Own The Map Terms

Terms of Service

Last updated: October 26, 2026

These Terms of Service are a contract between Book Global LLC ("Own The Map," "we," "us") and the dental practice that accepts them ("you," "your"). Our address is 5830 E 2nd St, Ste 7000 #35471, Casper, WY 82609. By checking the acceptance box, the person accepting agrees to these Terms on behalf of the practice and to the Business Associate Agreement below. Own The Map is also called "OTM" in these Terms.

1. The service, and what it is not

Own The Map is a local visibility service for one dental practice location. We and the team we work with build and maintain, every month, a presence for your practice across the area you choose, so that when a patient in that area searches on Google Maps for the one service you and Own The Map agree on at signup (your "Target Service"), your practice is what they see and who they call. The work is done by people, every month, on your behalf. It is not software you run, and it is not advertising.

Calls that come from the map go to a tracked phone line Own The Map sets up for your practice (section 7). That line forwards to the office number you give us, and calls are recorded with a notice so Own The Map and your office can review how patient calls are handled. Your existing office number is not used as the number on the map and is never changed.

Recall is included with Own The Map at no separate charge: we work the patients already in your chart (overdue hygiene, unscheduled treatment, broken appointments) under your practice's name and hand the yes to your desk, under the Business Associate Agreement below. The guarantee in section 5 is the only guarantee on this contract. Own The Map is not sold without Recall.

Own The Map does not book into your schedule, does not provide clinical advice, and does not promise that a patient who calls will book, attend, or pay. The map changes block by block and hour by hour; the guarantee in section 5 is the only promise Own The Map makes about where your practice appears.

2. Eligibility, authority, and one practice per area

Own The Map is offered only to a dental practice, not to an individual. The person who accepts must be an owner, a dentist, or a staff member the practice has authorized to bind it, and represents that they have that authority, that the legal name is the practice's, and that the email will receive notices.

One practice location per area. Your area is the radius around your practice address that we fix in writing at signup, 50 miles unless we both agree on another figure. While your contract is in force and paid, Own The Map will not sell Own The Map for the same Target Service to another practice whose area overlaps yours. If your contract ends, the area is open again.

If your practice is in the United States, you represent that it is a HIPAA covered entity for the Recall part of the service, or that it will sign the Business Associate Agreement in that capacity. Checking the box is acceptance of these Terms and the Business Associate Agreement. Own The Map is offered in the United States. Own The Map may decline to activate a practice outside the United States and will refund in full any fee paid by a practice it declines.

3. Fees and billing

Two charges, in US dollars, in the amounts quoted to you on your call and confirmed to you in writing before any charge is made.

The activation fee is charged when you sign up. It starts the build of your map and turns Recall on for your office. It is not refundable except under the guarantee in section 5.

The monthly fee starts on day 30 after signup (your "map billing date") and then recurs every 30 days. There is no proration. The first 30 days carry no monthly fee: that is the build window.

You pay by card through the secure link we send you after your call, and you authorize the monthly fee on the same card from your map billing date. If a charge fails, we tell you the same day and retry. While a charge is unpaid we may pause the work and the tracked line. A pause does not cancel the contract, does not move the map billing date, and does not extend the guarantee. You owe taxes on the fees, other than taxes on our net income.

4. Term, cancellation, and refunds

The term is 90 days from checkout, then month to month. After the first 90 days, cancel by email to the address in section 17 with at least 30 days' notice; the contract ends at the end of the monthly period in which the notice period runs out, and we invoice through that date. There is no early cancellation during the first 90 days. If you stop paying during the first 90 days, the contract ends, the guarantee is off, and the fees already paid are not refundable.

Except for the guarantee in section 5, fees are not refundable. Cancelling because the calls did not convert, because your office did not answer the tracked line, or because you changed your mind about the Target Service, is not a ground for a refund.

5. The guarantee

The guarantee, in the words used on the page, is this:

"If we don't put $30,000 of treatment on your schedule in your first 90 days, from new patients through Own The Map and from your own chart through Recall, then every dollar you've paid comes back. Because we only take one dentist per area, and we can't afford for you to fail."

What "$30,000 of treatment on your schedule" means. The scheduled fee of the treatment-planned procedures for an appointment your office booked within the 90 days, counted the day it is booked, for two kinds of patients: a patient Recall handed to your desk, and a patient whose first contact with your practice came through your tracked line (matched by the caller's number). The fee is read from your practice software; where we cannot read it, the value is the amount your office enters when it books. Attendance and payment do not change the number. The 90 days run from signup. The day 90 report (the Recall handoff log plus the tracked-line log, matched to your schedule) is the measurement of record.

