Terms of Service

1. Our agreement with you

These Terms of Service (“Terms”) govern your access to and use of Entregraph, including its website, profiles, startup pages, workspaces, communities, feeds, map discovery, rankings, messaging, connected-account reporting, uploads and related services (the “Service”). The Service is owned and operated by XPO8 Limited, Hong Kong. “Entregraph”, “we”, “us” and “our” refer to XPO8 Limited.

When you create an account or otherwise affirmatively accept these Terms, you enter into an agreement with us. These Terms also set the conditions on which we make the Service available. If you do not agree, do not create an account or use account features, and stop using the Service. A privacy notice is not consent to unrelated processing: the Privacy Policy explains our handling of personal data, and any required privacy consent is obtained separately.

“You” means the person using the Service or, where that person is authorized to accept these Terms for an organization, that organization. You confirm that you have the authority needed to bind the organization and use its accounts and data. Acting for an organization does not authorize access to another organization’s data or another person’s private account.

A signed agreement with XPO8 Limited controls a direct conflict on the subject it covers. Applicable data processing or transfer terms control the processing they specifically govern; a disclosed product-specific order controls its purchase; these Terms otherwise apply. The Privacy Policy governs the information practices it describes, subject to mandatory law. Marketing materials and roadmap descriptions do not create additional contractual guarantees.

2. Key definitions

• Account: an Entregraph account associated with an authenticated user.
• User Content: information, text, images, links, posts, messages, reports, profile or startup information and other material you submit or authorize us to process.
• Connected Provider: an external financial, analytics or social service whose account or data source you connect to Entregraph.
• Imported Records: records obtained from a Connected Provider under your authorization, including normalized billing facts, identifiers and reporting observations.
• Metrics and Output: calculated or displayed values, charts, histories, counts, ranges, growth measures, rankings, freshness indicators and other results generated by the Service.
• Community: a group on Entregraph with its own membership, participation and audience settings, subject to these Terms.
• Platform Materials: our software, interface, designs, brand, documentation, calculation methods and other proprietary Service materials, excluding User Content and third-party materials.
• Business Customer Data: personal data within Imported Records that we process as processor on an organization’s documented instructions, rather than as controller for our own platform purposes.

3. Eligibility and lawful use

You must be at least 18 years old, have capacity to enter a binding contract and be legally permitted to use the Service. Entregraph is intended for adult entrepreneurs and professional communities. Do not create an account for a child or misrepresent your age.

You must comply with laws applicable to your use, including privacy, intellectual property, consumer protection, advertising, anti-fraud, anti-corruption, sanctions and export-control laws. Do not use the Service where a legal restriction prohibits us from supplying it to you, or attempt to evade a lawful restriction or suspension.

You are responsible for obtaining permission from your organization and from relevant account owners before submitting their information or connecting their systems. A public URL, a shared password or technical possession of a key does not necessarily give you legal authority.

4. Accounts and security

Provide accurate registration information and keep your account email and material profile information reasonably current. Do not impersonate a person or organization, create misleading identities, buy or sell accounts, or use multiple accounts to evade enforcement or manipulate features.

Protect your password, email account, authentication tokens, devices and provider credentials. Do not share a personal sign-in or give another person unrestricted access to it. You remain responsible for activity you authorize and for reasonable security precautions, but these Terms do not automatically make you responsible for every unauthorized act regardless of fault.

Tell us promptly at contact@entregraph.com if you suspect account compromise or unauthorized Service access. Revoke compromised provider credentials directly with the provider. We may request proportionate verification, restrict affected access or ask you to reconnect a provider to protect the Service and other people.

A third-party sign-in method, where available, also depends on that provider’s account and terms. We cannot guarantee recovery of an account if you lose access to the relevant email or identity provider. We will not ask you to disclose a working password or secret key in an ordinary support email.

