accordance with this Agreement;
2. modifications by you to the Software;
3. use of the Software in connection or combination with equipment, devices or software that are not specified in writing by RoseRx as being compatible with the Software; or
4. the failure of you to implement any Fix or Upgrade that is made available to you. If you want RoseRx to further develop the Software, you may tell RoseRx and RoseRx will consider your request. RoseRx reserves the right, at its discretion, to change how the Maintenance and Support Services are provided at any time, based on prevailing market practices and due to any changes in the Platform by providing written notice to you.
   

Faults

You and we agree and acknowledge that:

1. RoseRx does not guarantee that all Faults can be resolved or fixed;
2. RoseRx will use commercially reasonable efforts to provide a Work-Around to a logged Fault;
3. A logged Fault will be considered closed when:
1. you and we have agreed in writing that the Fault has been resolved;
2. RoseRx has provided a Work-Around; or
3. the ticket for the logged Fault has been left open for 30 days and RoseRx has not received a response from your technical contact.
   

General representations and warranties

• RoseRx warranties

RoseRx warrants that:

1. it has full capacity and authority and all necessary licences, permits and consents to enter into and perform this Agreement; and
2. in performing its obligations under this Agreement, it will comply with applicable Law.
   

Customer warranties

You represent and warrant that at all times during the Term, you:

1. have full capacity and authority and all necessary licences, permits and consents to enter into and perform this Agreement; and
2. in performing your obligations under this Agreement, will comply with applicable Law.

• Disclaimer

Without limiting clause 12:

1. RoseRx makes no representation, warranty or gives any guarantee that the Services are suitable for your purposes or your business;
2. RoseRx makes no representation, warranty or gives no guarantee that the Services will be continuously available or free of any fault or Harmful Code;
3. you agree that RoseRx is not responsible or liable for any decision made or information provided by you or your Associate in connection with or in reliance upon the Services, Deliverables, or the selection or weighting of your Data as part of the Services;
4. RoseRx does not accept a duty of care to any third parties and will not be responsible for any Loss suffered by them in connection with orin reliance upon the Services or Deliverables;
5. to the extent aDeliverable or other output incorporates or relies on any information provided to RoseRx by a third party, RoseRx does not accept responsibility for the accuracy or completeness of that information.
6. AI Services Disclaimer: RoseRx makes no representation or warranty regarding the accuracy, completeness, reliability, or suitability of content created through the AI Services. All AI Service Outputs are provided "as is" for informational and educational purposes only. The Customer acknowledges and agrees that:
1. AI Services Outputs may generate incorrect, incomplete, or misleading information;
2. AI Services Outputs responses do not constitute medical advice, diagnosis, or treatment and are not to be substituted or taken to be professional clinical judgement;
3. Authorised Users must independently verify any information developed through the AI Services Outputs before acting on it;
4. RoseRx excludes liability for any loss or damage as a result of a person, including an Authorised User, making decisions on the basis of or in reliance upon any AI Services Outputs.

The Customer and each Authorised User acknowledges and agrees that, notwithstanding RoseRX taking reasonable care as to the quality of the AI Services Outputs, AI powered educational systems are inherently susceptible to incorrect and inaccurate information being developed which may affect the clinical efficacy of any AI Services Outputs and it remains the Customer and each Authorised User’s obligation to independently verify any AI Services Outputs.

Customer obligations

You are wholly responsible for:

1. providing an IT environment suitable to support use of the Services, including obtaining and maintaining all computer hardware, software, and communications equipment and Internet connectivity needed to access the Services, and which meets any minimum requirements of which RoseRx notifies you from time to time;
2. paying all third-party access charges incurred while using the Services;
3. implementing, maintaining, and updating all necessary and proper procedures and software for safeguarding against Harmful Code;
4. ensuring that there is a nominated sponsor responsible for advising and maintaining Authorised User access, and that stakeholders from your risk and technology teams are available as reasonably required by RoseRx to facilitate RoseRx’s provision of the Services;
5. maintaining a directory service for security for the purpose of authentication and managing Authorised User access;
6. checking that AI Services Output complies with local laws;
7. ensuring that all Customer Materials input into the Services (including the AI Services) are accurate and correct;
8. displaying any and all required disclaimers to Authorised Users (including the Customer’s end users), if applicable.
   

Publicity: Marketing and use of customer names

• Default Consent to Logo Use

RoseRx may identify the Customer as a user of the Services and use the Customer's name and logo on its website and in general marketing materials and the Customer grants to RoseRX a non-exclusive, worldwide, royalty-free, sub-licensable, transferable licence for the Term (or Extension Term as the case may be) to use the Customer’s trade marks for the purposes of this clause.

• Case Study and Testimonial Consent

For any case studies, testimonials, webinars, or other marketing materials that feature the Customer, RoseRx will obtain the Customer's prior written approval of the relevant content.

• Removal Upon Request

Upon the cessation of the Term (or the Extension Term as the case may be), RoseRx will cease using the Customer's name and logo and remove them from marketing materials within 30 days.

Fees

• Fee

As at the Commencement Date, the fee for access to and ongoing use of the Services is set out in the Order Form (Fees). RoseRx may in its absolute discretion change the Fees by giving you at least 40 Business Days’ prior written notice. In the event you are not agreeable to the revised fees, you may terminate this Agreement with at least 20 Business Days’ prior written notice and RoseRx will refund the pro-rated fees for the unconsumed term.

