← Back to home

TERMS OF SERVICE (Self-Service)

Last updated: February 2026

Your use of Appointmint's products, services and applications (collectively referred to in this document as the "Services") is subject to the terms of this Legal Agreement entered into between you and AMBITIOUS WORLD, Lda. (NIPC 519085027, with registered office at Rua Sabino Pedro Henriques, 10, Santa Iria de Azóia, Loures, Portugal), responsible for the Appointmint software.

In this document, "Appointmint" refers to AMBITIOUS WORLD, Lda., "Customer" refers to the entity or professional subscribing to the Services, and "Terms" refers to this agreement. By creating an account or using the Services, the Customer accepts these Terms.

The Services include, among others, appointment management, customer management and communication features, including messaging integrations (e.g., WhatsApp via WhatsApp Business API) when activated by the Customer. By using third-party integrations, the Customer agrees to comply with applicable third-party policies, including WhatsApp policies.

Contacts: support [email protected]; privacy [email protected].

Important: If the Customer processes health data through the Services, they must ensure compliance with GDPR (Art. 9) and applicable health legislation, including obtaining adequate legal bases (explicit consent or other legal exception provided for).

1. Definitions

Customer: legal or natural person subscribing to the Services. Users: Customer's employees/suppliers with authorized access. Customer Data: data uploaded/generated by Customer in the Services (includes personal data). Plan: package of features/pricing chosen at subscription time. Sub-processors: third parties that Appointmint uses to provide the Services (e.g., billing and payments). SLA: service commitment in Cl. 8.

2. Account and Eligibility

2.1. Customer must provide truthful information and keep credentials secure.
2.2. Customer is responsible for all activity on their account, including access by Users and third parties authorized via integrations/API.
2.3. Prohibited: (i) use for unlawful purposes; (ii) interfering with security/stability of Services; (iii) circumventing usage/plan limits.

3. License to Use

3.1. Appointmint grants Customer a limited, non-exclusive, non-transferable license to use the Services for the Plan period.
3.2. It is forbidden to copy, reproduce, reverse engineer, decompile, create derivative works, assign, sublicense or permit unauthorized access to the software, except as permitted by law.

4. Duration, Renewal and Cancellation

4.1. Monthly plans: minimum term of 1 month, successive automatic renewal.
4.2. Annual plans: term of 1 year, automatic renewal.
4.3. Customer may cancel future renewal at any time in Billing Settings, effective at end of current period. Pro-rata refunds only when legally required (e.g., consumer right to withdraw within first 14 days, under Consumer Protection Law No. 24/96).
4.4. Appointmint may suspend services for non-payment (after notice with at least 7 days' advance) or material breach of these Terms (with 15-day cure period, except for serious violations).

5. Prices, Remuneration and Payments

5.1. Customer will pay Plan fees and extras (e.g., SMS, add-ons) according to the rate table in force at subscription/renewal date.
5.2. Payments by card/MB Way/Multibanco Ref. via payment provider; electronic invoicing via InvoiceXpress. Taxes (VAT) will be added as per law.
5.3. In case of delay, statutory interest and collection costs may apply.
5.4. Price changes will apply at renewal, with ≥30 days prior notice.

6. Appointmint's Obligations

6.1. Provide Services with diligence and security best practices (Cl. 10) and maintain periodic backup.
6.2. Provide support per Cl. 8.
6.3. Comply with GDPR as processor/sub-contractor of Personal Data (see Annex A – Data Processing Agreement).

7. Customer's Obligations

7.1. Ensure legal bases for processing personal data in the Services and inform data subjects under GDPR (Arts. 6, 13 and 14). For health data (special category under Art. 9 GDPR), Customer must obtain explicit consent from data subjects or fall within legal exceptions (e.g., provision of healthcare by a professional subject to professional secrecy).
7.2. Do not copy, reproduce or permit unauthorized access to the software; implement adequate access controls and authentication, including multi-factor authentication when available.
7.3. Comply with applicable legislation, including: (i) marketing consents (Law No. 41/2004); (ii) cookies (GDPR and Law No. 58/2019); (iii) health legislation (Health Framework Law, Law No. 95/2019); (iv) consumer rights.
7.4. Configure integrations (e.g., payments and billing) and ensure accuracy of Customer Data.
7.5. Immediately notify Appointmint of any unauthorized access or security breach.

8. Support and SLA

8.1. Support: email ([email protected]) and helpdesk on business days (09:00–18:00, Europe/Lisbon), priority by severity. Response time: up to 24 business hours for normal requests, up to 4 business hours for critical issues.
8.2. Availability SLA: target ≥99.5%/month (excludes scheduled maintenance announced 48h in advance, force majeure per Cl. 14, third-party provider failures, and Customer actions/omissions).
8.3. Service Credits (monthly):

  • Availability 99.0–99.49% → 5% credit;
  • 98.0–98.99% → 10%;
  • <98.0% → 20%.