If the day 90 report does not reach $30,000 as defined above, we refund every payment you made under this contract, the activation fee and every monthly fee, in full, to the card we charged, within ten business days after the report.

This guarantee works as a partnership. We do the building. Your office does the receiving. The conditions below are what receiving looks like, written so that nothing done on your side can quietly break the machine and then blame the map. Where a condition says the clock pauses, the 90 days stop counting on the day we email you about it and start again on the day it is fixed; the day 90 report and the refund dates move by the same number of days. Where a condition says it voids the guarantee, the refund in this section is no longer available and the rest of the contract continues.

1. One service, one area. Your service and your area are fixed in writing at signup. You give us the access and approvals we ask for within five business days of the kickoff call. A change you ask for to the service or the area restarts the 90 days from the day the change is final. Late access pauses the clock until we have it.

2. Chart floor. Recall works your own chart, and it needs at least 300 contactable patients across the three Recall lists at activation. We email you the count, and it is the count of record. Under 300 you choose before the first text goes out: go ahead without the guarantee, or walk away with the activation fee refunded.

3. Recall handoffs. When Recall hands your desk a patient to schedule, your office acts within 90 minutes during your business hours. A handoff missed past that window does not count toward the $30,000. More than $5,000 of scheduled value in missed handoffs voids the guarantee.

4. The tracked line. Your office answers or forwards the tracked line during business hours and returns missed calls by the next business day. The line stays connected to a working office number for the whole 90 days. A disconnected line pauses the clock until it is back; disconnected for more than five business days voids the guarantee.

5. Listing access. You give us the access we ask for to your Google Business Profile and your other listings within five business days of the kickoff call, and it stays in place for the whole 90 days. Losing that access pauses the clock. Refusing it voids the guarantee.

6. Software access. You give us read access to your practice management software within five business days of the kickoff call so Recall can run and the $30,000 can be measured. Losing that access pauses the clock until it is restored.

7. No second map vendor. While we work, no other company or person does map, listing, or local search work for your chosen service in your area. Two teams on one map is how maps get broken. A conflicting vendor voids the guarantee.

8. No mid-build changes. Your practice name, address, phone number and website stay as they were at signup, on Google and on your phone system, for the 90 days, unless you tell us first and we agree on the date. An unannounced change restarts the clock from the day it happens.

9. Own your presence. You do not suspend, rename, unpublish, or otherwise damage your own Google presence or your listings during the build. Doing so pauses the clock until it is repaired.

10. The Recall channel stays clear. You do not block or filter the Recall texts and emails, and you do not send your own competing recall messages to the same patient lists during the 90 days. Blocked messages and the patients behind them do not count toward the $30,000.

11. Appointment capacity. You keep real openings on your schedule for the patients we send, new and recall. A patient we bring who wants an appointment and cannot get one within ten business days does not count. No usable capacity for more than ten business days voids the guarantee.

12. Book every caller. Your desk offers an appointment to every caller who wants one. The recordings are the record. A caller who wanted an appointment and was never offered one does not count, and a pattern of them (five in any 30 days) voids the guarantee.

13. Treatment plans in the software. Every treatment presented or scheduled for a patient we brought is entered into your practice software within two business days, with its fee. If it is not in the software it cannot be measured, and what cannot be measured does not count.

14. Call reviews. We review recorded calls with your desk on a schedule we set together, at least weekly during the 90 days, about twenty minutes each. Missing three reviews in a row pauses the clock. Refusing call reviews voids the guarantee.

15. Payments. Charges clear on their schedule. A charge that fails and is not cured within five business days ends the guarantee. A pause caused by your office, or cancelling early, ends the guarantee. A chargeback or dispute filed with your bank instead of a claim under this section voids the guarantee and ends the contract on the day it is filed.

16. The claim. If day 90 passes and the number is not there, email your claim within fourteen days after day 90, from the address on your acceptance. We answer within five business days. One practice, one refund: every payment made under the contract, to the card we charged, within ten business days. The contract ends on the refund date and your area under section 2 opens again. After the fourteen days the guarantee is closed.

If you do everything in this section and we still miss, you get every dollar back.

6. Activation, the build, and what happens when

Within five business days after your kickoff call you give us the information in section 5, condition 1, and you complete the Recall setup we send you. Recall goes live first, on its own activation date, so your office has patients from your own chart while the map builds.

The map build takes about two weeks. You can expect to start seeing your practice come up from different parts of your area in the two weeks after that, and the map holds at full strength from about day 60. We email you a progress note at day 30 and day 60, and the report on day 90.

