Terms of Service

Spodus is offered to businesses and other organisations located in the United States, for business use. It is not offered to consumers, and it is not offered to businesses established in the European Economic Area, the United Kingdom or Switzerland.

You must be at least 18 and able to form a binding contract. You may not use Spodus if we’ve previously terminated your account, or if a law that applies to you prohibits it.

You’re responsible for what happens under your account: keeping credentials secret, enabling two-factor authentication where we offer it, managing who on your team has access, and removing people promptly when they leave.

Tell us at legal@spodus.com as soon as you suspect unauthorised access. We’ll help you contain it.

• Fees are those shown on our pricing page or in your order form, in US dollars, exclusive of tax.
• Renewal is automatic at the end of each billing period, at the then-current rate, until you cancel.
• Cancellation takes effect at the end of the current period. You keep access until then.
• Price changes apply from your next renewal, and we’ll email you at least 30 days beforehand.
• Non-payment may lead to suspension after we’ve told you and given you a reasonable chance to fix it.
• Taxes are yours, except taxes on our income.

Payments are handled by Stripe on their hosted checkout. We never receive your full card number. Fees are non-refundable except where these terms say otherwise or the law requires it, though if something goes genuinely wrong on our side, ask us; we’re reasonable.

Everything in this section describes a subscription, which is the only way Spodus is sold. If you bought a one-time licence before 20 August 2026, when we stopped offering them, there is no renewal, no cancellation and no billing period, and the section below governs instead.

Spodus is no longer sold this way. Until 20 August 2026 some Spodus licences were sold for a single payment rather than a subscription. That offer has been withdrawn and no new one-time licence can be bought. This section is kept because it still governs any licence purchased before that date: where you hold one, the terms below apply to you, and the renewal, cancellation and pro-rata provisions above do not.

• One payment. Charged once. There is no renewal date, no card kept on file and nothing to cancel. If a further Spodus charge ever appears on your statement, it is a mistake and we’ll refund it.
• 30-day refund. Ask within 30 days of your payment and we refund it in full. No questions asked, and no conditions about how much of the product you used — using it is what the 30 days are for. Write to legal@spodus.com or through our contact page.
• After 30 days the payment is non-refundable, because it bought a licence rather than a subscription you can stop.
• What the licence covers. The products, features and usage caps described to you at the time of purchase, for as long as we offer them, with no further payment. It is not a promise of every future product: something substantially new may be sold separately. The caps are fixed.
• Non-transferable. It is tied to the purchasing account and cannot be sold or moved to another company.
• If we retire a product you rely on, you get the 90 days’ notice described in Changes to the service and a full export. The pro-rated refund described there is a subscription remedy and cannot apply here — a one-time licence has no unused remainder to pro-rate — and the rest of your licence is unaffected.

What a refund does to your workspace. The licence ends and the workspace becomes read-only: your data stays readable and exportable, and only writes stop. Nothing is deleted on the day of the refund, and the 30-day export window in Ending the agreement applies from then.

You own everything you put into Spodus. We claim no ownership of it. You grant us only the narrow licence we need to host, process, transmit, back up and display that data in order to provide the service to you, and to do so through the sub-processors listed on our sub-processors page.

That licence exists to run the product and nothing else. Specifically, it does not permit us to sell your data, to use it for advertising, or to train machine-learning models on it.

Our handling of personal information inside your data is governed by our data processing agreement, which is incorporated into these terms.

Don’t use Spodus to:

• break the law, or help someone else break it;
• send unsolicited bulk email, or any email that violates CAN-SPAM;
• send text messages or place calls in violation of the Telephone Consumer Protection Act;
• upload malware, or attempt to breach, probe or overload our systems or anyone else’s;
• infringe intellectual property or misappropriate trade secrets;
• harass, defraud, or impersonate; or
• resell or white-label the service without our written agreement.

We may suspend an account that’s causing active harm to the service or to others, and we’ll tell you why as soon as we reasonably can.

Spodus is a general-purpose business system. It is not designed, contracted, audited or priced to carry the categories below, and uploading them creates legal obligations that neither of us has agreed to. You agree not to submit to Spodus:

• Protected health information as defined by HIPAA. We are not a business associate, we do not sign business associate agreements at this time, and Spodus must not be used in a way that would make us one.
• Consumer health data as defined by the Washington My Health My Data Act, Nevada SB 370, or any comparable state health-privacy law, including data that could reveal a health condition, diagnosis, treatment, or attempt to acquire health services.
• Full payment card numbers, magnetic stripe data, CVV codes, or PINs. Use a payment processor for those.
• Biometric identifiers or biometric information as defined by Illinois BIPA, Texas CUBI, or similar laws.
• Government-issued identifiers, including Social Security, driver’s licence and passport numbers, except in a field we have explicitly documented as supporting them.
• Personal information from children under 13, or any data subject to COPPA or FERPA.
• Classified, export-controlled, or CJIS-regulated information.

