Terms of Service

1. Introduction and Acceptance

These Terms of Service ("Terms") constitute a legally binding agreement between you ("User," "you," or "your") and Exomations ("Company," "we," "us," or "our"), governing your access to and use of the Exomations platform, website, APIs, documentation, and all related services (collectively, the "Service").

By creating an account, accessing, or using the Service, you acknowledge that you have read, understood, and agree to be bound by these Terms and our Privacy Policy. If you are using the Service on behalf of an organization, you represent and warrant that you have the authority to bind that organization to these Terms.

If you do not agree to these Terms, you must not access or use the Service. We reserve the right to modify these Terms at any time. Material changes will be communicated through the Service or via email to registered users.

2. Definitions

• "Tenant" means an organization or entity registered on the platform, representing a logically isolated workspace with its own users, data, flows, and configurations.
• "Flow" means an automation workflow created within the Service, consisting of connected nodes that define a sequence of actions.
• "Execution" means a single run of a Flow, triggered by webhook, schedule, API call, or manual action.
• "Node" means an individual step within a Flow that performs a specific action (e.g., HTTP request, email, condition, data transformation).
• "Connection" means a configured profile for connecting to an external service or API, including encrypted credentials.
• "API Key" means a cryptographic token generated for programmatic access to the Service's APIs.
• "Plan" means the subscription tier selected by the User (Starter, Pro, or Enterprise), each with defined usage limits and feature access.

3. Description of Service

Exomations is a multi-tenant enterprise iPaaS (Integration Platform as a Service) for automation and orchestration that provides:

• Visual flow building with 22+ node types for designing automation workflows
• Two operating modes: Simple (for basic automations) and Orchestration (for enterprise workflows)
• Secure encrypted storage of third-party connection credentials
• Background workflow execution with automatic retry and failure handling
• AI-powered flow generation, node recommendations, and template discovery
• Multi-channel notifications via Email, SMS, and WhatsApp
• Role-based access control with five permission levels
• Comprehensive monitoring, observability, and audit logging
• API-first architecture with webhook triggers and programmatic access

The specific features and usage limits available to you depend on your selected Plan tier. Feature availability may change with platform updates, and we will provide reasonable notice before removing significant functionality.

4. Account Registration and Security

4.1 Registration

To use the Service, you must create an account by providing accurate, current, and complete registration information, including your organization name, email address, username, and password. You must verify your identity by completing a 1 SAR verification payment during registration. This payment serves to validate your payment method and is non-refundable.

4.2 Account Security

You are solely responsible for maintaining the confidentiality of your account credentials and for all activities that occur under your account. You agree to:

• Use a strong, unique password for your account
• Not share your account credentials with any unauthorized person
• Immediately notify us at security@exomations.com if you suspect any unauthorized access to your account
• Revoke compromised API keys immediately through the Settings page

4.3 Account Types and Roles

Each Tenant supports multiple user accounts with role-based permissions: Super Owner, Owner, Admin, Developer, and Viewer. The account creator automatically receives Owner privileges. Owners and Admins may invite additional users and assign roles. Each role has specific permissions governing access to features, data, and administrative functions.

5. Subscription Plans, Pricing, and Payment

5.1 Plan Tiers

The Service is offered in three plan tiers (Starter, Pro, and Enterprise), each with specific limits on monthly executions, active flows, team members, and available features. Current pricing and plan details are available on our Pricing page.

5.2 Free Trial

New accounts receive a 7-day free trial following successful completion of the 1 SAR verification payment. During the trial period, you have full access to the features included in your selected plan. At the end of the trial period, your payment method will be automatically charged the full monthly subscription fee for your selected plan.

5.3 Billing and Payment

All prices are quoted in Saudi Riyals (SAR). Payments are processed through PayTabs, a PCI DSS-compliant payment gateway authorized by the Saudi Arabian Monetary Authority (SAMA). By subscribing, you authorize us to charge your payment method on a recurring monthly basis.

• Subscription fees are charged in advance on a monthly basis
• Your card is tokenized during the verification payment for automatic recurring billing
• You may update your payment method at any time through the Billing page
• All amounts are inclusive of applicable Value Added Tax (VAT) at 15% as required by Saudi tax regulations, unless otherwise stated

5.4 Plan Changes

You may upgrade your plan at any time. Upgrades take effect immediately. Downgrades take effect at the start of the next billing cycle. When downgrading, you are responsible for ensuring your usage falls within the limits of the new plan tier.

