Terms of Service

These Terms of Service ("Terms") govern your access to and use of the Xpera website, web application, API and related services (together, the "Service"), provided by Xpera ("Xpera", "we", "us").

By creating an account, starting a trial, purchasing a subscription or otherwise using the Service, you agree to these Terms. If you use the Service on behalf of an organization, you confirm that you are authorized to bind that organization, and "you" refers to that organization.

If you do not agree to these Terms, do not use the Service.

Xpera analyzes the configuration of automation workflows (such as Make.com scenarios and n8n workflows), AI agents and connected CRM systems to identify potential security risks. The Service:

• analyzes workflow definitions as inert data and never runs, activates, modifies or replays your workflows;
• connects to third-party platforms only with read-only access that you grant, and only to read workflow and agent configuration;
• reports potential risks based on configuration. Findings describe what could happen; they are not proof that a vulnerability exists or that a breach occurred.

The Service supports your security work; it does not replace your own security review, testing or professional advice. You remain responsible for decisions you make based on its results.

You must provide accurate information when you sign up and keep your login credentials confidential. You are responsible for all activity under your account and your organization.

Organization admins control membership and roles (Organization Admin, Security Analyst, Viewer) and are responsible for who in their organization has access to its data.

You must be at least 18 years old and able to form a binding contract to use the Service. Notify us promptly at [email protected] if you suspect unauthorized access to your account.

You keep all rights to the workflow definitions, configuration and other content you upload or connect ("Customer Data"). You grant Xpera a limited license to host, process and analyze Customer Data only to provide, secure and support the Service for you.

You confirm that you have the rights and permissions needed to submit Customer Data and to connect third-party accounts to the Service, and that doing so does not violate any agreement or law that applies to you.

We handle personal information as described in our Privacy Policy.

You agree not to:

• use the Service to analyze systems or workflows you are not authorized to assess;
• upload malware or content designed to disrupt, overload or exploit the Service;
• attempt to access another organization's data, probe or bypass security or rate limits, or reverse engineer the Service except as the law expressly permits;
• resell, sublicense or provide the Service to third parties outside your organization without our written consent;
• use the Service in violation of any applicable law or third-party terms, including the terms of the platforms you connect.

We may suspend access that we reasonably believe violates this section or puts the Service or other customers at risk.

The Service integrates with third-party platforms such as Make.com, n8n and CRM providers. Your use of those platforms is governed by their own terms. We are not responsible for third-party services, their availability, or changes to their APIs that affect the Service.

Paid plans are offered as subscriptions billed monthly or annually in advance, as shown on our pricing page at the time of purchase. New subscriptions include a 14-day free trial unless stated otherwise.

Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders. Paddle provides all customer service inquiries and handles returns. Paddle's checkout terms apply to your purchase.

Subscriptions renew automatically at the end of each billing period until cancelled. Unless you cancel before the trial ends, your payment method is charged when the trial ends. You can cancel at any time; cancellation takes effect at the end of the current billing period.

Prices may change. We will give you notice of a price change before it applies to your next renewal. Prices exclude taxes, which Paddle calculates and collects where required.

Refunds are described in our Refund Policy.

Xpera and its licensors own the Service, including its software, detection rules, knowledge base, design and documentation. Subject to these Terms, we grant you a limited, non-exclusive, non-transferable right to use the Service for your internal business purposes during your subscription.

If you send us feedback or suggestions, we may use them without obligation to you.

We treat Customer Data as confidential and protect it with technical and organizational measures appropriate to its nature, including encryption of stored integration credentials and tenant isolation. No system is perfectly secure, and we cannot guarantee that unauthorized access will never occur.

You may stop using the Service and cancel your subscription at any time. We may suspend or terminate your access if you materially breach these Terms and do not cure the breach after notice, or immediately where required to prevent harm or comply with law.

After termination, your right to use the Service ends. You can ask us to delete your organization's data, and we will delete it within a reasonable period, except where we must keep it to comply with law.

The Service is provided "as is" and "as available". To the maximum extent permitted by law, Xpera disclaims all warranties, express or implied, including warranties of merchantability, fitness for a particular purpose and non-infringement. We do not warrant that the Service will detect every risk, that findings will be free of false positives or negatives, or that the Service will be uninterrupted or error-free.

To the maximum extent permitted by law, Xpera will not be liable for any indirect, incidental, special, consequential or punitive damages, or for loss of profits, revenue, data or goodwill, arising out of or related to the Service.

To the maximum extent permitted by law, Xpera's total liability for all claims relating to the Service is limited to the amounts you paid for the Service in the 12 months before the event giving rise to the claim.

Nothing in these Terms limits liability that cannot be limited under applicable law.

You will defend and indemnify Xpera against third-party claims arising from Customer Data you submit without the necessary rights, or from your use of the Service in breach of these Terms or applicable law.

We may update the Service and these Terms from time to time. If we make material changes to these Terms, we will notify you by email or in the Service before they take effect. Continuing to use the Service after changes take effect means you accept the updated Terms.

These Terms, together with the Privacy Policy and Refund Policy, are the entire agreement between you and Xpera about the Service. If any provision is found unenforceable, the rest remains in effect. Our failure to enforce a provision is not a waiver. You may not assign these Terms without our consent; we may assign them in connection with a merger, acquisition or sale of assets.

Questions about these Terms can be sent to [email protected].