Terms and conditions

You must be at least 18 years old and legally able to enter into this agreement. You must provide accurate registration and billing information, keep it current, and maintain a working contact email address.

You are responsible for your authorized team members and for activity you authorize through your account and projects. Protect passwords, API keys, access tokens, database credentials and other secrets. Use available security controls and promptly report suspected compromise to support@espobase.com. You must not sell or transfer account credentials without our written permission.

Your application’s end users are distinct from your Espobase platform account. You are responsible for managing their access, obtaining required permissions, and providing them with appropriate terms and privacy notices.

Espobase provides hosted backend capabilities, which may include PostgreSQL databases, authentication, storage, APIs, AI-assisted development and other features made available in your plan. Features, resource allocations, support and availability depend on the plan or order you purchase.

Subject to these Terms and payment of applicable fees, you may use the Services to develop and operate your applications, including commercial applications used by your customers. This does not authorize resale of Espobase accounts or access to our dashboard as a separate backend service without a written agreement.

Roadmaps, previews and promotional descriptions of future capabilities are not commitments to deliver them. A separate written agreement signed by us may establish additional rights or obligations.

You must not use the Services to:

• Violate applicable law, infringe intellectual property rights, or unlawfully collect, disclose or exploit personal information.
• Distribute malware, conduct phishing or fraud, send unlawful spam, or facilitate exploitation, abuse or illegal content.
• Access another customer’s data, account or infrastructure without authorization.
• Circumvent authentication, usage limits, billing controls or security measures, including through multiple accounts created to evade restrictions.
• Disrupt shared infrastructure, launch denial-of-service attacks, or conduct unauthorized load or security tests against infrastructure you don’t own.
• Run cryptocurrency mining or unrelated resource-intensive workloads without our written approval.
• Host or link to content that is illegal, deceptive, infringing or harmful (such as phishing pages, malware, or content that exploits children), or use hosted sites or builds to attack, scan or send unwanted traffic to others.
• Copy or reverse engineer proprietary components except where applicable law permits it, or remove proprietary notices.

These restrictions don’t override rights granted under applicable open-source licenses. Authorized testing of your own application must stay within your resource allocation and must not expose other customers or shared infrastructure to risk. Contact us before running tests likely to affect the platform.

We may investigate credible reports of abuse and take proportionate action under Section 12. Report suspected violations to support@espobase.com.

You are responsible for your application’s code, content, end-user communications and legal compliance. You must configure appropriate database permissions, row-level security, storage access policies, authentication settings and other controls available to you.

Keep privileged credentials out of public repositories and client applications. Review permissions before exposing tables, buckets or APIs. You are responsible for changes made by your team or by automation you authorize, including AI-generated SQL and code.

Sites you host are public and are yours: you are responsible for their content, for the rights to publish it, and for any link, form or script they contain. A pull request preview is public too. Values that build tools copy into your site’s files (for example names starting with VITE_ or NEXT_PUBLIC_) can be read by every visitor, so never put a secret in them. If you connect GitHub or a repository, you confirm that you are allowed to let Espobase read and build it; you decide which repositories the GitHub App can reach, and you can remove it on GitHub at any time.

We are responsible for the hosted infrastructure and the security measures within our control. Your configuration responsibilities don’t excuse our failure to meet obligations expressly stated in these Terms, an applicable data processing agreement, or mandatory law.

Unless we expressly agree in writing to support the relevant requirements, don’t use the Services for protected health information subject to HIPAA, raw payment-card data, classified information, export-controlled technical data, or other information requiring specialized contractual or technical safeguards. An agreement to support one regulated use doesn’t authorize other regulated uses.

Don’t rely on the Services for safety-critical operations where a failure could cause death, injury or serious physical damage unless a separate written agreement expressly permits that use.

Your plan, checkout page or agreed order identifies the applicable fees, billing period, included resources and limits. Limits may apply to storage, database capacity, projects, bandwidth, API requests, authentication, compute, AI usage, logs, backups or other resources.