5. What Entregraph provides

Entregraph helps people present what they are building, connect with entrepreneurs, participate in communities and view supported business and social metrics. Features may include startup reporting, public and private workspaces, location discovery, posts, request boards, messages, rankings and connected-account synchronization.

We provide a technology and community platform. We do not become your accountant, auditor, broker, investment adviser, payment processor, escrow agent, employment agency or business partner by displaying information or connecting accounts. We do not guarantee customers, funding, revenue, partnerships, business success, community admission or message responses.

You decide whether the Service is suitable for your purposes. Verify important information independently before making a financial, legal, employment or business decision. Entregraph is not intended to be your sole accounting record, an emergency communication system or a source of regulatory certification.

6. Your right to use the Service

Subject to these Terms, we grant you a limited, non-exclusive, non-transferable right to access and use the Service for its intended purposes, including your own professional participation and your organization’s authorized internal reporting. This right lasts while your access is permitted under these Terms.

You may view and share information using the Service’s available sharing functions and relevant permissions. Access does not grant ownership of Platform Materials, another person’s data or a right to commercially redistribute our database, operate a competing copy of the Service, sell access or use unpublished APIs without authorization.

Any open-source component or geographic dataset remains subject to its applicable license. Nothing in these Terms limits a non-waivable statutory right or a right expressly granted by the applicable open-source license.

7. Your content, authority and responsibilities

You retain ownership of User Content to the extent you own it. You must have the rights and lawful authority needed to submit it, connect its source and instruct us to use it as described in these Terms. Do not upload another person’s confidential information, infringing material or personal data without an appropriate legal basis and permissions.

You are responsible for the accuracy, legality and appropriateness of your submissions and for choosing their audience. Do not fabricate revenue, ownership, customer counts, credentials, testimonials, employment relationships or endorsements. Correct a material error when you discover it, including an incorrect link or account association.

You grant us a worldwide, non-exclusive, royalty-free license to host, store, copy, process, adapt for technical delivery, transmit and display User Content as reasonably needed to provide, secure, support and maintain the Service, implement your settings, handle reports and comply with law. This includes calculating authorized metrics and making necessary backups. We may sublicense these activities only to providers and personnel who need to carry them out for those purposes.

The license does not give us an unrestricted right to market a private dataset, use your private messages in advertising or publish your company name as an endorsement. Public display follows the audience you choose and the applicable feature rules. Promotional reuse outside that context requires appropriate permission.

The license continues only as long as reasonably needed for those purposes, including lawful retention, shared conversations and protected backup cycles. Applicable privacy rights and processing instructions continue to govern personal data. A license is not a waiver of those rights.

8. Public, community, private and stealth sharing

Review your profile, startup, location and metric settings before publishing. A public profile or startup may be accessible without an account and may appear in feeds, map directories, rankings, searches and other discovery surfaces. Search engines and other people may copy public material.

Where available, startup audiences include public, selected-community and private access. Owner attribution and profile inclusion are separate choices. Metric disclosure can expose exact values, ranges, growth percentages or no public metric, with separate history settings. Social links and social audience history follow their own rules and do not automatically inherit financial metric disclosure settings.

Stealth presentation masks selected startup identity fields; it does not guarantee anonymity or eliminate association with its owner, metrics, timing or related posts. Information you disclose can enable inferences about an otherwise private figure or business. Community access limits who can retrieve content through the Service, but does not stop an authorized member from copying it.

You must not attempt to bypass another person’s audience settings or infer and republish confidential data through unauthorized access. A recipient’s ability to view material is not a general license to exploit it. Changing a setting affects supported future display; it cannot recover screenshots, exports, messages or independently retained copies already obtained by another person.

9. Connected providers and authorization

Connect only accounts you own or are authorized to administer. You authorize us to use the approved credential, API or OAuth access to establish and maintain the connection, obtain supported records, calculate reporting, refresh authorization where supported and display results according to your settings.

