Organisation terms

In force since 2026-09-27.

These terms are the agreement between us, Portfoliobox Stockholm AB, org. no. 556894-4382, VAT no. SE556894438201, Rånövägen 30, 168 39 Bromma, Sweden, caremcp@portfoliobox.net, and the company that opens an organisation account on Care MCP (the "organisation"). The person who opens the account confirms that they may bind the organisation. By opening the account or using an API key the organisation accepts these terms, the data processing agreement, which is part of them, and the privacy policy for the data about the organisation itself.

1. The service

Through our API the organisation creates clients of its own and orders written documents for them from certified personal trainers and nutrition coaches: plans, evaluations of a period and reviews of a plan, under fixed templates, for wellness and performance. We run the service, approve the professionals, check the orders and the documents against our rules, and bill the organisation.

The service is not health care, and the documents are not diagnosis, treatment or medical advice. The organisation does not present them as such.

2. The organisation's clients

The organisation's clients are its customers, not ours. The organisation is responsible for its relationship with them, for its own product and for any AI it uses to reach them. In particular the organisation:

1. orders only for adults who have asked for the service, and gives true and complete briefs;
2. informs each client before the first order about the service, the professionals and the processing, and obtains the client's explicit consent to the health data notice in force, keeps a record of it and shows it to us on request;
3. passes on each document in full or in a form that keeps its meaning, including its referral to health care, and does not present its own text or its AI's text as written by our professionals;
4. tells a client who wants to stop to stop, removes that client through the API, and handles the client's requests under the data protection law;
5. does not order where our rules refuse an order, and does not work around a refusal.

3. Data protection

For the data about its clients, the organisation is the controller and we are its processor, under the data processing agreement. For the data about the organisation itself, its account, its people and its payments, we are the controller under the privacy policy.

4. Fees and paying

The organisation pays in advance into a credit, in euro for an organisation in the EU and in US dollars elsewhere, at the prices on our pricing page. Each delivered document is charged at the price shown when the order was placed; a refused or withdrawn order is not charged. VAT is added to each deposit where Swedish law requires it; an organisation elsewhere in the EU with a valid VAT number pays under the reverse charge. Unused credit is refunded on request and when the agreement ends. Delivered documents are not refunded, except that a document that does not follow its template is rewritten at no cost.

We may change prices with 30 days' notice by email. An order placed before a change keeps its price.

5. API keys and use

The organisation keeps its API keys secret and is responsible for everything done with them until it revokes a key. It tells us at once if a key may have leaked. We may set reasonable limits on the volume of calls, and we may change the API; a change that breaks an existing integration is announced at least 30 days ahead, unless security or the law requires it sooner.

The organisation may not resell access to the API as such, use the service to build a competing service, copy or scrape it, test its security without our written permission, or use it against the law.

6. Documents and rights

We grant the organisation a non-exclusive right to store, display and deliver each document to the client it was written for, and to let that client's own assistant read it, for as long as the organisation serves that client. The organisation may not sell documents to others, publish them, or collect them to train AI models or build templates of its own. Everything else in the service, the templates, the standards, the software and the site, is ours or our licensors'.

If the organisation sends us feedback, we may use it without obligation.

7. Confidentiality

Each party keeps confidential what it learns about the other's business through the service and is not public, during the agreement and for three years after. That does not cover what the law or an authority requires to be disclosed.

8. No warranty

We deliver the service with reasonable care and skill. Beyond that the service, the API and the documents are provided as they are and as available. We make no promise of a result, of fitness for a particular purpose, of a delivery time or of the service being uninterrupted or free of errors. Delivery times on the site are usual times, not promises.

9. Limits of liability

Neither party is liable for indirect or consequential loss, including lost profit, lost revenue, lost business, lost data or harm to reputation.

We are not liable for loss arising from the organisation's product or its AI, from a brief that was wrong or incomplete, from how a client uses a document, from a change the organisation made to a document, or from events outside our reasonable control.

Our total liability under this agreement, for all claims together, is limited to the fees the organisation paid us in the twelve months before the event that caused the claim.

These limits do not apply to loss caused by intent or gross negligence, to the organisation's duty to pay, to its duties under section 10, or to what the law does not allow to be limited.

10. The organisation's indemnity

The organisation holds us, our professionals and our staff harmless against claims from its clients or any third party, and the costs of them, including reasonable legal costs, that arise from the organisation's product or its AI, from its breach of section 2 or of the data processing agreement, or from a document it changed or presented otherwise than under section 2. We tell the organisation promptly of such a claim and let it lead the defence.

11. Suspension and ending

The organisation may end the agreement at any time by closing its account. We may end it with 30 days' notice by email. Either party may end it at once if the other seriously breaches it and does not put it right within 14 days of being told.

We may suspend the account or a key at once if it is used against these terms, if a client's safety or data is at risk, or if the law requires it. We tell the organisation why.

When the agreement ends, open orders are withdrawn, unused credit is refunded on request, and the clients' data is erased under the data processing agreement. Sections 6 to 10 and 13 continue.

12. Changes to these terms

We may change these terms with 30 days' notice by email. If the organisation does not accept a change, it may end the agreement before the change takes effect. Using the service after that is accepting it.

13. General

These terms, the data processing agreement and the prices in force are the whole agreement, and they take precedence over the organisation's own purchasing terms. If one part is held invalid, the rest stands. Neither party may transfer the agreement without the other's consent, except that we may transfer it with our business. Notices go to the email on the organisation's account and to caremcp@portfoliobox.net.

Swedish law applies, without its rules on choice of law. Disputes are settled by the Stockholm District Court as the first instance.