Professional User Terms of Service

(For Agent Workspace, SOA Vault, Agent Vault, and HealthLink Secure professionals)

Last Updated: July 29, 2026

1. Agreement to Terms

These Professional User Terms of Service (“Terms”) constitute a binding legal agreement between Ardor Service LLC d/b/a Informed + Choice (“Company,” “we,” or “us”) and you (“Customer,” “Agent,” “Provider,” or “you”). These Terms govern your access to and use of Agent Workspace, HealthLink Secure, SOA Vault, Agent Vault, professional and Event webpage creation and hosting, Event structured data, RSVP forms, Event communications, and related Medicare SOA, ACA consent, annual-review, plan-assessment, website, communications, and vault workflows offered by Company (collectively, the “Services”).

BY CLICKING “I AGREE” OR ACCESSING THE SERVICES, YOU AGREE TO BE BOUND BY THESE TERMS.

2. HIPAA Compliance & Business Associate Agreement

To the extent you use the Services to store, transmit, or process Protected Health Information (PHI), you agree to be bound by the Business Associate Agreement (BAA), which is hereby incorporated by reference into these Terms.

3. Subscription & Fees

3.1 Fees

You agree to pay the subscription fees specified at checkout (e.g., $9.99/month for SOA Vault). New paid subscriptions are eligible for the 30-day money-back guarantee described in our Refund Policy. After that guarantee period, fees are non-refundable except as required by law.

3.2 Auto-Renewal

Subscriptions automatically renew until you cancel.

3.3 Cancellation

You may cancel at any time. Upon cancellation, your ability to create new documents will cease, but access to existing records will be governed by the Data Retention Policy below.

4. Your Responsibilities

4.1 Compliance

You are solely responsible for ensuring your use of the Services complies with all applicable laws, including CMS Marketing Guidelines, HIPAA, and the Telephone Consumer Protection Act (TCPA).

4.2 Professional Licensing and Authority

If you use the Services to advertise, solicit, recommend, quote, sell, enroll, or otherwise transact Medicare, Affordable Care Act (ACA), or other insurance products, YOU REPRESENT AND WARRANT that you possess and will maintain every license, appointment, certification, registration, and other authority required for your activities in each applicable jurisdiction.

You are responsible for providing accurate professional identity, National Producer Number (NPN), license, appointment, certification, and organization information. Unless the Services expressly state otherwise, Company does not independently verify this information and does not certify that you are licensed, appointed, approved, or authorized for a particular product, carrier, activity, Event, venue, or jurisdiction.

If you use our audio recording features, YOU WARRANT that you have obtained all necessary consents from all parties on the call, as required by your state’s wiretapping laws. You agree to indemnify Company for any claims arising from your failure to obtain consent.

4.4 Signing Links

You are responsible for verifying the identity of any individual to whom you send a digital signing link.

5. Agent Website and Event Page Services

5.1 Software-Provider Role

The Services may allow you to create, publish, and manage professional webpages, Event Pages, structured data, RSVP forms, flyers, and Event-related communications for Events organized by you or another organizer you identify. An “Event Page” is a webpage created or hosted through the Services for an educational, marketing, sales, or other supported Event type.

Company provides self-service webpage, hosting, form-processing, structured-data, communications, and related software technology. Company does not organize, sponsor, present, supervise, review, approve, certify, or conduct your Event and does not provide insurance advice or insurance services to Event attendees.

Company is not CMS, Medicare, a Marketplace, a regulator, a carrier, your field marketing organization (FMO), your agency, your compliance department, or your legal adviser.

5.2 Independent Relationship

You are an independent professional or organization and are not an employee, legal agent, representative, partner, joint venturer, franchisee, or affiliate of Company. The Services do not create an insurance-agency, supervisory, FMO, fiduciary, or compliance-review relationship between Company and you. You have no authority to bind Company or make a representation, warranty, commitment, or promise on Company’s behalf.

5.3 Your Website and Event Responsibilities

You select the Event type and supply, select, or approve the Event-specific information displayed through the Services. You are solely responsible for:

The classification and purpose of the Event.
The accuracy and completeness of website and Event information.
Your licensing, certifications, appointments, and authority.
The Event’s advertising, speakers, presentations, handouts, and conduct.
Statements made by you or another presenter.
The venue, access, capacity, accommodations, and Event operations.
Insurance advice, applications, enrollment, or other professional services.
Event changes, postponements, or cancellations.
Communications sent by or for you.
Compliance with laws, regulations, carrier requirements, contractual requirements, and professional obligations applicable to you.