• Payment of Fees

In consideration for RoseRx providing the Services, you must pay RoseRx the Fees. All Fees are non-refundable unless RoseRx terminates this Agreement under clause 15.2, in which case RoseRx will refund the pro-rated portion of the Fees covering the period following termination.

• Invoices

1. RoseRx will be entitled to invoice you for the Fees on a quarterly basis, in advance.
2. If in any quarter you use Services in excess of the amount paid for under clause 8.3 (a), RoseRx will as soon as practicable notify you of such excess use.
3. Within 14 calendar days after the end of each quarter, RoseRx will conduct a reconciliation of the Services received by you during, and the Fees paid by you in advance for, the preceding quarter and invoice you for any Services received in excess of the amount paid for under clause 8.3 (a).
4. You must pay invoiced Fees to RoseRx in full in clear funds within 14 calendar days of the date of invoice or the period of time specified in the Order Form. If Customer fails to pay any Fees by the due date, RoseRx may charge interest on the overdue sum from the due date until payment of the overdue sum. Interest under this clause will accrue each day at 8% a year above the Reserve Bank of Australia’s base rate from time to time.
5. The Customer must make payment of all Fees without set-off, counterclaim or deduction.

• Goods and Services Tax

The consideration for any supply made under or in connection with this Agreement does not include GST. If RoseRx is required to pay, in accordance with GST Law, any GST on the Services and Deliverables provided under the Agreement, you will pay to RoseRx the amount of GST properly payable provided RoseRx has issued you with a valid tax invoice.

• Compliance costs

If RoseRx is required to provide information regarding you or the Services to comply with a statutory obligation, court order or other compulsory process relating to you, you agree to pay the reasonable costs and expenses RoseRx incurs in doing so, including time spent by professional staff and RoseRx’s reasonable legal costs. This clause 8.5 does not apply to the extent a compulsory process relates to RoseRx’s alleged wrongdoing.

• Overage fees

1. If the Customer's usage of AI Services exceeds the conversation entitlements specified in the applicable Order Form during any calendar month, the Customer will be charged overage fees at the per-conversation rate specified in the Order Form.
2. Overage fees will be calculated monthly and invoiced quarterly in arrears in accordance with clause 8.3.
3. Overage rates are specified in the applicable Order Form and may be adjusted upon renewal in accordance with clause 1(c).
4. Unused conversation entitlements do not rollover to subsequent months or Terms (or Extension Terms).
5. RoseRx will provide the Customer with monthly usage reports via the Platform dashboard. Notifications will be sent to Customer Admin users when usage reaches 90% of the applicable monthly conversation entitlement threshold.
6. Conversation counts are determined by RoseRx's internal tracking systems. In the event of a dispute regarding conversation counts, RoseRx will provide the Customer with access to aggregated usage logs for verification.

Intellectual Property Rights

• Customer Material

RoseRx acknowledges that, as between the parties, the Customer owns all Intellectual Property Rights in and to the Customer’s Material.

The Customer grants Roserx:

1. a non-exclusive, transferable, royalty-free licence for the Term to use, develop, modify, adapt, reproduce and sublicense to its Related Bodies Corporate and third-party contractors to the extent necessary to: (i) provide the Services and perform its obligations under this Agreement; (ii) comply with any of RoseRx's obligations under Law, including for reasons of accountability and fidelity; and (iii) make further Improvements to the Services or RoseRx Material; and
2. subject to Schedule 2 and clause 1.4(c) of Schedule 1, a perpetual, irrevocable, royalty-free, transferable licence to use de-identified and anonymised Customer Data for the purposes of training, fine-tuning, and improving RoseRx's proprietary AI models, provided that such data has been irreversibly de-identified in accordance with the HIPAA Safe Harbor method under 45 CFR § 164.514(b) and does not identify the Customer or any individual.

• RoseRx Material

You acknowledge that RoseRx owns all Intellectual Property Rights in and to the RoseRx Material. Subject to your compliance with this Agreement and payment of all Fees when due, RoseRx grants to you a limited, a revocable, non-exclusive, non-transferable, royalty-free licence to use the RoseRx Material for the Term solely to the extent necessary for you to access and receive the benefit of the Services.

• Improvements

1. RoseRX owns all Intellectual Property Rights in and to any Software and RoseRx Materials, invention or improvement to the Software, which is:
1. created or developed by you;
2. attributable in whole or in part to the Services or RoseRx Materials; or
3. any Intellectual Property Rights or Confidential Information of RoseRx (Improvements).
2. All rights, title and interest in and to any Improvements vest in RoseRx immediately upon creation. You hereby assign to RoseRx all present and future rights, title and interest in and to any Improvements.
3. To the extent any rights to or interests in any Improvements do not vest in or are not assigned to RoseRx under clause 9.3(b), you agree to do all things necessary for the proper vesting or assignment of such rights and interests to RoseRx, including executing any documents or assignments and providing all necessary information, records or materials.