5.5 Refund Policy

Subscription fees are generally non-refundable, except: (a) where required by the laws of the Kingdom of Saudi Arabia, including consumer protection regulations; (b) if the Service was materially unavailable for an extended period due to our fault; or (c) if you were charged in error. Refund requests must be submitted within 14 days of the charge to billing@exomations.com.

6. Usage Limits and Fair Use

Each plan tier includes defined limits. When you approach or exceed these limits:

• Execution Limits: Executions exceeding your monthly allocation will be queued or paused until the next billing cycle or plan upgrade.
• Flow Limits: You may not create new flows beyond your plan's maximum. Existing flows remain active.
• User Limits: You may not invite new users beyond your plan's maximum. Existing users retain access.
• Rate Limiting: API endpoints are subject to per-plan rate limits to ensure fair access for all users. Exceeding rate limits will result in temporary throttling (HTTP 429 responses).

We reserve the right to throttle or suspend accounts that engage in abusive usage patterns, including but not limited to: excessive API calls intended to overload the system, use of the Service for cryptocurrency mining, or automated account creation.

7. Data Ownership and Intellectual Property

7.1 Your Data

You retain all ownership rights to your data, including flow configurations, connection credentials, execution payloads, and any content you create or upload to the Service ("User Data"). Exomations does not claim any intellectual property rights over User Data.

7.2 License to Us

You grant Exomations a limited, non-exclusive, worldwide license to use, process, and store your User Data solely for the purpose of providing and improving the Service. This license terminates when you delete your data or close your account.

7.3 Our Intellectual Property

The Service, including its software, design, logos, trademarks, documentation, and all related intellectual property, is owned by Exomations and protected by copyright, trademark, and other intellectual property laws of the Kingdom of Saudi Arabia and international treaties. You are granted a limited, non-exclusive, non-transferable, revocable license to use the Service in accordance with these Terms.

7.4 Feedback

If you provide suggestions, feature requests, or other feedback regarding the Service, you grant us an unrestricted, irrevocable, perpetual, royalty-free license to use such feedback for any purpose without obligation to you.

8. API Keys and Programmatic Access

API keys generated through the Service are subject to the following conditions:

• API keys are displayed only once upon generation and cannot be recovered. You are responsible for storing them securely.
• All actions performed using your API keys are attributed to your account and tenant.
• Compromised or leaked API keys must be revoked immediately through the Settings page.
• API keys are subject to the same rate limits and plan restrictions as your account.
• We reserve the right to revoke API keys that are used in violation of these Terms or that pose a security risk.
• You must not share API keys with unauthorized third parties or embed them in client-side code, public repositories, or any publicly accessible location.

Public API scope. The publicly documented API surface (available at /docs) is intentionally limited to tenant-builder operations — flows, executions, connections, webhooks, audit logs, billing, and similar resources. Internal endpoints powering AI features, the Co-Pilot, support chat, voice recordings, the marketplace, and other in-app-only capabilities are not part of the public API and are not supported for programmatic use, even if technically reachable. We may change, restrict, or remove undocumented endpoints at any time without notice.

9. Acceptable Use Policy

You agree not to use the Service to:

• Violate any applicable local, national, or international law or regulation, including Saudi Arabian laws and regulations
• Infringe upon the intellectual property rights of any third party
• Transmit, store, or process any content that is unlawful, harmful, threatening, abusive, harassing, defamatory, or otherwise objectionable
• Distribute malware, viruses, or any other harmful code through the platform
• Attempt to gain unauthorized access to the Service, other accounts, or connected systems
• Reverse engineer, decompile, disassemble, or attempt to derive the source code of the Service
• Circumvent, disable, or interfere with security features of the Service
• Use the Service to send unsolicited commercial messages (spam) via email, SMS, or WhatsApp channels
• Resell, sublicense, or provide the Service to third parties without explicit written authorization
• Use the Service for any activity that violates Islamic Sharia principles as applicable under Saudi law
• Use the Service for money laundering, terrorist financing, or any sanctioned activity
• Scrape, data mine, or extract data from the Service for competitive purposes

Violation of this Acceptable Use Policy may result in immediate suspension or termination of your account without prior notice or refund.