You are also responsible for determining whether a venue or area within a venue is appropriate, whether planned activities affect an Event’s classification, and whether carrier, upline, facility, sponsoring-organization, governmental, or other approval, reporting, or procedural requirements apply.

5.4 Templates, Labels, and Standardized Disclosures

Company may provide Event templates, Event-type labels, prompts, checklists, warnings, standardized disclosures, structured data, and other configurable content as software features. Company may automatically add state-aware license disclosures, educational notices, or other system-controlled language to generated pages and materials.

An Event Page is generated in whole or in part from your selections, instructions, and approved content. Company’s provision or display of a template, label, prompt, disclosure, checklist, warning, or structured-data field does not constitute:

Legal, regulatory, or compliance advice.
A determination of an Event’s classification.
Approval or certification of an Event.
Supervision of you.
A representation that an Event complies with every applicable requirement.
A substitute for your professional judgment or independent obligations.

You are responsible for determining whether the selected template and displayed content are appropriate for your Event and for providing accurate information for all variable fields, including agent, agency, plan, carrier, licensing, accommodation, and disclaimer information. You may not remove, obscure, alter, or circumvent a disclosure or notice that the Services identify as required or system-controlled.

5.5 No Duty to Monitor or Approve

Company does not undertake to monitor, supervise, audit, investigate, approve, or verify your Event operations, professional conduct, licensing or appointments, statements made during an Event, communications with attendees, or regulatory compliance.

Publication of an Event Page does not constitute Company’s approval, certification, or endorsement of the Event or your conduct. Company may help you prepare, organize, record, or export information for submission to another party, but Company does not determine whether an Event, venue, filing, or material has been approved.

5.6 Event Content and Publication License

You grant Company a nonexclusive, worldwide, royalty-free license during the period reasonably necessary to provide the Services to host, reproduce, format, adapt for technical or accessibility purposes, publish, transmit, and display website and Event information and other content supplied, selected, or approved by you.

This license includes authority to:

Generate and publish Event structured data and search-engine or social-sharing metadata.
Display your name, agency, business contact information, professional or license information, biography, photograph, logo, Event description, location, date, time, and other approved information.
Make an Event Page available to search engines and Event-discovery services.
Preserve technical, version, audit, or archival copies as permitted by these Terms and the applicable privacy notice.

You represent and warrant that you have the rights and permissions necessary for Company to use and display all content you supply, select, or approve.

5.7 RSVP Processing Instructions

When you enable an RSVP form, you instruct and authorize Company to:

Collect the information entered by an attendee.
Host and secure that information.
Make the information available to you or the Event Organizer identified on the Event Page.
Send Event confirmations, reminders, access information, cancellations, rescheduling notices, or other Event-related communications supported by the Services and selected by or reasonably expected by the attendee.
Maintain records of the notices, selections, Event versions, and submissions associated with the RSVP.
Process privacy and support requests.
Prevent fraud and misuse.
Retain and delete the information as described in the applicable Event Page privacy notice and your account settings or instructions.

Company will describe its own Event Page and RSVP processing in the separate privacy notice displayed on or linked from the Event Page.

5.8 Your Use of RSVP Information

You are independently responsible for your access to, export, copying, use, disclosure, retention, and deletion of RSVP information after it is made available to you. You must use RSVP information in accordance with applicable law, the notice displayed when the information was collected, the attendee’s selections and consents, your own privacy notice where applicable, and these Terms.

An RSVP does not, by itself, constitute an insurance application, enrollment, Scope of Appointment, consent to access a Marketplace account, permission to contact for sales or marketing, or authorization for unrelated automated insurance-marketing communications. You are solely responsible for determining, obtaining, and documenting any additional authority, permission, or consent required for subsequent communications or insurance activities.

Company does not infer that authority exists or does not exist merely because a separate permission record is or is not visible in the Services.

Subject to applicable law, your agreement with Company, any Business Associate Agreement, legal holds, security requirements, optional organization settings, and the Services’ account and backup lifecycle, you control how long your organization’s RSVP records are retained and when they are deleted. Company does not delete records from your external email account, customer relationship management system, device, exported files, or another system you control.