7. The tracked line, forwarding, and call recording

Own The Map sets up a phone number for your practice that the map points to (the "tracked line"). It forwards to the office number you give us. Calls on the tracked line are recorded. Every call begins with a short notice that the call may be recorded, so that the recording complies with the consent rules of every state. You authorize Own The Map to play that notice, to record the calls, to listen to them, and to share them with your office. Recordings are kept for 12 months and then deleted, unless you ask us to delete them sooner, which we do within ten business days.

Own The Map uses the recordings for two things: to count and attribute the calls the map produces, and to coach your office on how patient calls are answered. Own The Map does not sell recordings and does not share them outside Own The Map and your practice. A recording of a patient call may contain health information; Own The Map holds it under the Business Associate Agreement.

When the contract ends, the tracked line is disconnected or, at your written request within 30 days of the end date, ported to you at cost. Own The Map does not take over, port, or change your existing office number at any time.

8. Your responsibilities and representations

You represent that the practice details you give us are accurate, that you hold the licenses your copy describes, that any warranty or guarantee language you approve is one your practice honors, and that you have the right to use the practice name and marks we place on the map. You approve the practice copy we show you before it is used, and you tell us within five business days if anything in it is wrong.

You keep the forwarding number working and answered during your business hours. You tell us before any change to your Google Business Profile, your website, your hours, your address, or your practice name during the first 90 days. You do not hire another provider to do conflicting map work for the same location while this contract is in force.

9. Own The Map's responsibilities

Own The Map does the work in section 1 every month for as long as you pay, keeps your area exclusive under section 2, shows you the practice copy before it is used, runs the tracked line and keeps its recordings under section 7, sends the progress notes and the day 90 report under sections 5 and 6, and stays inside Google's published rules for every piece of the work; that is Own The Map's work to carry, not yours.

10. Acceptable use

You will not use Own The Map to represent a practice that is not yours, to advertise services you are not licensed to provide, or to send the calls from the tracked line anywhere other than your practice. You will not resell the service. We may suspend the work if you break this section. A suspension is not a refund.

11. Data and aggregated reporting

You own your practice data, your patient information, and your name and marks. Call recordings are yours and Own The Map's jointly for the purposes in section 7. Own The Map may compile statistics across practices that do not name a practice, a patient, or a phone number, and may use them to operate and describe the service. Own The Map does not sell patient information.

12. AI disclosure

The sales video on the page may use an AI presenter; where it does, the page says so. The map work in section 1 is done by people. Recall's automated assistant texts and emails patients under your practice's name; a patient who asks about price, insurance, pain, or a complaint is handed to your office.

13. Intellectual property

We and the team we work with own the methods, the tracking tools, the reports, and everything built to do the work, other than your name, your marks, and your practice information. You grant Own The Map a limited right to use your practice name, marks, address, hours, and services on the map and on the tracked line while the contract is in force, and nowhere else. You will not copy the service.

14. Disclaimers and limitation of liability

The service is provided as it is and as available. Own The Map disclaims warranties of merchantability, fitness for a particular purpose, and non-infringement, and any warranty about where your practice will appear on any single search, how many calls the map will produce, or that calls will become patients. The only stated remedy for the map is the guarantee in section 5.

To the extent Wyoming law allows, Own The Map's total liability arising out of Own The Map, other than the guarantee refund and other than a party's indemnity under section 15 for a third-party claim caused by that party's own breach, is capped at the fees you paid Own The Map under this contract in the three months before the claim arose. For Own The Map's indemnity under section 15 for Own The Map's breach of the Business Associate Agreement, Own The Map's total liability is capped at the greater of the fees you paid Own The Map in the twelve months before the incident and the amount recovered for the incident under Own The Map's cyber liability insurance. Neither party is liable for indirect, consequential, or lost-profit damages. Nothing in this section limits liability that cannot be limited by law.

15. Indemnities

You will indemnify Own The Map and its members, employees, and contractors against third-party claims, damages, and reasonable attorneys' fees arising out of practice information or copy you supplied or approved, a license or warranty claim about your practice, a clinical or billing statement your office makes on a call, or your breach of these Terms.

Own The Map will indemnify you and your owners and staff against third-party claims, damages, and reasonable attorneys' fees arising out of Own The Map recording a call without the notice in section 7, Own The Map's breach of the Business Associate Agreement, or Own The Map placing content about your practice that you did not approve, except to the extent the claim was caused by your information, your instructions, or your breach of these Terms.

The party seeking indemnity gives prompt notice. The indemnifying party controls the defense and will not settle by admitting fault for the other party, or by putting a duty on the other party, without consent.

16. Governing law, venue, and disputes

Wyoming law governs these Terms, without its conflict of law rules. The state and federal courts located in Wyoming are the venue, and you consent to personal jurisdiction there. Before filing, the complaining party emails what happened and what it wants, and the parties have 30 days to resolve it. Either party may then file, and either party may seek an injunction sooner to stop misuse of patient information or intellectual property. Each party bears its own attorneys' fees, except where section 15 or a statute says otherwise.