10. Third-Party Integrations

The Service allows you to connect to third-party services and APIs through Connection profiles. By configuring integrations, you acknowledge and agree that:

• You are solely responsible for ensuring you have proper authorization to access and use the third-party services you connect to
• Connection credentials are encrypted and stored securely, but you bear responsibility for the validity and scope of the credentials you provide
• Exomations is not responsible for the availability, accuracy, or performance of third-party services
• Your use of third-party services through the platform is subject to those services' own terms of service and privacy policies
• Data exchanged with third-party services during flow execution is governed by the respective third party's data handling practices

11. AI-Powered Features

The Service includes AI-powered features for flow generation, node recommendations, template discovery, error diagnosis, and the in-app Co-Pilot assistant. These features are available only inside the authenticated web application and are not exposed through our public API. By using them, you acknowledge that:

• AI-generated flows, recommendations, and suggestions are provided as drafts and should be reviewed and validated before activation
• Exomations is not responsible for the accuracy, completeness, or suitability of AI-generated content
• Your prompts and flow context (with credentials, payment data, and other sensitive values redacted) may be processed by third-party AI service providers, currently OpenAI accessed through Replit AI Integrations
• AI features may incur additional per-use fees (e.g., Multi-System Architect flow generation) as displayed at the time of use
• AI-generated content may not be unique and similar outputs may be generated for other users with similar prompts
• The Co-Pilot assistant may describe actions it intends to take; you remain responsible for reviewing and confirming any changes before they take effect on your tenant

12. Service Availability and Support

12.1 Availability

We strive to maintain high availability of the Service but do not guarantee uninterrupted or error-free operation. Planned maintenance windows will be communicated in advance when possible. We are not liable for any downtime caused by factors beyond our reasonable control, including force majeure events, internet service disruptions, or third-party service outages.

12.2 Support

Support is provided based on your plan tier. All plans include access to documentation and in-app support. Enterprise plan subscribers receive priority support. Support requests can be submitted through the in-app support center or by contacting support@exomations.com.

13. Suspension and Termination

13.1 Termination by You

You may terminate your account at any time by contacting support@exomations.com. Upon termination: (a) your access to the Service will be deactivated; (b) your data will be retained for 30 days to allow for data export requests; (c) after 30 days, your data will be permanently deleted except where retention is required by law.

13.2 Termination or Suspension by Us

We may suspend or terminate your access to the Service, with or without notice, if:

• You breach any provision of these Terms or the Acceptable Use Policy
• Your payment fails and remains unresolved after reasonable notice
• Your account shows signs of fraudulent activity or unauthorized access
• Required by law, regulation, or court order
• Necessary to protect the security, integrity, or availability of the Service for other users

13.3 Effect of Termination

Upon termination, all rights granted to you under these Terms will immediately cease. Sections of these Terms that by their nature should survive termination shall survive, including but not limited to: intellectual property provisions, limitation of liability, indemnification, and governing law.

14. Disclaimer of Warranties

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, OR STATUTORY. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, EXOMATIONS DISCLAIMS ALL WARRANTIES, INCLUDING BUT NOT LIMITED TO:

• WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT
• WARRANTIES REGARDING THE ACCURACY, RELIABILITY, OR COMPLETENESS OF ANY CONTENT, DATA, OR RESULTS OBTAINED THROUGH THE SERVICE
• WARRANTIES THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, SECURE, OR FREE OF VIRUSES OR OTHER HARMFUL COMPONENTS
• WARRANTIES REGARDING THE PERFORMANCE OR AVAILABILITY OF THIRD-PARTY SERVICES ACCESSED THROUGH THE PLATFORM

You acknowledge that you use the Service at your own risk and that you are solely responsible for any damage to your systems or loss of data resulting from your use of the Service.

15. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL EXOMATIONS, ITS DIRECTORS, EMPLOYEES, PARTNERS, AGENTS, SUPPLIERS, OR AFFILIATES BE LIABLE FOR:

• ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES
• ANY LOSS OF PROFITS, REVENUE, DATA, GOODWILL, OR OTHER INTANGIBLE LOSSES
• ANY DAMAGES ARISING FROM YOUR USE OF OR INABILITY TO USE THE SERVICE
• ANY DAMAGES ARISING FROM UNAUTHORIZED ACCESS TO OR ALTERATION OF YOUR DATA
• ANY DAMAGES ARISING FROM THE CONDUCT OF ANY THIRD PARTY ON THE SERVICE
• ANY DAMAGES ARISING FROM ERRORS, FAILURES, OR DELAYS IN FLOW EXECUTIONS OR INTEGRATIONS

IN NO EVENT SHALL OUR TOTAL AGGREGATE LIABILITY EXCEED THE GREATER OF: (A) THE TOTAL AMOUNT PAID BY YOU TO EXOMATIONS IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM, OR (B) ONE HUNDRED SAUDI RIYALS (100 SAR).

SOME JURISDICTIONS DO NOT ALLOW THE EXCLUSION OR LIMITATION OF CERTAIN DAMAGES. IF THESE LAWS APPLY TO YOU, SOME OR ALL OF THE ABOVE EXCLUSIONS OR LIMITATIONS MAY NOT APPLY, AND YOU MAY HAVE ADDITIONAL RIGHTS.