5.9 Sensitive Information

You must not configure, request, or encourage an attendee to submit Social Security numbers, Medicare numbers, Marketplace credentials, insurance application information, financial information, detailed health history, diagnoses, medications, provider information, or other sensitive information through a general Event Page RSVP form. A supported optional accessibility or language request must be limited to information reasonably necessary to help administer the Event.

You must use a separate secure workflow expressly designed for any service that requires sensitive application, health, financial, or government-identification information.

5.10 Event Changes and Attendee Communications

You are responsible for promptly updating the Event Page and notifying attendees of a cancellation, postponement, location change, access change, or other material Event update. Company may provide communication tools but does not independently verify the accuracy or delivery of your Event information.

5.11 Third-Party Platforms and Search Results

Company may format or transmit Event information for search engines, maps, calendars, social networks, or other third-party services. Company does not control and does not guarantee search-engine indexing, search ranking, local-search placement, Google Events or another rich-result display, continued availability of a third-party feature, acceptance of structured data, Event attendance, leads, appointments, enrollments, revenue, or any other business result.

5.12 Protection of the Services

Company may, but is not obligated to, suspend, restrict, or remove an Event Page or Event-related functionality when reasonably necessary to operate, maintain, or secure the Services; address a technical or security issue; respond to suspected fraud, impersonation, or misuse; enforce these Terms; comply with legal process; or prevent material harm.

Company’s exercise or nonexercise of this right does not create an obligation to monitor, supervise, approve, or verify your Event or professional conduct.

6. Annual Review Assessment Tools

6.1 Assessment Tools and Outputs

The Services may include annual review, plan assessment, plan comparison, prescription drug, pharmacy, provider-directory, current-plan, benefit, ranking, flagging, or triage tools for Medicare plan review workflows.

These tools may generate outputs such as:

Annual Review Profiles.
Plan Review Assessments.
Estimated drug costs.
Pharmacy scenarios.
Formulary or coverage warnings.
Provider-directory matches or provider-confirmation flags.
Current-plan comparison information.
Review priority indicators.
Plans worth reviewing.
Plan rankings, sorting, or display order.
Agent notes and final disposition records.

These outputs are provided for licensed-agent review and documentation. They are not automatic recommendations, enrollment advice, legal advice, compliance advice, medical advice, or a determination that any plan is the best plan for a beneficiary.

6.2 Meaning of Rankings, Flags, and “Plans Worth Reviewing”

Any ranking, sorting, score, label, flag, or “plans worth reviewing” output is based on the data, assumptions, settings, and files available to the Services at the time the assessment is created.

Such outputs may consider factors such as:

Beneficiary location.
Medications, dosages, quantities, and pharmacies entered or confirmed.
Available formulary and drug-pricing data.
Plan premium and benefit data.
Selected pharmacy scenarios.
Provider-directory information.
Current-plan information.
Coverage warnings or restrictions.
Customer settings, filters, carrier appointments, or display preferences.
Data availability and plan-year file availability.

Unless the Services expressly state otherwise, a ranking or display order does not mean:

The first plan shown is the “best” plan.
The first plan shown is the lowest-cost plan for all purposes.
All Medicare plans available to the beneficiary are shown.
All plan features, provider relationships, drug restrictions, benefits, costs, or suitability factors have been considered.
A plan is appropriate for enrollment.
A provider, pharmacy, drug, cost, or benefit has been finally verified.
Medicare, CMS, Informed + Choice, Agent Vault, or the Services recommends the plan.

The phrase “plans worth reviewing” means plans that may deserve licensed-agent review based on the information available to the Services. It does not mean those plans are recommended.

The phrase “estimated lowest cost,” if used, means the lowest estimated cost among the plans, pharmacies, assumptions, and data included in that assessment at that time. It is not a guarantee of actual cost and is not a complete suitability determination.

6.3 Agent Responsibility for Review and Recommendation

You are solely responsible for reviewing any Plan Review Assessment before relying on it or presenting conclusions to a beneficiary.

Before making a recommendation or submitting an enrollment, you must independently verify all material information, including as applicable:

Beneficiary eligibility.
Service area.
Current plan status.
Plan availability.
Premiums.
Benefits.
Drug coverage.
Formulary tier.
Prior authorization, step therapy, quantity limits, and other restrictions.
Pharmacy network status.
Preferred or standard pharmacy status.
Estimated costs.
Provider and facility network participation.
Carrier rules and enrollment requirements.
Scope of Appointment, permission-to-contact, marketing, and documentation requirements.

