Terms of Service

Effective date: September 16, 2026

These Terms of Service (“Terms”) govern the AuthPay staff portal, patient checkout pages, payment notices, and related APIs or tools (the “Services”) provided for healthcare practices and their authorized staff. By creating or using a staff account, you agree to these Terms and our Privacy Policy. Patients who open an AuthPay checkout link or pay a bill through AuthPay use the checkout and payment features described here and in the Privacy Policy, together with the practice’s own notices.

AuthPay is a business tool for practices. Staff use the portal to send payment links, charge a card on file, or ask a patient to update payment info. Patients use AuthPay-hosted checkout when no card is on file or when staff send an update-payment-info link, and they may receive AuthPay email or SMS. Card entry and charges for AuthPay checkout and saved-method charges are processed by the practice’s configured payment processor (Accept.Blue for Tebra payment links). Some older unpaid links still use that processor’s invoice page until they are paid or expire; reminders for those leftover links are sent by AuthPay and still point to the invoice URL.

1. Eligibility and accounts

Only authorized practice staff and administrators may use the staff portal. You must provide accurate information, keep credentials confidential, and promptly revoke access for users who leave the practice. The practice is responsible for who it invites and what permissions it grants.

2. Practice responsibilities

The practice is responsible for: (a) its HIPAA and privacy compliance program; (b) patient notices and consents for payment communications, including email and SMS; (c) accuracy of practice-system and billing data used to create payment links; (d) lawful use of the payment processor and of stored-method or payment-plan charges; (e) telling patients when a balance will be collected in installments; and (f) resolving patient billing questions. AuthPay does not provide medical advice and is not a substitute for the practice’s compliance program. These Terms are not a Business Associate Agreement.

3. Integrations

By connecting practice systems, a payment processor, or other integrations, you authorize AuthPay to access and process data as needed to provide the features you enable — including retrieving open balances, sending checkout links, charging a saved payment method when staff collect a current balance or a plan installment is due, and posting captured payments back to the practice system. You represent that you have authority to connect those systems.

4. Payments

AuthPay hosts the checkout page for new payment links. Patients enter card details in the payment processor’s tokenization iframe. AuthPay does not intentionally store full PAN or CVV. We may store a processor token and limited card descriptors (brand, last four digits, expiration) when the patient agrees to save a method.

If a method is on file, staff may charge it for the current balance instead of sending checkout. Checkout is used when no method is on file or when staff send an update-payment-info link so the patient can enter a new card. If the patient saves a method, AuthPay may offer it on later checkouts and may charge it for scheduled payment-plan installments. If no method is on file or a stored-method charge fails, AuthPay may send a new checkout link instead. Transaction outcomes depend on the payment processor and issuer.

Payment-plan codes, discounts, and splits are practice-configured features. A payment plan cannot be combined with a discount or a split. Older Accept.Blue invoice links remain payable on that partner’s page until they expire or are paid.

5. Patient communications

For new checkout links, AuthPay sends the first payment notice and later reminders by email (through our email provider) and/or SMS (through the ACCS SMS queue and its carrier workers), using the addresses and numbers staff provide and the channels staff select. You may not send payment messages without a lawful basis. You are responsible for STOP/HELP and other required SMS handling on numbers you use, and for the content and audience of messages you initiate.

6. Acceptable use

You may not misuse the Services, attempt unauthorized access, send payment messages without a lawful basis, charge a stored method except as the patient and these Terms allow, scrape or abuse APIs, or use the Services for unlawful or deceptive purposes.

7. Disclaimers

THE SERVICES ARE PROVIDED “AS IS” AND “AS AVAILABLE.” TO THE FULLEST EXTENT PERMITTED BY LAW, AUTHPAY DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED. WE DO NOT WARRANT UNINTERRUPTED OPERATION OR THE AVAILABILITY OR ACCURACY OF THIRD-PARTY SERVICES, INCLUDING THE PAYMENT PROCESSOR, EMAIL PROVIDERS, SMS CARRIERS, OR CONNECTED PRACTICE SYSTEMS.

8. Limitation of liability

TO THE FULLEST EXTENT PERMITTED BY LAW, AUTHPAY AND ITS OPERATORS WILL NOT BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR FOR LOST PROFITS, REVENUE, OR DATA. OUR TOTAL LIABILITY FOR ANY CLAIM ARISING OUT OF THE SERVICES OR THESE TERMS WILL NOT EXCEED THE GREATER OF (A) AMOUNTS PAID FOR AUTHPAY IN THE THREE (3) MONTHS BEFORE THE EVENT, OR (B) ONE HUNDRED U.S. DOLLARS (US $100), EXCEPT WHERE LIABILITY CANNOT BE LIMITED BY LAW.

9. Indemnification

You and the practice agree to indemnify AuthPay and its operators from claims arising from misuse of the Services, patient communications you initiate, stored-method or payment-plan charges you enable, violation of these Terms, or violation of law or third-party rights.

10. Governing law

These Terms are governed by the laws of the State of Texas. Exclusive venue lies in the state or federal courts located in Travis County, Texas, unless applicable law requires otherwise.

11. Changes

We may update these Terms by posting a revised version with a new effective date. Continued staff use after changes become effective constitutes acceptance where permitted by law.