You must comply with the provider’s terms, permission requirements and any notices or consents needed for your customers, subscribers or users. Use the least privileged available credential. Some keys cannot be technically limited to read-only access; review and accept any required broader-permission acknowledgement before connecting them. Do not provide a credential with unnecessary access simply for convenience.

Supported providers, scopes, quotas and report coverage can change. An integration can be unavailable or disabled because of incomplete configuration, rollout controls, API changes, revoked permissions, source outages, unsupported pricing structures or other limitations. We may withhold, mark incomplete or stop refreshing a result instead of displaying a misleading complete value.

Disconnecting initiates revocation and cleanup of the Entregraph connection. It does not automatically cancel your provider subscription, erase your source account, revoke the same key everywhere it was used or delete every historical metric and Imported Record. Revoke keys directly with the provider if immediate credential invalidation is needed, and make a separate erasure request where appropriate.

The Service’s reporting authorization is not permission for us to sell your products, make charges to your customers, change their subscriptions or transfer money. Connected payment providers are reporting sources; connecting one is not an Entregraph purchase or an authorization to debit your account.

10. Metrics, verification and ranking limitations

Metrics and Output are calculated from supported information available at the time of processing. A “verified”, “connected” or similar indicator is limited to the identified source and applicable validation, completeness and freshness checks. It is not an audit opinion, guarantee of truthful source records, confirmation of profitability, legal ownership, solvency, tax compliance or endorsement of a person or business.

Recurring revenue, net collections, paying customer counts, active subscribers, pageviews, users, social followers and growth measures have different definitions. Monthly recurring revenue is generally a normalized current recurring amount and need not equal recognized accounting revenue or cash received. Net collections can differ from provider dashboard totals because of tax, refunds, disputes, time periods or supported calculation rules.

Reporting can be affected by delays, incomplete records, nested pagination, discounts, seat or usage pricing, currencies, exchange-rate dates, rounding, reporting time zones, changes in source definitions and unsupported cases. Historical values can be revised after reconciliation. A missing, stale or withheld value does not mean zero. A social count may be rounded or approximate, and history may predate an account’s association with your profile.

Rankings are relative results under the current eligible dataset and rules. They are not a comprehensive survey of all businesses or a guaranteed permanent position. Private or undisclosed values need not qualify for public totals or rankings. Currency conversions and thresholds use the applicable calculation basis, which can differ from a live exchange rate.

Do not describe Output as independently audited, certified or guaranteed, manipulate source records to influence rankings, or hide a known material error when presenting a result to others. Contact us if you believe a calculation is wrong. We may correct, recalculate, relabel or remove affected results.

11. Business customer data processing

This section applies only to Business Customer Data for which you are controller and we are processor. It does not make you controller of every Entregraph record or change our separate controller responsibilities described in the Privacy Policy. If an applicable signed data processing agreement exists, it controls a conflict on this subject.

You determine the lawful purposes of connecting and reporting on your customer data, provide required notices and establish the necessary legal basis. Your documented instructions comprise these Terms, an applicable written agreement, the connection you authorize, supported configuration and lawful subsequent written instructions. We process that data only on those instructions, unless law requires otherwise; where legally permitted, we will inform you of a conflicting legal requirement or an instruction we believe infringes applicable data protection law.

The processing concerns authorized import, transient receipt, normalization, storage, metric calculation, reconciliation, delivery of authorized reporting, security and deletion or return. It lasts for the authorized service relationship and any necessary lawful winding-down period. Data subjects may include your customers, payers, subscribers, account users and website or product users. Data can include stable provider and customer identifiers, subscriptions, transaction facts, amounts, currencies, statuses, timestamps and supported analytics observations. It is not intended to include special-category data, complete card details or unrelated customer communications.

We must apply appropriate security measures, ensure persons authorized to process the data are subject to confidentiality duties and limit access to the tasks they need to perform. We must assist you, taking account of the nature of processing and information available to us, with applicable rights requests, security and breach duties, impact assessments and relevant regulator consultations. We will notify you of a personal data breach affecting Business Customer Data without undue delay after becoming aware of it, with relevant available information and further updates as appropriate.