Provider-directory matches and pharmacy-network information are provided for review support only. You should confirm important providers, facilities, pharmacies, and medication coverage before making a recommendation, especially where the beneficiary considers the provider, facility, pharmacy, or medication important.

You may not represent any Plan Review Assessment as a recommendation from Medicare, CMS, Informed + Choice, Agent Vault, or the Services.

6.4 Filtered or Limited Plan Displays

If you configure the Services to show only certain carriers, contracts, plan types, appointed carriers, agency-approved plans, or other filtered results, you are responsible for understanding and accurately describing those limits.

You may not tell a beneficiary that a filtered plan display shows all available Medicare plan options unless the display actually includes all plans available for that beneficiary and plan type.

If you provide a beneficiary with a summary based on a filtered display, you must make clear that the summary is based on the plans and criteria included in the assessment.

6.5 Use of Annual Review Data

You may use Medicare Data, Annual Review Profiles, Plan Review Assessments, Annual Review Records, and related outputs only to assist the named beneficiary with Medicare plan review, enrollment support, client service, documentation, compliance, and related activities for that beneficiary relationship.

You may not:

Sell Annual Review Data.
Use Annual Review Data as a lead list.
Use Annual Review Data for unrelated marketing.
Share Annual Review Data with unrelated agents, agencies, vendors, FMOs, carriers, or platforms except as authorized by the beneficiary, required for requested plan review or enrollment support, permitted by your agreement with us, or required by law.
Upload Annual Review Data or Plan Review Assessments to unapproved AI tools or public systems.
Represent assessment outputs as guaranteed, complete, or final.
Use assessment outputs when you know or reasonably should know that the information is outdated, incomplete, or incorrect.

6.6 Error Handling and Data Updates

You acknowledge that Medicare Data, plan data, formulary data, pharmacy-network data, drug-pricing data, benefit data, provider-directory data, and beneficiary-submitted information may be incomplete, delayed, outdated, incorrectly matched, or subject to change.

If you identify a material error in an Annual Review Profile, Plan Review Assessment, or related output, you must not rely on that output until the information is corrected or independently verified. You agree to promptly notify Informed + Choice of material system errors you discover.

7. Data Retention & Offboarding

7.1 CMS Retention

You acknowledge that CMS regulations may require you to retain Scope of Appointment (SOA) and audio records for ten (10) years.

7.2 Scope of This Section

This Section 7.2 through 7.10 applies specifically to records, files, documents, audio recordings, PDFs, signatures, audit-ready artifacts, and related materials that are saved to or maintained in the Vault portion of the Services (“Vault Artifacts”).

7.3 Export Right Upon Termination

Upon expiration or termination of the applicable order form, subscription, or access term, you may, during the thirty (30) days following the effective date of termination, access the export functionality of the Services solely for the purpose of retrieving Vault Artifacts and Customer-required records from the Vault. During that post-termination period, we may permit you to access export functionality even if you no longer have active paid entitlement to use the operational features of the Services.

7.4 Standard Export Format

Unless otherwise stated in an order form or other written agreement, our standard offboarding deliverable is a manifest-first export identifying the records and artifacts available for retrieval, together with time-limited authenticated download access to individual artifacts or grouped export packages made available in our standard format. We are not required to provide direct bucket access, unrestricted raw storage access, or any particular third-party import format unless expressly agreed in writing.

7.5 Included Export; Additional Services

One standard export for the applicable customer workspace or tenant is included in the ordinary offboarding process. Any nonstandard export packaging, custom mapping, physical media delivery, migration assistance, expedited handling, or other professional-services support will be billed at our then-current professional-services rates unless otherwise stated in an order form or other written agreement.

7.6 Deletion Requires Prior Export and Express Request

We will not process a request to delete regulated records, Customer Data, or PHI-bearing Vault Artifacts as part of offboarding unless (a) we have first made the applicable export available to you, and (b) you thereafter submit an express deletion request through our designated process. Silence, account inactivity, or termination alone does not constitute a deletion instruction.

