Institute membership

[[LEGAL: membership-terms]]

DRAFT FOR CLAY / COUNSEL REVIEW — NOT FINAL — NOT LEGAL ADVICE

Prepared by CureRays Data Sharing Counsel for Website Division paste into curerays.org membership slots.

Institute (curerays.org / 501(c)(3)) only — never clinic / curerays.com / PHI / EMR.

Do not treat as final until Clay clears.

CureRays Innovation & Education Institute — Membership Terms

DRAFT FOR REVIEW — Version 2026-09-24

Effective date (when finalized): [PLACEHOLDER: date Clay clears]

Operator: CureRays Innovation & Education Institute, a California nonprofit corporation recognized as tax-exempt under IRC § 501(c)(3) (“Institute,” “we,” “us”), operating the public site curerays.org.

These Membership Terms (“Terms”) govern professional membership and related Institute program access requested or obtained through curerays.org (including /membership/ and /membership/signup/). By checking the membership-terms consent on signup, or by using Institute membership benefits, you agree to these Terms.

---

1. What membership is

1.1 Professional affiliation only. Institute membership is a professional education, research-awareness, and philanthropic-collaboration affiliation with the Institute. It supports the Institute’s role as a research and philanthropic tie among collaborating offices and clinicians — not as a clinic.

1.2 What membership may provide (subject to tier, verification, and program availability):

• Access pathways to Institute education offerings, including Derm Supervising Operator Permit (DSOP)-related educational materials and learner dashboards where offered on curerays.org;
• Visibility into Institute research protocol / trials listings published for professional awareness (not enrollment as clinical care);
• Pathways to IJRM-SSS (journal) read / submit information as linked from Institute pages;
• An awareness link to SIRiiM (society) information — SIRiiM membership, dues, and society status are separate and not included merely by Institute membership;
• Institute communications you opt into (education, research, philanthropy updates);
• Recording of roster status, entitlements, lecture/course purchases or credits, training progress, optional society-status flags, and journal-readership indicators in the Institute-owned member database (see Privacy Notice).

1.3 What membership is NOT. Membership does not:

• Provide clinical care, medical advice, diagnosis, treatment, or a patient–provider relationship;
• Create access to clinic EMR, patient portals, clinical scheduling, billing for clinical services, or curerays.com clinic systems;
• Authorize submission, storage, or processing of PHI, patient charts, identifiers, images, or any patient-level / row-level clinical data on Institute systems;
• Make the Institute a covered entity, business associate, or clinical operator with respect to any clinic’s patients;
• Automatically confer SIRiiM society membership or IJRM-SSS author rights beyond what those separate programs require.

---

2. Eligibility and tiers

2.1 Membership is intended for healthcare and scientific professionals and affiliated staff (and, where offered, institutional seats for organizations). You represent that information you submit is accurate and relates to your professional identity, not to patients.

2.2 Tiers (program rules may evolve):

• Institute Affiliate — typically professionals without a verified @curerays.org Institute Identity; may be waitlisted or limited to directory / interest capture until verification rules are met;
• Institute Member — typically holders of verified Institute Identity (@curerays.org where that gate applies) with unlock of participant hub / education pathways as configured on the site;
• Institutional seat — organization-level seats (e.g., education pack seats) only as separately arranged; rates are board-controlled and may not appear publicly.

2.3 Site login / LMS gates (including Netlify Identity @curerays.org checks) are technical access controls. Completing a membership profile does not by itself override those gates.

---

3. Account, credentials, and acceptable use

3.1 You must keep credentials confidential and notify us promptly of suspected unauthorized use (contact: contact@curerays.org).

3.2 You may use Institute materials only for lawful professional education, research awareness, and Institute program participation. You may not: upload PHI or patient materials; scrape or republish proprietary Institute content except as expressly allowed; reverse engineer non-public systems; misrepresent credentials or affiliations; or use membership to solicit patients or imply Institute clinical endorsement of your practice.

3.3 We may suspend or terminate access for material breach, suspected PHI upload, fraud, or risk to other members or Institute systems.

---

4. Education and research content

4.1 Educational content (including DSOP-related materials) is for professional training and education. It is not a substitute for clinical judgment, licensure, privileging, or supervising-operator requirements under applicable law and facility policy.

4.2 Research protocol listings are for awareness and professional collaboration pathways. They are not an offer of clinical trial enrollment to patients through the Institute, and they do not mean the Institute holds study PHI.

4.3 Pathway modules, digests, and related CureCode materials, if linked from membership areas, remain subject to any applicable Data Sharing Agreement and Institute IP rules: Institute does not receive patient-level data; clinics alone handle patient records and predictions.