Spodus can connect to services we don’t run, such as your email or calendar provider. When you connect one, you authorise us to exchange data with it on your behalf, and that provider’s own terms and privacy policy govern what it does with that data. We aren’t responsible for a third-party service’s availability, security or content, and disconnecting one may reduce what Spodus can do.

We work hard to keep Spodus running. We do not publish an availability commitment or a status page today. Where you have a written availability commitment in an order form you signed, that document governs, including how credits are calculated and claimed.

We may need to take the service down for maintenance. Where it’s planned, we’ll give reasonable notice and aim for quiet hours. Emergency maintenance, security patching in particular, may have to happen without notice.

Support is provided by email to all customers. Response-time commitments and named contacts apply only where your plan or order form says so.

Products change. We may add, alter or retire features. If we discontinue something you materially rely on, we’ll give at least 90 days’ notice and, where we can’t offer a reasonable equivalent, a pro-rated refund for the unused remainder of your term. A one-time licence bought before 20 August 2026 has no term to pro-rate, so what it gets instead is the notice and a full export.

We may update these terms. For changes that materially affect your rights or obligations we’ll email account holders at least 30 days before they take effect. Continuing to use Spodus after that date means you accept them; if you don’t, cancel before then and we’ll refund the unused portion of your current term.

You may cancel at any time from your account settings. We may terminate for material breach that you’ve failed to cure within 30 days of written notice, or immediately where continuing would expose us or others to serious legal or security risk.

On termination, you have 30 days to export your data. Export is self-service and available throughout your subscription too; you never need our permission or cooperation to leave. If the export tooling fails during that window, tell us and we’ll extend it. We will not hold your data hostage over a billing dispute.

After 30 days we delete workspace data from live systems, and it ages out of backups within a further 90 days, as described in our privacy notice.

Each of us may learn non-public information about the other. Each of us agrees to protect the other’s confidential information with at least reasonable care, use it only to perform this agreement, and not disclose it except to people who need it and are bound to similar obligations. This does not apply to information that is public through no fault of the recipient, was already known, or is independently developed. Where disclosure is legally compelled, the recipient will give notice if permitted, so the other can seek protection.

We warrant that we’ll provide the service with reasonable skill and care, and in line with our data processing agreement.

Beyond that, and to the fullest extent the law allows, the service is provided “as is” without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose, and non-infringement. We do not warrant that the service will be uninterrupted or error-free, or that it will meet every requirement you have.

To the fullest extent permitted by law, neither party is liable for indirect, incidental, special, consequential or punitive damages, or for lost profits, revenue or data, even if advised such damages were possible.

Each party’s total aggregate liability arising out of this agreement is limited to the fees you paid us in the 12 months before the event giving rise to the claim.

These limits don’t apply to your obligation to pay fees, to either party’s indemnity obligations, or to liability that cannot be limited by law, including fraud, gross negligence, wilful misconduct, and death or personal injury caused by negligence.

We’ll defend you against a third-party claim that Spodus infringes that party’s US intellectual property rights, and pay damages finally awarded or agreed in settlement.

You’ll defend us against a third-party claim arising from your data or your use of the service in breach of these terms, including a breach of clause 6.

Each of us must notify the other promptly, give the defending party control of the defence, and cooperate reasonably.

This agreement is governed by the laws of the State of New Mexico, without regard to conflict-of-laws rules. The UN Convention on Contracts for the International Sale of Goods does not apply.

Both parties agree to the exclusive jurisdiction of the state and federal courts located in Bernalillo County, New Mexico, and each consents to personal jurisdiction there.

Before filing anything, please email legal@spodus.com with a description of the dispute and give us 30 days to resolve it. Most things get sorted at that stage, for a lot less money.

• Entire agreement — these terms, the DPA, and any order form you sign are the whole agreement, and supersede earlier discussions.
• Order of precedence — a signed order form, then the DPA, then these terms.
• Assignment — neither party may assign without the other’s consent, except to a successor in a merger or sale of substantially all assets.
• Severability — if a provision is unenforceable, the rest survives.
• No waiver — not enforcing something once doesn’t waive it.
• Force majeure — neither party is liable for delays caused by events genuinely beyond its reasonable control.
• Notices — to you at your account email, to us at legal@spodus.com and the postal address below.
• Survival — clauses on data, confidentiality, warranties, liability, indemnity and governing law survive termination.