1.1 PHIflow, LLC. (“Company” or “we”) provides its Service (as defined below) to you through its web site located at https://phiflow.co/ (the “Site”), subject to this Terms of Service agreement (“TOS”). By accepting this TOS or by accessing or using the Service or Site, you acknowledge that you have read, understood, and agree to be bound by this TOS. If you are entering into this TOS on behalf of a company, business or other legal entity, you represent that you have the authority to bind such entity and its affiliates to this TOS, in which case the terms “you” or “your” shall refer to such entity and its affiliates. If you do not have such authority, or if you do not agree with this TOS, you must not accept this TOS and may not use the Service.
1.2 Company may change this TOS from time to time by providing thirty (30) days prior notice either by emailing the email address associated with your account or by posting a notice on the Site. You can review the most current version of this TOS at any time by logging into your account. The revised terms and conditions will become effective thirty (30) days after we post or send you notice of such changes, and if you use the Service after that date, your use will constitute acceptance of the revised terms and conditions. If any change to this TOS is not acceptable to you, your only remedy is stop using the Services and send a cancellation email to firstname.lastname@example.org.
1.3 As part of the registration process, you will identify an administrative user name and password for your account (“Account”). You may use the administrative user name and password to create standard users (each with a user password) up to the maximum number permitted in the applicable order form (“Order Form”).
2 Description of Service.The “Service” includes (a) the Site, (b) Company’s agreement analysis services and related technologies, and (c) all software (including the Software, as defined below), data, reports, text, images, sounds, video, and content made available through any of the foregoing (collectively referred to as the “Content”). Any new features added to or augmenting the Service are also subject to this TOS.
3 General Conditions/ Access and Use of the Service.
3.1 Subject to the terms and conditions of this TOS, you may access and use the Service only for lawful purposes. All rights, title and interest in and to the Service and its components will remain with and belong exclusively to Company. You shall not (a) sublicense, resell, rent, lease, transfer, assign, time share or otherwise commercially exploit or make the Service available to any third party; (b) use the Service in any unlawful manner (including without limitation in violation of any data, privacy or export control laws) or in any manner that interferes with or disrupts the integrity or performance of the Service or its components, or (c) modify, adapt or hack the Service to, or otherwise attempt to gain unauthorized access to the Service or its related systems or networks. You shall comply with any codes of conduct, policies or other notices Company provides you or publishes in connection with the Service, and you shall promptly notify Company if you learn of a security breach related to the Service.
3.2 Any software that may be made available by Company in connection with the Service (“Software”) contains proprietary and confidential information that is protected by applicable intellectual property and other laws. Subject to the terms and conditions of this TOS, Company hereby grants you a non-transferable, non-sublicensable and non-exclusive right and license to use the object code of any Software on a single device solely in connection with the Service, provided that you shall not (and shall not allow any third party to) copy, modify, create a derivative work of, reverse engineer, reverse assemble or otherwise attempt to discover any source code or sell, assign, sublicense or otherwise transfer any right in any Software. You agree not to access the Service by any means other than through the interface that is provided by Company for use in accessing the Service. Any rights not expressly granted herein are reserved and no license or right to use any trademark of Company or any third party is granted to you in connection with the Service.
3.3 You are solely responsible for all data, information, feedback, suggestions, text, content and other materials that you upload, post, deliver, provide or otherwise transmit or store (hereafter “post(ing)”) in connection with or relating to the Service (“Your Content”). You agree to cooperate with and provide reasonable assistance to Company in promoting and advertising the Services.
3.4 You are responsible for maintaining the confidentiality of your login, password and account and for all activities that occur under your login or account. Company reserves the right to access your account in order to respond to your requests for technical support. By posting Your Content on or through the Service, you hereby do and shall grant Company a worldwide, non-exclusive, perpetual, irrevocable, royalty-free, fully paid, sublicensable and transferable license to use, modify, reproduce, distribute, display, publish and perform Your Content in connection with the Service and for any other lawful purpose. Company has the right, but not the obligation, to monitor the Service, Content, or Your Content. You further agree that Company may remove or disable any Content at any time for any reason (including, but not limited to, upon receipt of claims or allegations from third parties or authorities relating to such Content), or for no reason at all.
