Terms of Use & Privacy
Last updated: 27 April 2026
These terms govern your access to and use of That's Notable ("the Service"), operated by That's Notable ("we", "us", or "our"). By creating an account or using the Service, you agree to be bound by these terms. If you do not agree, do not use the Service.
Part 1
Terms of Use
1. Service Description
That's Notable is an AI-assisted clinical documentation tool. It allows users to input session observations (by typing or browser-based dictation) and receive structured clinical notes generated by artificial intelligence. The Service is intended as a documentation aid only.
2. Eligibility and Your Responsibilities
The Service is available to any individual who creates an account. No professional licence or registration is required to sign up. However, if you use the Service in connection with clinical, therapeutic, or healthcare practice — including documenting sessions with clients or patients — you warrant that:
- you have the legal authority and appropriate consent to process any personal or clinical information you input into the Service;
- your use of the Service complies with all applicable laws, regulations, and professional or ethical standards governing your practice; and
- you do not use the Service in a manner that breaches any obligation you owe to a client, patient, employer, regulator, or professional body.
That's Notable does not verify, assess, or represent the professional status, registration, or competence of any user. Whether or not you hold a professional licence or registration, all responsibility for the clinical appropriateness and lawfulness of your use of the Service rests with you.
3. Clinician Responsibilities and Client Consent
You acknowledge and agree that you are solely responsible for:
- Obtaining informed consent: You must obtain appropriate informed consent from your clients before using the Service in connection with their care. This includes explaining how session content is processed by AI and giving clients the opportunity to decline. Consent should be obtained in accordance with the professional and legal standards applicable in your jurisdiction.
- Reviewing and verifying output: All AI-generated notes are drafts. You must review, edit, and verify all output for accuracy, completeness, and clinical appropriateness before using it in any clinical record, report, or communication. You should never copy AI-generated content into a client record without review.
- Professional and legal compliance: You are responsible for complying with all applicable laws, regulations, and professional standards governing your practice, including data protection and privacy requirements (such as GDPR, the Australian Privacy Principles, the Singapore PDPA, or equivalent legislation in your jurisdiction).
- Clinical judgement: The Service does not provide clinical advice, diagnosis, or treatment recommendations. You must exercise your own independent professional judgement at all times. The Service is not a substitute for clinical expertise.
- Suitability: You are responsible for determining whether the Service is suitable for your specific use case, practice setting, and regulatory environment.
- Crisis and risk situations: The Service may be used to structure documentation of crisis situations, risk of harm, suicidality, safeguarding concerns, or mandatory reporting circumstances after the fact. However, the Service must not be used to assess or manage any such situation in real time. Your independent clinical judgement and direct communication with the client and, where relevant, emergency services must take precedence at all times.
- Reporting defects and adverse events: You must notify us promptly via the Send Feedback button in the Service if you become aware of any defect, error, security vulnerability, client complaint, or adverse event that may relate to your use of the Service or to AI-generated output. Prompt notification allows us to investigate and, where appropriate, issue corrections or safety notices.
Privacy best practice: To minimise the personal information transmitted to third-party AI services, we recommend using client initials, case reference numbers, or other de-identified identifiers in your session notes rather than full client names. The client name field in the Service is optional and intended as a convenience; it is not required for the Service to function.
3A. Duty of Care and Clinical Responsibility
The Service is a documentation tool only. That's Notable is not a healthcare provider, a clinical supervisor, or a regulated health service. That's Notable accepts no duty of care, clinical responsibility, or professional obligation of any kind towards your clients or any third party.
All duty of care for your clients rests exclusively and entirely with you as the treating clinician. That's Notable shall bear no responsibility whatsoever for any clinical decision, treatment plan, therapeutic relationship, quality of therapy provided, or any harm, injury, adverse event, or outcome experienced by any client arising from your use of the Service or from any AI-generated documentation output, whether reviewed by you or not.
By using the Service you acknowledge that you, not That's Notable, are the registered professional responsible for the welfare of your clients, and that no use of this Service transfers, diminishes, or otherwise affects that professional responsibility.
4. Account and Security
You are responsible for maintaining the confidentiality of your account credentials and for all activity that occurs under your account. You agree to notify us immediately of any unauthorised use. Authentication is provided by a third-party service (Clerk); their terms apply to your use of the authentication system.
5. Acceptable Use
You agree not to:
- Use the Service for any unlawful purpose or in violation of professional ethics.
- Submit content that you are not authorised to process.
- Attempt to circumvent usage limits, security measures, or access controls.
- Reverse-engineer, decompile, or attempt to extract the source code of the Service.