7.7 Customer Responsibility After Export

Once you have downloaded or had a reasonable opportunity to retrieve the export we make available, you are solely responsible for retaining, storing, and producing any records that you are required to maintain under applicable law, regulation, contractual obligation, payer requirement, audit requirement, or complaint-response obligation. We do not assume your ongoing recordkeeping obligations after completion of offboarding except to the limited extent we are independently required to retain data by applicable law, security policy, legal hold, or the parties’ written agreement.

7.8 Retained Records; Limited Residual Data

Notwithstanding anything to the contrary, we may retain: (i) billing and payment records; (ii) audit logs, access logs, export logs, deletion attestations, and system security records; (iii) legal-hold materials; (iv) records retained to comply with applicable law, regulation, subpoena, court order, payer requirement, or governmental request; and (v) minimal metadata, tombstone records, hashes, and other residual records reasonably necessary to preserve system integrity, prove prior processing history, prevent duplicate restoration, or document deletion or redaction activity. Any such retained records remain subject to applicable confidentiality, security, and use restrictions.

7.9 Manner of Deletion

Following a valid deletion request, we may delete, redact, minimize, or render inaccessible applicable Vault Artifacts from active application stores in accordance with our standard offboarding and retention procedures. You acknowledge that immediate deletion from all systems may not be technically possible where data is subject to immutable storage controls, legal holds, fraud-prevention or security controls, or backup and archival lifecycle processes, and that we may complete deletion or redaction through a controlled privileged process rather than through ordinary runtime access paths.

7.10 Suspension of Access After Offboarding Window

After the expiration of the post-termination export window, we may disable your access to the Services and any export interface, except to the extent otherwise required by law or expressly agreed in writing.

7.11 Priority of BAA

If the parties have entered into a Business Associate Agreement, then with respect to Protected Health Information, the Business Associate Agreement will control to the extent of any conflict between that agreement and this Section.

8. Prohibited Uses

You will not:

Use the Services for any illegal purpose, including insurance fraud or unauthorized marketing.
Use an Event Page to impersonate another person or organization or falsely represent an affiliation, license, appointment, sponsorship, approval, or governmental relationship.
Misrepresent your license, appointment, certification, authority, Event classification, carrier or facility approval, or relationship with CMS, Medicare, a Marketplace, a carrier, or Company.
Use a general Event Page RSVP form to collect Social Security numbers, Medicare numbers, Marketplace credentials, insurance application information, financial information, detailed health information, or other sensitive information outside the limited supported fields.
Remove, obscure, alter, or circumvent system-controlled disclosures or notices in generated Agent Website or Event materials.
Insert unauthorized tracking scripts, advertising pixels, custom code, or data-collection tools into an Agent Website or Event Page.
Use RSVP information in a manner inconsistent with the notice, selections, or consent presented when the information was collected.
Attempt to reverse engineer the platform or scrape data.
Use any PHI accessed via the Services to train Artificial Intelligence (AI) models.

9. Disclaimer of Warranties

THE SERVICES ARE PROVIDED “AS IS.” WE DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. WE DO NOT WARRANT THAT THE SERVICES WILL MEET CMS AUDIT REQUIREMENTS FOR EVERY SPECIFIC CARRIER OR SCENARIO.

10. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, OUR LIABILITY SHALL NOT EXCEED THE AMOUNT YOU PAID US IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM.

11. Indemnification

You agree to defend, indemnify, and hold harmless Informed + Choice from any claims, damages, or fines (including HIPAA fines or TCPA damages) arising out of your misuse of the Services, your violation of laws, or your failure to obtain necessary beneficiary consents.

Without limiting the foregoing, your indemnification obligations include third-party claims, investigations, damages, penalties, liabilities, and reasonable attorneys’ fees arising from or relating to:

Website or Event content supplied, selected, or approved by you.
Your classification, advertising, organization, or conduct of an Event.
Your licensing, insurance services, advice, applications, or enrollments.
Your acts or omissions at an Event.
A venue, speaker, contractor, employee, volunteer, or attendee matter under your control.
Your calls, text messages, emails, or other attendee communications.
Your access to, export, use, disclosure, retention, or deletion of RSVP information.
Your violation of an attendee’s privacy rights or communication preferences.

You will not be required to indemnify Company to the extent a claim is caused by Company’s breach of its own contractual obligations, violation of law, gross negligence, or willful misconduct.