17. Changes to these Terms, and contact

We may change these Terms by emailing you at least 15 days before the change. A change to the fees, the guarantee, the exclusivity in section 2, the liability cap, the data section, or the recording rules in section 7 does not apply until you accept the new version with a new checkbox. Any other change applies at the end of the notice period; you may cancel under section 4 before then.

Book Global LLC, 5830 E 2nd St, Ste 7000 #35471, Casper, WY 82609. Notice contact: [email protected]. Notices to you go to the email on your acceptance. A notice is received on the day it is sent by email, or three business days after it is mailed.

Business Associate Agreement

Version SNAP-RECALL-BAA-2026-10-20

Book Global LLC 254 Chapman Rd STE 208 Newark, DE 19702

This is the HIPAA contract for Recall. The dental practice is the covered entity. Book Global LLC is the business associate. Own The Map reads three lists (overdue hygiene, unscheduled diagnosed treatment, and broken appointments), reaches those patients by text, email, and voicemail from a dedicated line Own The Map registers in the practice's name (the practice's existing number is not used), uses an automated assistant to reach a yes and two preferred times, and hands the result to the front desk. The practice books the visit in its own software.

Required terms come from 45 CFR 164.504(e) and 45 CFR 164.314(a). Section order follows the HHS sample business associate provisions of January 25, 2013. This document is the contract.

1. Parties and effective date

1.1 Own The Map. Book Global LLC, 5830 E 2nd St, Ste 7000 #35471, Casper, WY 82609 ("Own The Map"), is the business associate. "Business associate" has the meaning in 45 CFR 160.103.

1.2 Practice. The covered entity is the dental practice named in the acceptance record in Section 9 (the "Practice"). The Practice represents that it is a covered entity, and that the patient information it makes available to Own The Map is protected health information it holds in that role.

1.3 Effective date. This Agreement begins at the date and time recorded when an authorized person accepts it under Section 9 (the "Effective Date"). The acceptance record is the Practice's signature. Own The Map is bound by posting this version for acceptance. No paper signature is required.

1.4 The Terms. The Own The Map Terms of Service (the "Terms") cover fees, cancellation, and day to day operations. This Agreement covers protected health information. If the two conflict on a privacy or security duty, this Agreement controls. If they conflict on price or cancellation, the Terms control.

1.5 The fee. Own The Map, with Recall included, is offered at the fee in the Terms. That fee pays for the Services. It is not a payment for protected health information.

2. Definitions

2.1 HIPAA Rules. The Privacy, Security, Breach Notification, and Enforcement Rules at 45 CFR Part 160 and Part 164.

2.2 PHI. Protected health information, as defined in 45 CFR 160.103, that Own The Map creates, receives, maintains, or transmits for the Practice under this Agreement.

2.3 ePHI. Electronic protected health information, as defined in 45 CFR 160.103: PHI transmitted by electronic media or maintained in electronic media.

2.4 Services. The Recall work described in Schedule B, including the lists, the messages, the handoff, and the weekly report to the Practice.

2.5 Subcontractor. A person, other than a member of Own The Map's workforce, that creates, receives, maintains, or transmits PHI on Own The Map's behalf. The word has the meaning in 45 CFR 160.103. Current subcontractors are in Schedule A.

2.6 Breach. The meaning in 45 CFR 164.402, including its exceptions, presumption, and risk assessment. A use this Agreement does not allow is still reported under Section 5.2 when it is not a Breach.

2.7 Security Incident. The meaning in 45 CFR 164.304: an attempted or successful unauthorized access, use, disclosure, modification, or destruction of information, or interference with system operations, in a system that holds the Practice's ePHI.

2.8 Unsecured PHI. The meaning in 45 CFR 164.402: PHI that has not been rendered unusable, unreadable, or indecipherable to unauthorized persons by a method the Secretary specifies.

2.9 Required by Law. The meaning in 45 CFR 164.103: a mandate in law that compels a use or disclosure and that is enforceable in court.

2.10 Secretary. The Secretary of Health and Human Services, or any person to whom the Secretary has delegated authority, including the Office for Civil Rights.

2.11 Business day. A day other than Saturday, Sunday, or a U.S. federal holiday.

2.12 Other HIPAA words. Data Aggregation, Designated Record Set, Disclosure, Health Care Operations, Individual, Minimum Necessary, Notice of Privacy Practices, and Use have the meanings in the HIPAA Rules. The HIPAA definition controls if a plain sentence here differs.

