Terms of Service

1. Scope and agreement priority

CloudHub is the product platform operated by Cloud Partners (PVT) LTD, referred to as "Cloud Partners", "we", "us" or "our". These Terms cover cloudhub.lk and our products, applications, APIs, mobile applications and services that expressly link to these Terms, including procurement solutions, Muster and Cloudyy. They also cover custom development, implementation, support and third-party cloud subscriptions supplied by us where incorporated into the relevant order.

A future product is covered when it identifies Cloud Partners as its provider and links to these Terms. Its features, permitted uses and any additional conditions must be disclosed before use. These Terms do not bind an unrelated service merely because it shares a hosting provider or domain.

A signed agreement, order, statement of work or data processing addendum takes priority for the matters it specifically addresses. Product-specific terms supplement these Terms and take priority for a clearly identified product-specific matter, unless the signed agreement provides otherwise. Third-party provider terms govern that provider's service. Mandatory legal rights remain unaffected.

The Privacy Policy explains personal data handling. The Security Policy and Compliance and Trust Policy describe our approach; they create no additional service level, certification or warranty unless expressly incorporated into a written agreement.

2. Acceptance and authorised accounts

You accept these Terms when you expressly agree to them through registration or an order, or use a service after receiving reasonable notice that these Terms apply. A person placing an order or accepting on behalf of an organisation must have authority to bind it. Informational browsing does not itself place a paid order.

A person entering a contract must be at least 18 years old and legally capable of doing so. Organisation-provided users must be authorised by their organisation and meet any disclosed product eligibility conditions and applicable law.

Keep account information accurate, protect credentials and devices, and notify us or your administrator promptly of suspected compromise. You are responsible for use you authorise and for meeting your account-security obligations. This does not make you automatically liable for every unauthorised action regardless of its cause. Your organisation controls employee access and role assignments.

3. Service features and acceptable use

Available features depend on the order, plan, configuration, permissions and supported devices. A roadmap or preview does not promise a delivery date. We may maintain and improve services; material reductions to paid contractual functionality are handled under the applicable agreement and law.

Use services only for lawful, authorised purposes. Do not bypass access controls, access another customer's records, falsify attendance or approvals, introduce malware, disrupt infrastructure, send unlawful communications, infringe rights, or conduct security testing without written authorisation. Do not use personal information for harassment or unlawful surveillance.

Do not copy, resell, sublicense, reverse engineer or extract protected software except with our permission or where applicable law or a relevant open-source licence permits it. Comply with reasonable API limits and third-party integration terms.

4. Customer content and workplace responsibilities

Customers and other rights holders retain their rights in submitted records, documents and content. You grant us and necessary service providers a limited right to host, process, transmit and display that content to deliver, secure and support the service, carry out lawful instructions and meet applicable obligations. This does not transfer ownership of customer content to us.

The customer is responsible for lawful collection, accuracy, appropriate notices, applicable processing grounds, access settings and retention instructions. For workplace services this includes employee monitoring, precise or background location, payroll, health information and attendance devices. Device permission alone does not establish a lawful basis for employer monitoring.

Review calculations, reports, document outputs, location results and AI responses before making payments, approvals, employment or other consequential decisions. These tools can produce incomplete or inaccurate results. They do not replace professional advice or the customer's decision-making responsibilities.

5. Third party cloud subscriptions and integrations

Google Workspace, Google Cloud, Zoho and other third-party services are supplied or integrated under the applicable provider terms and the customer's order. We will identify the relevant provider and terms for the purchased service. A Google Workspace agreement does not automatically govern every Google Cloud service.

The provider controls its underlying infrastructure and its service levels. Provider interruptions may affect our services. Provider credits, cancellation restrictions and remedies depend on the applicable provider agreement and the order. This does not exclude responsibility for our own contractual obligations, configuration errors or liabilities that law does not permit us to exclude.

If provider pricing changes, we may adjust renewal pricing with notice under the order and applicable law. We will not retroactively increase a committed fixed-price period unless the agreement expressly permits it.

6. Custom development and intellectual property

The statement of work defines deliverables, dependencies, acceptance criteria, fees, hosting, maintenance and ownership. Changes outside that scope require agreement on price and timing before we implement them.

Unless the statement of work provides otherwise, rights in bespoke deliverable code developed specifically for the customer transfer after full payment of the agreed project fees. We retain pre-existing frameworks, tools, reusable modules and know-how. The customer receives the rights needed to use any retained components incorporated in a paid deliverable for its agreed purpose. Third-party and open-source components remain subject to their own licences.

Unless otherwise agreed, the customer has 14 calendar days after delivery to test the deliverable against the agreed acceptance criteria and report material defects. We will address in-scope defects and provide a reasonable opportunity for retesting. Silence alone does not establish acceptance of an unresolved reported material defect.