You give general authorization for subprocessors needed for this processing, including the relevant infrastructure providers identified in the Privacy Policy. We remain responsible for imposing applicable data protection obligations on them and for their performance of those obligations. Before adding or replacing a material subprocessor for Business Customer Data, we will provide notice and a reasonable opportunity to raise a substantiated data protection objection. We will work to resolve the concern; if it cannot be resolved, the affected processing must be discontinued or the relevant service arrangement ended as appropriate.

At the end of the relevant processing, we must return or delete Business Customer Data on your lawful choice, except where retention is legally required. Available routine exports may not contain the entire processor dataset, so a complete return or deletion instruction may need to be handled separately. Residual backups remain protected and subject to appropriate deletion restrictions until securely removed or overwritten.

We must make information reasonably necessary to demonstrate compliance available to you and allow required audits, subject to reasonable confidentiality, security, scope and scheduling arrangements that do not defeat a statutory audit right. No audit entitles you to another customer’s data or unrestricted access to production secrets.

These processing obligations do not themselves execute an international transfer instrument. Where legally required, the parties must put the applicable transfer mechanism and supplementary safeguards in place before the affected transfer. Contact contact@xpo8.com for processing and transfer arrangements relevant to your organization.

12. Communities, requests and events

Community organizers may set lawful admission criteria and participation rules, subject to these Terms. Open, approval-based or invite-only admission describes a mechanism, rather than a guarantee that you will be admitted or remain a member. Membership can affect access to content and conversations.

Organizers are responsible for representations they make, their independent events, and any personal data they collect outside the Service. They cannot override our safety requirements, authorize misuse of another person’s information or claim to speak for XPO8 Limited without permission. Creating a community does not create employment, agency, partnership or an investment relationship with us.

Startup requests, replies and votes facilitate discussion. They are not guaranteed offers, contracts, funding commitments or product delivery obligations by Entregraph. Agreements you make with another person are your separate agreements.

For meetings or events, verify the organizer and practical arrangements, consider your safety, and choose what contact and travel information to share. Entregraph does not verify every participant, conduct universal background checks or guarantee the safety or quality of an independent meeting or event.

13. Messages and interactions with others

Messaging preferences, request acceptance, following relationships and revenue thresholds can determine whether a new conversation may open. No person is entitled to a response or to bypass another person’s preferences. Eligibility may use private verified metrics without revealing the underlying amount or startup name.

Do not send spam, deceptive solicitations, malware, harassment or unwanted repeated contact. Do not use a community or message request to evade a block, impersonate support, obtain credentials or pressure someone to disclose private financial information.

Messages are not advertised as end-to-end encrypted. Relevant information may be processed to deliver conversations, handle support, investigate reported abuse or comply with law as explained in the Privacy Policy. Another participant may keep or disclose a copy; do not rely on an account setting as a guarantee of confidentiality.

Use judgment when dealing with other users. A profile, provider connection, badge or rank does not guarantee trustworthiness or make us responsible for a user’s independent representations. Report suspected misuse through available reporting tools or contact us.

14. Acceptable use and prohibited conduct

You must not use the Service to:

