Terms of Service — BlisterPaq

Last updated: June 8, 2026 Effective: May 7, 2026

Welcome to BlisterPaq. These Terms of Service (the "Terms") form a binding agreement between you and BLISTERPAQ INC. ("BlisterPaq," "we," "us," or "our"), a corporation based in Ontario, Canada. By creating an account or using the BlisterPaq website and services (the "Service"), you agree to these Terms. If you do not agree, do not use the Service.

Plain-language summary: BlisterPaq is an exam-practice tool. It is not a substitute for accredited education, official exam preparation, clinical judgment, or professional advice. Sessions are sold as one-time purchases. Reports are generated by AI and may contain errors.

1. Eligibility & Accounts

1.1 Who can use BlisterPaq

To create an account and purchase Sessions, you must be legally capable of entering into a binding contract under the laws of your province or territory of residence. If you are not, a parent or legal guardian must agree to these Terms on your behalf and assume responsibility for your use of and any payments made through the Service. The Service is intended for individuals preparing for pharmacy licensing or qualifying examinations, or for individuals interested in pharmacy-related practice scenarios.

1.2 Account registration

To use the Service you must create an account using a valid email address and a telephone number. You agree to provide accurate, current, and complete information and to keep it up to date. You are responsible for all activity under your account and for safeguarding your login credentials. Notify us promptly at support@blisterpaq.com if you suspect unauthorized access.

1.3 One account per person

Accounts are personal and non-transferable. You may not share your account, sell access, or use the Service on behalf of another person without our written consent.

2. The Service

BlisterPaq provides an interactive practice environment in which users converse with an artificial-intelligence system designed to simulate Objective Structured Clinical Examination ("OSCE")-style scenarios relevant to pharmacy practice. After a session, the Service generates a written report summarizing the interaction and offering feedback.

BlisterPaq is an independent product. It is not affiliated with, endorsed by, or sponsored by the Pharmacy Examining Board of Canada (PEBC), any provincial regulatory authority, any university or college of pharmacy, or any other examining or accrediting body. References to OSCE-style content are descriptive only.

3. Credits & Payments

3.1 Practice sessions can be purchased

Access to practice sessions is sold on a one-time, prepaid basis (each, a "Session"). Each purchase entitles you to the number of Sessions described at the point of purchase. Purchases are not a subscription and do not auto-renew.

3.2 Pricing and currency

Prices are displayed at checkout in Canadian dollars (CAD) and are exclusive of applicable taxes (GST/HST/QST/PST), which will be added where required. We may change prices at any time; changes do not affect practice sessions already purchased.

3.3 Payment processing

Payments are processed by our third-party payment processor (Stripe). We do not store full payment-card details on our servers. Your use of the payment processor is subject to its own terms and privacy policy.

3.4 Expiry of Purchased Sessions

Unless otherwise stated at the point of purchase, purchased Sessions expire after a specific date noted at the time of purchase. Expired Sessions cannot be used or refunded.

3.5 No transfer or resale

Purchased sessions have no cash value, are non-transferable, and may not be resold, traded, or combined across accounts.

4. Refunds

Because purchased sessions give immediate access to digital services, all sales are final and purchased sessions are non-refundable once purchased, except where required by applicable law (including consumer-protection legislation in your province of residence) or where we determine, in our sole discretion, that a refund is appropriate (for example, a clear duplicate charge or a documented Service outage).

To request a refund, contact support@blisterpaq.com within 3 days of purchase, before any purchased sessions has been used.

5. Educational Disclaimer

BlisterPaq is a self-directed practice tool. It is not:

An accredited educational program or course of study;
A substitute for clinical training, supervised practice, or formal examination preparation;
A source of medical, pharmaceutical, legal, or professional advice; or
A predictor of performance on any actual licensing or qualifying examination.

Information generated during sessions and in reports is for educational and practice purposes only. You must not rely on it to make clinical decisions, treat patients, or counsel real individuals. Always consult qualified professionals, primary literature, official drug monographs, and current clinical guidelines.