- Use the Service as a sole or primary medical record system.
- Rely on AI-generated output without professional review.
6. Intellectual Property
You retain ownership of all notes, observations, and content you input into the Service. The AI-generated output is provided for your use in your professional practice. We retain all rights in the Service itself, including its design, code, branding, and underlying technology.
7. Fees, Subscription, and Cancellation
The Service may offer a free trial with limited usage, followed by a paid subscription. Fees, billing cycles, and payment terms are presented at the time of purchase. Listed prices are in Australian dollars and are inclusive of any applicable GST where required. Subscriptions are managed through our payment provider (Stripe); their terms apply to payment processing.
Price changes: We may change pricing on no less than thirty (30) days' notice, applied only from your next renewal. Your continued use of the Service after a price change takes effect constitutes acceptance of the new price.
Cancellation: You may cancel your subscription at any time through the Stripe Customer Portal. Cancellation takes effect at the end of your current billing period, and you will retain access to the Service until that date. We do not provide pro-rata refunds for partial billing periods, except where required by law (including the non-excludable consumer guarantees under the Australian Consumer Law).
8. Disclaimers
The Service is provided "as is" and "as available" without warranties of any kind, express or implied. We do not warrant that the Service will be uninterrupted, error-free, or that AI-generated output will be accurate, complete, or suitable for any particular purpose. The Service is a documentation aid and does not constitute medical advice, diagnosis, or treatment.
That's Notable makes no representation as to the quality, appropriateness, safety, or adequacy of any therapy or healthcare service provided by users of the Service. The quality of clinical care — including any care informed by documentation created using the Service — is entirely the responsibility of the treating clinician. The Service does not assess, endorse, or guarantee the clinical competence of any user, and does not evaluate whether any AI-generated output is clinically appropriate for any individual client.
Nature of AI output: You expressly acknowledge that AI-generated output is produced by large language models which are inherently probabilistic and may, without warning, produce content that is inaccurate, incomplete, fabricated, biased, internally inconsistent, or otherwise unsuitable — including output that appears plausible but contains invented clinical content (commonly referred to as "hallucination"). Neither That's Notable nor its AI providers can guarantee the factual accuracy of any output, and you accept full responsibility for identifying and correcting such errors through your independent professional review.
9. Limitation of Liability
To the maximum extent permitted by law, we shall not be liable for any indirect, incidental, special, consequential, or punitive damages, or any loss of profits or revenues, whether incurred directly or indirectly, or any loss of data, use, goodwill, or other intangible losses, resulting from your use of the Service. You are ultimately responsible for the accuracy and appropriateness of any clinical documentation you produce, regardless of whether AI tools were used in its creation.
Without limitation to the foregoing, That's Notable shall have no liability whatsoever for: (a) any clinical decision made by you or any other clinician; (b) any outcome, harm, injury, deterioration in condition, or adverse event experienced by any client or third party; (c) the quality, adequacy, appropriateness, or safety of any therapy or healthcare service you provide; (d) any failure to identify, document, or act upon a clinical risk; or (e) any regulatory, disciplinary, professional, or legal consequence arising from your clinical practice or your use of the Service. These exclusions apply regardless of whether AI-generated output was used, reviewed, relied upon, or cited in connection with the relevant clinical decision or documentation.
That's Notable is not liable for any security incident, data breach, service outage, or loss of data caused by or occurring within a third-party service provider (including Clerk, Stripe, or Google). Each of those providers operates under its own terms and security obligations. Your recourse in respect of any such incident is governed by your direct relationship with that provider and their applicable terms.
Aggregate liability cap: Notwithstanding anything else in these terms, and to the maximum extent permitted by law, That's Notable's total aggregate liability to you arising out of or in connection with these terms or your use of the Service — whether in contract, tort (including negligence), under statute, or on any other basis — is limited to the greater of (a) the total fees you have paid to That's Notable in the twelve (12) months immediately preceding the event giving rise to the claim, or (b) AUD $100. This cap applies to all claims in aggregate, not per claim. Nothing in this clause limits any liability that cannot lawfully be excluded or limited, including rights or guarantees under the Australian Consumer Law.
10. Indemnification
You agree to indemnify, defend, and hold harmless That's Notable and its officers, directors, employees, contractors, and affiliates (the "Indemnified Parties") from and against any and all claims, demands, actions, proceedings, damages, losses, liabilities, costs, and expenses (including reasonable legal fees) arising out of or in connection with:
- your use or misuse of the Service;
- any clinical decision, assessment, diagnosis, treatment, or outcome involving any of your clients or any third party, including any claim brought by a client, a client's family, or a regulatory or disciplinary body;
- any breach by you of these terms, including any warranty in section 2 (Eligibility);
- any violation by you of any applicable law, regulation, or professional or ethical standard;
- any content you input into the Service, including any claim that such content was submitted without the necessary consents or legal authority; and
- any dispute between you and a client, colleague, employer, or other third party.
