1. What happens at expiration
A Paid Access term simply ends at its expires_at timestamp, calculated as described in Document 02. Because there is no automatic renewal, no charge is ever attempted at expiration, so there is no failed charge, no retry, and no payment-cure period. Nothing in this document requires the customer to have a saved payment method on file.
2. The fourteen-day grace period
A fourteen-calendar-day, no-charge grace period begins automatically and exactly at expires_at ("grace_ends_at" is expires_at plus fourteen calendar days). The grace period is separate from the data-retention period described in Section 5 and does not create a new paid term. No charge occurs during the grace period, and none is authorized by it. Lapsed accounts do not retain normal paid access during the grace period; the change described in Section 3 applies starting at expires_at itself, not only after the grace period ends.
3. What displays publicly during and after expiration
Beginning at expires_at and continuing until immediately before retention_ends_at, defined in Section 5, any public QR or NFC link for the affected Profile displays only the profile holder's name and photograph, together with the following notice: "This profile is inactive and may not be current. Only the profile holder's name and photograph are displayed. Emergency contacts, medical information, and other profile details are unavailable. Do not rely on this page for current medical or emergency information." Emergency contacts, medical conditions, medications, allergies, documents, and other health information are not publicly displayed once expires_at has passed. A name and photograph are personal information and will be removed or suppressed when required by applicable law or a valid privacy request. The customer cannot update the expired public display without repurchasing, except through a legally required or approved correction process.
4. What the customer can still do after expiration
After expires_at, the customer may sign in only to manually repurchase under Document 02, and to reach customer support. No self-service export or deletion tool is provided after expiration. This limitation does not restrict any applicable right to access, obtain a copy, correct, delete, restrict, or otherwise control personal information under applicable privacy, health-information, consumer-protection, or other law; YourEMR will process a qualifying request through its privacy-request process, subject to identity verification, legally permitted exceptions, applicable response deadlines, and any documentation-retention requirement.
5. Twelve-month data-retention period
The stated retention period is a business rule, not a waiver of any shorter legally required deletion period or any longer legally required retention period. Retention_ends_at is expires_at plus twelve calendar months, using the same end-of-month rule described in Document 02. A repurchase during the retention period restores the prior account, Profiles, settings, and QR or NFC links, as described in Document 02, Section 6.
6. End of retention
At retention_ends_at, YourEMR will securely delete or de-identify information it is not legally required to retain, and the affected QR or NFC link will stop functioning entirely, including the limited name-and-photograph display described in Section 3. Any information YourEMR remains legally required to retain will be access-controlled and will not be used to restore public QR or NFC access.
7. Deletion warnings
To the extent a current, working contact method is on file, YourEMR will send an advance warning 30 calendar days before retention_ends_at and a second advance warning 7 calendar days before retention_ends_at, before the information described in Section 6 is permanently deleted or de-identified. A missed, undeliverable, or unopened warning does not extend the retention period, delay deletion at retention_ends_at, or create an obligation beyond sending the notices described in this section.
8. Payment security
YourEMR will not ask for a full payment-card number by email. A repurchase must use the identified payment processor's secure interface. Nothing in this document authorizes disclosure of Profile or health content to a payment processor.
9. Related documents
Manual repurchase mechanics are in Document 02. Refund rights for any purchase are in Document 04. Checkout disclosure and purchase-authorization language are in Document 11.