16. Indemnification

You agree to indemnify, defend, and hold harmless Exomations and its officers, directors, employees, agents, and affiliates from and against any and all claims, damages, obligations, losses, liabilities, costs, and expenses (including reasonable attorneys' fees) arising from: (a) your use of the Service; (b) your violation of these Terms; (c) your violation of any applicable law or regulation; (d) your infringement of any intellectual property or other right of any third party; or (e) any data or content you transmit through the Service.

17. Governing Law and Dispute Resolution

17.1 Governing Law

These Terms shall be governed by and construed in accordance with the laws of the Kingdom of Saudi Arabia, without regard to conflict of law principles. The regulations issued by the Saudi Data and Artificial Intelligence Authority (SDAIA), the Communications, Space, and Technology Commission (CST), and other relevant Saudi regulatory bodies shall apply as applicable.

17.2 Dispute Resolution

In the event of any dispute arising from or relating to these Terms or the Service, the parties agree to first attempt to resolve the dispute through good-faith negotiation for a period of thirty (30) days. If the dispute cannot be resolved through negotiation, it shall be submitted to the competent courts of the Kingdom of Saudi Arabia, which shall have exclusive jurisdiction.

17.3 Saudi Arbitration

For commercial disputes involving Enterprise plan subscribers, the parties may agree to submit the dispute to arbitration administered under the Saudi Arbitration Law (Royal Decree No. M/34 dated 24/5/1433H) and the Arbitration Rules of the Saudi Center for Commercial Arbitration (SCCA). The arbitration shall be conducted in Riyadh, Kingdom of Saudi Arabia, in the Arabic language (with English translation available upon request).

18. Compliance with Saudi Regulations

The Service is designed and operated in compliance with applicable Saudi Arabian laws and regulations, including but not limited to:

• Personal Data Protection Law (PDPL): Royal Decree M/19, governing the collection, processing, and transfer of personal data
• Anti-Cyber Crime Law: Royal Decree M/17, dated 8/3/1428H, governing cyber security and electronic transactions
• Electronic Transactions Law: Royal Decree M/18, dated 8/3/1428H, governing electronic commerce and digital agreements
• E-Commerce Law: Governing online business activities and consumer protection in electronic transactions
• VAT Regulations: Implementation of Value Added Tax at 15% as mandated by the General Authority of Zakat and Tax (GAZT)
• Anti-Money Laundering Law: Compliance with AML regulations and customer due diligence requirements

19. Consumer Protection

In accordance with Saudi consumer protection regulations issued by the Ministry of Commerce:

• All pricing is displayed clearly before you commit to a purchase
• You have the right to cancel your subscription at any time without penalty
• Refund rights under Saudi consumer protection law are preserved regardless of any terms in this agreement
• We provide clear and accurate descriptions of all services and features
• Complaints can be filed through the Ministry of Commerce's consumer protection channels if not resolved directly with us

20. Force Majeure

Neither party shall be liable for any failure or delay in performance arising out of causes beyond its reasonable control, including but not limited to: acts of God, natural disasters, epidemics or pandemics, war, terrorism, riots, government actions, power failures, internet or telecommunications failures, denial-of-service attacks, or any other events that are unforeseeable and beyond the reasonable control of the affected party. If a force majeure event continues for more than sixty (60) consecutive days, either party may terminate these Terms upon written notice.

21. General Provisions

21.1 Entire Agreement

These Terms, together with the Privacy Policy and any order forms or service-level agreements, constitute the entire agreement between you and Exomations regarding the Service and supersede all prior agreements, understandings, and communications.

21.2 Severability

If any provision of these Terms is held to be invalid, illegal, or unenforceable under applicable law, the remaining provisions shall continue in full force and effect. The invalid provision shall be modified to the minimum extent necessary to make it valid and enforceable.

21.3 Waiver

No waiver of any term or condition shall be deemed a further or continuing waiver of such term or any other term. Our failure to enforce any provision of these Terms shall not constitute a waiver of our right to enforce that provision in the future.

21.4 Assignment

You may not assign or transfer your rights or obligations under these Terms without our prior written consent. We may assign our rights and obligations without restriction, including in connection with a merger, acquisition, or sale of assets.

21.5 Language

These Terms are drafted in English. In the event of any conflict between the English version and any translation, the English version shall prevail, except where prohibited by applicable law. For disputes subject to Saudi Arabian jurisdiction, an Arabic translation may be required and shall be provided upon request.

22. Contact Information

For questions, concerns, or notices regarding these Terms of Service, please contact us: