These Terms govern the use of dERP, the cloud software at derp.appzsight.com, provided by AppzSight (رؤية التطبيقات لتقنية المعلومات, CR# 101074623, Ajloun, Jordan — "we", "us") to the business that opens a dERP account (the "Customer", "you"). By creating an account, accepting a quote, or using dERP, you accept these Terms on behalf of your business and confirm that you are authorized to do so. Our mobile apps have separate terms. How we handle personal data is explained in the dERP section of our Privacy Policy.

1. The Service

dERP is offered as modules. Your subscription states which ones you have:

• Costing — bills of materials, cost allocation, activity-based costing, budgets and actual costs, variance, scenarios, pricing and dashboards.
• Sales invoices with ZATCA e-invoicing — gold and jewellery — VAT invoices with calibre, weight, price per gram and making charge, connected to ZATCA's Fatoora platform (phase 2).
• Sales invoices with ZATCA e-invoicing — normal invoices — VAT invoices with description, quantity, unit, unit price and VAT, connected to Fatoora.

We improve dERP continuously. We may change features, but we will not remove a core function of a module you pay for during a paid period without giving you notice and, if you then cancel, a refund of the unused part.

2. Accounts and Users

• Your first user is your company's administrator. Administrators invite users, set their roles and remove them when they leave.
• Your subscription includes a number of active users. You can deactivate a user to free the place for someone else.
• Each user signs in with their own account. Do not share passwords. We strongly recommend two-factor sign-in, especially for administrators.
• You are responsible for what is done under your users' accounts. Tell us at once at info@appzsight.com if you suspect an account has been misused.

3. Free Trial

New accounts usually start with a free trial (normally 14 days). There is no charge and no obligation. When the trial ends, access pauses until a subscription starts. Your data is kept for at least 90 days after the trial ends, so you can continue where you left off.

4. Subscription and Pricing

• Price per customer: dERP is priced individually. Your monthly price depends on the size of your business, the number of users and the modules you choose. It is set out in the quote or order we agree with you.
• VAT: prices are before VAT. VAT, or any similar tax, is added where the law requires it.
• Payment in advance: you pay in advance for the number of months agreed (for example 1, 3 or 12 months), by bank transfer or another method we offer. Your subscription runs until the end of the period you have paid for.
• Invoices: we issue a tax invoice for each payment.
• Renewal: to continue, pay for the next period before the current one ends. dERP shows your administrators the date your subscription runs until.
• Price changes: your price does not change during a period you have paid for. We will tell you about any new price at least 30 days before it applies to your next renewal.
• More users or modules: you can add users or modules at any time. We will agree the new price with you before it applies.

5. Late Payment and Suspension

• If a paid period ends without a renewal, dERP keeps working for a 7-day grace period. After that, access pauses until payment is received. Your data is not deleted while access is paused, and everything works again as soon as you renew.
• If no payment is received within 90 days of the end of the paid period, we may close the account as described in section 7, after warning you by email.
• We may suspend access immediately, and tell you why, if needed to stop a security threat, a breach of section 11, or if the law requires it.

6. Refunds

Fees for a period that has started are not refundable, except: (a) where the law requires a refund; (b) if we end the service without you being at fault, in which case we refund the unused part of the period you paid for; or (c) as described in section 1. Payments for a period that has not started yet can be refunded in full if you cancel before it starts.

7. Cancellation and Closing an Account

• You can stop at any time by not renewing. You can also ask us to close your account early by emailing info@appzsight.com.
• We may end the service for your account with 30 days' written notice. We will refund any unused prepaid period.
• Export first: before an account is closed, export everything you need. Sales invoices and reports can be exported to Excel and PDF from within dERP, and on request we will provide a full export of your company's data, free of charge, within 30 days of closing.
• When an account is closed, we delete the company's data within 90 days. Deleted data disappears from our backups within 14 days after that.

8. Your Data

• All data you put into dERP ("Customer Data") belongs to you. You give us permission to host, process, back up and display it only as needed to provide dERP to you and to keep it secure.
• We do not sell Customer Data, use it for advertising, or use it to train AI models.
• We may look at Customer Data only to provide support you ask for, to fix a problem, to keep the service secure, or when the law requires it.
• We may use anonymous, aggregated statistics about how dERP is used (for example, which features are used most) to improve it. These never identify you, your customers or your users.

9. Tax, ZATCA and Your Responsibilities

• You are responsible for the correctness of everything you enter: seller details, customers, items, prices, VAT categories and amounts. This includes deciding when a VAT exemption or zero rate applies (for example investment gold).
• You are responsible for your registration with ZATCA, for generating the one-time password (OTP) needed to connect dERP to Fatoora, and for renewing the connection before its certificate expires.
• Issued invoices cannot be changed, as e-invoicing rules require. Corrections are made with credit or debit notes.
• You must keep your invoices and records for the period tax law requires. dERP keeps them while your account is open; export them before you close it.
• We keep dERP's ZATCA integration in line with ZATCA's published technical requirements and update it when they change. We are not responsible for ZATCA's systems, their availability, or ZATCA's decisions to reject or flag an invoice, nor for fines that result from incorrect data entered by you or from failing to act on a rejection or warning that dERP showed you.
• Costing results depend on the data and assumptions you enter. Business decisions based on them are yours.