• Break the law, infringe intellectual property, privacy or other rights, or publish confidential information without authority.
• Commit fraud, impersonate others, fabricate business facts, conduct phishing or mislead people about a product, opportunity or affiliation.
• Threaten, stalk, harass, exploit or unlawfully discriminate against people, or distribute unlawful sexual, violent or hateful material.
• Distribute malware, malicious links or stolen credentials, or intentionally upload material designed to compromise another system.
• Access another account, provider connection, private metric, message or restricted community without authorization.
• Bypass access controls, rate limits, blocks, provider permission gates, billing controls or security restrictions.
• Manipulate rankings, audience counts, engagement, votes, metric sources or freshness indicators through deceptive activity.
• Scrape personal data in violation of law or access restrictions; bulk harvest messages, profiles or reporting records; or sell an unauthorized copy of our database.
• Use automated activity that creates unreasonable load, disrupts availability or materially harms other users.
• Reverse engineer, decompile or circumvent Platform Materials except where applicable law or an applicable license gives you a right that cannot be excluded.
• Use our name, logo, a connection indicator or another person’s identity to imply an endorsement or certification that has not been given.
• Submit knowingly false reports, misuse legal complaint processes or retaliate against someone for a good-faith report.

Reasonable security research still requires authorization for intrusive testing. Report a suspected vulnerability privately to contact@entregraph.com; do not extract another person’s data, publish working credentials or disrupt the Service to demonstrate an issue.

15. Reports, moderation and review

We may review reports, investigate suspected breaches, restrict visibility, remove content, withhold metrics, limit a feature or suspend access when reasonably necessary for safety, legal compliance or enforcement. The action should take account of the issue, available evidence, risk, recurrence and applicable law.

Where practical and lawful, we will explain a significant action and give an opportunity to respond or remedy a problem. We may act immediately without prior notice for urgent harm, security risk, illegality, a binding legal requirement or where notice would compromise an investigation.

If you believe an action was mistaken, contact contact@entregraph.com with the account, content location, relevant notice and reason for review. Review may be handled manually; we do not promise a dedicated appeals interface, a specific moderation response time or a particular outcome. Statutory complaint and appeal rights remain available.

We are not obliged to proactively examine every item or mediate every private disagreement, except where law requires. A failure to remove content immediately is not approval of it. We may preserve relevant evidence and disclose it where lawfully necessary, as described in the Privacy Policy.

16. Copyright and other rights complaints

Send a rights complaint to contact@entregraph.com. Identify yourself and your authority to act, the right or work concerned, the precise location of the challenged material, the basis of the complaint and a way to contact you. Include a good-faith statement that the use is unauthorized and that your information is accurate. Add a signature or other formal elements where applicable law requires them.

We may request clarification, restrict or remove challenged material, notify the uploader and consider a substantiated response. Where a particular statutory notice or counter-notice procedure applies, that procedure controls. We may restrict repeat infringement where appropriate.

A false or abusive complaint can cause harm and may create legal liability. Do not send unnecessary private records with a complaint. We may need to disclose relevant parts of a notice to the person affected or to a competent authority to handle it fairly and lawfully.

17. Our intellectual property and feedback

Entregraph’s name, logo, interface, software, designs, documentation, calculation systems and other Platform Materials belong to XPO8 Limited or its licensors. Third-party names, logos, data and software remain the property of their owners. All rights not expressly granted are reserved.

Do not remove ownership notices, misrepresent Platform Materials as your own or use our marks in a way that implies sponsorship without permission. Sharing your own lawful content does not require you to transfer its ownership to us.

If you voluntarily send suggestions, ideas or feedback about the Service, you grant us a worldwide, perpetual, non-exclusive, royalty-free right to use that feedback to improve or develop products without an obligation to compensate you. This does not authorize disclosure of your personal data or confidential business records, and it does not apply to material you expressly identify as confidential and we agree to receive on that basis.

18. Confidentiality and private information

Where either party receives non-public information from the other that is marked confidential or would reasonably be understood to be confidential, it must use that information only for the authorized service relationship, protect it with reasonable care, and disclose it only to people or providers with a need to know and appropriate duties. Private provider credentials and non-public Imported Records are not public merely because the Service processes them.

This obligation does not cover information that becomes public without a breach, was already lawfully known, is independently developed or is lawfully obtained from a third party without a confidentiality restriction. A legally required disclosure is permitted, with advance notice where lawful and practical and disclosure limited to what is required.