3. Permitted uses and disclosures by Own The Map

Own The Map may use and disclose PHI only as this Section 3 allows, or as Required by Law. Own The Map may not use or disclose PHI in a way that would violate Subpart E of 45 CFR Part 164 if the Practice did it, except for Sections 3.2, 3.3, and 3.4. Those are the exceptions 45 CFR 164.504(e)(2)(i) allows a business associate contract to grant.

3.1 To perform the Services. Own The Map may use and disclose PHI to perform the Services in Schedule B: the three lists, texts, emails and voicemails from the dedicated line in the Practice's name, the automated conversation, the front-desk handoff, and the weekly report to the Practice. Those messages are the Practice's own treatment and health care operations communications. Own The Map sends them for the Practice.

3.2 Proper management and administration. Own The Map may use PHI for its proper management and administration and to carry out its legal responsibilities, as 45 CFR 164.504(e)(4) allows. Own The Map may disclose PHI for those purposes only if the disclosure is Required by Law, or if Own The Map obtains reasonable assurances that the recipient will hold the PHI confidential, will use or disclose it only as Required by Law or for the purpose it was shared, and will notify Own The Map of any breach of that confidentiality the recipient becomes aware of.

3.3 Data aggregation. Own The Map may provide data aggregation services relating to the health care operations of the Practice, as 45 CFR 164.504(e)(2)(i)(B) permits. Data aggregation has the meaning in 45 CFR 164.501: combining PHI Own The Map holds for the Practice with PHI Own The Map holds for other covered entities, to permit analysis that relates to the health care operations of those covered entities. Own The Map does not use data aggregation to market to patients or to sell PHI.

3.4 De-identified reporting for Own The Map's own business. Own The Map may de-identify PHI under 45 CFR 164.514(a) through (c), by the safe harbor in 164.514(b)(2) or by expert determination in 164.514(b)(1). Information that meets that section is no longer PHI. Own The Map may use it for its own business: how Recall is used, aggregate counts of texts, replies, handoffs, bookings, and production, product improvement, and capacity planning.

Own The Map will not put a patient name, phone number, or other identifier into that reporting, and will not publish a practice's name beside the totals unless the Practice agrees in writing. Own The Map will not try to re-identify anyone. A count small enough that a patient could still be recognized is not treated as de-identified. This use is separate from Section 3.3. Data aggregation still uses PHI and is limited to the practices' health care operations. Section 3.4 happens only after de-identification.

3.5 As Required by Law. Own The Map may use or disclose PHI as Required by Law.

3.6 Back to the Practice. Own The Map may disclose PHI to the Practice, including the weekly report and the handoff.

3.7 Minimum necessary. Each use, disclosure, and request will be limited to the minimum necessary to accomplish the purpose, consistent with 45 CFR 164.502(b) and 164.514(d), and with the Practice's minimum necessary policies to the extent the Practice has told Own The Map about them. Schedule B is the set for the Services.

3.8 One practice at a time. Own The Map will not use the Practice's PHI to perform the Services for another practice, except under Sections 3.3 and 3.4.

4. Prohibited uses

4.1 No sale of PHI. Own The Map will not sell PHI, as 45 CFR 164.502(a)(5)(ii) uses that word. The fee under the Terms is payment for the Services, not remuneration in exchange for PHI.

4.2 No marketing on Own The Map's behalf. Own The Map will not market Recall, Own The Map, or any other Own The Map product to the Practice's patients. Own The Map will not use PHI for marketing as 45 CFR 164.501 and 164.508(a)(3) define it. The recall messages are the Practice's own treatment and health care operations messages, sent from the dedicated line registered in the Practice's name.

4.3 No use beyond this Agreement. Own The Map will not use or further disclose PHI other than as this Agreement permits or requires, or as Required by Law. See 45 CFR 164.504(e)(2)(ii)(A).

4.4 No wider data, and no model training on PHI. Own The Map will not ask for clinical notes, images, financial ledgers, or insurance details that Schedule B excludes, and will not use PHI it receives outside Schedule B. Own The Map will not use the Practice's PHI to train a general-purpose AI model. A model provider on Schedule A may process PHI only to produce replies and handoffs for this Practice, under a business associate agreement, and may not train its general models on that PHI. Own The Map will not re-identify de-identified information and will not allow a Subcontractor to do so.

5. Own The Map's obligations

5.1 Safeguards

Own The Map will use appropriate administrative, physical, and technical safeguards, and will comply with Subpart C of 45 CFR Part 164 for ePHI, so PHI is not used or disclosed except as this Agreement provides. See 45 CFR 164.504(e)(2)(ii)(B) and 164.314(a). Safeguards include a risk analysis, workforce training and sanctions, access controls with unique user IDs, and audit controls. Own The Map will encrypt ePHI in transit and at rest where that is reasonable and appropriate. If an addressable specification is not reasonable and appropriate, Own The Map will document why and use an equivalent measure when one is reasonable. Security Rule records are kept at least six years, as 45 CFR 164.316(b)(2) requires.