Confidentiality

• Confidentiality

Each party agrees to keep confidential, and not to use or disclose, other than as permitted by this Agreement, any Confidential Information of the other party. This obligation of confidence extends to Confidential Information provided to or obtained by a party before entering into this Agreement.

• Exclusions

Despite clause 10.1, either party may disclose Confidential Information of the other party only on a ‘need‑to‑know’ and confidential basis:

1. with the prior written consent of the other party, which may be given subject to any conditions at the discretion of the party giving consent;
2. which it is legally required to disclose; and
3. to its related companies, solicitors, auditors, insurers or accountants, however the discloser must ensure that every person to whom disclosure is made under this clause 10.2 uses the information disclosed solely for the purposes of advising or reporting to the disclosing party.

• Actions to prevent disclosure

Each party must take all reasonable steps to ensure that any person who has access to Confidential Information of the other party through it or on its behalf does not disclose the other party's Confidential Information other than in accordance with this Agreement.

• De-identified data and confidentiality

For the avoidance of doubt, data that has been de-identified and anonymised in accordance with Schedule 2, Section 2.1 shall not constitute Confidential Information for the purposes of this clause 10, and RoseRx may use such data as permitted under this Agreement without the restrictions of clause 10.1.

Privacy and Customer Data

Without limiting any of RoseRx’s obligations under this Agreement with respect to the security of the Services and Customer Data, RoseRx must comply with its obligations set out in the Data Security and Data Privacy Addendum.

Indemnity

• RoseRx indemnity

RoseRx will indemnify you for Loss that you incur arising out of or in connection with any Claim brought against you by a third party alleging that the Services, Software which is owned by RoseRx, RoseRx Material or any other Deliverable infringes any Intellectual Property Rights of that third party (IP Claim), provided that:

1. you must promptly tell RoseRx of any IP Claim;
2. RoseRx will be responsible for the defence of any IP Claim and any negotiations for settlement of the IP Claim;
3. at RoseRx’s request, you will provide RoseRx with reasonable assistance with any IP Claim; and
4. RoseRx’s liability to indemnify you will be proportionately reduced to the extent that an act or omission of you contributed to the Claim or Loss. RoseRx will have no liability to you and will not indemnify you for any Loss caused by your:

1. infringement of RoseRx’s Intellectual Property Rights in the Services;

1. use of the Services outside of the scope of this Agreement; or
2. a breach of Law or of any other clause in this Agreement.

You indemnify RoseRx for any Claim or Loss arising out of your infringement of RoseRx’s Intellectual Property Rights in the Services or use of the Services not in accordance with this Agreement.

RoseRx will have no liability to you and will not indemnify you for any Loss arising from:

1. your reliance on AI Services Outputs without independent verification;
2. any clinical decisions that are made based on AI Services Output recommendations; or
3. any AI Services Output hallucinations, errors, or inaccuracies in automated responses.

Liability

• Limitation of liability

1. Subject to clauses 13.1 (c) to 13.1 (f), the aggregate liability of RoseRx to you arising out of or in connection with this Agreement, whether in contract, in tort (including negligence), in equity, by operation of law or otherwise is limited to lesser of (i) the total amount paid by you under this Agreement in the 12 months preceding the event giving rise to the liability; or (ii) the amount we can recover under insurance in respect of the liability.
2. Subject to clauses 13.1(c) to 13.1(f), your aggregate liability to RoseRX arising out of or in connection with this agreement, whether in contract, in tort (including negligence), in equity, by operation of law or otherwise is limited to the total amount paid by you under this Agreement in the 12 months preceding the event giving rise to the liability.
3. The limitation in clauses 13.1 (a) and 13.1 (b) does not apply in relation to any liability arising directly out of: (1) personal injury (including sickness or death); (2) loss of or damage to tangible property of you; (3) a breach of a party’s confidentiality obligation under clause 10; or (4) a breach by RoseRx of its data security and data privacy obligations.
4. Neither you or us or our respective Personnel will be liable to the other for any Consequential Loss incurred by the other arising out of or in connection with this Agreement.
5. Your and our liability under this Agreement will be reduced proportionally to the extent any act or omission of the other party or its Personnel, caused or contributed to the liability.
6. Nothing in this clause 13.1 limits either party's obligation to mitigate any Loss it suffers or incurs arising out of or in connection with this Agreement.

Suspension

Without limiting any of RoseRx’s other rights and remedies under this Agreement, RoseRx may suspend access to the Services where RoseRx reasonably believes that there has been any unauthorised use of the Services by you, any Authorised User or any other person, using your login credentials. RoseRx will tell you about a suspension under this clause 14, and you agree to work with RoseRx in good faith and using commercially reasonable endeavours to resolve the issue giving rise to the suspension.

Termination

• Termination by RoseRx

RoseRx may terminate this Agreement immediately by written notice to you if you are late in paying any amount payable to RoseRx under this Agreement and have failed to make payment within 30 days of receiving written notice of the late payment from RoseRx.

• Termination for convenience

After the first anniversary of the Commencement Date, either you or we may terminate this Agreement for convenience at any time by giving 40 Business Days' prior written notice to the other.