This indemnity survives termination of these terms.
11. Termination
We may suspend or terminate your access to the Service:
- immediately, for material breach of these terms, suspected fraud, violation of section 2 (Eligibility) or section 5 (Acceptable Use), non-payment, or where required by law; or
- for convenience, on thirty (30) days' written notice (by email or in-product notice), in which case we will refund any prepaid fees covering the period after termination takes effect.
You may stop using the Service at any time by cancelling your subscription as described in section 7. Because session content is not stored, no data export or wind-down period is required; account metadata may be deleted via Clerk's account management interface. Provisions intended by their nature to survive termination — including sections 6 (Intellectual Property), 8 (Disclaimers), 9 (Limitation of Liability), 10 (Indemnification), and Part 2 (Privacy) — survive termination.
Part 2
Privacy Policy
11A. Data Controller and Processor Roles
Different categories of data handled by the Service sit in different legal roles:
- Account metadata (we are controller): That's Notable is the data controller for the limited usage metadata stored in your account profile via Clerk — generations used, subscription status, terms acceptance timestamp, and custom template configurations. We determine the purposes and means of processing this information.
- Session note content (you are controller, we are processor): You are the data controller for any session observations, client identifiers, or clinical content you input into the Service. That's Notable acts solely as your data processor in respect of that content: we process it only on your documented instruction (the act of submitting it for structuring), for the sole purpose of producing the structured output, and we do not retain, reuse, analyse, share, or otherwise process that content for any other purpose. Because the content is processed transiently and not stored, no standing copy exists after the API call completes.
- Payment and authentication data: Handled by independent controllers (Stripe, Clerk) under their own terms.
The third-party services listed in section 14 act as independent data controllers or sub-processors, each operating under their own privacy policies and binding contractual obligations. That's Notable does not control how those providers handle data within their own systems.
Your obligations as controller: As the controller of session content, you are responsible for the lawful basis, purpose limitation, accuracy, and client-facing privacy notices applicable to that content, and for obtaining any consents required under applicable law (including GDPR Articles 6 and 9, Australian Privacy Principles 3 and 6, the Singapore Personal Data Protection Act 2012 (PDPA) sections 13–17, or equivalent legislation).
12. Information We Collect
Account information
When you create an account, our authentication provider (Clerk) collects your email address, name, and related authentication credentials. We do not directly store this information in our own database; it is managed by Clerk in accordance with their privacy policy.
Session note content
When you use the Service, you input session observations (by typing or browser-based dictation) including client names, session dates, session numbers, and clinical notes. This content is sent to our server and then to Google Vertex AI to generate structured output. This content is processed transiently and is not stored in a persistent database by us. Once the structured output is generated and returned to your browser, the input data is not retained on our servers.
Audio (cloud dictation fallback)
Where your browser lacks on-device speech recognition, the Service falls back to cloud-based dictation. In this case, raw audio is streamed via an encrypted WebSocket to our cloud service, which forwards it to Google Cloud Speech-to-Text for transcription. The transcript is returned to your browser. No audio or transcript is stored by That's Notable at any point after the session ends.
Usage metadata
We store limited usage metadata in your account profile (via Clerk), including the number of note generations used, your subscription status, and custom template configurations.
Analytics
We collect pseudonymous usage data (such as page views, events, device type, browser, operating system, country, and referrer) using our own analytics service built on Google Cloud infrastructure. Events are associated with your account identifier (a pseudonymous Clerk user ID) where you are signed in, and with a derived country inferred from your IP address at the time of the request. IP addresses themselves are not stored. This data does not include any clinical content. Analytics logs are retained for 30 days in line with Google Cloud's default log retention, after which they are automatically deleted.
13. What We Do NOT Collect
- Persistent clinical records: We do not maintain a database of your session notes or generated output. The Service is a processing tool, not a record-keeping system.
- Client contact information: We do not collect contact details, health identifiers, or personal information about your clients beyond what you include in the session notes you choose to input.
14. Third-Party Data Processors and Sub-Processors
That's Notable relies on the following third-party services to operate. By using the Service you consent to your data being processed by these providers in the countries indicated, as required under the Australian Privacy Principles (APP 8) and equivalent legislation.