5.2 Reporting of breaches and security incidents

Own The Map will report to the Practice, without unreasonable delay and no later than 10 business days after discovery:

• any Breach of Unsecured PHI
• any use or disclosure of PHI that this Agreement does not permit, including one that is not a Breach
• any Security Incident that succeeds, or that Own The Map suspects succeeded, against ePHI or a system that holds it

Discovery is the first day the facts are known to Own The Map, or would have been known by reasonable diligence, including knowledge of any employee, officer, or agent other than the person who caused it. See 45 CFR 164.410(a)(2).

Why 10 business days. The HIPAA outside limit on Own The Map's notice is 60 calendar days after discovery (45 CFR 164.410(b)), unless law enforcement delays it under 45 CFR 164.412. The Practice has the same 60 calendar days to notify individuals (164.404), the media when more than 500 residents of a state or jurisdiction are affected (164.406), and the Secretary (164.408). If Own The Map used the full 60 days, the Practice would have no time left. Ten business days is about fourteen calendar days and leaves the Practice most of that window. That is the deadline in this Agreement.

The notice includes, as known, with updates as Own The Map learns more: who was affected, or when Own The Map expects to know; what happened and the dates; the types of PHI; what Own The Map is doing to stop it; and the other facts the Practice needs under 45 CFR 164.410(c) and 164.404(c). Own The Map emails the address in the acceptance record.

The Practice notifies individuals, the Secretary, and the media. Own The Map sends those notices only if the Practice asks in writing for that incident and Own The Map agrees. Own The Map will cooperate, and will not contact patients about a Breach unless the Practice directs it. A law enforcement delay under 164.412 applies to Own The Map's notice as well.

Failed attempts that do not compromise ePHI (pings, port scans, failed logins) are summarized at least monthly. A pattern that could succeed is reported within 10 business days. See 45 CFR 164.314(a)(2)(i)(C). Own The Map will take reasonable steps to end a use or disclosure this Agreement does not permit and to limit the harm.

5.3 Subcontractors

Before a Subcontractor creates, receives, maintains, or transmits PHI for Own The Map, Own The Map will bind it in writing to the same restrictions, including Security Rule duties for ePHI. See 45 CFR 164.502(e)(1)(ii), 164.308(b)(2), 164.314(a), and 164.504(e)(5). Schedule A lists them. A replacement must be bound the same way. Own The Map will post the new Schedule A and email the Practice. If a Subcontractor's material breach becomes a pattern, Own The Map will try to cure it and, if that fails, end the subcontract if feasible. See 45 CFR 164.504(e)(1)(iii).

5.4 Access, amendment, and accounting

The Practice answers requests for access, amendment, and an accounting. Own The Map does not. A request that comes to Own The Map is sent on to the Practice within 10 business days.

Within 15 calendar days of the Practice's written request, Own The Map will produce PHI in a Designated Record Set it holds, incorporate an amendment the Practice directs, and supply what an accounting requires, so the Practice can meet 45 CFR 164.524, 164.526, and 164.528. Own The Map documents disclosures to the extent an accounting requires.

If Own The Map is assigned a Privacy Rule duty of the Practice, Own The Map will follow Subpart E in performing it. See 45 CFR 164.504(e)(2)(ii)(H). The notice of privacy practices, and notices to individuals, the Secretary, and the media, stay with the Practice.

5.5 Books and records

Own The Map will make its practices, books, and records on the use and disclosure of this PHI available to the Secretary, to determine the Practice's compliance with the Privacy Rule. See 45 CFR 164.504(e)(2)(ii)(I). The Practice may see the same records on reasonable notice, unless the law forbids it.

5.6 Return or destruction

When this Agreement ends, Own The Map will, if feasible, return or destroy all PHI it still holds for the Practice, in any form, keep no copies, and require the same of Subcontractors, within 30 calendar days. Own The Map will confirm in writing if asked. See 45 CFR 164.504(e)(2)(ii)(J).

If return or destruction is not feasible, the protections of this Agreement continue, and further use is limited to the reason return or destruction cannot be done. That reason is limited to encrypted backups awaiting overwrite, and copies the law requires Own The Map to keep. Those copies are not used to run the Services or to contact patients, and they are destroyed when the reason ends. This section survives termination.

6. The Practice's obligations

6.1 Lawful access. The Practice gives Own The Map only data it may use and disclose for the Services, by a read connection to its Open Dental API or by a monthly export. The Practice has authority to grant that access. The access does not break a patient restriction, a court order, or another contract.