• Termination for default

Without limiting clause 15.1 either you or we may terminate this Agreement by giving written notice to the other party (defaulting party), such termination to take effect from the date specified in the notice, if:

1. the defaulting party is subject to an Insolvency Event;
2. the defaulting party commits a material breach of this Agreement and does not rectify that breach within 30 days (or another period agreed by you and we in writing) of receiving written notice of the breach from the first party; or
3. the defaulting party commits a material breach of this Agreement which breach is not capable of remedy.

• Consequences of termination or expiry of this Agreement

When this Agreement is terminated or expires, each party must, and must ensure that its Personnel, promptly return or destroy (at the other party’s discretion), any Confidential Information of the other party in its possession, custody or control. RoseRx will ensure all files that are marketing assets created under the Agreement and owned by you will be transferred or provided reasonably. Termination or expiry of this Agreement does not prejudice any right of action or remedy of either party which accrued prior to termination or expiry. RoseRX will promptly conduct a reconciliation of the Services received by you during, and the Fees paid by you in advance for, the period up to the effective date of termination or expiry and invoice you for any Services received in excess of the amount paid for under clause 8.3(a).

Force Majeure

If a party is affected, or likely to be affected, by a Force Majeure Event that party must immediately give the other prompt notice of that fact including:

1. full particulars of the Force Majeure Event;
2. an estimate of its likely duration;
3. the obligations affected by it and the extent of its effect on those obligations; and
4. the steps taken to rectify it. The obligations under this Agreement of the party giving the notice are suspended to the extent to which they are affected by the relevant Force Majeure Event as long as the Force Majeure Event continues. A party claiming a Force Majeure Event must use its best endeavours to remove, overcome or minimise the effects of that Force Majeure Event as quickly as possible.

Notices

A notice or other communication to a party under this Agreement (Notice) must be in writing, in English, signed by or on behalf of the sending party and addressed using the following details (or alternative details nominated by Notice to the sending party):

RoseRx

notices@roserx.health
Rosemary Operations Pty Ltd, trading as RoseRx

romain@roserx.health CEO

L17, International Tower 3, Barangaroo Ave, Sydney NSW 2000, Australia

You

The customer entity name, ABN, street address and authorised or representative personnel contact email address provided by you in writing to RoseRx either:

1. at the Commencement Date when prompted on RoseRx’s website; or
2. at anytime after the Commencement Date provided that RoseRx acknowledges in writing such notification by you of your updated or amended details.

A Notice must be given by one of the methods, and is regarded as given and received at the time, in the table below. However, if this means the Notice would be regarded as given and received outside of 9am to 5pm (addressee’s time) on a Business Day, then the Notice will instead be regarded as given and received at 9 am on the next Business Day.

Method of giving Notice and when Notice is regarded as given and received

• By hand to the nominated address: 9 am (addressee’s time) on the second Business Day after the date of posting
• When delivered to the nominated address: By email to the nominated email address

General

1. Interpretation: In this Agreement:
1. headings and bolding are for convenience only and do not affect interpretation;
2. specifying anything after the words ‘include’ or ‘for example’ or similar expressions does not limit what else is included;
3. a reference to a clause or party is a reference to a clause of, and a party, this Agreement;
4. a reference to $ means the lawful currency of Australia;
5. an expression importing a natural person includes any body corporate and any other legally recognised entity; and
6. a reference to any legislation includes all delegated legislation made under it and amendments, consolidations, replacements or re-enactments of any of them.
2. Assignment: Neither party may assign, novate or otherwise transfer its rights or liabilities under this Agreement without the other party’s prior written consent.
3. Subcontracting: RoseRx may subcontract or otherwise arrange for another person(in Australia or overseas) to perform any part of this Agreement or to discharge any of its obligations under any part of this Agreement.
4. Relationship between parties: Nothing in this Agreement or the relationship between you and us constitutes a partnership, joint venture or other legal relationship between you and us.
5. Amendment of Agreement: This Agreement may not be varied, supplemented or replaced except in writing executed by both parties.
6. Severance: If a provision of this Agreement is void, unenforceable or illegal in a jurisdiction, it is severed from this Agreement for the purposes of enforcement in that jurisdiction. The remainder of this Agreement has full force and effect.
7. Waivers: A provision of, or a right created under, this Agreement may not be waived except in writing executed by the party granting the waiver. A failure by a party to insist on strict performance of any of the terms of this Agreement is not to be deemed a waiver of any subsequent breach or default of the terms of this Agreement.
8. Entire agreement: This Agreement supersedes all previous agreements for its subject matter and contains all the express terms of the agreement between you and us.
9. Governing law and submission to jurisdiction: This Agreement is governed by the laws of New South Wales, Australia. Each party irrevocably submits to the exclusive jurisdiction of the courts of New South Wales, Australia, and courts of appeal from them, for determining any dispute concerning this Agreement or the transactions contemplated by it.
10. Survival: The following clauses in this Agreement impose continuing rights and obligations on the relevant parties and survive termination or expiry of this Agreement: 9, 10, 11, 12, 13, 15.4, 17, 18, and the following provisions of Schedule 2 (AI Services Addendum): clauses 3.1 (De-identification standard), 3.2 (Training data), 3.3 (Data retention), 3.4 (Data aggregation), 3.5 (Customer Rights), and 5 (Safety and Content Moderation).
11. Agreement components and inconsistency: Unless the contrary intention is expressed, if there is an inconsistency between any of the following, the order of precedence is:

1. The Order Form;

1. Schedule 3 (Order Form Amendments);
2. Schedule 2 (AI Services Addendum);
3. Schedule 1 (Data Security & Privacy Addendum);
4. The terms of this MSA; and
5. Any other document expressly incorporated by reference.