6. AI-Generated Content

The Service uses large language models and other artificial-intelligence systems to generate scenarios, conversational responses, and reports. AI output:

May be inaccurate, incomplete, biased, or out of date;
May produce different results for the same or similar inputs;
Is generated probabilistically and is not reviewed by a clinician before delivery; and
Should be independently verified before being relied upon for any purpose.

You acknowledge these limitations and agree to use AI output critically.

7. Acceptable Use

You agree not to:

Use the Service to provide medical or pharmaceutical advice to real patients;
Submit personal health information of identifiable third parties;
Reverse-engineer, scrape, copy, or attempt to extract underlying prompts, models, or training data;
Use the Service to develop a competing product, or to train or fine-tune any AI model;
Resell, sublicense, or commercially exploit access to the Service;
Upload malicious code, attempt to bypass security or rate limits, or interfere with other users;
Use the Service for unlawful, harassing, hateful, or harmful purposes; or
Misrepresent reports as the work of a licensed clinician, examining body, or accredited institution.

8. Intellectual Property

All software, scenario design, prompts, branding, written materials, and report templates that make up the Service are owned by BlisterPaq or its licensors and are protected by Canadian and international copyright, trademark, and other intellectual-property laws. We grant you a limited, personal, non-exclusive, non-transferable, revocable licence to access and use the Service for your own non-commercial study purposes, in accordance with these Terms. No other rights are granted.

9. User Content

"User Content" means anything you submit to the Service, including messages typed during a session and information you add to your account. You retain ownership of your User Content. You grant BlisterPaq a worldwide, royalty-free, non-exclusive licence to host, store, reproduce, process, and display your User Content for the purposes of (a) operating and improving the Service, (b) generating reports for you, and (c) complying with legal obligations.

We may use de-identified, aggregated information derived from sessions to evaluate, debug, and improve the Service. We will not publicly disclose your individual session content in a form that identifies you, except as described in our Privacy Policy or as required by law.

10. Privacy

Your use of the Service is also governed by the Privacy Policy included below, which describes how we collect, use, and protect personal information in accordance with the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws (including, where relevant, Quebec's Law 25). Please review it carefully.

11. Third-Party Services

The Service relies on third-party providers, including AI model providers, payment processors, hosting and analytics providers, and email-delivery providers. We are not responsible for the acts or omissions of those providers, but we make commercially reasonable efforts to select reputable vendors and to disclose them in our Privacy Policy.

12. Suspension & Termination

You may close your account at any time by contacting support@blisterpaq.com. We may suspend or terminate your access, with or without notice, if we reasonably believe you have breached these Terms, created risk or legal exposure for us, or engaged in fraudulent or abusive activity. On termination for cause, unused Sessions are forfeited and non-refundable. Sections that by their nature should survive termination (including Sections 5, 6, 7, 8, 9, 13, 14, 15, and 17) will survive.

13. Disclaimers

To the fullest extent permitted by applicable law, the Service is provided "as is" and "as available," without warranties of any kind, whether express, implied, statutory, or otherwise, including any warranties of merchantability, fitness for a particular purpose, non-infringement, accuracy, or uninterrupted operation. We do not warrant that the Service will be error-free, secure, or available at any particular time, or that AI output will be accurate, complete, or suitable for any purpose.

Nothing in these Terms excludes or limits any warranty, condition, or right that cannot be excluded or limited under applicable law (including consumer-protection legislation).

14. Limitation of Liability

To the fullest extent permitted by law, in no event will BlisterPaq, its directors, officers, employees, contractors, or licensors be liable for any indirect, incidental, consequential, special, exemplary, or punitive damages, or for any loss of profits, revenue, data, goodwill, or examination outcomes, arising out of or relating to your use of the Service, even if advised of the possibility of such damages.