6.2 Contact consent and the do-not-text list. The Practice holds whatever consent the Telephone Consumer Protection Act and state law require before Own The Map texts, emails, or leaves a voicemail (a voicemail is a call under that Act) about that patient's own hygiene, treatment, or appointment. The Practice keeps a do-not-text and do-not-call list, gives it to Own The Map, and updates it before the next send. Own The Map will not text or call a number on the list it has received. A number not yet sent to Own The Map stays the Practice's to suppress.

6.3 Restrictions and revocations. The Practice will notify Own The Map, before the next list is pulled or as soon as the Practice knows, of any limitation in its notice of privacy practices under 45 CFR 164.520, any revocation or change in an individual's permission, and any restriction the Practice has agreed to or must honor under 45 CFR 164.522, to the extent it affects Own The Map. After notice, Own The Map will follow the restriction. Own The Map may treat silence as "no restriction reported."

6.4 No impermissible request. The Practice will not ask Own The Map to use or disclose PHI in a way that would violate Subpart E of 45 CFR Part 164 if the Practice did it, except for Sections 3.2, 3.3, and 3.4.

6.5 Handoffs. Own The Map's job ends when it delivers the result to the front desk (text, email, and voicemail), with the reply and up to two preferred times. The Practice books in its own software. The Terms cover how handoffs are delivered and what the Practice does with them. A late booking is an operations matter under the Terms. It is a privacy matter here only if the information is used for a purpose Section 3 does not allow. The Practice keeps the front-desk number and email current.

7. Term and termination

7.1 Term. This Agreement starts on the Effective Date and lasts while the Terms are in effect for the Practice. It ends when the Terms end, unless ended sooner under this Section 7. The two are coterminous.

7.2 Material breach. Either party may end this Agreement if the other breaks a material term. Email notice describes the break. The other party has 30 calendar days to cure. If it does not, or if cure is impossible, the notifying party may terminate. The Practice may terminate at once if the break is a pattern a prior cure did not stop, or if cure is not feasible. See 45 CFR 164.504(e)(1)(ii) and 164.504(e)(2)(iii).

7.3 Immediate stop. Own The Map may suspend texting, calling, and AI replies at once if Own The Map reasonably believes continuing would violate the HIPAA Rules or this Agreement, and will email the Practice when it does. The Practice may tell Own The Map to stop texting at any time. Own The Map will stop as soon as reasonably practicable.

7.4 Effect. On termination Own The Map stops the Services and stops using PHI except to carry out Section 5.6. Ending this Agreement does not end a duty the HIPAA Rules impose on Own The Map directly. Fees and any commercial wind-down follow the Terms.

7.5 Survival. Sections 3.4 (as to information already de-identified), 5.2 (as to events before termination), 5.4, 5.5, 5.6, and 8 survive. De-identified information that already meets 45 CFR 164.514 may still be used as Section 3.4 describes.

8. Miscellaneous

8.1 Regulatory references. A reference to the HIPAA Rules means the section as in effect or as amended.

8.2 Amendment to comply with law. The parties will amend this Agreement when the HIPAA Rules or other law requires it. Own The Map proposes the change by posting a new version and emailing the Practice. A change required for HIPAA compliance applies on the date in the notice, and continued use is acceptance. Any other change needs a new checkbox under Section 9.

8.3 Interpretation. Ambiguity is resolved to permit compliance with the HIPAA Rules.

8.4 No third-party beneficiaries. Only Own The Map and the Practice have rights under this Agreement. That does not limit a right an individual has under the HIPAA Rules. Patients are not third-party beneficiaries of this contract.

8.5 Electronic acceptance. The checkbox in Section 9 is the Practice's signature under the Electronic Signatures in Global and National Commerce Act (15 U.S.C. § 7001 and following) and the Wyoming Uniform Electronic Transactions Act (6 Del. C. Chapter 12A), except as section 19 of the Terms provides for a practice in Canada or Australia. The stored record equals a signed paper. Any later paper copy is a counterpart of the same agreement.

8.6 Governing law. Except as section 19 of the Terms provides for a practice in Canada or Australia, Wyoming law governs, except that the HIPAA Rules control where they apply. If the Practice's state requires a different term in a business associate contract, that state law controls on that term only. Cases are heard in the state or federal courts in Wyoming, unless that state law requires a local court for that term or section 19 of the Terms names another court.

8.7 Notices, assignment, and the whole deal. Notices to the Practice go to the email in the acceptance record. Notices to Own The Map go to the Newark address above and to [email protected], the privacy contact published on the Own The Map Terms page. Email is enough, including for breach notice and termination. The Practice may not assign this Agreement without Own The Map's written consent, except to a successor practice that assumes it in writing. Own The Map may assign it to a successor of the Recall business that assumes these obligations. This Agreement, Schedules A and B, and the Terms are the entire agreement on Recall and on PHI.