RoseRx reserves the right to:

1. monitor AI interactions for safety, compliance, and quality purposes;
2. suspend access if it is detected that AI Services are misused;
3. implement content filters and safety mechanisms;
4. log and analyse AI Service conversations to improve the AI Services.

Definitions

The meanings of the terms used in this Agreement are set out below.

AI means “artificial intelligence” being a machine learning system for the purpose of simulating human intelligence by computer systems to perform tasks such as reasoning, learning, problem-solving and perception.

AI Services means the conversational AI-powered features within the Platform made available by RoseRx to the Customer, enabling the Customer to deploy automated AI-assisted interactions to its Authorised Users for the purposes specified in the applicable Order Form. AI Services are provided for informational and educational purposes only and do not constitute medical advice, diagnosis, or treatment.

AI Services Output means any output, response or recommendation (in any form) produced from the AI Services.

AI Sub-Processor means and refers to the third-party AI service providers used by RoseRx.

Customer Health Data means any Customer Data that relates to the physical or mental health of an individual Authorised User or patient, including information about health services provided to that individual, whether or not that information constitutes Personal Information under applicable Privacy Laws.

Associates means in relation to a party, means: (1) a Related Body Corporate of that party; and (2) any Personnel of that party or a person referred to in paragraph (1), but excludes, where RoseRx is the party, any competitors of RoseRx.

Authorised User means

(1) you; and

(2) such other end users and other persons who you authorise to use the Services in accordance with this Agreement.

Business Day means a day on which banks are open for business in Sydney, Australia excluding aSaturday, Sunday or public holiday in that city.

Claim means any claim, action, demand, order, notice, declaration or proceedings of any nature whatsoever, whether actual or threatened.

Commencement Date has the meaning given in clause 1.

Confidential Information in relation to a party means any information (in any form) that:

1. is by its nature confidential;
2. is divulged in circumstances which imply that it is confidential;
3. the party receiving the information knows or ought to know is confidential; or
4. is designated by a party as confidential, including
5. information which has any actual or potential commercial value or is comprised in or of or relating to any Intellectual Property Rights of a party; and
6. information relating to the internal management and structure, policies and strategies of a party.

Consequential Loss means:

1. any Loss that does not arise naturally (that is, according to the usual course of things) from the event giving rise to the Loss;
2. loss of production, use, business or revenue;
3. loss of data;
4. loss of goodwill or damage to reputation; or
5. loss of profit or the opportunity to earn profit.

Customer Material means all software, tools, documentation, reports, diagrams, data procedures, plans and other Materials, irrespective of media or form, provided by or on behalf of you to RoseRx under this Agreement.

Data Security and Data Privacy Addendum means the addendum attached to this Agreement as Schedule 1.

Deliverables means an item or Material (whether Software, Documentation, Services or otherwise) required to be provided by or on behalf of RoseRx under this Agreement to you or any Authorised User.

Documentation means any documentation (including supporting documentation) related to the Service which is delivered or made available by RoseRx to you or Authorised Users whether published online or provided electronically or in hard copy.

Extension Period has the meaning given in clause 1(b).

Extension Subscription Period means the extension term for the Services specified in the Order Form.

Fault means any failure, fault, defect or error in the Platform, including a failure of the Platform to perform in accordance with the Documentation or otherwise comply with this Agreement.

Fees has the meaning given in clause 8.1.

Fix means any modification or addition to the Services that is provided by RoseRx under this Agreement, including any fix, update or patch that is not an Upgrade.

Force Majeure Event means an event or cause beyond the reasonable control of a party including:

1. any act of God, lightning, storm, flood, fire, earthquake, explosion or adverse weather conditions;
2. internet service provider or internet infrastructure failures;
3. theft, malicious damage, strike, lockout or other labour difficulty;
4. act of public enemy, war (declared or undeclared), sabotage, blockade, revolution, riot, insurrection, civil commotion, pandemic, epidemic;
5. any act (including refusal or revocation of a licence or consent) by any government or any governmental, semi-governmental, administrative, fiscal or judicial body, department, commission, authority, tribunal, agency or entity; and
6. embargo, power or water shortage or interruption, but only where the foregoing events or circumstances:
1. are not caused by an act or omission of the affected party or any of its Associates;
2. are beyond the reasonable control of the affected party or its Associates; and
3. could not have been avoided or overcome by the affected party or any of its Associates taking reasonable precautions or steps.

Government Agency means any government or governmental, administrative, monetary, fiscal or judicial body, department, commission, authority, tribunal, agency or entity in any part of the world.

GST means any services and resources tax or similar value added tax levied or imposed by the GST Law or otherwise on as supply.

GST Law means A New Tax System (Services and Resources Tax) Act 1999 (Cth), or any other relevant legislation and regulations that apply from time to time, governing the issue of GST.

Harmful Code means any computer program or virus or other code that is harmful, destructive, disabling or which assists in or enables theft, alternation, denial of service, unauthorised access to or disclosure, destruction or corruption of information or data.