Credits apply to future invoices, upon written request to [email protected] within 30 days after end of month in question, with evidence of unavailability. Credits are the sole and exclusive remedy for SLA breach. Do not accumulate with other forms of compensation.

9. Intellectual Property and Feedback

9.1. Appointmint (or licensors) owns all software, trademarks and content.
9.2. Customer retains all rights to Customer Data.
9.3. Feedback provided may be used freely to improve Services, without obligation to compensate, without disclosing Customer Data.

10. Security, Confidentiality and Incidents

10.1. Each Party will keep confidential the other's information (implied NDA).
10.2. Security measures (examples): encryption in transit, role-based access control, audit logging, vulnerability testing and remediation.
10.3. Security/Data Incidents: notification without undue delay to Customer after becoming aware, with available information and reasonable cooperation.

11. Limitation of Liability

11.1. Neither Party shall be liable for indirect damages (loss of profits, data loss) to the extent permitted by law.
11.2. Appointmint's total liability for all claims in a 12-month period is limited to fees paid by Customer in that period, except (i) death/injury, (ii) willful misconduct or confidentiality breach.

12. Termination

12.1. Either Party may terminate for material breach not cured within 30 days after notice.
12.2. Effects: access is terminated; outstanding fees become due.
12.3. Data export: Customer may export Customer Data up to 30 days after termination.
12.4. Anonymization: after export period, Appointmint will anonymize remaining records used only for statistical/operational purposes.

13. Law and Jurisdiction

Governed by Portuguese law and GDPR. Competent court: Court of Lisbon.

14. Miscellaneous

Entire agreement; partial invalidity; assignment only with consent (except in group reorganization); force majeure; written communications (email).

15. WhatsApp Messaging Compliance

When Customer uses WhatsApp integration (WhatsApp Business API) through the Services, Customer agrees to:

  • Comply with policies: comply with WhatsApp Business Messaging Policy and other applicable WhatsApp/Meta policies.
  • Consent/opt-in: obtain consent and/or valid legal basis before contacting data subjects when required (including marketing messages) and maintain opt-in records.
  • Templates: use approved message templates when applicable and respect rules such as conversation windows and sending limitations.
  • Opt-out: provide and respect opt-out mechanisms and message stop requests (e.g., "stop" instructions when configured).
  • Prohibitions: do not send spam, harass, promote illegal activities, scrape data, circumvent WhatsApp mechanisms, or buy/sell contact lists or data.

Customer is responsible for content sent, recipient lists and compliance with applicable legislation (including GDPR, ePrivacy and marketing rules). Appointmint may suspend or terminate access in case of abuse or violation of these policies (see Cl. 4 and 12).

ANNEX A — DATA PROCESSING AGREEMENT (GDPR)

Roles: Customer = Controller; Appointmint = Processor.

  • Subject and Duration: Processing of personal data of customers/patients, professionals and Customer contacts, for the duration of the Plan.
  • Nature and Purposes: provision of Services (scheduling, reminders, billing via integration, analytics, support).
  • Data/Data Subject Categories: identification/contacts; transactional data (appointments, payments); health data (if Customer chooses to record clinical information in templates/reports).
  • Documented Instructions: Appointmint will process data only according to Customer instructions, including transfer to Sub-processors listed in Annex B.
  • Confidentiality: authorized persons committed to confidentiality.
  • Security: appropriate technical and organizational measures (pseudonymization; encryption in transit; backups; access logs; principle of least privilege).
  • Sub-processing: generally authorized to Sub-processors in Annex B; Appointmint ensures equivalent obligations. Will notify changes with 15 days for reasonable objections.
  • Assistance: to respond to data subject requests (access/rectification/erasure/portability/objection/restriction) and fulfill GDPR obligations (impact assessments, breach notifications).
  • Location and Transfers: preferential storage in EEA; international transfers only with adequate safeguards (Standard Contractual Clauses, adequacy decisions) and information to Customer.
  • Retention and Return: upon termination, delete/return personal data, unless legally required to retain.
  • Audits: provision of necessary information and cooperation in reasonable audits (1/year, with ≥30 days notice, no access to third-party secrets).
  • Liability: each Party is liable for its GDPR violations within their respective roles.

ANNEX B — SUB-PROCESSORS (examples)

  • InvoiceXpress (electronic invoicing, PT)
  • EasyPay (payment processing MB Way/Card/MB)
  • Cloud infrastructure services (AWS and Cloudflare in EU)
  • SMS/Email service (MailJet)

© 2026 Appointmint - AMBITIOUS WORLD, Lda.