The not-secretly-evil legal page.

You pay us a flat monthly fee. We run software that helps you dispatch, document, and bill your work. You own everything you put in. We provide it without warranty beyond what the law requires, and our liability is capped at what you paid us in the last 12 months. Either of us can leave with 30 days’ notice. Anything more specific lives below.

You must be 18+, located in the United States, and operating a licensed trades or home-care business (or both). You’re responsible for ensuring your team’s access is appropriate to their role.

You may not use Veladoma for medical decision-making in lieu of clinical judgment, for surveillance of caregivers beyond what state EVV law mandates, or for collecting consumer data for sale.

Prices are listed publicly at veladoma.com/pricing. We bill in advance. We will not raise the price of an active subscription mid-term. Renewal pricing changes are emailed 60 days before they take effect, and you can cancel before the change applies.

• Auto-renewal: monthly plans renew monthly. We do not bury this.
• Refunds: Pro-rated for annual plans canceled in the first 90 days. Contact us within the first 30 days if onboarding isn’t going as expected — we’ll make it right.
• Disputed charges: reply to the invoice email — Carmen handles it personally.

You retain ownership of all Customer Data uploaded to Veladoma. We hold it under a limited license solely to provide and improve the service for your account. Improvements never include training third-party foundation models.

On termination, we retain Customer Data for 30 days to allow re-import in case of mistake, then delete it (subject to Medicaid retention obligations, which override).

We commit to 99.9% monthly uptime on standard plans, 99.95% on Veladoma One. Scheduled maintenance announced 7 days in advance does not count against uptime.

• 99.0%–99.9%: 10% service credit on next month’s bill.
• 95.0%–99.0%: 25% credit.
• Below 95.0%: 50% credit and you may terminate without penalty.

To the maximum extent permitted by law, our aggregate liability for any claim arising under or related to these Terms is limited to the greater of (a) $10,000 or (b) the fees you paid Veladoma in the 12 months preceding the event giving rise to the claim. We’re not on the hook for indirect, consequential, or punitive damages.

Indemnification is mutual: you indemnify us for misuse by your team; we indemnify you for our infringement of third-party IP.

You can cancel any time with 30 days’ notice through Settings → Billing. We can terminate for material breach (non-payment, abuse, fraud) with 30 days’ notice, or immediately for security or legal cause.

These Terms are governed by the laws of the State of Florida, without regard to conflicts of law. We do not require binding arbitration. Disputes are resolved in the state and federal courts of Orange County, Florida.

Class actions are not waived. We will not lawyer you out of a fair fight.

From your operators (you and your staff): name, work email, role, IP, device, and audit-log activity. From your customers (the household): contact info, service address, service history, and — for home care — Cures Act EVV data points. From caregivers’ devices: location at clock-in/out only, never continuous tracking.

To provide the service, comply with EVV and Medicaid law, secure the platform, bill you, and improve the product. Not to sell, broker, or build behavioral profiles.

The 12 subprocessors listed on our Security page. We notify you 30 days before adding any new subprocessor that handles PHI. Government recipients only on lawful process; we challenge overbroad requests and notify you when legally permitted.

• Access & portability: CSV/JSON export at any time.
• Correction: via the application UI or by emailing info@veladoma.com.
• Deletion: honored within 30 days, subject to Medicaid retention windows (typically 7 years).
• CCPA/CPRA, VCDPA, CPA: we comply. We do not sell personal information.

We use first-party session cookies for auth and a single privacy-preserving analytics tool (Plausible). No Meta pixel, no Google Analytics, no behavioral ads.

The platform is not intended for users under 18. Pediatric care patients are documented through their guardian’s portal access; we collect only what state programs require.

You are the Controller of Customer Data; Veladoma is the Processor. We process Customer Data only on your documented instructions, as set out in the Terms and the application configuration.

List maintained at veladoma.com/security#subprocessors. 30-day prior notice for new PHI-handling subprocessors; you may object and terminate without penalty if the addition is material.

All processing occurs in the United States. We do not transfer Customer Data outside the US without your written consent.

The technical and organizational measures listed on our Security page form Schedule A and are incorporated by reference.

Annual SOC 2 Type II report on request after mutual NDA. On-site audit available for Veladoma One customers with 30 days’ notice.

Veladoma will use and disclose PHI only as permitted by this BAA, the Terms, and applicable law. We will not use PHI for marketing or fundraising.

Reasonable and appropriate administrative, physical, and technical safeguards as required by 45 CFR §§164.308, 164.310, 164.312, and 164.316.

Notification to you without unreasonable delay and in no case later than 5 business days from discovery, including the information required by 45 CFR §164.410.

Veladoma will require each subcontractor that handles PHI to agree in writing to the same restrictions and conditions.

On termination, Veladoma will return or destroy all PHI within 30 days unless return/destruction is infeasible, in which case the protections of this BAA continue indefinitely.

Caregiver location is captured at clock-in/out as state EVV programs require. Continuous GPS tracking for non-compliance purposes (e.g., “is my aide stopping at Walmart”) is disallowed.

Veladoma may not be used to retaliate against caregivers for organizing, raising safety concerns, or reporting wage violations. Use of audit logs for this purpose forfeits your right to use the platform.

You may not use Veladoma to submit Medicaid claims that misrepresent services rendered. We cooperate fully with state and federal fraud investigations.

Email info@veladoma.com. Reports are read by a human within one business day.

Claude is used for: dispatch reshuffling, photo-to-invoice drafting, denial appeal letter drafting, “Ask your business” reporting chat, and payroll reconciliation suggestions. AI suggestions are always reviewable before they hit the customer or the state.

The minimum data necessary. PHI is redacted from prompts where the task doesn’t require it (e.g., dispatch reshuffles see route/time, not patient diagnoses). Anthropic’s zero-retention API endpoint is used for all PHI-bearing calls.

• Train any model on your tenant data.
• Make a final decision about a denial appeal — it drafts; you approve.
• Generate clinical advice, diagnoses, or treatment plans.
• Auto-fire a caregiver, auto-escalate a customer to collections, or auto-cancel a job.

Every AI output that affects a person — invoice, appeal letter, dispatch change a customer is notified about — has a human approval step by default. You can disable approval per workflow with explicit acknowledgment that you accept liability.