Cloud Terms of Service global | v0.2.0 | 2026-10-05 | draft Draft — not yet effective These Cloud Terms govern online subscriptions to Shpyrd Cloud, our proprietary platform as a service for deploying and running applications on infrastructure operated by Shpyrd. The provider is FLUXYR LTDA, a Brazilian company registered under CNPJ 47.640.746/0001-23, at Avenida Engenheiro Luiz Carlos Berrini, 1376, 17th floor, São Paulo, Brazil ("Shpyrd", "we", "us"). "Customer" means the person or entity identified in the subscription. Contact legal@shpyrd.io for contractual notices and privacy@shpyrd.io for privacy requests. 1 Agreement and acceptance 1.1 The agreement is formed when Customer affirmatively accepts these Terms in the registration or checkout process and the subscription is confirmed. A person acting for an entity represents that they have authority to bind it. Before acceptance, we will make these Terms and the commercial summary available to read, download, and retain, and record the accepted version, account, time, and evidence of acceptance. 1.2 The agreement consists of the commercial summary confirmed in Shpyrd or Stripe checkout, these Terms, and schedules expressly identified by title and version. The plan, resources, prices, currency, subscription term (monthly, annual, or another offered term), payment frequency and method, renewal, limits, region, support, and cancellation conditions are those presented to and selected by Customer before confirmation. That confirmed selection prevails over inconsistent general provisions of these Terms on commercial matters. An administrative record in a payment processor that does not reflect acceptance does not amend the agreement. The Privacy Policy does not replace a DPA for Customer-controlled data. 1.3 Expressly negotiated provisions override the provisions they specifically identify. A data processing agreement governs its subject matter; an agreed service level schedule governs its subject matter. These Terms otherwise govern the Cloud subscription and take priority over the general Terms of Service for that subscription. Mandatory rights and expressly accepted offers remain unaffected. 2 Service and access rights 2.1 During the subscription, Customer has a non-exclusive right to access the PaaS and make its applications available to end users within the plan. Cloud is a proprietary, closed-source service. A subscription does not deliver its source code, transfer intellectual property, or authorize resale of the platform itself unless separately agreed. 2.2 Customer retains its code, applications, and data and grants us only the rights needed to store, run, transmit, and protect them to provide the service. Any components separately supplied under third-party licenses remain subject to those licenses. 2.3 We operate the infrastructure components included in the plan. Customer manages its applications, dependencies, permissions, secrets, and configurations, maintains rights to its content, and supports its end users. Application development, business operations, and migration services are excluded unless expressly included. 3 Accounts and acceptable use 3.1 Customer must keep account and contact information accurate, protect credentials, and report suspected compromise. Customer is responsible for its authorized users, without relieving us of responsibility for failures attributable to us. 3.2 Unlawful use, infringement of third-party rights, malware distribution, attacks, unauthorized access, interference with other customers, and metering or payment fraud are prohibited. Security tests that could affect shared infrastructure require prior coordination. Workload-specific restrictions must be disclosed in the plan before purchase. 3.3 Customer may host applications used by its own customers. An agency may consolidate billing for third-party workspaces only after those workspaces and their owners' authorization are identified. Billing consolidation does not itself transfer data ownership or administrative rights; the agency's payment obligations must be specified in the commercial summary or an amendment. 4 Pricing and metered usage 4.1 Fixed pricing and billing frequency follow the confirmed checkout selection. If a plan includes a minimum convertible into usage credits, the summary identifies the amount, allocation frequency, eligible resources, expiry, and any rollover. An annual term or annual payment does not itself mean that all credits become available immediately or that monthly credits accumulate. We do not charge again for usage already covered by a credit. Add-ons and overages must be disclosed before acceptance. 4.2 Where an absorbable usage minimum is agreed, eligible resource charges for each measurement period equal the greater of the minimum allocated to that period and measured usage, before taxes and add-ons. Illustrative example: a minimum of 100 and usage of 160 produce a total of 160 in the agreed currency. The summary separately identifies measurement period, contract term, and billing frequency; payments and applicable credits are deducted to avoid duplicate charges. 4.3 CPU core-hours, memory GiB-hours, storage GiB-months, and outbound GiB are charged only if included in the plan's pricing schedule, at the accepted rates. The summary and metering documentation must define allocated versus consumed resources, time basis, month conversion, rounding, and included services. Dashboard figures may be estimates subject to reconciliation; Customer will have access to billing details. 4.4 Overages are billed after measurement at the frequency or invoicing threshold disclosed in checkout. An annual plan may have monthly usage measurement and overage invoices if disclosed and accepted. Interim invoices are deducted from the same reconciliation. Credits, unbilled-balance limits, and spending caps are distinct: an alert or credit limit does not guarantee immediate shutdown or a maximum bill. 4.5 An automatic spending stop is included only when its operation, coverage, and metering delay are disclosed. Suspension may interrupt applications and does not mean immediate data deletion. Previously incurred usage and expressly priced retained resources remain billable; no undisclosed new charges are introduced. 