Content you choose to make public is not treated as confidential by us for that publication. Sharing with a community or another user does not automatically create a separate non-disclosure agreement between you and that recipient. These obligations continue for as long as the information remains confidential, with any greater legally required protection for personal data or trade secrets.

19. Privacy and data responsibilities

The Privacy Policy explains what we collect, our purposes, recipients, visibility, retention, international processing and available rights. Privacy requests go to contact@xpo8.com. An account export or contractual license does not replace your applicable statutory rights.

You must not submit personal data that you are not entitled to use or publish. Provide appropriate notices for customer data you authorize us to process and respect other users’ information. Do not include highly sensitive records, government identity numbers, full payment card details or unrelated personal information in ordinary posts, messages or provider metadata supplied for reporting.

If a required processing or transfer agreement has not been completed for your use, contact us before initiating the affected processing. Neither these Terms nor your decision to connect an account is a blanket waiver of privacy law or a guarantee that every proposed dataset is suitable for the Service.

20. Third-party services and links

The Service depends on third-party infrastructure, identity, storage, email, map, social-data and Connected Provider services. Their APIs, terms, permissions, availability and geographic coverage can change and affect our features. We may change providers where appropriate, subject to applicable contractual and privacy obligations.

Independent startup websites, social profiles, community events and external products are not operated by us simply because we link to them. You should review their terms and privacy practices. Your transactions and agreements with another user or third party are between you and that party.

We do not guarantee an independent provider’s performance or another user’s conduct. This does not remove our own obligations for selecting and managing service providers, our own processing, or any responsibility that applicable law does not permit us to exclude.

21. Fees and any future paid offerings

The current Service does not establish an Entregraph subscription, transaction fee or purchase merely because you register, publish a startup or connect a payment provider. No general authorization to charge you is created by these Terms.

If we make a paid offering available, its price, currency, taxes, billing interval, scope, renewal arrangements, cancellation process and any applicable refund rules must be disclosed before you purchase it. You must separately authorize the purchase. An automatic renewal or usage-based charge requires the disclosure and authorization applicable to it; it is not implied by this section.

Any paid arrangement remains subject to applicable consumer rights, including required cancellation, withdrawal, refund and remedies for non-conforming services. A separate business order may provide commercial terms where lawful. Your provider’s own charges remain governed by your agreement with that provider.

22. Changes, availability and early features

We may maintain, update or change the Service as it develops. Features can be introduced gradually, limited by provider access or capacity, or withdrawn where necessary. A roadmap, prototype or example dataset is not a promise that a feature or business result will be delivered.

Beta, preview and early-access features may be incomplete, unreliable or change substantially. Treat clearly labeled demonstration people and metrics as examples, rather than evidence about actual businesses. Do not use an experimental feature as your only record of important information.

Interruptions can result from maintenance, deployments, network failures, provider incidents, security events or legal restrictions. Unless a signed agreement expressly provides otherwise, we do not promise a service-level percentage, continuous access, a response or recovery time, a particular synchronization interval, or recovery of every lost record.

We will provide reasonable notice of a material withdrawal where practical and required by law, and honor applicable remedies under an active paid agreement. Urgent security or legal changes may need to take effect immediately.

23. Exports, backups and recordkeeping

You should keep independent records of important business information, accounting evidence and content. Entregraph is not a guaranteed permanent archive of your provider data or messages.

The available account JSON export includes records currently accessible to the signed-in account. It excludes provider secrets and media file binaries; retained records from communities you have left and other information may require a separate access or portability request. A convenience export does not necessarily contain everything required for a complete regulatory record or processor data return.

Backups are for operational recovery and do not guarantee an individual restoration or export on demand. Access changes, moderation, retention rules and legal obligations can affect what remains available. These limitations do not reduce an applicable statutory access, portability or erasure right.

24. Suspension, termination and account closure

You may stop using the Service and request account closure at any time. A completed self-service account closure workflow is not currently offered; contact contact@xpo8.com for account closure and deletion requests. Signing out, removing a social link or disconnecting a provider is not complete account deletion.