Our total aggregate liability for all claims relating to the Service in any twelve-month period will not exceed the greater of (a) the amount you paid to BlisterPaq in that period, or (b) CAD $100.

These limitations apply to the maximum extent permitted by law and do not limit liability that cannot be limited by law (such as liability for fraud, gross negligence, or bodily injury caused by our negligence).

15. Indemnification

You agree to indemnify and hold harmless BlisterPaq and its representatives from any claims, losses, damages, liabilities, and expenses (including reasonable legal fees) arising from (a) your use or misuse of the Service, (b) your breach of these Terms, (c) your User Content, or (d) your violation of any law or third-party right.

16. Changes to the Service or Terms

We may modify or discontinue the Service, or any feature, at any time. We may also update these Terms from time to time. The current version will always be posted on the Service with a "Last updated" date, and it is your responsibility to review the Terms periodically. Your continued use of the Service after changes are posted constitutes acceptance of the revised Terms.

17. Governing Law & Disputes

These Terms are governed by the laws of the Province of Ontario and the federal laws of Canada applicable therein, without regard to conflict-of-laws principles. The United Nations Convention on Contracts for the International Sale of Goods does not apply.

Subject to applicable consumer-protection laws (which may give you the right to bring a claim in your local courts), you and BlisterPaq submit to the exclusive jurisdiction of the courts located in Ontario for any dispute arising out of these Terms or the Service.

Before filing any formal proceeding, you agree to first contact us at support@blisterpaq.com and attempt to resolve the dispute informally for at least 30 days.

18. General

Entire agreement. These Terms and our Privacy Policy constitute the entire agreement between you and BlisterPaq regarding the Service.

Severability. If any provision is held unenforceable, the remaining provisions remain in effect.

No waiver. Our failure to enforce a provision is not a waiver of our right to do so later.

Assignment. You may not assign these Terms without our written consent. We may assign them to an affiliate or in connection with a corporate transaction.

Language. The parties have requested that these Terms and all related documents be drafted in English. Les parties ont demandé que les présentes modalités et tous les documents connexes soient rédigés en anglais.

19. Contact

Questions about these Terms? Contact:

BlisterPaq Inc. Email: support@blisterpaq.com

Privacy Policy — BlisterPaq

Last updated: June 8, 2026 Effective: May 7, 2026

BlisterPaq Inc. ("BlisterPaq," "we," "us," or "our") respects your privacy. This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use our website and services (the "Service"). It applies in addition to the Terms of Service included above.

We handle personal information in accordance with Canada's federal Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws, including Quebec's Act respecting the protection of personal information in the private sector (Law 25) where it applies.

Plain-language summary: We collect what we need to run accounts, process payments, and generate practice reports. We use OpenAI to power the AI conversations. We host with Railway, process payments with Stripe, and send emails with our email provider. We do not sell your data. You can access, correct, or delete your information at any time by emailing support@blisterpaq.com.

1. Who is responsible for your information

BlisterPaq Inc. is the organization responsible for the personal information collected through the Service. If you have questions or want to exercise any of the rights described below, contact:

Privacy Contact BlisterPaq Inc. Email: support@blisterpaq.com

2. Information we collect

We collect personal information in three ways: information you provide, information generated by your use of the Service, and information from third parties.

2.1 Information you provide

Account information: your email address, telephone number, and password (stored as a salted hash — we never see your plain-text password).
Profile information you choose to add (e.g., your name, exam timeline, areas of focus).
Payment information: when you purchase Sessions, you provide payment details directly to our payment processor, Stripe. We receive a confirmation, the last four digits of your card, the card brand, billing country, and a transaction identifier — we do not store full card numbers.
Communications: the contents of emails or support messages you send us.
Marketing preferences: whether you have opted in to receive newsletters or promotional emails.