4.6 Upgrades, downgrades, quantity changes, and interval changes (including monthly to annual and annual to monthly) require Customer confirmation in checkout or the change flow, including Stripe where used. Before acceptance, the flow must present the new plan and price, effective date, term start and end, next charge, renewal, remaining credits, discounts, and any proration or absence of proration. An immediate change may generate a charge or credit and reset the billing date if expressly disclosed. Without an accepted transition rule, a change takes effect at the next renewal of the contracted term, not at the next installment of an annual commitment. Past usage is not repriced and a committed term is not shortened without agreement. The confirmation is retained with the applicable Terms version. 5 Payment and international customers 5.1 The commercial summary identifies currency, payment method, due date, taxes, and fees. Customer authorizes recurring charges for agreed fixed and variable amounts. We may use payment processors and will issue legally required tax documents; a processor receipt does not replace a required tax invoice. 5.2 Nonresident customers may agree to a foreign currency. Any conversion must identify its source, date, and charges in advance. Domestic transactions between Brazilian residents will be priced and settled in BRL unless a specific lawful exception has been validated and expressly agreed. Currency is not determined merely by the language selected in this portal. 5.3 Each party bears taxes allocated to it by law. Mandatory withholding must be documented and recognized in payments. A gross-up for withholding on an international transaction requires an express, lawful provision in the commercial summary; no general gross-up is implied. 5.4 Customer may dispute charges through legal@shpyrd.io, identifying the disputed items. The proposed operational period is 30 days after receipt, without extinguishing statutory rights afterward. Undisputed amounts remain due. We will investigate within a reasonable time, correct demonstrated errors, and will not suspend solely for a portion disputed in good faith while it is under review. 6 Availability and support 6.1 Support channels, hours, language, and scope are specified in the plan. Guaranteed availability, response times, and service credits apply only under an accepted schedule defining covered components, measurement, exclusions, and claims. Around-the-clock support is not implied. 6.2 We will exercise reasonable professional care and give reasonable advance notice of scheduled maintenance. We do not guarantee an error-free or uninterrupted service. Customer's responsibility for its applications does not remove our obligations for infrastructure we operate. 6.3 Backup, restoration, and retention commitments are those expressly included in the plan. Customer should maintain a continuity strategy appropriate to its business; this does not relieve us of contracted backup and security obligations. Experimental features must be identified, voluntarily enabled, and accompanied by their limitations. 7 Personal data and confidentiality 7.1 Each party must comply with applicable data protection law. For personal data in applications, Customer determines purposes and instructions and we act as processor or subprocessor according to the actual contractual chain. For account administration, billing, and our own legal obligations, our role and processing are described in the Privacy Policy. 7.2 Hosting may require storage, processing, transmission, support access, and deletion during the service and agreed retention periods. Before production processing of personal data, the commercial summary and data processing schedule must identify data and data-subject categories, regions, subprocessors, instructions, security measures, and applicable international transfer mechanisms. 7.3 We will process application data only on documented instructions or as required by law, restrict access to authorized persons subject to confidentiality, and apply risk-appropriate technical and organizational measures. We will not use that data for advertising or model training without specific authorization and an applicable legal basis. 7.4 Within our role and available information, we will assist Customer with individual requests, risk assessments, and incidents. We will notify Customer without undue delay of incidents affecting data for which we are responsible, providing available information and updates. Operational deadlines and contacts must be agreed in the data processing schedule and support Customer's legal deadlines. 7.5 Subprocessors must have compatible obligations. Their list, countries, change notices, and a reasoned objection procedure must be specified in the data processing schedule. A valid mechanism is required for restricted international transfers; accepting these Terms is not itself such a mechanism. Workloads with special sector requirements require prior assessment of the offering. 