3.5 You understand that the operation of the Service, including Your Content, may be unencrypted and involve (a) transmissions over various networks; (b) changes to conform and adapt to technical requirements of connecting networks or devices and (c) transmission to Company’s third party vendors and hosting partners to provide the necessary hardware, software, networking, storage, and related technology required to operate and maintain the Service. Accordingly, you acknowledge that you bear sole responsibility for adequate security, protection and backup of Your Content. Company will have no liability to you for any unauthorized access or use of any of Your Content, or any corruption, deletion, destruction or loss of any of Your Content.
3.6 You shall be responsible for obtaining and maintaining any equipment and ancillary services needed to connect to, access or otherwise use the Services, including, without limitation, modems, hardware, server, software, operating system, networking, web servers, long distance and local telephone service (collectively, “Equipment”). You shall be responsible for ensuring that such Equipment is compatible with the Services (and, to the extent applicable, the Software) and complies with all configurations and specifications set forth in Company’s published policies then in effect. You shall also be responsible for maintaining the security of the Equipment, your Account, passwords (including but not limited to administrative and user passwords) and files, and for all uses of your Account or the Equipment with or without your knowledge or consent.
3.7 The failure of Company to exercise or enforce any right or provision of this TOS shall not be a waiver of that right. You acknowledge that this TOS is a contract between you and Company, even though it is electronic and is not physically signed by you and Company, and it governs your use of the Service.
3.8 Company reserves the right to use your name and/or company name as a reference for marketing or promotional purposes on Company’s website and in other communication with existing or potential Company customers. To decline Company this right you need to email email@example.com stating that you do not wish to be used as a reference.
3.9 Subject to the terms hereof, Company may (but has no obligation to) provide technical support services, through email in accordance with our standard practice.
4 Representations and Warranties. You represent and warrant to Company that (i) you have full power and authority to enter into this TOS; (ii) you own all Your Content or have obtained all permissions, releases, rights or licenses required to engage in your posting and other activities (and allow Company to perform its obligations) in connection with the Services without obtaining any further releases or consents; (iii) Your Content and other activities in connection with the Service, and Company’s exercise of all rights and license granted by you herein, do not and will not violate, infringe, or misappropriate any third party’s copyright, trademark, right of privacy or publicity, or other personal or proprietary right, nor does Your Content contain any matter that is defamatory, obscene, unlawful, threatening, abusive, tortious, offensive or harassing; (iv) you are eighteen (18) years of age or older; and (v) that in no instance will Your Content contain any protected health information as defined under the Health Insurance Portability and Accountability Act of 1996,as amended.
5 Termination. You have the right to terminate your account at any time by sending a cancellation request to firstname.lastname@example.org. Subject to earlier termination as provided below, Company may terminate your Account and this TOS at any time by providing thirty (30) days prior notice to the administrative email address associated with your Account. In addition to any other remedies we may have, Company may also terminate this TOS upon thirty (30) days’ notice (or ten (10) days in the case of nonpayment), if you breach any of the terms or conditions of this TOS. Company reserves the right to modify or discontinue, temporarily or permanently, the Service (or any part thereof). All of Your Content on the Service (if any) may be permanently deleted by Company upon any termination of your account in its sole discretion. However, all accrued rights to payment and the terms of Section 4-12 shall survive termination of this TOS.
6 DISCLAIMER OF WARRANTIES. The Services may be temporarily unavailable for scheduled maintenance or for unscheduled emergency maintenance, either by Company or by third-party providers, or because of other causes beyond our reasonable control. HOWEVER, THE SERVICE, INCLUDING THE SITE AND CONTENT, AND ALL SERVER AND NETWORK COMPONENTS ARE PROVIDED ON AN “AS IS” AND “AS AVAILABLE” BASIS WITHOUT ANY WARRANTIES OF ANY KIND, AND COMPANY EXPRESSLY DISCLAIMS ANY AND ALL WARRANTIES, WHETHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY, TITLE, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. YOU ACKNOWLEDGE THAT COMPANY DOES NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, TIMELY, SECURE, ERROR-FREE OR VIRUS-FREE, NOR DOES IT MAKE ANY WARRANTY AS TO THE RESULTS THAT MAY BE OBTAINED FROM USE OF THE SERVICES, AND NO INFORMATION, ADVICE OR SERVICES OBTAINED BY YOU FROM COMPANY OR THROUGH THE SERVICE SHALL CREATE ANY WARRANTY NOT EXPRESSLY STATED IN THIS TOS.