Following written acceptance, the default warranty is three months of correction of reproducible defects within the agreed scope. It excludes new functionality and faults caused by unauthorised changes or third-party changes, except to the extent our agreement or applicable law requires otherwise. Ongoing hosting and support are governed by the applicable order.

7. Fees renewals cancellation and refunds

The order or invoice states fees, currency, taxes, due date, subscription period and usage limits. Employees do not incur fees merely by using an organisation-funded account. Applicable taxes will be identified and charged where legally required; no particular tax rate is fixed by these Terms.

Automatic renewal applies only where disclosed in the order or purchase process. That disclosure must identify the renewal period, price or pricing method, cancellation deadline and cancellation method. Customers can send cancellation requests to hello@cloudpartners.biz or use an available account cancellation control. Cancellation stops future renewal as specified in the order and does not normally cancel an already committed period.

Unless the order, provider terms or applicable law state otherwise, committed third-party licence fees, completed development milestones and elapsed SaaS subscription periods are non-refundable. This does not remove mandatory refund rights or remedies for our breach. Unused prepaid fees and cancellation of undelivered work are handled under the applicable agreement and law.

For overdue undisputed amounts, we may suspend the affected service after reasonable notice and an opportunity to resolve the issue. Raise a billing dispute promptly and pay undisputed amounts when due. Suspension for security or unlawful activity is addressed below.

8. Confidentiality and data processing

Each party must protect the other's non-public business information with reasonable care and use it only for the service relationship or another authorised purpose. Disclosure is limited to persons who need it and are subject to appropriate confidentiality duties, or as required by law. Where lawful, provide notice of a compelled disclosure.

Confidentiality does not cover information demonstrably public without breach, already lawfully known, independently developed or lawfully received without restriction. Confidentiality duties continue while information remains confidential, subject to the applicable agreement and law.

Where we process personal data on a customer's behalf, processing instructions and relevant obligations must be recorded in the applicable agreement and any required data processing addendum. The customer's responsibilities do not relieve us of obligations that apply directly to us.

9. Availability warranties and liability

We do not guarantee uninterrupted, error-free or completely secure service. Specific availability, support, backup and recovery commitments apply only where agreed in writing. Services are otherwise provided on an "as available" basis to the extent permitted by law. This qualification does not override an express development warranty or other written commitment.

To the maximum extent permitted by law, neither party is liable under these Terms for indirect or consequential losses or lost profits arising from use of the service. Unless a written agreement states otherwise, our aggregate liability arising from a service is limited to the fees paid to us for the affected service in the six months immediately before the event giving rise to the claim.

These exclusions and limits do not apply to fraud, wilful misconduct or liability that cannot lawfully be limited or excluded. Mandatory consumer, data-protection and other statutory rights remain available. A separate agreement may set different liability provisions.

10. Suspension termination and customer data

We may restrict the affected access where reasonably necessary to address a security risk, unlawful activity, serious misuse, a legal requirement or a material breach. We will give notice and an opportunity to remedy where practicable. Immediate action may be needed to prevent harm; restrictions should be proportionate and reviewed when the reason is resolved.

Customers may end services under their order or written agreement. Administrators may deactivate individual users. Termination does not remove amounts already lawfully owed or obligations intended to continue.

Unless a different arrangement is agreed or legally required, customers may request return or an available export of their content within 30 calendar days after service termination. Coordinate export before termination wherever possible. This window does not guarantee continued application access or restoration of data already lawfully deleted. Format, feasibility and any assistance fees must be disclosed and agreed.

After return or export, deletion follows the agreed retention schedule and applicable law. Backups, security records and legally required records may remain for limited retention periods. Account closure does not erase all copies immediately. The Privacy Policy explains these distinctions.

11. Applicable law disputes and changes

These Terms are governed by Sri Lankan law, subject to mandatory protections that apply to the customer or user. The Sri Lanka Electronic Transactions Act No. 19 of 2006, as amended, recognises qualifying electronic transactions; enforceability depends on the transaction and applicable legal requirements.

Contact us first to seek a good-faith resolution. If a dispute is unresolved within 30 days after written notice, either party may use the competent courts in Colombo, Sri Lanka, subject to mandatory jurisdiction rules. Arbitration applies only where both parties agree to it in writing, including in an applicable service agreement. This does not prevent urgent interim relief or a lawful regulatory complaint.

We may revise these Terms and will identify the revision date. We will give reasonable advance notice of material changes through the service, email or another appropriate channel. Changes operate prospectively, subject to existing agreements, applicable law and any required acceptance. New purposes for personal data require the appropriate privacy disclosures and lawful basis.

12. Contact