Terms of Service

1. What the service is, and the licence to use it

POPRIX provides a support desk run by AI agents that act according to the organisation's own policy. Use of the service is conditional on agreement to these terms, to the privacy policy and to the security documents in theTrust Center.

Subject to these terms and to payment of the fees, the customer is granted a personal, non-exclusive, non-transferable licence to use the service for its own business purposes for the term of the engagement. The licence does not include the right to copy, modify, reverse-engineer, or make the service available to a third party.

2. Accounts, access and permissions

Anyone can open an account with a verified email address, and a new account gets its own organisation on a trial. An address that already belongs to an existing organisation is checked against that organisation's named list of addresses at every sign-in. The customer is responsible for keeping that list current when an authorised person leaves, for keeping access credentials confidential, and for telling us immediately if misuse is suspected. Each account records a level — owner, admin or member. Today that level is recorded and displayed and the product does not yet enforce different permissions for it, so every person the customer admits to an organisation can see and do the same things.

3. Availability of the service

POPRIX aims for the following monthly availability of the service, excluding planned maintenance windows of which advance notice is given: 99.5%

This is a monthly operational target and not a contractual service level (SLA); no service credits attach to it, and it is not presented as a measurement. The service runs on managed infrastructure from Vercel and Supabase.

4. Information security and the supplier's standing

POPRIX acts as a processor on behalf of the customer, who is the database owner, under Regulation 15 of the Israeli Protection of Privacy (Data Security) Regulations. It applies encryption at rest and in transit, permission-based access control, dedicated secret management, network isolation and append-only audit records. POPRIX's access to customer data is technical only, kept to the minimum that operating and supporting the service requires, recorded, and does not change its standing as a processor. The controls are set out in the Regulation 15 security annex, which is sent on request.

5. Security incident notification

On discovering a serious security incident affecting customer data, POPRIX will notify the customer without undue delay, and in any event within 24 hours of discovery, and will assist the customer in reporting to the Privacy Protection Authority and in responding to data subjects. Responsibility for reporting to the authority and to data subjects rests with the customer as database owner. For a customer who is a controller under the GDPR, that assistance is given within a period that allows the customer to meet the 72-hour reporting duty.

6. Backups and restore

The database is a managed Supabase Postgres, backed up automatically every day, with backups held in the European Union. A restore at the customer's request is carried out by arrangement and subject to the availability of the relevant backup.

7. Support, updates and changes to the service

Support is provided on the channels and within the response times agreed with the customer. POPRIX may update the service, add capabilities and change components; a change that materially degrades an existing capability the customer relies on will be made only after reasonable advance notice.

8. Acceptable use

The service must be used in accordance with the law, with these terms and with the privacy policy.

In particular, the following are not permitted:

• Sending spam through the service, or marketing messages to anyone who has not given the consent the law requires.
• Using the service for unlawful, deceptive or abusive activity.
• Attempting to break into the platform, to circumvent security controls, or to overload it deliberately.
• Reverse-engineering the platform or the models, or extracting code or weights from them.
• Selling, renting or making the service available to a third party without written consent.
• Uploading content that infringes another's rights, or personal data the customer has no legal basis to pass for processing.

9. Suspension

POPRIX may suspend a user's or an account's access where there is reasonable suspicion of a breach of the acceptable use section, where the security of the platform or of other users is at risk, or where the law requires it. Suspension will be no wider and no longer than necessary, and notice will be given as soon as practicable.

10. The customer's responsibility for policy, ceilings and content

The customer is responsible for the content of the knowledge documents it uploads, for the policy it configures, for the spending ceilings and for working the approval queue. An action approved by the customer's own representative, or taken within the automatic authorisation ceiling the customer set, is an authorised action on the customer's behalf. The customer is responsible for the lawfulness of the data it passes for processing, including having a legal basis for that processing and giving data subjects the notices required.

11. Intellectual property and ownership of data

All intellectual property rights in the platform, the code, the interface and the methodology — including improvements and developments — are and remain POPRIX's. All customer data — the cases, the conversations, the files, the knowledge documents and the outputs produced for the customer — belongs exclusively to the customer. POPRIX acquires no right in it, makes no use of it beyond providing the service, and does not train models on it.

12. Data portability on termination

On termination, and at the customer's request made within 30 days of it, customer data is provided in a structured, machine-readable format. After that the data is deleted from the live system, except records the law requires us to keep — including audit records, which are held for at least 24 months under regulation 10(d).

13. Confidentiality

Each party will keep the other's business, technical and commercial information confidential, will use it only for the purposes of the engagement, and will not disclose it to a third party except to those who need to know and are bound by equivalent confidentiality. The obligation continues after the engagement ends.

14. Warranties, limitation of liability and indemnity

The service is provided as it stands. POPRIX undertakes to provide it with accepted professional skill and in accordance with these terms, and does not warrant that it will be free of faults or that every output will be accurate — which is why the human approval mechanism and the spending ceilings exist and why operating them is the customer's responsibility. POPRIX's liability on any cause of action is limited to the fees actually paid in the twelve months preceding the event, and does not extend to indirect or consequential loss or loss of profit. That limitation does not apply to loss caused by wilful misconduct, to breach of confidentiality, or to anything the law does not permit to be limited. Each party will indemnify the other against a third-party claim arising from its own breach of these terms.

15. Fees and payment terms

Fees, the billing cycle and payment terms are set in the order form or the signed agreement between the parties; this page does not set prices. Late payment entitles POPRIX, after notice, to suspend the service until it is settled.

16. Governing law and jurisdiction

These terms are governed by the laws of the State of Israel alone. The competent courts of the Tel Aviv-Jaffa district have exclusive jurisdiction over any dispute.

17. Changes to these terms, and contact

POPRIX may update these terms. The date at the top of the page changes with every revision, and for a material change customers are told in advance. Questions about these terms go to the contracting party named at the top of this page.