7 LIMITATION OF LIABILITY.
7.1 UNDER NO CIRCUMSTANCES AND UNDER NO LEGAL THEORY (WHETHER IN CONTRACT, TORT, OR OTHERWISE) SHALL COMPANY BE LIABLE TO YOU OR ANY THIRD PARTY FOR (A) ANY INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, CONSEQUENTIAL OR PUNITIVE DAMAGES, INCLUDING LOST PROFITS, LOST SALES OR BUSINESS, LOST DATA, OR (B) FOR ANY DIRECT DAMAGES, COSTS, LOSSES OR LIABILITIES IN EXCESS OF THE FEES ACTUALLY PAID BY YOU IN THE SIX (6) MONTHS PRECEDING THE EVENT GIVING RISE TO YOUR CLAIM OR, IF NO FEES APPLY, ONE HUNDRED ($100) U.S. DOLLARS. THE PROVISIONS OF THIS SECTION ALLOCATE THE RISKS UNDER THIS TOS BETWEEN THE PARTIES, AND THE PARTIES HAVE RELIED ON THESE LIMITATIONS IN DETERMINING WHETHER TO ENTER INTO THIS TOS.
7.2 Some states do not allow the exclusion of implied warranties or limitation of liability for incidental or consequential damages, which means that some of the above limitations may not apply to you. IN THESE STATES, COMPANY’S LIABILITY WILL BE LIMITED TO THE GREATEST EXTENT PERMITTED BY LAW.
8 Indemnification. You shall defend, indemnify, and hold harmless Company from and against any claims, actions or demands, including without limitation reasonable legal and accounting fees, arising or resulting from your breach of this TOS, any of Your Content, or your other access, contribution to, use or misuse of the Service. Company shall provide notice to you of any such claim, suit or demand. Company reserves the right to assume the exclusive defense and control of any matter which is subject to indemnification under this section. In such case, you agree to cooperate with any reasonable requests assisting Company’s defense of such matter.
9 U.S. Government Matters. You may not remove or export from the United States or allow the export or re-export of the Services or anything related thereto, or any direct product thereof in violation of any restrictions, laws or regulations of the United States Department of Commerce, the United States Department of Treasury Office of Foreign Assets Control, or any other United States or foreign agency or authority. As defined in FAR section 2.101, the software and documentation installed by Company on your Equipment (if applicable) are “commercial items” and according to DFAR section 252.227 7014(a)(1) and (5) are deemed to be “commercial computer software” and “commercial computer software documentation.” Consistent with DFAR section 227.7202 and FAR section 12.212, any use modification, reproduction, release, performance, display, or disclosure of such commercial software or commercial software documentation by the U.S. Government will be governed solely by the terms of this TOS and will be prohibited except to the extent expressly permitted by the terms of this TOS.
10 Assignment. You may not assign this TOS without the prior written consent of Company, but Company may assign or transfer this TOS, in whole or in part, without restriction.
11 Miscellaneous. If any provision of this TOS is found to be unenforceable or invalid, that provision will be limited or eliminated to the minimum extent necessary so that this TOS will otherwise remain in full force and effect and enforceable. Both parties agree that this TOS, together with any Order Form, is the complete and exclusive statement of the mutual understanding of the parties and supersedes and cancels all previous written and oral agreements, communications and other understandings relating to the subject matter of this TOS, and that all waivers and modifications must be in a writing signed by both parties, except as otherwise provided herein. No agency, partnership, joint venture, or employment is created as a result of this TOS and you do not have any authority of any kind to bind Company in any respect whatsoever. In any action or proceeding to enforce rights under this TOS, the prevailing party will be entitled to recover costs and attorneys’ fees. All notices under this TOS will be in writing and will be deemed to have been duly given when received, if personally delivered; when receipt is electronically confirmed, if transmitted by facsimile or email; the day after it is sent, if sent for next day delivery by recognized overnight delivery service; and upon receipt, if sent by certified or registered mail, return receipt requested.
