Corialto
Back to website

Terms of Service

Effective October 1, 2026

These Terms govern corialto.com and services provided by Corialto, operated by Raúl Cortez in Mexico ("Corialto," "we," "us"). A signed proposal, Service Order, Data Processing Addendum ("DPA"), Communications Compliance Addendum, Business Associate Agreement ("BAA"), or other written addendum may apply. If terms conflict, the more specific signed document controls for the subject it covers.

1. Service

Corialto configures and manages AI-assisted front-office workflows, currently focused on dental practices, including voice, web chat, CRM, routing, booking, follow-up, reporting, and related automation. Features, usage allowances, integrations, support, telephone numbers, implementation scope, and pricing are defined by the applicable plan and Service Order. Demonstrations and examples are illustrative and do not guarantee identical outcomes.

2. AI-assisted service and human oversight

The service may use artificial intelligence to understand requests, generate responses, summarize interactions, classify leads, and trigger approved workflows. AI systems can misunderstand, omit, or generate inaccurate information. Customer must approve the business rules, escalation paths, supported topics, and production configuration. Corialto may route uncertain or unsupported matters for human review, but no automated system is guaranteed to identify every error.

3. Customer responsibilities

Customer must provide accurate instructions, maintain lawful rights to data and connected systems, designate authorized contacts, and review routing, booking, escalation, emergency, recording, privacy, messaging, and marketing rules. Customer is responsible for the legality of its underlying products and services and for notices or consents required from its customers, patients, leads, employees, or other individuals.

4. Emergencies, professional judgment, and regulated decisions

Corialto is not an emergency service, medical provider, law firm, financial adviser, or substitute for professional judgment. The service must not be the sole channel for emergencies, clinical diagnosis or triage, legal advice, financial advice, or other regulated professional decisions unless a signed regulated deployment expressly authorizes a limited workflow with appropriate safeguards.

5. Call recording, transcription, and AI disclosure

Recording, transcription, monitoring, and artificial-voice laws vary by jurisdiction. Customer must identify the jurisdictions it serves and approve the disclosure and consent flow before launch. Corialto may require a caller notice, affirmative consent, non-recorded fallback, or other control as a condition of activation. Customer must not instruct Corialto to record or monitor communications unlawfully.

6. SMS, email, outbound calls, and marketing

Automated or marketing communications are subject to the Communications Compliance Addendum. Customer must maintain the consent, opt-out, suppression, sender-identification, quiet-hours, and other records required for the intended campaign. Corialto may refuse, pause, or disable a workflow that presents a material compliance risk.

7. Reviews and reputation workflows

Review-request workflows must seek authentic feedback and may not create fake reviews, condition compensation on positive or negative sentiment, misrepresent independence, or use unlawful review suppression. Customer remains responsible for the content and eligibility rules it approves.

8. Data, privacy, and confidentiality

Customer retains ownership of Customer Data. Customer authorizes Corialto and approved service providers to process Customer Data only as reasonably necessary to provide, secure, support, troubleshoot, and improve the configured service, comply with law, and enforce agreements. Corialto's public privacy practices are described in the Privacy Policy / Aviso de Privacidad. Business-customer processing is additionally governed by the Data Processing Addendum when incorporated by a Service Order or written acceptance.

9. Sensitive and regulated data; HIPAA

Do not submit payment-card data, government identifiers, passwords, or regulated sensitive data unless the applicable plan, provider configuration, written agreements, and Service Order expressly permit it. Protected Health Information ("PHI") may not be processed through a Corialto healthcare workflow unless all required BAAs, provider agreements, security settings, and approved data paths are in place. A HIPAA-capable feature or toggle by itself does not authorize PHI processing.

10. Third-party services

Telecommunications, hosting, AI, CRM, calendar, messaging, payment, form, and other integrations may be provided by third parties. Their terms and availability apply. Corialto is not responsible for outages, policy changes, carrier actions, API changes, or acts outside its reasonable control. Current categories and core providers are described in our Subprocessor & Service Provider Register.

11. Fees, taxes, usage, renewal, and cancellation

Fees, included usage, overages, pass-through charges, taxes, billing dates, and renewal terms are stated on the website, checkout, and/or Service Order. Standard monthly plans renew until cancelled. Corialto will not impose an unspecified usage rate merely because a technical platform supports one; customer-specific overages or pass-through charges must be disclosed in the Service Order or otherwise agreed in writing. See the Cancellation & Refund Policy.

12. Intellectual property

Each party retains its pre-existing intellectual property. Corialto retains its website, service methods, reusable workflows, templates, documentation, branding, and know-how. Customer receives a limited, nonexclusive right to use the configured service during the paid term. Customer retains its own content, trademarks, and business data.

13. Security

Corialto uses reasonable administrative and technical safeguards appropriate to the service and limits production access to authorized purposes. No system is completely secure. Customer must promptly report suspected unauthorized access, compromised credentials, or security incidents affecting connected systems.

14. Acceptable use

Customer may not use the service for unlawful, deceptive, abusive, harassing, discriminatory, infringing, fraudulent, or unauthorized surveillance activity; illegal robocalling or messaging; impersonation intended to deceive; collection of data without required notice or consent; or attempts to compromise systems.

15. Disclaimers

To the maximum extent permitted by law, the service is provided "as is" and "as available." Corialto disclaims implied warranties of merchantability, fitness for a particular purpose, and non-infringement. Corialto does not guarantee leads, revenue, appointments, conversion rates, uninterrupted availability, perfect transcription, error-free AI output, or that every inquiry will be answered or converted.

16. Limitation of liability

To the maximum extent permitted by law, Corialto will not be liable for indirect, incidental, special, consequential, exemplary, or lost-profit damages. Corialto's aggregate liability relating to the service will not exceed fees paid by Customer to Corialto during the three months before the event giving rise to the claim, except where a signed Service Order states a different cap or applicable law prohibits the limitation.

17. Indemnity

Customer will defend and indemnify Corialto against third-party claims arising from Customer's unlawful instructions, content, products or services, lack of required rights or consents, communications campaigns, review practices, or violation of these Terms, except to the extent caused by Corialto's own unlawful conduct.

18. Suspension and termination

Corialto may suspend or terminate for nonpayment, material breach, unlawful use, security risk, missing regulated-data prerequisites, or a credible legal/compliance risk. Transition assistance, number-routing changes, data export, and deletion depend on provider capabilities and the Service Order.

19. Governing law and disputes

Unless a Service Order states otherwise, these Terms are governed by the laws of Mexico. Before filing a claim, each party will provide written notice and attempt in good faith to resolve the dispute for 30 days. Courts with competent jurisdiction in Mexico will have jurisdiction, except where mandatory law requires otherwise.

20. Changes and contact

We may update these Terms prospectively. Material changes affecting active paid services will be communicated reasonably. Questions: hello@corialto.com.