2.2 Information generated by your use of the Service

Session content: the text of conversations you have with the AI during practice sessions, and the reports generated from those sessions.
Usage data: when you log in, which Sessions you have purchased and used, and basic technical information sent by your browser (IP address, browser type, device type, timestamps) needed to operate and secure the Service.
Cookies and similar technologies: we use a small number of essential cookies to keep you logged in and to keep the Service secure. We do not use advertising or tracking cookies, and we do not run third-party analytics.

2.3 Information from third parties

Stripe provides us with limited transaction information (described above) so we can fulfil and support your purchase.

3. How we use your information

We use personal information for the following purposes:

Provide the Service: create and authenticate your account; deliver practice Sessions; generate and store your reports.
Process payments: charge for purchased Sessions; issue receipts; handle refunds and chargebacks.
Communicate with you: send transactional emails, including account confirmations, password resets, receipts, and expiry reminders; respond to support requests.
Send marketing emails: send newsletters, product updates, and promotions only if you have opted in. You can withdraw consent at any time.
Improve the Service: diagnose bugs, evaluate scenario quality, and analyze de-identified, aggregated patterns.
Protect the Service and our users: detect fraud, abuse, and security incidents; enforce our Terms of Service.
Comply with legal obligations: maintain tax and accounting records; respond to lawful requests from authorities.

4. Legal basis for processing

Under PIPEDA and Law 25, we rely on the following bases:

Performance of a contract — to deliver the Service you signed up for.
Express consent — for marketing emails and any other purpose where the law requires opt-in consent.
Implied consent — for routine operational uses (e.g., sending you a receipt, securing the platform) that you would reasonably expect.
Legal obligation — where we are required by law to retain or disclose information.

You can withdraw consent at any time, subject to legal or contractual restrictions. Withdrawing consent for essential processing may mean we can no longer provide the Service to you.

5. Service providers and disclosure

We share personal information only with the service providers we need to operate the Service. We do not sell your personal information, and we do not share it for third-party advertising.

OpenAI, L.L.C. provides the large language models that power practice Sessions and report generation. OpenAI receives session prompts and conversation content and is located in the United States.
Railway Corp. hosts the Service infrastructure and stores account data and Session content. Railway receives all data stored or processed by the Service and is located in the United States, with infrastructure that may include other regions.
Stripe, Inc. processes payments. Stripe receives payment details, billing country, and transaction information, and operates in the United States, Canada, and other regions.
Postmark delivers transactional and marketing emails. Postmark receives your email address and the contents of emails we send you, and is located in the United States.

About OpenAI specifically: OpenAI processes your Session content solely to generate AI responses for you. Under OpenAI's API terms, content submitted via the API is not used to train OpenAI's models. OpenAI may retain API content for up to 30 days for abuse and misuse monitoring before deletion. Their privacy practices are described at openai.com/policies/privacy-policy.

We may also disclose personal information:

To our professional advisors (lawyers, accountants, auditors), under duties of confidentiality.
In connection with a corporate transaction, such as a sale, merger, or financing — in which case the recipient must agree to handle your information in a manner consistent with this Policy.
To comply with the law, including in response to valid legal process, to protect our rights or the safety of others, or to investigate fraud or security incidents.

6. Cross-border transfers

The service providers above store and process personal information outside Canada, primarily in the United States. While outside Canada, your information is subject to the laws of the country where it is held, including lawful access by foreign government authorities.

We rely on contractual protections (including data processing agreements) with each provider to require a level of protection comparable to what is required under Canadian law. By using the Service, you acknowledge that your personal information will be transferred to and processed outside Canada.

7. Marketing emails and CASL

We comply with Canada's Anti-Spam Legislation (CASL). We will only send you commercial electronic messages (e.g., newsletters, promotions) where you have given us express consent, typically by checking an unbundled opt-in box at signup or in your account settings.

Every marketing email we send will:

Identify BlisterPaq Inc. as the sender;
Include our contact information; and
Include a clearly visible unsubscribe link that works for at least 60 days after the email is sent.