Clerk
Authentication and account management · United States
Clerk collects and stores your email address, name, and authentication credentials on our behalf. That's Notable does not store login credentials in its own systems — all credential management, password hashing, session tokens, and multi-factor authentication are handled exclusively by Clerk.
Stripe
Payment processing · United States
All subscription payments are processed by Stripe. That's Notable never receives, sees, stores, or has access to your payment card number, CVV, or full card details at any point. Payment is entered directly into Stripe's hosted interface. That's Notable retains only a Stripe customer ID and subscription status for billing purposes.
Google Cloud
Hosting, AI note structuring, speech-to-text, and analytics · Singapore / United States
The Service is hosted on Google Cloud infrastructure. Session note content is transmitted to Google Vertex AI to generate structured output; cloud dictation (for browsers without on-device speech recognition) is processed via Google Cloud Speech-to-Text. We operate under Google's enterprise Data Processing Addendum, which explicitly prohibits Google from using customer data to train its models. All clinical content is processed transiently and is not retained beyond the scope of each API call. Pseudonymous usage analytics collected via our own service running on Google Cloud contain no clinical content; they include a pseudonymous account identifier, country, device type, and event name, and are retained for 30 days.
We will notify you of any material change to the third-party providers listed above by posting an update to these terms and, where practicable, by notifying you through the Service. Continued use of the Service after such notice constitutes acceptance of the updated provider list.
15. Data Retention
- Session note content: Processed transiently; not retained after the structured output is returned to your browser.
- Account data: Retained by Clerk for as long as your account is active. You can delete your account at any time through Clerk's account management interface.
- Payment data: Retained by Stripe in accordance with their data retention policies and applicable financial regulations.
- Analytics logs: Pseudonymous usage event logs (including account identifier, country, device type, and event name) are retained for 30 days in Google Cloud Logging, after which they are automatically deleted.
16. Data Security
We implement appropriate technical measures to protect data in transit and at rest, including HTTPS/TLS encryption, secure HTTP headers (Content Security Policy, X-Frame-Options, Permissions-Policy), server-side rate limiting, and authentication controls via Clerk.
16A. Data Breach Notification
If That's Notable becomes aware of an eligible data breach affecting your account information or any session content transmitted through the Service, we will:
- notify you without undue delay and in any event: where the GDPR applies, within seventy-two (72) hours of becoming aware; and where the Singapore Personal Data Protection Act 2012 (PDPA) applies, within three (3) business days of assessing that the breach is notifiable to the Personal Data Protection Commission (PDPC);
- assist you, as reasonably necessary, to meet your own notification obligations under Part IIIC of the Privacy Act 1988 (Cth) (the Notifiable Data Breaches scheme), GDPR Articles 33–34, PDPA section 26D, or equivalent legislation; and
- provide information sufficient to enable you to assess the nature, scope, and likely consequences of the incident.
Because session note content is not retained by us, the scope of any breach originating within That's Notable's systems is structurally limited to account metadata. Breaches originating within third-party providers (Clerk, Stripe, or Google) are handled under those providers' own notification obligations to their direct customers.
17. Cookies
The Service uses cookies strictly for functional purposes: authentication session management (via Clerk) and pseudonymous analytics (via our own Google Cloud-based service). We do not use advertising or tracking cookies.
18. Your Rights
Depending on your jurisdiction, you may have rights including: access to personal data we hold about you, correction or deletion of that data, withdrawal of consent to processing, restriction of processing, data portability, and the right to lodge a complaint with a supervisory authority. Because we do not maintain a persistent database of session notes, there is no stored clinical content to retrieve or delete. Account data can be managed and deleted through Clerk's account management interface, or by submitting an enquiry via the Send Feedback button in the Service.
Withdrawal of consent (PDPA): If you are located in Singapore and wish to withdraw consent to our processing of your personal data, you may do so at any time by submitting an enquiry via the Send Feedback button in the Service. Withdrawal of consent may affect your ability to use the Service. We will action withdrawal requests within 10 business days. Note that withdrawal does not affect the lawfulness of processing that occurred before withdrawal.
Complaints: Australian users may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au. Singapore users may lodge a complaint with the Personal Data Protection Commission (PDPC) at pdpc.gov.sg. EU users may lodge a complaint with the data protection supervisory authority in their EU member state.
19. International Data Transfers
As an Australian-registered service, That's Notable is subject to the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). In accordance with APP 8, we disclose that your personal information is transferred to and processed in the following overseas countries by the third-party providers named in section 14:
- United States / Singapore — Clerk (authentication), Stripe (payments), Google Cloud (hosting, AI note structuring, speech-to-text, and analytics)
Before disclosing your personal information to these overseas recipients, we have taken reasonable steps to ensure each provider maintains data handling standards that are substantially similar to the APPs or are otherwise required to protect your information under binding contractual obligations. By using the Service, you consent to these overseas disclosures. If you do not consent, you should not use the Service.
