Terms of Service (Easy Read Version)

1. Accepting the terms

• Who we are. These Terms are between Belum Inc. ("Belum," "we," "us") and the organization or person who uses our services ("Customer," "you").
• What's covered. Our cloud platform, websites (e.g., www.sourcesight.io, sourcesight.belum.ai, etc.), products and features made available through our websites, APIs, AI and MCP services, mobile apps, add-ons ("SourceSight"), and support (together, the "Service").
• How you accept. By creating an account, clicking "accept," or using the Service, you agree to these Terms.
• Business use only. SourceSight is for organizations and professionals. It's not a personal consumer product.
• Authority. If you use a company email or invite co-workers, you confirm you're authorized to bind your organization.

2. Accounts, access, and security

• Admins & users. Your appointed Admin(s) control your account, invite users, set permissions, and manage billing.
• Keep it secure. You're responsible for the security of your credentials and for actions under your account.
• Eligibility. Users should be 18+. If you need access for younger learners (e.g., education programs), that requires separate, written terms.

3. Acceptable use

Be reasonable. Don't break the law, abuse the platform, or harm others. Specifically, you agree not to, or attempt to:

• Attack, probe, or overload our systems; bypass security; scrape outside documented APIs; or run activities that degrade the Service.
• Upload malware, hoaxes, or illegal content; infringe IP; violate privacy; or harass others.
• Misuse integrations or use the Service to build/train a competing service or model.
• Create accounts in bulk, evade usage limits, or otherwise game the system.

• Security research. Good-faith, coordinated security research is welcome with prior written notice to security@belum.ai and adherence to our disclosure guidelines. This is not permission to access non-public data or disrupt the Service.
• Usage limits. We may adjust API usage limits; for paid plans, material reductions take effect after 10 days' notice. We may throttle or temporarily suspend excessive use to protect platform stability.

4. Your data and privacy

• 4.1 Ownership stays with you. You own all Customer Data you submit to the Service (e.g., supplier records, documents, spend data, contacts, notes, etc). We don't claim ownership.
• 4.2 Our limited license. You grant us a worldwide, non-exclusive, perpetual, royalty-free license to use Customer Data only to:
  • provide, maintain, secure, and support the Service;
  • resolve fraud, abuse, and technical issues;
  • comply with law; and
  • generate analytics and AI-powered insights.
• 4.3 AI model and service improvement (opt-out available for Enterprise plans). We may use de-identified/aggregated data derived from Customer Data to improve our models and the Service. "De-identified" means no individual, household, or your organization can reasonably be identified. Enterprise accounts may opt out of model improvement at any time by written notice; operational use to provide the Service continues.
• 4.4 No restricted data (unless we sign for it). Don't upload PHI under HIPAA or full payment card data (PAN/CVV). Tokenized payment data and last-4 are fine. If you truly need PHI/PCI processing, we must execute a BAA or PCI Addendum first.
• 4.5 Privacy & DPA. We handle personal data as in our Privacy Policy ([URL]). If we process personal data on your behalf, our DPA applies (with subprocessors and transfer mechanisms like SCCs).

5. Third-party services and integrations

Your tools, your rules. The Service connects to third-party systems (ERP, finance, SSO, etc.). Your use of those is governed by their terms. When you enable an integration, you instruct us to exchange data with that provider. We don't control or guarantee third-party services, their uptime, pricing, or data practices.

6. Plans, pricing, billing, and renewals

• 6.1 Plans & orders. You can choose a plan and term (monthly/annual) in an order form (Exponential or Enterprise plans only for order form invoicing) or in-product checkout.
• 6.2 Fees & taxes. Fees are due as stated and exclude taxes. You authorize us to charge your payment method.
• 6.3 Auto-renewal with reminders. Subscriptions auto-renew for the same term unless you cancel before renewal.
• 6.4 Price changes. New prices apply on renewal; we'll communicate any changes to the Admin in a timely manner.