---

5. Fees, entitlements, and refunds

5.1 Some lectures, courses, or institutional seats may be paid later through Institute payment rails only (not clinic Stripe). Public pages may omit dollar amounts until board-cleared.

5.2 Entitlements (lecture purchases, course access, seat credits, training status) are recorded in the Institute member database. Refund and cancellation rules for a specific paid offering will appear at checkout or in that offering’s description; if silent, contact contact@curerays.org.

---

6. Intellectual property

6.1 Institute names, marks (including CureRays® as used on curerays.org), site content, course materials, and related IP remain Institute or licensor property. Membership grants a limited, revocable, non-transferable license to access materials for your personal professional use as offered — not to republish, sell, or train competing models on Institute content without written permission.

6.2 Do not copy proprietary third-party clinical guidelines (e.g., NCCN) into Institute submissions or shared workspaces.

---

7. Privacy

7.1 Collection and use of membership data are described in the Institute Membership Privacy / Data-Use Notice ([[LEGAL: privacy-notice]]). Professional membership data is stored in Institute-owned systems, separate from clinic EMR / curerays.com.

---

8. Disclaimers and limitation of liability

8.1 INSTITUTE PROGRAMS AND MATERIALS ARE PROVIDED “AS IS” for education and professional collaboration. THE INSTITUTE DOES NOT PRACTICE MEDICINE VIA MEMBERSHIP AND DISCLAIMS LIABILITY FOR CLINICAL DECISIONS MADE BY YOU OR YOUR INSTITUTION.

8.2 TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE INSTITUTE’S AGGREGATE LIABILITY ARISING FROM MEMBERSHIP SHALL NOT EXCEED THE GREATER OF (A) AMOUNTS YOU PAID TO THE INSTITUTE FOR THE SPECIFIC MEMBERSHIP ENTITLEMENT GIVING RISE TO THE CLAIM IN THE TWELVE (12) MONTHS BEFORE THE CLAIM, OR (B) ONE HUNDRED U.S. DOLLARS (US$100). [PLACEHOLDER: counsel to confirm cap / carve-outs.]

---

9. Term; changes; termination

9.1 These Terms apply from your consent until membership ends. We may update Terms by posting a revised version on curerays.org and, for material changes, notifying the email on your roster record. Continued use after the effective date constitutes acceptance where permitted by law.

9.2 You may request closure of membership by emailing contact@curerays.org. We may retain limited records as described in the Privacy Notice (legal, audit, entitlement history).

---

10. Governing law

10.1 These Terms are governed by the laws of the State of California, excluding conflict-of-law rules, unless counsel designates otherwise. [PLACEHOLDER: venue / dispute resolution.]

---

11. Contact

CureRays Innovation & Education Institute

Web: https://www.curerays.org

Email: contact@curerays.org

Related entities (not parties to clinical membership): Clinic operations at curerays.com and partner clinics are separate. Do not send patient data to the Institute.

---

[[LEGAL: privacy-notice]]

DRAFT FOR CLAY / COUNSEL REVIEW — NOT FINAL — NOT LEGAL ADVICE

Prepared by CureRays Data Sharing Counsel for Website Division paste into curerays.org membership slots.

Institute (curerays.org / 501(c)(3)) only — never clinic / curerays.com / PHI / EMR.

Do not treat as final until Clay clears.

CureRays Innovation & Education Institute — Membership Privacy / Data-Use Notice

DRAFT FOR REVIEW — Version 2026-09-24

Effective date (when finalized): [PLACEHOLDER: date Clay clears]

Operator: CureRays Innovation & Education Institute (“Institute,” “we,” “us”), curerays.org (501(c)(3)).

This Notice describes how we collect, use, store, and share professional membership data when you use /membership/, /membership/signup/, and related Institute membership features. It applies to Institute systems only. It does not cover clinic care, clinic EMR, or curerays.com.

---

1. Critical boundary — no patient data

1.1 Do not submit PHI or patient information on membership forms, uploads, or Institute membership channels. That includes names of patients, charts, MRNs, images, clinical notes, identifiers, and any row-level clinical records (including “de-identified” patient-level rows).

1.2 Membership signup is for your professional affiliation (and, if applicable, your organization’s seat interest). If you accidentally submit patient data, contact contact@curerays.org immediately. We will quarantine and delete such material where feasible and will not use it for membership administration.

1.3 The Institute is not your clinic’s EMR, patient portal, or HIPAA business associate for membership signup. Clinic patient data stays with clinics under their own privacy programs.