Where the General Data Protection Regulation (GDPR) or equivalent legislation applies to your use of the Service, you acknowledge that data transfers to the United States are made under Standard Contractual Clauses or equivalent transfer mechanisms maintained by each respective provider.
Where the Singapore Personal Data Protection Act 2012 (PDPA) applies, transfers of personal data to overseas recipients are made subject to contractual arrangements that require each recipient to provide a standard of protection comparable to that under the PDPA, in accordance with the PDPA Transfer Limitation Obligation. The Data Processing Addenda maintained by Google and Stripe, and the Data Processing Agreement maintained by Clerk, each satisfy this requirement.
General
General Provisions
20. Changes to These Terms
We may update these terms from time to time. If we make material changes, we will notify you through the Service or by other means. Your continued use of the Service after changes take effect constitutes acceptance of the updated terms.
21. Governing Law
These terms are governed by and construed in accordance with the laws of the State of Victoria, Australia. Any disputes arising from these terms shall be subject to the exclusive jurisdiction of the courts of Victoria, Australia. Nothing in these terms excludes any right or guarantee you are entitled to under the Australian Consumer Law (Schedule 2 of the Competition and Consumer Act 2010 (Cth)) or any other mandatory consumer or healthcare law of your jurisdiction that cannot lawfully be excluded or limited by contract.
22. Force Majeure
Neither party is liable for any failure or delay in performance caused by circumstances beyond its reasonable control, including acts of God, natural disasters, war, terrorism, civil unrest, government action, epidemics or pandemics, labour disputes, power or telecommunications failures, cyber-attacks on upstream providers, or the failure, suspension, or modification of any third-party service on which the Service depends. Obligations to pay fees that have already accrued are not excused by this clause.
23. Severability
If any provision of these terms is held invalid, illegal, or unenforceable by a court of competent jurisdiction, that provision shall be modified to the minimum extent necessary to make it valid and enforceable, or, if no such modification is possible, shall be severed. The remaining provisions shall continue in full force and effect.
24. Entire Agreement
These terms, together with any documents expressly incorporated by reference, constitute the entire agreement between you and That's Notable concerning the Service and supersede all prior or contemporaneous communications, proposals, and representations. No oral or written statement by any representative of That's Notable modifies these terms unless confirmed in writing by an authorised officer.
25. Assignment
You may not assign, transfer, or sublicense any of your rights or obligations under these terms without our prior written consent. That's Notable may assign these terms in connection with a merger, acquisition, corporate restructuring, or sale of substantially all of its assets, provided the successor agrees to be bound by these terms.
26. No Resale or Redistribution
The Service is licensed for use by the individual practitioner (or authorised seat within an organisation) identified in the account. You must not:
- share, resell, sublicense, or redistribute access to the Service;
- allow multiple individuals to use a single account;
- use the Service to provide a commercial note-structuring, transcription, or documentation service to third parties; or
- incorporate the Service or its output into another product or service offered to third parties without our prior written consent.
27. Dispute Resolution
Before commencing any legal proceeding (other than an application for urgent injunctive relief), the parties agree to attempt in good faith to resolve the dispute through the following escalation:
- written notice of the dispute submitted via the Send Feedback button in the Service, describing the issue and the desired resolution;
- a period of no less than thirty (30) days during which the parties will negotiate in good faith; and, if the dispute remains unresolved,
- mediation administered by the Resolution Institute (or another mediator the parties agree to in writing), conducted in Melbourne, Victoria.
This clause does not prevent either party from applying to a court for urgent interim or injunctive relief at any time.
28. Waiver
Failure by That's Notable to enforce any provision of these terms does not constitute a waiver of that provision or of any other provision. A waiver is effective only if given in writing by an authorised officer of That's Notable.
29. Contact and Data Protection
If you have questions about these terms or wish to exercise a privacy right, please submit an enquiry using the Send Feedback button in the Service.
Data Protection Officer (PDPA): In accordance with the Singapore Personal Data Protection Act 2012, That's Notable has designated a Data Protection Officer who is responsible for ensuring compliance with the PDPA. The DPO can be contacted via the Send Feedback button in the Service.
Important notice
These terms provide general guidance and are not a substitute for legal advice. Healthcare professionals should consult with legal counsel to ensure compliance with the specific regulations and professional standards applicable in their jurisdiction, particularly regarding the use of AI tools in clinical practice and the handling of client data.