Terms of Service

1. Provider

Dicomly is operated by:

Contact: info@dicomly.io

2. Service description

Dicomly is a stateless DICOM connectivity gateway. The service receives DICOM C-STORE transmissions over a mutually authenticated TLS connection and forwards them in real time as STOW-RS HTTP POST requests to a destination URL you configure.

Dicomly is a conduit, not a custodian. No DICOM payload data, patient identifiers, or protected health information (PHI) is stored, buffered, or persisted on Dicomly infrastructure at any time. Your receiving endpoint is where the data lives.

3. Acceptance

By creating an account or using the Dicomly API, you agree to these Terms. If you are accepting on behalf of an organisation, you represent that you have authority to bind that organisation.

4. Accounts and API keys

You are responsible for maintaining the confidentiality of your API keys. API key plaintext is displayed once at creation time and is not recoverable thereafter. You must notify us immediately at info@dicomly.io if you suspect unauthorised use of your account.

Accounts are personal or organisational. You may not share credentials with third parties or use the service on behalf of a third party without their knowledge.

5. Acceptable use

You must not use Dicomly to:

• Transmit data for which you do not have the right to transmit.
• Circumvent authentication, access controls, or security measures.
• Interfere with the service or its infrastructure, including sending abusive volume outside agreed capacity.
• Violate applicable law, including healthcare data regulations in your jurisdiction.

You are responsible for ensuring that your use of the service complies with applicable law, including HIPAA, GDPR, and any sector-specific regulations governing the DICOM data you route through the service.

6. Pricing and billing

Current pricing is published at dicomly.io/pricing. The default billing model is prepaid credit: you top up a balance via card (minimum €20), and charges are deducted in real time. All charges are itemised in your dashboard and exported as a monthly invoice.

The first endpoint on your account is free, forever, with no credit card required. Subsequent endpoints are charged at €10 per endpoint per month, prorated by the second. Outbound data transfer (egress) is charged at €0.05 per GB.

We reserve the right to change pricing with at least 30 days' notice to registered users. Price changes do not apply retroactively to prepaid balances already held.

7. Service availability

We operate the service on a best-effort basis. If your STOW-RS receiver is unavailable, Dicomly returns a DIMSE error to the sender; the sender retries on its own schedule. Dicomly does not queue or buffer DICOM data.

Planned maintenance is announced with reasonable notice. Unplanned outages are addressed as quickly as practicable.

8. Data processing

You are the data controller for any personal data, including PHI, contained in DICOM instances routed through the service. Dicomly acts as a data processor (GDPR) and conduit (HIPAA) for that data.

A Data Processing Agreement (DPA / BAA-equivalent) is available to every customer, free of charge, via click-to-sign in the console.

See the Privacy Policy for details of how we handle your personal account and billing data.

9. Intellectual property

The Dicomly name, logo, website, and API are the property of Ing. Martin Höger. Your use of the service does not grant you any licence to use our intellectual property beyond what is necessary to access the API as described in the documentation.

10. Disclaimer of warranties

The service is provided "as is" and "as available" without warranties of any kind, express or implied. We do not warrant that the service will be uninterrupted, error-free, or fit for any particular purpose.

11. Limitation of liability

To the maximum extent permitted by applicable law, our total liability to you for any claim arising out of or relating to these Terms or the service shall not exceed the amounts you paid to us in the three months preceding the claim. We are not liable for indirect, incidental, special, or consequential damages.

12. Termination

You may close your account at any time. Unused prepaid credit is refunded on account closure, minus payment-processor fees. Endpoints and their certificates are deleted within 30 days of account closure.

We may suspend or terminate your account if you breach these Terms, with reasonable notice except where immediate action is required to protect the service or other customers.

13. Changes to these terms

We may update these Terms with at least 30 days' notice to registered users by email. Continued use of the service after the effective date constitutes acceptance of the updated Terms.

14. Governing law and disputes

These Terms are governed by the laws of the Czech Republic, without regard to conflict of law principles. Any disputes shall be resolved by the courts of the Czech Republic.