---

2. Data we collect on signup and membership administration

2.1 Information you provide

Typical fields (as shown on the signup form; required fields marked on the form):

2.2 Information generated by Institute systems

Stored in an Institute-owned member database (and related Institute tools such as Netlify Forms / Identity / future Institute billing), which may include:

• Roster records and membership tier / status;
• Balances and entitlement credits (when paid offerings exist);
• Lecture / course purchases and access rights;
• Training status and education progress (e.g., DSOP-related learner progress where offered);
• Society status flags (e.g., SIRiiM-related awareness or separately verified society status — SIRiiM remains a separate program);
• Journal readership indicators for IJRM-SSS pathways where offered;
• Technical logs needed for security and abuse prevention (e.g., submission time, source form name).

2.3 Payment data

If Institute-paid offerings are enabled later, payment card data is handled by the Institute’s payment processor (not clinic Stripe). We receive limited billing metadata (e.g., success/failure, last4, entitlement SKU) — not full card numbers on Institute forms. [PLACEHOLDER: name processor when wired.]

---

3. How we use membership data

We use membership data to:

1. Provide access — administer membership, authenticate eligible users, unlock education / hub features per tier;

2. Billing and entitlements — track purchases, seats, balances, and access rights for Institute offerings;

3. Communications — send transactional messages (receipts, access, security) and, only if you opt in, education / research / philanthropy updates;

4. Program operations — improve Institute education and research-awareness programs; aggregate nonsensitive metrics;

5. Safety and compliance — prevent abuse, enforce Terms, respond to legal process, and maintain audit trails.

We do not sell membership personal information. We do not use membership signup to build patient dossiers.

---

4. Where data is stored; who processes it

4.1 Controller: CureRays Innovation & Education Institute (curerays.org).

4.2 Institute-owned member database holds roster, balances, purchases, training status, society-status flags, and journal-readership indicators as described above. Operational intake may use Netlify Forms / Functions / Identity on the Institute site, and may later sync to a private Institute members repository or equivalent Institute-controlled store.

4.3 Processors may include website hosting, forms, identity, email, and (if enabled) Institute payment providers — under contracts appropriate to professional contact data. [PLACEHOLDER: maintain a short subprocessors list for Clay.]

4.4 Separation from clinic: Membership data is not stored in clinic EMR and is not part of curerays.com clinical systems. Do not assume clinic staff can see Institute membership records unless separately authorized inside Institute ops.

---

5. Sharing

We may share membership data only:

• With Institute service providers acting on our instructions (hosting, email, payments, identity);
• With you or contacts you designate for institutional seats;
• When required by law, legal process, or to protect rights, safety, and security;
• In a successor transaction limited to Institute nonprofit operations (with notice where required);
• As aggregated / de-identified statistics that do not identify you.

We do not share membership data with clinic systems for treatment purposes via this Notice. Research collaborations that involve clinic-derived aggregate statistics (never patient rows at the Institute) are governed by separate Data Sharing / Research DUA papers — not by this membership form.

---

6. Retention

6.1 We retain roster and entitlement records for as long as your membership is active and for a reasonable period afterward for audit, finance, dispute, and legal obligations — proposed default: [PLACEHOLDER: e.g., 7 years for financial/entitlement records; sooner deletion of marketing preferences on request].

6.2 Training progress and purchase history may be retained to preserve your access rights and certificates.

6.3 You may request access, correction, or deletion of membership personal data by emailing contact@curerays.org. We may retain limited records where required by law or for legitimate Institute interests (e.g., proof of consent, fraud prevention).

---

7. Communications choices

Transactional messages (security, access, purchases) are part of membership. Marketing / newsletter-style Institute updates require opt-in (including interest checkboxes on signup). You may unsubscribe from optional communications via the email footer or by contacting us; roster-essential notices may continue.

---

8. Security

We apply administrative, technical, and physical safeguards appropriate to professional contact and entitlement data (not a clinical PHI repository). No method of transmission or storage is 100% secure. Report suspected incidents to contact@curerays.org.

---

9. Children

Membership is directed to professionals and organizational representatives. It is not directed to children under 16 (or under 13 where that standard applies). We do not knowingly collect membership data from children.

---

10. International visitors

curerays.org may be accessed from outside the United States. If you submit membership data from abroad, you understand it may be processed in the United States. [PLACEHOLDER: add GDPR/UK addendum only if Clay expects EU/UK targeting.]

---

11. Changes

We may update this Notice by posting a revised version on curerays.org and adjusting the effective date. Material changes affecting ongoing use will be communicated to the email on your roster record where practicable.

---

12. Contact / requests

CureRays Innovation & Education Institute

https://www.curerays.org

contact@curerays.org

Subject line suggestions: “Membership privacy request” / “Membership data deletion”

For clinic privacy or patient records, contact your clinic (curerays.com / treating facility) — not the Institute membership channel.

---