If you reach a limit, we may restrict additional usage, require an upgrade, or apply overage charges that were disclosed and agreed before the usage occurred. We won’t create undisclosed overage rates retroactively. You must monitor usage and manage your application’s demand; usage notifications don’t replace that responsibility.

Hosting has its own limits, shown in your plan: the number of sites, hosted storage, bandwidth for hosted sites each billing period, custom domains, and build minutes. We warn you as you approach a limit. If hosted-site bandwidth goes well past the limit (above 125%), the affected sites show a “limit reached” page until the next period or until you upgrade. Hosting bandwidth is not billed as overage, and we don’t delete your sites because a limit was exceeded. When your build minutes run out, new builds wait for the next period.

We may impose temporary restrictions to contain abuse, suspected fraud or material threats to platform stability. Free plans and trials may have additional restrictions disclosed when you enroll. Any inactivity-based deletion policy will be disclosed separately, with its notice period, before it applies.

Paid subscriptions are billed in advance for the billing period shown at checkout. Metered usage and agreed overages may be billed separately or in arrears as disclosed. By subscribing, you authorize our payment processor to charge your payment method for your selected subscription and agreed usage charges.

Subscriptions renew automatically for the same billing period unless you cancel before renewal. Monthly or annual billing is available only where offered at checkout. Applicable taxes are additional unless stated otherwise; you are not responsible for taxes on our income.

We will give at least 30 days’ notice of subscription price increases. Increases take effect no earlier than your next renewal after the notice period. Changes to metered rates apply only prospectively after the stated notice period. You may cancel before the change takes effect.

If payment fails, we may ask for another payment method and, after notice and a reasonable opportunity to resolve the failure, restrict or suspend affected Services. Immediate restrictions may apply where necessary to address suspected payment fraud. Contact us promptly about billing errors or disputed charges; these Terms don’t limit statutory dispute rights.

You may cancel renewal in Billing & plans or by contacting support@espobase.com. Cancellation takes effect at the end of the paid billing period unless you request immediate deletion or a different date is agreed. Cancellation doesn’t erase accrued usage charges or other amounts already owed.

Except where required by law, expressly promised at purchase, or provided under these Terms, subscription fees and usage charges are non-refundable. We may consider other refund requests individually. If we permanently discontinue a paid Service during a prepaid period, or terminate your paid subscription for our convenience rather than your breach, we will refund the unused prepaid portion for the affected Service.

Changing to a lower plan may reduce limits and features. Before downgrading, export the information you need and bring your usage within the new limits. We will show the effective date and any resulting feature or access changes in the downgrade process.

Mandatory consumer cancellation, withdrawal and refund rights remain in effect. These Terms don’t waive those rights.

“Customer Data” means data, files, code, prompts and other content submitted by you or your application users to the Services. As between you and Espobase, you retain ownership of Customer Data and your applications. You represent that you have the rights and permissions needed for us to process Customer Data as instructed.

You grant us a limited, nonexclusive license to host, copy, transmit and process Customer Data to provide the Services, carry out your instructions, maintain security, resolve support issues and comply with law. This license doesn’t permit unrelated commercialization of your private project content.

Our Privacy policy explains how we handle account information and other personal information. For personal information in your projects, you generally determine the purposes of processing and we process it on your behalf. Where applicable law requires a data processing agreement, the parties must enter into one before that processing begins; contact us to request one. These Terms don’t substitute for that agreement or establish certifications we haven’t obtained.

You are responsible for lawful collection, required notices and consents, and responding to your application’s end-user requests. We will provide assistance as required by applicable law and any executed data processing agreement.

We may process operational telemetry for billing, security, support and service improvement as described in the Privacy policy. Any use of anonymized statistics must comply with applicable law and must not reveal your confidential content or identify individuals.

AI features may generate SQL, schemas, code, configuration suggestions or other outputs. Outputs may be inaccurate, insecure, incomplete, nonunique or unsuitable for your application. Review and test them before use, particularly before applying destructive database changes or changing access controls. AI outputs are not professional legal, financial or security advice.