7. Changes, deprecations, and support

• Feature changes. We improve the Service regularly. If we materially reduce core functionality of a paid plan, we'll give 30 days' notice (unless required for security, legal, or system integrity purposes).
• Support & uptime. Belum's SLA applies only for Enterprise tiers.

8. Suspension and termination

• If something's wrong. We may suspend your account for security, non-payment, or material violations of these Terms. We'll notify you unless the law says we can't, and we'll restore access, if appropriate, when the issue is resolved.
• Ending your plan. You can cancel in-product or by written notice (if purchased via Order Form). Fees are non-refundable during a current term.
• Export and deletion. If you want to download your data you must do so prior to account termination. We delete active copies within 90 days and encrypted backups roll off within 12 months, in line with our DPA. We may keep data as required by law or for dispute resolution.

9. Intellectual property

• Our IP. The Service, software, UI, models, and know-how are Belum Materials and remain ours. You get a non-exclusive, non-transferable right to use the Service during your paid term.
• No reverse-engineering. Don't try to extract our source code, models, training data, algorithms, or design systems. Don't use the Service to train or improve a competing product.
• Feedback. If you give us ideas or suggestions, we can use them without restriction. If assignment is not enforceable, you grant us a perpetual, irrevocable, royalty-free license to use them.

10. Warranties and disclaimers

We'll provide the Service with reasonable care and skill. Otherwise, the Service (especially free/early features) is provided "as is". We don't guarantee uninterrupted or error-free operation, particular outcomes, or bug-free AI outputs.

11. Limits on liability

No runaway damages. To the fullest extent allowed by law:

• Neither party is liable for indirect, incidental, special, consequential, exemplary, or punitive damages; or lost profits, revenues, goodwill, or data.
• Cap. Each party's total liability arising from these Terms is capped at the fees you paid to SourceSight for the Service in the 12 months before the event giving rise to liability.
• Carve-outs. The above does not limit liability for death or personal injury caused by negligence, fraud or willful misconduct, or misappropriation of Belum's IP. Your payment obligations and your indemnities are outside the cap.

12. Indemnities (who covers what)

You will cover us for third-party claims arising from:

• (a) your content or data violating law or third-party rights;
• (b) your use of the Service in breach of these Terms or the AUP; or
• (c) your misuse of licensing or integrations.

We will cover you if a third party claims your authorized use of the Service infringes their U.S. copyright, trademark, or registered patent.

Process. The indemnified party must give prompt notice, reasonable cooperation, and let the indemnifying party control the defense. No settlements that impose liability or admissions on the other party without written consent.

13. Disputes, governing law, and arbitration

• Law. New York law governs, without regard to conflict-of-law rules.
• Arbitration & class waiver. Any dispute relating to these Terms will be resolved by binding arbitration administered by JAMS under its Commercial Rules. You and SourceSight agree to bring claims only in your individual capacities, not as class actions or representative suits.
• Court carve-outs. Either party may seek temporary injunctive relief in state or federal courts in New York County to protect IP or Confidential Information, and may seek to confirm or enforce an arbitral award in any court of competent jurisdiction.

14. Compliance and other legal bits

• Export & sanctions. You won't use the Service in violation of U.S./EU/UK export laws or sanctions, or if you are on a restricted-party list.
• Assignment. You can assign these Terms to a successor in a merger, acquisition, or sale of substantially all assets or voting rights. We may assign these Terms without consent.
• Notices. We send notices to your Admin email. You can reach us at: legal@belum.ai.
• Entire agreement. These Terms (plus any order form and incorporated policies) are the entire agreement. If a clause is unenforceable, the rest still applies.
• No waiver. If we don't enforce a term right away, we can still enforce it later.

15. Definitions (short and sweet)

Customer Data:

Information you or your users upload or enter through the Service.

De-identified/Aggregated:

Data altered and combined so no individual, household, or your organization can reasonably be identified.

Admin:

One or more users with rights to manage the account and billing.

AUP:

Our Acceptable Use Policy at https://www.belum.ai/legal/aup.

DPA:

Our Data Processing Addendum at /legal/dpa.