9. Acceptance block

The checkout page shows one checkbox. The label is this sentence:

By checking this box, I confirm that I am authorized to bind the dental practice named at checkout, and that the practice agrees to the Recall Business Associate Agreement, version SNAP-RECALL-BAA-2026-10-20, with Book Global LLC. This acceptance record is the practice's signature.

The page stores an acceptance record, and Own The Map keeps it for at least six years from the Effective Date or from termination, whichever is later. The record contains:

• signer name
• signer title
• practice legal name, which is the Practice under Section 1.2
• signer email
• date and time of acceptance, with time zone
• IP address
• document version (SNAP-RECALL-BAA-2026-10-20, or a later version accepted under Section 8.2)

Checking the box, with this Agreement linked on the same page, is the signature. Own The Map will provide a copy of the accepted version and of the acceptance record on written request.

10. Schedule A: subcontractors

Each name is a Subcontractor, or a platform Own The Map treats as one under Section 5.3. The agreements have to be in force before any PHI moves.

1. GoHighLevel (CRM, messaging, Conversation AI, and the LC Phone texting and voice path, on the HIPAA configuration enabled for the Recall sub-account, under GoHighLevel's business associate agreement; before the first message Own The Map confirms that agreement covers Conversation AI and LC Phone). PHI it touches: patient name, phone number, email address, which list the patient is on, message content, replies, preferred times, handoff status, and the front-desk email or text used to deliver the handoff. Handoff email to the Practice is sent through GoHighLevel.

2. LC Phone (Twilio), the text and voice path used with GoHighLevel, under GoHighLevel's agreement or Twilio's own if GoHighLevel's does not cover it. PHI it touches: patient phone number, the content of texts, and the content of voicemails, in transit and in messaging logs.

3. The language model behind the automated conversation (OpenAI, Anthropic, or the vendor behind GoHighLevel's Conversation AI, whichever is actually configured), reached directly only under a business associate agreement that forbids training on the Practice's PHI, or through GoHighLevel under its agreement. Own The Map names the configured vendor here before the first message. PHI it touches: the thread needed to reach a yes and two preferred times, including patient name and phone number where they appear, the recall or treatment reason, and the patient's replies.

4. NexHealth, the read path for Dentrix and Eaglesoft practices, under NexHealth's business associate agreement. PHI it touches: the Schedule B read list for those practices.

5. Open Dental API, the read path for Open Dental practices in Schedule B. PHI it touches: the Schedule B read list: patient name, phone number, email address, last visit date, recall due date, treatment-planned procedure codes, descriptions, and scheduled fees, and appointment status. It does not receive the text conversations, the AI replies, or the handoff.

Open Dental is the Practice's vendor. Own The Map reads with access the Practice grants and does not write conversations back. If Open Dental handles PHI for Own The Map, and not only for the Practice, Own The Map will have a Subcontractor agreement before that path is used.

11. Schedule B: Services and data elements

Own The Map reads practice-management data through the Open Dental API, through NexHealth for Dentrix and Eaglesoft, or a monthly export the Practice sends. From that read it builds three lists (overdue hygiene, diagnosed treatment not yet scheduled, broken appointments), reaches patients by text, email, and voicemail from the dedicated line in the Practice's name, and has an automated assistant carry each conversation to a yes and two preferred times. A voicemail is a recorded voice message delivered to the patient's voicemail over the same path, and the law treats it as a call. The handoff to the front desk (text, email, and voicemail) includes the reply and the times. The Practice books in its own software.

Each week Own The Map reports to the Practice: texted, replied, handed to the desk, booked, and production tied to those visits, if the data supports a production figure. That report is for the Practice. It is not the de-identified reporting in Section 3.4.

Read. Patient name. Phone number. Email address. Last visit date. Recall due date. Treatment-planned procedure codes, descriptions, and scheduled fees (this is how unscheduled treatment is identified, and the fee is the value used for the ROI guarantee). Appointment status (this is how a broken appointment is identified).

Not read. Clinical notes. Images, including radiographs and intraoral photos. Financial ledgers, balances, and payment history. Insurance company names, subscriber or member identifiers, claim numbers, and benefit amounts. A procedure code that exists only on a claim or a ledger is not read. The code is read from the treatment plan.

The Practice scopes the API or the export to the read list. If extra fields still arrive, Own The Map does not use them, does not send them to the AI, and deletes them from the working file as soon as it reasonably can. If an export keeps including them, Own The Map tells the Practice.

The AI asks only for a yes and two times. It does not diagnose, change a treatment plan, or pitch Own The Map. A clinical question is handed to the front desk.