Submit only inputs you are entitled to share. Depending on the feature, inputs and relevant project context may be processed by third-party AI providers, as described in the Privacy policy. Before submitting confidential or personal information, review the feature’s disclosures and the applicable privacy and data processing terms. Don’t include secrets unless the feature expressly supports secure handling of them.

As between you and Espobase, and to the extent permitted by law and applicable third-party rights, you retain your inputs and may use outputs produced for you. We don’t guarantee that outputs qualify for intellectual property protection or are free of third-party claims.

Espobase will not use private Customer Data to train general-purpose AI models without your express agreement. This doesn’t establish a blanket guarantee about third-party providers’ practices; provider processing and retention are disclosed for the features you use. Any consent to additional AI data use will be separate from ordinary acceptance of these Terms.

Third-party integrations and services you choose may be governed by their providers’ terms and privacy policies. You are responsible for your accounts with those providers and any permissions you grant. Open-source components and SDKs remain subject to their published licenses.

We and our licensors retain rights in Espobase’s proprietary platform, branding, documentation and other materials, excluding Customer Data. You may not imply our endorsement or use our trademarks without permission. You may give voluntary product feedback; we may use it without payment, but that permission doesn’t extend to your confidential project content or personal information.

We will use reasonable efforts to operate and maintain the Services. Interruptions may result from maintenance, security incidents, infrastructure failures or events outside our reasonable control. Guaranteed uptime, response times, recovery objectives or service credits apply only if expressly included in a written service level agreement applicable to your plan.

Support is provided through the channels and at the level described for your plan. Preview, experimental and beta features may change or be discontinued and may have reduced support. Assess their suitability before using them in production.

Backup availability, frequency, retention and restoration depend on your plan and the documented backup service. A database backup does not include object-storage files, configuration or all other project resources. Maintain independent exports and backups appropriate to your application and test your recovery procedures. We don’t promise recovery of data outside an expressly agreed backup commitment.

We may suspend affected access where reasonably necessary to address unlawful use, material security threats, infrastructure disruption, serious breaches of these Terms, or unpaid charges following the process in Section 6.

Where practical, we will give notice, explain the issue and allow a reasonable opportunity to resolve it. Immediate action may be necessary for active threats, fraud, illegal activity or legal requirements. We will limit suspension to the scope reasonably needed and restore access when the underlying issue is resolved.

If a hosted site or build violates Section 3 or puts the platform or others at risk, we may take that site, preview or build offline, or stop a build, immediately, and we will tell you where practical. Report abusive hosted content to support@espobase.com.

Either party may terminate this agreement for a material breach that remains unresolved 30 days after written notice, unless the breach can’t reasonably be cured or immediate termination is required by law or to address serious ongoing harm. We may discontinue the Services or terminate for convenience with at least 30 days’ notice, subject to the refund obligations in Section 7.

You may stop using the Services, cancel renewal, or delete your account in Settings. These actions have different effects: canceling renewal alone doesn’t delete your projects.

Export the Customer Data you need before deleting a project or account or before your access ends. Export is available through supported tools while you have authorized access. After deletion or termination, restoration may not be possible.

For termination initiated by us, where lawful and technically feasible, we will allow a 30-day export period before deleting active project data. This doesn’t apply to deletion you expressly request, data we must remove by law, or access that would create an ongoing security risk. Restricted export assistance may be available through support.

Deleting a site removes its files and deployments, and deleting a project removes its sites. A pull request preview is deleted when its pull request is closed.

After deletion, residual copies may remain in backups until the applicable backup retention period ends. We may retain billing records, security records and information required by law or reasonably necessary to resolve disputes, as described in the Privacy policy. Retained data remains subject to applicable confidentiality and privacy obligations.

Each party will protect the other’s nonpublic information that is identified as confidential or that reasonably should be understood to be confidential. Private Customer Data is your confidential information. The receiving party may use it only to perform this agreement and disclose it only to personnel and providers who need access and are subject to appropriate confidentiality obligations.

These duties don’t apply to information independently developed, lawfully received without confidentiality restrictions, already lawfully known, or made public without breach. Legally required disclosures are permitted; where lawful and practical, the receiving party will give advance notice and limit disclosure to what is required.