You can withdraw consent at any time by clicking unsubscribe in any marketing email, or by emailing support@blisterpaq.com. We will action unsubscribe requests within 10 business days, as required by CASL. Withdrawing marketing consent does not stop transactional messages (receipts, password resets, expiry notices) that we need to send to operate the Service.

8. How long we keep your information

We keep personal information only as long as necessary for the purposes described in this Policy, or as required by law:

Account information: while your account is active, plus a reasonable period afterward to handle disputes, fraud, and legal claims (typically up to 72 months after account closure).
Session content and reports: while your account is active, so you can revisit your reports. You can delete individual reports at any time from your account.
Payment records: for the period required by Canadian tax and accounting law (currently 6 years).
Marketing consent records: for the period required by CASL (3 years from withdrawal of consent).
Backups: we may retain encrypted backups for a limited period after deletion from active systems; these are overwritten on a routine cycle.

When personal information is no longer needed, we delete or anonymize it.

9. Your privacy rights

Subject to applicable law, you have the right to:

Access the personal information we hold about you and ask how it is being used.
Correct information that is inaccurate or incomplete.
Withdraw consent for any processing that relies on consent (such as marketing emails).
Delete your account and the personal information associated with it, subject to legal retention obligations.
Receive a copy of your personal information in a portable format, where required by applicable law.
Lodge a complaint with us, and (if you are not satisfied with our response) with the Office of the Privacy Commissioner of Canada at priv.gc.ca, or with your provincial privacy regulator.

If you reside in Quebec, you also have the right under Law 25 to be informed of any automated decision based solely on automated processing of your personal information that produces legal or similarly significant effects, and to ask for a human review. Note that the AI-generated reports BlisterPaq provides are educational feedback; they are not used to make decisions that have legal effects on you.

To exercise any of these rights, email support@blisterpaq.com. We will respond within 30 days, and will verify your identity before acting on requests.

10. How we protect your information

We use reasonable administrative, technical, and physical safeguards to protect personal information, including:

Encryption of data in transit (TLS) and at rest;
Salted, hashed password storage;
Access controls limiting employee and contractor access to personal information on a need-to-know basis;
Vetted service providers with their own security programs (Stripe, OpenAI, Railway, and our email provider all maintain SOC 2 or equivalent certifications);
Routine monitoring for security incidents.

No system is perfectly secure. If we discover a security breach involving personal information that creates a real risk of significant harm, we will notify affected users and the Office of the Privacy Commissioner of Canada as required by law.

11. Children's information

The Service is not directed at children. We do not knowingly collect personal information from children under the age of 14. If you believe a child has provided us with personal information, please contact support@blisterpaq.com and we will delete it.

12. AI and your Session content

We want to be specific about how AI processes your conversations:

The text of your practice Sessions is sent to OpenAI's API to generate AI responses and reports.
OpenAI does not use API content to train its models.
OpenAI may retain API content for up to 30 days for abuse monitoring, after which it is deleted.
BlisterPaq stores your Session transcripts and reports in our database (hosted by Railway) so you can revisit them, until you delete them or close your account.
We may use de-identified, aggregated information derived from Sessions to evaluate scenario quality and improve the Service. We do not use identifiable Session content to train our own models.

You should not enter the personal health information of identifiable third parties (real patients, friends, family) into Sessions. Anything you enter is processed as described above.

13. Changes to this Policy

We may update this Privacy Policy from time to time. The current version will always be posted on the Service with a "Last updated" date. If we make a material change that reduces your rights or expands how we use your personal information, we will obtain renewed consent or provide notice as required by law.

14. Contact and complaints

If you have a question, concern, or complaint about how we handle personal information, contact us first at support@blisterpaq.com. We take privacy concerns seriously and will work with you to resolve them.

If you are not satisfied with our response, you may contact:

Office of the Privacy Commissioner of Canada — priv.gc.ca — 1-800-282-1376
Commission d'accès à l'information du Québec (if you reside in Quebec) — cai.gouv.qc.ca
The privacy regulator in your province, where applicable.