Improvements has the meaning given in clause 9.3.

Initial Subscription Term means the date referred to as such in the Order Form.

Insight Services means the services provided by RoseRx as set out in clause 2.6.

Insolvency Event in the context of a person means:

1. receivership: a receiver, receiver and manager, official manager, trustee, administrator, other controller (as defined in the Corporations Act 2001 (Cth) (Corporations Law)) or similar official is appointed, or steps are taken for such appointment, over any of the equipment or undertaking of the person;
2. insolvency: the person is or becomes unable to pay its debts when they are due or is or becomes unable to pay its debts within the meaning of the Corporations Law or is presumed to be insolvent under the Corporations Law;
3. ceasing business: the person ceases or threatens to cease to carry on business; or
4. liquidation: an application or order is made for the liquidation of the person, a resolution is passed, or any steps are taken to liquidate or pass a resolution for the liquidation of the person otherwise than for the purpose of an amalgamation or reconstruction.

Intellectual Property Rights means any industrial and intellectual property rights throughout the world and for the duration of the rights including:

1. any patents, copyright including future copyright, registered or unregistered trademarks or service marks, trade names, brand names, registered or unregistered designs, commercial names, circuit layouts, database rights;
2. any inventions, discoveries, processes, methods, trade secrets, know how, computer software, confidential information and scientific, technical and product information;
3. the right to apply for any industrial and intellectual property rights; and
4. any other similar or analogous rights and any intellectual or industrial rights whether now existing or which come into existence in the future.

Law means any:

1. legislation, including regulations, determinations, by laws, declarations, ministerial directions and other subordinate legislation;
2. common law;
3. Government Agency requirement or authorisation (including conditions for any authorisation);
4. mandatory codes, standards and guidelines;
5. writ, order, injunction, or judgment; or
6. local government legislation, including regional plans, district plans, regulations, by laws, declarations, ministerial directions and other subordinate legislation.

Loss means any liability, cost, expense, loss or damage. In relation to a Claim, Loss includes amounts payable on the Claim (whether or not the Claim is successful) and legal and other professional costs and disbursements on a full indemnity basis.

Maintenance and Support Services means the ongoing maintenance and support services provided by RoseRx as set out in clause 3.

Material means any material, information or knowledge, regardless of form, including without limitation any data, text, chart, graphics, reports, calculations, statistics, software, source code, object code, designs, algorithms, templates, formats, tools, methodologies, strategies, processes, procedures or routines.

Order Form means the ordering document entered between RoseRx and Customer specifying the

Services to be provided under this Agreement and the Fees to be paid by Customer for such Services.

Personnel in relation to a party, that party’s employees, agents, consultants and subcontractors.

Platform means the hardware, Software, equipment and network infrastructure necessary to host and provide the Services.

Priority Levels are defined in clause 2.9.

Related Bodies Corporate has the meaning given in Corporations Law.

Resolution means the correction of, or provision of a Work-Around in relation to, a Service Interruption.

Resolution Time means the elapsed time between the time RoseRx identifies a Service Interruption and the time RoseRx provides a Resolution for the Service Interruption.

Response Times means the elapsed time between the time RoseRx identifies, or is notified by you of, a Service Interruption, and the time RoseRx notifies you of the Service Interruption or acknowledges your notification of the Service Interruption.

RoseRx Software means the technology platforms which provide a personalised pathway for patients to navigate to a healthcare professional for treatment.

RoseRx Materials means any Material, and any of RoseRx’s Software, algorithms, methodologies, processes, tools, tool-kits, routines, designs, templates, formats, strategies, content management tools, functional, technical, scripts, texts, graphics, databases, data compilations and collections and technical data or specification or instructional guides or procedures:

1. the Intellectual Property Rights of which are owned or licensed by RoseRx prior to the Commencement Date; or
2. which are created or acquired by RoseRx on or after the Commencement Date, and which is incorporated in, or necessarily used in providing, the Platform and Services to you under this Agreement, and includes any Improvements developed by RoseRx for you.

Service Interruptions means a time during which you’ and its Authorised Users’ access to the Platform and/or the Services is impeded as set out in clause 2.11(a) but does not include any time during which Maintenance and Support Services are being provided.

Service Levels means the service levels set out in clause 2.9.

Services means any Software, Implementation and Configuration Services, AI Services, Insight Services, Maintenance and Support Services, and other services specified in the Order Form.

Software means the RoseRx Software and any other software used by or on behalf of RoseRx to deliver the features and functionality of the Services, including:

(1) any Update, Upgrade, new release or Improvement relating to that software; and

(2) all application software for the Services and all system and server software used to provide the Services.

Start Date means the date referred to a such in the Order Form.

Term means the Initial Subscription Term and any Extension Period.

Update means a Fix or an Upgrade.

Upgrade means any modification or addition to the Services that has been produced to provide an extension, improvement or additional functionality to the Services, and any replacement or new software licensed by RoseRx that replaces or provides the same or similar functionality as the Services.

Training Data means de-identified and anonymised data used to improve AI models used in the AI Services

Work-Around means a workaround or temporary Fix of a Service Interruption or Fault which permits you to use the Services with out any material degradation in functionality or performance.