We may suspend or end access for a material breach, unauthorized use, a significant legal or security risk, repeated harmful conduct or a binding legal requirement. Where practical and lawful, we will give notice and an opportunity to remedy the issue. We may act immediately where needed to address urgent harm or risk.

We may discontinue the Service or terminate an ordinary service relationship on reasonable notice, normally at least 30 days where practical. Any prepaid fees for an unprovided period must be handled under the applicable purchase agreement and mandatory law. We will not use convenience termination to avoid an accrued legal obligation.

When access ends, your access license ends and affected content may no longer be available. Data return, deletion and retention are governed by the Privacy Policy, applicable processing instructions and law; we do not promise immediate removal from every shared record, recipient copy and backup. Request needed exports before closure where possible.

Terms that by their nature must continue survive, including accrued obligations, necessary content licenses, confidentiality, intellectual property, lawful data processing and retention duties, disclaimers, applicable liability limits and dispute provisions.

25. Disclaimers and required protections

To the maximum extent permitted by applicable law, the Service and Output are provided “as is” and “as available”, without warranties or conditions other than those expressly stated in an applicable agreement. This includes, where lawfully excludable, implied warranties of merchantability, fitness for a particular purpose, non-infringement and uninterrupted or error-free operation.

We do not warrant that every provider can be connected, every source record is correct, every report is complete, a metric remains current, every user is trustworthy, a meeting is safe, a business will succeed or a feature is suitable for regulated decision-making. No system can be guaranteed completely secure.

These disclaimers do not contradict an express contractual promise or exclude a guarantee, duty of reasonable care or consumer remedy that cannot lawfully be excluded. If a mandatory law gives you a remedy for a defective digital service, misleading practice or other failure, that law controls.

26. Limits on liability

Subject to the exclusions below and to the maximum extent permitted by law, we are not liable for indirect, incidental, special or consequential losses, including lost profits, opportunities, goodwill or anticipated savings, arising from use of the Service. For business users, this includes business interruption and losses from reliance on incomplete metrics or another user’s independent representations, to the extent lawfully excludable.

To the maximum extent permitted by law, our total aggregate liability for claims relating to the Service is limited to the greater of US$100 or the fees you paid XPO8 Limited for the affected Entregraph service during the 12 months before the event giving rise to the claim. The limit applies to connected claims as a whole, rather than separately to each legal theory.

Nothing in these Terms excludes or limits liability for fraud, fraudulent misrepresentation, death or personal injury caused by negligence, or any liability or statutory right that cannot lawfully be excluded or limited. This includes non-waivable consumer and data protection rights. For consumers, any exclusion or cap applies only to the extent it is lawful and fair under the applicable law; an ineffective restriction does not remove the remedy that law provides.

You should take reasonable steps to avoid and mitigate preventable loss, such as retaining source records and protecting credentials. That responsibility does not excuse a breach by us or create a waiver of your legal rights.

27. Business user responsibility for third-party claims

This section applies to business users acting in the course of their business, and only to the extent permitted by law. You must indemnify XPO8 Limited against reasonable losses, liabilities, damages and legal costs from a third-party claim caused by your unlawful or infringing User Content, your lack of authority to connect or disclose data, or your material breach of these Terms.

The indemnity does not cover a claim caused by our own breach, negligence or unlawful conduct, and does not extend to ordinary consumer use. We must notify you of a relevant claim without undue delay, provide reasonable cooperation and take reasonable steps to mitigate loss.

Defense arrangements must be reasonable and protect both parties’ legitimate interests. Neither party may settle in a way that admits fault for, imposes a non-financial obligation on, or prejudices the other party without its consent, which must not be unreasonably withheld.

