Legal

Terms of Service

Last updated: 15 September 2026

This document is a working draft. It reflects how AIVORA HC operates today, but should be reviewed and finalised by qualified legal counsel before being relied on as a binding agreement.

1. Acceptance of terms

These Terms of Service (“Terms”) govern access to and use of the AIVORA HC website, platform, APIs and related services (together, the “Service”) provided by AIVORA HC (“AIVORA”, “we”, “us”). By accessing or using the Service you agree to these Terms. If you are using the Service on behalf of an organisation, you represent that you have authority to bind that organisation, and “you” refers to it.

Where your organisation has signed a separate written agreement with AIVORA (for example a subscription order or master services agreement), that agreement prevails over these Terms to the extent of any conflict.

2. The Service

AIVORA is an AI-assisted advisory platform for Human Capital. It captures a client's context, workforce priorities and evidence, interprets them against benchmarks and generates diagnostic and board-ready deliverables in formats such as PDF, PPTX, DOCX and HTML. Features may be added, changed or removed over time, and some features may be available only on certain plans.

3. Accounts and access

You must provide accurate information when an account is created and keep it up to date.
You are responsible for safeguarding your credentials and for all activity under your account. Use a strong, unique password or your organisation's single sign-on where available.
Notify us immediately at the address below if you suspect unauthorised access to your account.
Workspace administrators can invite, manage and remove users in their organisation and are responsible for those users' compliance with these Terms.

4. Acceptable use

You agree not to, and not to allow others to:

Use the Service in violation of any law, or to process personal data without a lawful basis.
Upload content that is unlawful, infringing, defamatory or that contains malicious code.
Attempt to gain unauthorised access to the Service, other customers' data or the underlying infrastructure, or to probe, scan or test its vulnerability without our written permission.
Reverse engineer, decompile or attempt to extract the source code, models or prompts underlying the Service.
Use automated means to scrape or bulk-extract outputs, or to circumvent rate limits or usage restrictions.
Use the Service to build a competing product, or resell or sublicense it without our written consent.

5. Your data

You retain all rights to the evidence, documents and other content you upload (“Customer Data”). You grant AIVORA a limited licence to host, process and display Customer Data solely to provide, secure and support the Service. We handle Customer Data in accordance with our Privacy Policy and Data Processing statement. We do not use Customer Data to train AI models, and we do not disclose it to other customers.

You are responsible for the accuracy and lawfulness of Customer Data, including having the right to upload it and any personal data it contains.

6. AI outputs and professional judgement

Deliverables, scores, benchmarks and recommendations generated by the Service (“Outputs”) are produced with the assistance of AI models and are provided as decision-support aids. Where the platform shows its reasoning and evidence links, this is to help you evaluate Outputs - it does not guarantee their correctness. Outputs may contain errors or omissions and do not constitute professional, legal, financial, tax or HR advice. You are responsible for reviewing Outputs and for any decisions made in reliance on them.

Subject to your compliance with these Terms, you may use Outputs generated from your Customer Data for your internal business purposes and share them with your stakeholders.

7. Intellectual property

The Service, including its software, models, prompts, methodologies, benchmark frameworks, designs, branding and documentation, is owned by AIVORA or its licensors and is protected by intellectual property laws. Except for the rights expressly granted in these Terms, no licence is granted. Feedback you provide may be used by AIVORA without restriction or obligation.

8. Fees and subscriptions

Paid plans are billed in advance for the subscription period shown at purchase and renew automatically unless cancelled before the renewal date. Fees are non-refundable except where required by law or stated otherwise in your order. We may change pricing with at least 30 days' notice, effective from your next renewal. Card payments are processed by a third-party payment provider; AIVORA does not store card numbers.

SecurityHow we protect your data

We take the confidentiality of your workforce data seriously and operate the Service with the following safeguards. These commitments form part of these Terms.

Encryption in transit. All traffic to the website and platform is served over HTTPS/TLS with certificates that renew automatically. Plain HTTP is redirected.
Encryption of stored secrets. Integration credentials, API keys and similar sensitive values are encrypted at the application layer before being written to the database; passwords are never stored - only salted bcrypt hashes.
Tenant isolation. Every organisation's data is stored with a tenant identifier and every query is scoped to the caller's tenant, so one customer's evidence, benchmarks and deliverables are never visible to another.
Authentication and access control. Sign-in uses short-lived signed tokens with support for single sign-on (SSO/OAuth). Role-based permissions restrict what each user can view, upload, generate or administer.
Audit logging. Administrative and data-changing actions are recorded in an audit log that records who did what and when, so activity can be reviewed and investigated.
Abuse protection. Rate limiting, request validation and strict cross-origin rules protect the API from brute-force and automated abuse.
Backups and recovery. The production database is backed up on a schedule with a defined retention window, allowing point-in-time restoration if data is lost or corrupted.
Least privilege operations. Production infrastructure is isolated in containers, accessed only by named administrators over key-based SSH, with secrets injected from environment configuration rather than committed to code.
AI model handling. Content sent to third-party AI models is limited to what is needed to produce the requested output, is transmitted over encrypted connections, and is not used by AIVORA to train models. See the sub-processor section for the providers involved.

You also play a part: keep credentials confidential, remove users who leave your organisation promptly, and report any suspected incident to info@aivorahc.com without delay. We will notify you without undue delay if we become aware of a security incident affecting your Customer Data.

9. Confidentiality

Each party will keep the other's non-public information confidential and use it only for the purposes of the relationship, using at least the same degree of care it uses for its own confidential information. This obligation survives termination for five years, and indefinitely for trade secrets and Customer Data.

10. Suspension and termination

You may stop using the Service at any time; paid subscriptions end at the close of the current period unless otherwise agreed. We may suspend or terminate access if you materially breach these Terms, if your use poses a security risk to the Service or others, or if required by law. On termination we will make Customer Data available for export for 30 days, after which it is deleted from live systems and subsequently from backups in the ordinary course.

11. Disclaimers

Except as expressly stated in a written agreement, the Service is provided “as is” and “as available” without warranties of any kind, whether express, implied or statutory, including warranties of merchantability, fitness for a particular purpose and non-infringement. We do not warrant that the Service will be uninterrupted or error-free or that Outputs will be accurate or complete.

12. Limitation of liability

To the maximum extent permitted by law, neither party will be liable for any indirect, incidental, special, consequential or punitive damages, or for loss of profits, revenue, data or goodwill, arising out of or related to these Terms. AIVORA's total liability arising out of the Service will not exceed the fees paid by you in the twelve months preceding the claim. Nothing in these Terms limits liability that cannot be limited by law, including for fraud or wilful misconduct.

13. Indemnity

You will defend and indemnify AIVORA against third-party claims arising from Customer Data or your use of the Service in breach of these Terms or applicable law.

14. Governing law and disputes

These Terms are governed by the laws of the United Arab Emirates. The parties will attempt in good faith to resolve any dispute through discussion before commencing proceedings, and the courts of Dubai will have exclusive jurisdiction over any dispute that cannot be resolved this way.

15. Changes to these Terms

We may update these Terms from time to time. We will post the revised Terms with an updated date and, for material changes, give account holders reasonable notice. Continued use of the Service after changes take effect constitutes acceptance of the revised Terms.

16. Contact

Questions about these Terms, security concerns or notices under this agreement: email info@aivorahc.com.