Terms of Service & License Agreement

Aplo Systems owns the software code, infrastructure, designs, documentation, and all related intellectual property we create for you.

You receive a limited, non-exclusive, non-transferable license to use the system for your internal business operations while your subscription is active and in good standing.

The license does not grant you any right to resell, sublicense, redistribute, reverse-engineer, or create derivative works from the system without our prior written consent.

If the subscription ends for any reason, the license to continue using the system ends, and access may be suspended. You always keep your data.

Unless we agree otherwise in writing, Aplo deploys the licensed system into a Supabase or cloud project that you control. You own the database, the account, and the environment.

When the system runs in your account, you are responsible for configuring, securing, backing up, and maintaining that environment, including any SOC 2, HIPAA, PCI, or other compliance eligibility you require.

If you request managed hosting, Aplo may host the system in its own environment under a separate addendum. Regulated workloads (HIPAA, PCI, etc.) always require a signed Business Associate Agreement or security addendum and are priced separately.

You retain all ownership rights in the business data you enter or generate through the system.

You can export your data at any time during the subscription in a standard, machine-readable format.

On termination, we will return or export your data to you and then delete it from our managed environments within a commercially reasonable time, unless we are required to keep it by law.

Each engagement starts with a fixed-price build cost quoted after the process audit. Scope changes may require a change order and additional fees.

After delivery, you pay a recurring monthly license fee. The base license starts as low as $250 per month and increases based on users, integrations, automations, data volume, hosting choice, and support level.

Regulated-workload hosting and compliance addendums are separate add-ons with their own pricing.

Fees are non-refundable except where required by law. Late payments may result in suspension of access.

The system is licensed for your organization's internal business operations only.

You may not use the system for unlawful purposes, to process data without proper authorization, or in any way that violates applicable laws or regulations.

Unless we sign a separate addendum specifically covering it, you may not use the system to process protected health information (PHI), payment card industry data (PCI), consumer credit data governed by the FCRA, or any other category of data subject to specialized regulation.

We make no representation that the system, in its standard form, is HIPAA compliant, SOC 2 Type II certified, PCI DSS compliant, or otherwise audit-ready.

If you need to handle regulated data, contact us to discuss a separate compliance tier with the appropriate hosting configuration, Business Associate Agreement, security addendum, and pricing.

If you introduce regulated data without a signed addendum, we may immediately suspend access and terminate the agreement.

You warrant that your use of the system, the data you input, and your industry obligations comply with all applicable laws and regulations.

You are responsible for obtaining any necessary consents, authorizations, and rights for the data and workflows you run through the system.

When the system is deployed in your account, you are responsible for the security of that account, including credentials, access controls, encryption settings, backups, and regional/data-residency settings.

You must notify us promptly of any unauthorized access, security incident, or suspected misuse of the system.

You agree to indemnify, defend, and hold harmless Aplo Systems and its team from any claim, loss, liability, or expense arising out of or relating to:

(a) your data or content; (b) your breach of these terms or any law; (c) your use of the system for a purpose outside the permitted use; (d) regulated data introduced without a signed addendum; (e) your hosting environment or account compromise when the system is deployed in your account; or (f) your own regulatory or contractual obligations.

The system and services are provided 'as is' and 'as available,' except for the specific service commitments we make in a signed statement of work.

We disclaim all other warranties, whether express, implied, statutory, or otherwise, including warranties of merchantability, fitness for a particular purpose, non-infringement, and uninterrupted or error-free operation.

To the maximum extent permitted by law, our total liability to you for any claim arising out of or relating to these terms or the system is capped at the total amount you paid us in the 12 months immediately preceding the claim.

Neither party will be liable for indirect, incidental, special, consequential, punitive, or exemplary damages, including lost profits, lost revenue, lost data, or regulatory fines, even if advised of the possibility.

The liability cap and damages exclusion do not apply to gross negligence, willful misconduct, or fraud.

We may suspend or terminate your access if you breach these terms, fail to pay fees when due, introduce prohibited or regulated data without an addendum, or use the system in a way that creates legal or security risk.

You may terminate the subscription by providing written notice. Termination does not relieve you of unpaid fees incurred before termination.

These terms are governed by the laws of the jurisdiction specified in the executed agreement between us. If no jurisdiction is specified, the laws of the State of Delaware, USA, will apply, excluding its conflict-of-laws rules.

Our handling of personal data — including our GDPR legal bases, international transfer safeguards, and CCPA/CPRA disclosures — is described in our Privacy Policy at /privacy, which forms part of these terms.

Where we process personal data on your behalf, you are the controller and we act as processor under your instructions. We will sign a data-processing addendum, including standard contractual clauses where required, on request.

You are responsible for providing the notices and obtaining the consents required for the personal data you put into the system, and for responding to data-subject or consumer requests relating to that data.

This page is a plain-language summary for prospective clients. The legally binding terms are in the executed Master Services Agreement, Statement of Work, and any addenda you sign with Aplo Systems.

If anything on this page conflicts with the signed agreement, the signed agreement controls.