28. Events outside reasonable control

Neither party is responsible for delay in an obligation to the extent it is caused by an event beyond its reasonable control, such as a natural disaster, war, government restriction, major telecommunications or utility failure, or widespread infrastructure disruption, provided it takes reasonable steps to mitigate the effect and resume performance.

This does not excuse a failure to take reasonable security precautions, an obligation that could still reasonably be performed, or an accrued payment or privacy obligation. Where a prolonged event materially prevents performance, either party may end the affected arrangement on reasonable notice, with applicable prepaid-service refunds and mandatory rights preserved.

29. Notices and changes to these Terms

We may send relevant notices through the Service, to your account email or by a prominent website notice appropriate to the change. Keep your email current. Optional notification preferences do not prevent necessary legal, security or account communications. Electronic communications may satisfy writing requirements to the extent the law permits.

We may update these Terms for changes in the Service, operations or law. For a material change, we will normally provide at least 30 days’ notice before it takes effect, unless an urgent legal or security reason requires a shorter period. Minor clarifications may take effect when posted. The effective date and version appear at the top.

Where legally permitted, continued use after a properly notified change takes effect constitutes acceptance. Where affirmative acceptance is required, we must obtain it. If you do not agree, stop using the affected Service and request closure or cancel the relevant paid arrangement before the effective date. Applicable refunds and mandatory rights remain available.

Changes do not apply retrospectively to an existing dispute or authorize an unrelated data use merely by changing wording. Contact us if you need clarification or a prior version relevant to your use.

30. Hong Kong law and resolving disputes

These Terms and related non-contractual disputes are governed by the laws of Hong Kong, without regard to conflict-of-law rules. Subject to mandatory law, the courts of Hong Kong have exclusive jurisdiction.

If you are a consumer, this choice does not deprive you of mandatory protections under the law of your habitual residence where that law applies, or a right to bring proceedings in a court your applicable consumer law permits. Regulatory complaints and statutory remedies remain available. These Terms do not impose mandatory arbitration or waive a non-waivable collective remedy.

Before bringing ordinary proceedings, please send a written description of the dispute, relevant account information and the remedy requested to contact@entregraph.com. Both parties should make a reasonable good-faith effort to resolve it for 30 days. This process is not a condition that defeats a statutory deadline, prevents an urgent injunction or requires you to delay a regulator complaint.

31. General provisions

These Terms and applicable written agreements and product-specific terms form the agreement for the Service. They replace prior agreements on the same subject to the extent permitted by law. Nothing excludes liability for fraudulent misrepresentation or prevents reliance on a representation that applicable law makes binding.

If a provision is invalid or unenforceable, it is limited or severed only as necessary, and the remaining provisions continue. For consumer terms, an unfair provision is handled as the applicable law requires; it is not rewritten simply to remove a protection that law grants you.

You may not transfer your account or contractual rights without our consent, except where law permits otherwise. We may transfer this agreement as part of a lawful merger, restructuring or transfer of the Entregraph business, provided your mandatory rights are preserved and the successor can assume the relevant obligations. Relevant privacy notice and transfer restrictions continue to apply.

A delay in enforcement is not a waiver. No partnership, employment, fiduciary or agency relationship is created merely by using the Service. Unless expressly provided in an applicable agreement, no third party has a right to enforce these Terms under Hong Kong’s Contracts (Rights of Third Parties) Ordinance.

Headings are for navigation. “Including” introduces examples rather than an exhaustive list. The English text controls interpretation unless applicable law requires otherwise. A translation must not reduce a mandatory right.

32. Contact and legal notices

For Service questions, legal notices, terms enquiries, rights complaints or a request to review an access decision, email contact@entregraph.com. For privacy, data access, correction, deletion, account closure and business data processing enquiries, email contact@xpo8.com.

Identify the account and issue sufficiently for us to respond, but do not include working passwords, API credentials or unnecessary sensitive records. Formal service of legal proceedings must still comply with the applicable procedural law; publishing an email address is not a waiver of those requirements.