12 Governing Law. This TOS shall be governed by the laws of the State of Delaware without regard to the principles of conflicts of law. Unless otherwise elected by Company in a particular instance, you hereby expressly agree to submit to the exclusive personal jurisdiction of the federal and state courts of the State of Delaware for the purpose of resolving any dispute relating to your access to or use of the Service.
Information We Collect:When you interact with us through the Services, we may collect Personal Data and other information from you, as further described below:
Aggregated Personal Data: In an ongoing effort to better understand and serve the users of the Services, Company often conducts research on its customer demographics, interests and behavior based on the Personal Data and other information provided to us. This research may be compiled and analyzed on an aggregate basis, and Company may share this aggregate data with its affiliates, agents and business partners. This aggregate information does not identify you personally. Company may also disclose aggregated user statistics in order to describe our services to current and prospective business partners, and to other third parties for other lawful purposes.
Our Use of Your Personal Data and Other Information:
Our Disclosure of Your Personal Data and Other Information: Company is not in the business of selling your information. We consider this information to be a vital part of our relationship with you. There are, however, certain circumstances in which we may share your Personal Data with certain third parties without further notice to you, as set forth below:
Business Transfers: As we develop our business, we might sell or buy businesses or assets. In the event of a corporate sale, merger, reorganization, dissolution or similar event, Personal Data may be part of the transferred assets.
Agents, Consultants and Related Third Parties: Company, like many businesses, sometimes hires other companies to perform certain business-related functions. Examples of such functions include mailing information, maintaining databases and processing payments. When we employ another entity to perform a function of this nature, we only provide them with the information that they need to perform their specific function.
Legal Requirements: Company may disclose your Personal Data if required to do so by law or in the good faith belief that such action is necessary to (i) comply with a legal obligation, (ii) protect and defend the rights or property of Company, (iii) act in urgent circumstances to protect the personal safety of users of the Services or the public, or (iv) protect against legal liability.
You can visit the Site without providing any Personal Data. If you choose not to provide any Personal Data, you may not be able to use certain Services.
Links to Other Web Sites:
Company takes reasonable steps to protect the Personal Data provided via the Services from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. However, no Internet or email transmission is ever fully secure or error free. In particular, email sent to or from the Services may not be secure. Therefore, you should take special care in deciding what information you send to us via email. Please keep this in mind when disclosing any Personal Data to Company via the Internet.
Other Terms and Conditions:
Your access to and use of the Services is subject to the Terms of Service available when logging in.
Access to Information; Contacting Company:
There are a number of steps we take to ensure you and those you have authorized are the only ones who can access your company’s data and that your privacy is respected.
Data storage All data is stored electronically in the United States (eastern and western regions) on the Azure App Services infrastructure. The database containing your data is only accessible from the application servers and no outside sources are allowed to connect to the database.
Data access and authentication Only PHIflow engineers which require such access to perform their job efficiently are given access. Engineers are given different access rights on different system components based on job requirements. Engineers who do have access, have their own credentials and these are only valid when used from specific IPs with two-factor authentication.
Data access and backup At PHIflow, we keep your data safe in the case of system failure. Our database supports point-in-time restore (PITR) by creating full backups weekly, differential backups every 12 hours, and transaction log backups every 5-10 minutes, with the frequency based on the performance level and amount of database activity. The PITR backups are geo-redundant and protected by Azure Storage cross-regional replication.
Architecture & Security Data in transfer is encrypted and authenticated using TLS 1.2, ECDHE_RSA with P-256 key exchange and AES_256_GCM cipher. The web application firewall (WAF) provides centralized protection from common exploits and vulnerabilities. Intrusion protection system (IPS) software is in place as a second layer of security, which will block access as soon as any suspicious login activity is detected.