Schedule 1: Security and Data Privacy Addendum

1.1 Definitions

In this Data Security and Data Privacy Addendum:

1. Confidential Information in relation to a party means any information (in any form) that is Personal Information or any other information relating to a party's employees, subcontractors, agents, clients or suppliers.
2. Customer Data means all Material containing Customer Confidential Information or Personal Information which RoseRx has access to under this Agreement and includes any Material generated by or processed in connection with the Services.
3. Data Security Breach means any unauthorised access, modification, use, disclosure or loss of Customer Data caused by an act or omission of RoseRx or any RoseRx Associate.
4. Personal Information has the meaning given in the Privacy Act 1988 (Cth).
5. Privacy Laws means (1) the Privacy Act 1988 (Cth); and (2) any other legislation relating to the collection, use, disclosure, storage, processing or granting of access rights to Personal Information.

1.2 Compliance with Privacy Laws

RoseRx must always comply with all Privacy Laws in relation to Personal Information.

1.3 Security of Customer Data

You and we acknowledge and agree that:

1. RoseRx will keep all Customer Data it has been provided with access to confidential in accordance with paragraph 1.7 and maintain reasonable security measures designed to keep Customer Data secure in accordance with good industry practice, the provisions of ISO/IEC 27001:2013 international information security standard and Privacy Laws;
2. in the event of any loss, corruption or reduction in the accessibility or usability of any Customer Data, RoseRx will use commercially reasonable methods to restore such Customer Data in accordance with good industry practice data restoration techniques;
3. whilst RoseRx will endeavour to protect Customer Data from loss or corruption in accordance with good industry practice, RoseRx cannot guarantee that Customer Data will not be lost or corrupted, and it is your sole responsibility to back up Customer Data on a regular basis;
4. RoseRx may use anonymous, aggregated, or de-identified data from the Customer’s use of the Services for the purposes of improving the Services, developing the Platform, and improving and training AI models.
5. for a period of 30 days after the end of the Term, you may copy Customer Data from the Services, However after this period, RoseRx may remove all Customer Data from RoseRx’s systems, except data that has been irreversibly de-identified. RoseRX may continue to retain and utilise the de-identified data.

1.4 Ownership and use of Marketing and or Customer Data

1. If applicable, RoseRx acknowledges all Marketing and or Customer Data is your property and Confidential Information.
2. You grant to RoseRx a non-exclusive, non-transferable, sub-licensable, royalty-free and fee-free licence to use and disclose so much of you Data as is necessary to give effect to RoseRx’s rights and obligations under this Agreement.
3. You grant to RoseRx a perpetual, irrevocable, non-exclusive, sub-licensable and royalty-free licence to use anonymised and de-identified Customer Data for the purpose of developing, improving and training AI models within the Platform and RoseRx Services, including sharing with AI Sub-Processors listed in Schedule 2, Section 4.1.

1.5 Occurrence of Data Security Breach

After becoming aware of any Data Security Breach, RoseRx will promptly:

1. tell you of the breach;
2. endeavour to identify the cause of the breach;
3. endeavour to remedy the breach; and
4. endeavour to prevent any recurrence of such breach or potential breach.

1.6 Customer warranties

If Customer Data is required, you represent and warrant that at all times during the Term, you have all necessary licences, permits and consents to provide Customer Data to RoseRx under this Agreement.

1.7 Confidentiality

1. Each party agrees to keep confidential, and not to use or disclose, other than as permitted by this Agreement, any Confidential Information of the other party. This obligation of confidence extends to Confidential Information provided to or obtained by a party before entering into this Agreement.
2. Despite paragraph 1.7 (a), either party may disclose Confidential Information of the other party only on a ‘need‑to‑know’ and confidential basis:

1. with the prior written consent of the other party, which may be given subject to any conditions at the discretion of the party giving consent;
2. which it is legally required to disclose; and
3. to its related companies, solicitors, auditors, insurers or accountants, however, the discloser must ensure that every person to whom disclosure is made under this paragraph 1.7 (b) uses the information disclosed solely for the purposes of advising or reporting to the disclosing party.
1. Each party must take all reasonable steps to ensure that any person who has access to Confidential Information of the other party through it or on its behalf does not disclose the other party's Confidential Information other than in accordance with this Agreement.

1.8 AI Processing and Sub-Processors

1. The Customer acknowledges that RoseRx utilises third-party AI service providers ("AI Sub-Processors") to deliver AI-powered features.
2. RoseRx maintains a current list of AI Sub-Processors at Trust Centre (https://trust.roserx.health/) and will provide 30 days' notice to the Customer of any engagement of new AI Sub-Processors.
3. Customer Data processed by AI Sub-Processors may be transferred internationally, subject to the appropriate safeguards under the applicable Privacy Laws.
4. RoseRx will ensure that the AI Sub-Processors maintain security standards that are compliant with the requirements under clause 1.3.
5. Conversation logs with AI services may be retained for quality assurance, safety monitoring, and service improvement purposes.

Schedule 2: AI Services Addendum

This Addendum is incorporated into the Master Services Agreement and governs the Customer’s use of the AI Services offered by RoseRX.

1. 1. Definitions

Terms used in this AI Services Addendum are defined in the Master Services Agreement.