10. Availability, Backups and Support

• We aim to keep dERP available at all times, apart from planned maintenance (which we try to do outside working hours) and events beyond our reasonable control. Unless we agree an uptime commitment with you in writing, dERP is provided without a guaranteed uptime level.
• The database is backed up automatically every night, and backups are kept for 14 days.
• Support is available by email at info@appzsight.com and WhatsApp at +962 79 965 8577 on business days. We answer as quickly as we can, normally within one business day.

11. Acceptable Use

You must not, and must not allow anyone to:

• use dERP for anything unlawful, or to issue false or misleading tax documents;
• try to access another company's data, or test, probe or break dERP's security;
• overload dERP (for example automated load testing) or disrupt it for other customers;
• copy, decompile or reverse-engineer dERP, or build a competing product from it;
• resell or give access to dERP to third parties outside your business without our written agreement.

API keys you create count as access by your business. Keep them secret.

12. Confidentiality

Each of us will keep the other's confidential information (including Customer Data, prices and non-public details of dERP) confidential, use it only for this agreement, and protect it at least as carefully as our own. This does not apply to information that is public, was already known, is independently developed, or must be disclosed by law (in which case, where allowed, we will tell the other first).

13. Intellectual Property

dERP, including its software, design and documentation, belongs to AppzSight. Your subscription gives your business a non-exclusive, non-transferable right to use dERP for its own business during the subscription. If you send us ideas or feedback, we may use them freely.

14. Warranties

We will provide dERP with reasonable skill and care. Apart from what these Terms state, dERP is provided "as is", and, to the extent the law allows, we make no other promises, for example that dERP will be error-free or fit for a purpose we were not told about.

15. Limitation of Liability

• Neither of us is liable for indirect or consequential losses, such as lost profits, lost business or lost revenue.
• Our total liability under these Terms in any 12 months is limited to the fees you paid us for dERP in those 12 months.
• These limits do not apply to liability that cannot be limited by law, such as for fraud or wilful misconduct.

16. Data Processing Agreement

This section applies when Customer Data includes personal data, for example your users' details or your customers' names, phone numbers, ID numbers and addresses on invoices.

16.1 Roles

You are the controller of that personal data and decide why it is processed. We are your processor and process it only to provide dERP, following your instructions as given by how you use and configure dERP. You confirm you have a lawful basis to enter that data into dERP and to send invoices to ZATCA.

16.2 Our Commitments

• We process the personal data only on your instructions, unless the law requires otherwise (in which case we will tell you, where allowed).
• Only staff who need access to support or run dERP have it, and they are bound by confidentiality.
• We keep appropriate security measures, including: encrypted connections (HTTPS, TLS 1.2 or later); passwords stored only as salted PBKDF2 hashes; optional two-factor sign-in and account lockout; separation of each company's data; ZATCA private keys and secrets stored encrypted; an audit trail of changes; and nightly backups.
• We will tell you without undue delay, and in any case within 72 hours of becoming aware of a personal data breach affecting your data, with the information we have and the steps we are taking.
• We will help you, as far as reasonably possible, to answer requests from people exercising their rights over their data, and with security and data-protection assessments.
• At the end of the service, we delete the personal data as described in section 7, unless the law requires us to keep it.
• On reasonable request, we will give you the information you need to check we comply with this section.

16.3 Sub-processors

You agree that we use these sub-processors:

• Contabo — server and database hosting (Dubai, UAE).
• SendGrid (Twilio) — sending dERP emails (receives the recipient address and the email content).

We will tell you at least 30 days before adding or replacing a sub-processor. If you have a reasonable objection, you may cancel and receive a refund of the unused prepaid period. Invoices sent to ZATCA are sent on your behalf to the tax authority, as e-invoicing law requires; ZATCA is not our sub-processor.

16.4 Location and Transfers

Customer Data is stored on our server in the United Arab Emirates. If you are subject to rules that require data to stay in a specific country (for example certain health or government data), tell us before entering such data so we can discuss a suitable hosting option.

16.5 Applicable Data-Protection Laws

Each of us will comply with the data-protection laws that apply to it, including, where applicable, the Saudi Personal Data Protection Law and the Jordanian Personal Data Protection Law.

17. Changes to These Terms

We may update these Terms. We will give at least 30 days' notice of important changes by email to your administrators or in dERP. Changes do not apply to a period you have already paid for if they would reduce your rights; in that case they apply from your next renewal. If you do not accept a change, you may stop renewing.

18. Governing Law and Language

These Terms are governed by the laws of the Hashemite Kingdom of Jordan, where AppzSight is registered. The courts of Jordan have exclusive jurisdiction over disputes, although we will always first try to resolve any disagreement with you directly and in good faith. These Terms are published in Arabic and English; if the two versions differ, the Arabic version prevails.

19. Contact

AppzSight — رؤية التطبيقات لتقنية المعلومات, CR# 101074623, Ajloun, Jordan · info@appzsight.com · +962 79 965 8577