7.6 Confidential information may be used only to perform the agreement and disclosed only to recipients with a need to know and a confidentiality obligation. Exceptions cover information lawfully public, previously known, independently developed, or lawfully received without restriction. Compelled disclosure must be limited and notified where permitted. Confidentiality lasts five years after termination, and longer for protected trade secrets or personal data as required by law. 8 Term suspension and termination 8.1 The subscription has the term and renewal rule selected and confirmed at checkout: monthly, annual, or another expressly offered term. If automatic renewal is accepted, it occurs for the disclosed period; without express acceptance of automatic renewal, the service ends at term expiry. Payment frequency and duration are distinct: an annual commitment paid in monthly installments remains annual. Customer may request cancellation or prevent renewal through the dashboard, or legal@shpyrd.io if unavailable, observing the notice deadline disclosed before acceptance. If none is specified, Customer may prevent renewal until the contracted term ends. Cancelling renewal preserves service until term end and does not waive installments for the committed term or incurred usage. Early exit, refunds, and any remaining balance follow expressly accepted conditions and applicable law; no undisclosed penalty or automatic acceleration of installments applies. 8.2 Undisputed nonpayment may result in suspension after notice and ten calendar days to cure. A concrete security risk, fraud, unlawful use, legal order, or an expressly accepted risk limit may justify immediate, proportionate restriction. We will communicate the reason and restoration steps as soon as possible and restore access after resolution. 8.3 Either party may terminate for material breach not cured within 30 days after notice. Shpyrd may decline renewal by giving at least 30 days notice before expiry while honoring the entire current term, including an annual term. Early discontinuation by Shpyrd requires 30 days notice, transition, a proportional refund for the unprovided period, and release of future installments for that period, without limiting other statutory remedies. Wrongful suspension or failures attributable to Shpyrd do not eliminate Customer remedies. 8.4 Customer may export data during the subscription through available functions. After termination, we will make retained data recoverable on request for 30 days, without continuing to run applications. Active data will then be deleted within 30 days; backup deletion follows the period identified in the plan, subject to identified legal retention. These periods must also be disclosed for a downgrade to a free plan. 8.5 Underuse of the minimum during an already-started cycle does not itself entitle Customer to a refund. Statutory rights, billing errors, more favorable agreed terms, and termination for our breach are preserved. Accrued payment, confidentiality, data protection, intellectual property, and liability obligations survive as their nature requires. 9 Warranties and responsibility 9.1 We have the rights needed to provide the service and will deliver it substantially in accordance with the documentation and plan. We will seek to correct notified material nonconformity within a reasonable time. If it remains unresolved for 30 days and prevents essential contracted use, Customer may terminate the affected service and receive unused prepaid amounts, without prejudice to statutory rights. 9.2 To the extent permitted by law, each party's aggregate liability for direct loss is capped at amounts paid or payable for the affected service in the 12 months before the event. Accrued payment obligations are not capped. The proposed cap for confidentiality, data protection, and intellectual-property indemnity is twice that amount. Fraud, intentional misconduct, and liability that cannot legally be limited are excluded from the caps. 9.3 To the same lawful extent, indirect loss and lost profits are excluded, subject to fraud, intentional misconduct, and mandatory law. These limits govern the parties' relationship and do not restrict rights of individuals, authorities, or third parties. Mandatory consumer protections, including cancellation and refund rights, prevail where applicable. 9.4 Each party is responsible for third-party claims arising from infringement by materials it supplies or acts attributable to it. We are responsible for intellectual-property claims concerning authorized use of the platform; Customer is responsible for its content and applications. The indemnified party must give timely notice, cooperate, and allow reasonable control of the defense. No settlement may impose obligations on it without consent. Our obligation excludes infringement caused by unauthorized modifications or combinations to the extent of their causal contribution. 10 Changes language and general provisions 10.1 General material changes to prices or these Terms require at least 30 days notice and take effect only at the next renewal of the contracted term, with any longer notice needed to allow nonrenewal. A monthly installment date does not authorize changes to an ongoing annual agreement. Customer may decline renewal before the change takes effect. Customer-requested and confirmed plan changes follow section 4.6. Accepted fixed-term conditions do not change mid-term without agreement except as required by law; specific consent is obtained where required. 10.2 Neither party may assign the agreement in a way that reduces the other's protections without consent. A change of corporate name with the same legal entity and CNPJ will be notified and does not itself substitute the provider. Public use of Customer's name or marks requires authorization. 10.3 Brazilian law and, where permitted, the courts of São Paulo, Brazil apply, subject to mandatory law and jurisdiction. Different law or forum for an international transaction must be expressly agreed. This Global edition is drafted in English and controls over convenience translations unless mandatory law or the accepted Order provides otherwise. A transaction expressly accepting the Brasil edition is governed by that Portuguese edition and its local provisions. 10.4 Electronic records of assent, identity, and document integrity may serve as evidence as permitted by law. Notices will be sent to registered contacts and retained for access. If a provision is unenforceable, the remaining provisions continue to apply.