These obligations survive termination for three years, and for trade secrets for as long as protected by law. Personal information remains subject to applicable privacy obligations regardless of that period.

TO THE EXTENT PERMITTED BY LAW, AND EXCEPT FOR EXPRESS COMMITMENTS IN THESE TERMS OR A SIGNED AGREEMENT, THE SERVICES AND AI OUTPUTS ARE PROVIDED “AS IS” AND “AS AVAILABLE.” WE DISCLAIM IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT.

We don’t guarantee uninterrupted availability, error-free operation, compatibility with every system, or that AI output will meet your requirements. These disclaimers don’t remove express obligations stated elsewhere in this agreement or rights that applicable law doesn’t permit us to exclude.

TO THE EXTENT PERMITTED BY LAW, NEITHER PARTY WILL BE LIABLE TO THE OTHER FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY OR PUNITIVE DAMAGES ARISING FROM THIS AGREEMENT, INCLUDING LOST PROFITS OR REVENUE.

EACH PARTY’S TOTAL LIABILITY ARISING FROM THIS AGREEMENT WILL NOT EXCEED THE GREATER OF USD 100 OR THE FEES YOU PAID TO ESPOBASE FOR THE SERVICES DURING THE 12 MONTHS PRECEDING THE EVENT GIVING RISE TO THE CLAIM.

These exclusions and limits don’t apply to fraud, willful misconduct, gross negligence, liability that can’t legally be limited, or your obligation to pay properly incurred fees. They don’t limit remedies that mandatory consumer or privacy law requires. A separately signed agreement may establish different limits.

If you use the Services for business purposes, you will defend and indemnify Espobase against third-party claims arising from your unlawful Customer Data, infringement by your Customer Data, or your intentional misuse of the Services, to the extent caused by you. This doesn’t cover claims caused by Espobase’s own breach, negligence or misconduct and remains subject to Section 16 where lawful.

We must promptly notify you of the claim and reasonably cooperate at your expense. You may control the defense with qualified counsel, but may not settle a claim in a way that admits fault for us, imposes nonmonetary obligations on us, or leaves liability unpaid without our written consent. We may participate through our own counsel at our expense.

Subject to mandatory applicable law, these Terms are governed by the laws of Texas, United States, excluding conflict-of-law rules. The state and federal courts with jurisdiction in Bexar County, Texas, will have jurisdiction over disputes arising from these Terms.

Before filing a claim, either party may contact the other to attempt a resolution. This doesn’t prevent urgent relief, require arbitration, shorten statutory deadlines, or remove a consumer’s mandatory right to use courts or protections available where they live.

We may update these Terms. We will notify you of material changes by email or in the dashboard at least 30 days before they take effect, unless an earlier change is required by law or necessary to address an urgent security issue; in those cases, we will give notice as soon as reasonably practical.

Changes apply prospectively. If you disagree, you may cancel renewal and stop using the Services before the effective date. Continued use after the effective date constitutes acceptance where permitted by law; we will obtain renewed express acceptance where required.

These Terms, your accepted order, and any separately signed agreement addressing the Services form the agreement between the parties. A signed agreement takes precedence over these Terms for a conflict it expressly addresses; an applicable data processing agreement governs conflicts concerning its subject matter.

Neither party is responsible for delay caused by events beyond its reasonable control, but this doesn’t excuse payment already owed or obligations applicable law requires. If a provision is unenforceable, the remaining provisions remain effective. Failure to enforce a provision is not a waiver.

You may not assign this agreement without our consent, except as part of a bona fide merger or sale of substantially all relevant assets with notice to us. We may assign it in connection with a business reorganization, merger or sale if the successor assumes our obligations and applicable privacy requirements are respected.

Notices may be sent to your registered email address. Contact, payment, data-handling, confidentiality and other obligations intended by their nature to survive termination remain effective to the extent applicable.

Espobase, operated by MatterOne LLC · 9257 Culebra Rd Ste 101 PMB 1062, San Antonio, TX 78251, United States · support@espobase.com · espobase.com