2. CONSENT

By commencing use of any AI Services which are subject to this AI Services Addendum, the Customer and each Authorised User is providing its consent to the provision of the AI Services required to give practical functionality which includes providing consent to the processing of Customer Data through the AI Services.

3. AGGREGATION AND DATA USAGE

1. 1. De-identification standard

1. RoseRx processes Customer Health Data using the HIPAA Safe Harbor de-identification method under 45 CFR § 164.514(b), removing all 18 specified identifiers and certifying that the remaining information could not be used alone or in combination to identify an individual.
2. The Customer is to ensure that any information it inputs into the AI Services does not, to the extent reasonably practicable, include any personal health information.
3. Customer Health Data will not be “re-identified” by RoseRX or its AI Sub-Processors and RoseRX will use its best endeavours to prevent re-identification.
4. Identifiable Customer Health Data will not be processed by AI Sub-Processors.

4. Training data

1. De-identified Customer Health Data is used for the purpose of training, fine-tuning and improving the RoseRX AI Services and third-party AI models used in the provision of the Services.
2. RoseRX does not use the following information to train models used in the AI Services:
   1. identifiable Customer Health Data;
   2. genetic information;
   3. biometric information (except to the extent a voice function is used as part of the chat functionality); and/or
   4. data from Customers and Authorised Users who have opted out of their data and information being used as Training Data

RoseRx retains data for as long as is necessary to fulfil the purposes for which it was collected, including to provide and improve the AI Services, comply with legal obligations, resolve disputes, and enforce agreements. This applies to the following data types:

1. Operational logs: governed by the overarching retention principle set out above.
2. Training Data: governed by the overarching retention principle set out above.
3. Safety-flagged conversations: governed by the overarching retention principle set out above.
4. user-deleted conversations: Notwithstanding the above, where a user requests deletion of conversation data, RoseRx will remove that data from active production systems within 30 days of the request. RoseRx is not obligated to remove data that has been irreversibly incorporated into de-identified Training Data prior to the deletion request, as set out in clause 3.5(a) of this schedule.

6. Data aggregation

The Customer agrees that RoseRX is free to use aggregated data (including aggregated de-identified Customer Health Data and AI Services Outputs and inputs from Customers and Authorised Users) to develop, train, improve or enhance the AI Services provided that at all times such aggregated data has been de-identified in accordance with this Addendum.

7. Customer Rights

1. The Customer acknowledges that RoseRX is not able to extract any Customer Data from the Training Data which has been input prior to opting out.
2. The Customer may request in writing deletion of conversation data and RoseRX will determine, acting reasonably, whether it can lawfully comply with such request.

8. Data security of AI processing

1. AI Sub-Processors will receive Customer Data via encrypted systems and services aligned with industry standards.
2. Conversation data is not stored by AI Sub-Processors.
3. Customer Data may be processed by AI Sub-Processors which results in the transfer of Customer Data to the United States of America and to the European Union and to the extent future AI Sub-Processors are added to the list of AI Sub-Processors used by RoseRX, to the location of operation of those AI Sub-Processors.
4. Identifiable Customer Data is only stored for real-time inference by AI Sub-Processors.
5. Training Data may be stored by RoseRX’s secured and encrypted environments for model training purposes. AI Sub-Processors do not retain de-identified data beyond the processing session unless as required for safety monitoring.

1. 1. RoseRX maintains a current list of AI Sub-Processors here https://trust.roserx.health/
   2. Trust Centre Maintenance. RoseRx will maintain its Trust Centre at trust.roserx.health throughout the Term and will ensure the following information is kept current:

1. the list of AI Sub-Processors;
2. RoseRx's AI Governance and Action Statement;
3. security certifications and assessments applicable to the AI Services; and
4. any material changes to AI safety controls. RoseRx will update the Trust Centre within 30 days of any material change to the above information.

1. HIPAA BAA (if accessing personal health information); and
2. Data processing agreement; and
3. Security assessment per listed in the https://trust.roserx.health/

1. RoseRX may adopt or use further AI Sub-Processors from time-to-time.

1. 1. Safety controls

1. RoseRX implements and maintains documented safety controls which include:
1. content filtering of the AI Services Outputs for harmful health information;
2. drug interaction detection;
3. contraindication warnings; and
4. escalation to human reviews for high risk scenarios.
2. Safety controls are tested regularly, however, the implementation of safety controls into the AI Services is not a substitute for independent verification by a qualified and experienced practitioner.

1. Known limitations

The Customer acknowledges that AI systems, including the AI Services, have known and documented limitations which include the production of incorrect or incomplete information and the Customer acknowledges that the AI Services are not a substitute for professional medical advice from a qualified and experienced practitioner.

1. Incident Response

1. If the Customer, or an Authorised User, identifies that the AI Services Outputs may result in harmful health information or information being provided or disseminated which diverges from current best practice or which is inaccuract or incorrect information, the Customer or the Authorised User shall notify RoseRX immediately such that RoseRX may investigate.
2. Upon receipt of notice under clause 5.3(a), or otherwise upon its own review, RoseRX will flag potentially incorrect, harmful or inaccurate information for human review within four hours and:
1. escalate to a clinical team if determined by RoseRX to be required; and
2. notify the Customer of the outcome of any report received.