Terms of Service

1. Agreement and provider

These Terms form an agreement between Khyal Studio, operator of Mimova, and the organization or person accepting an order, creating an account or using the Services. If you act for an organization, you confirm you have authority to bind it. An order form, data-processing agreement, service-level schedule or signed enterprise agreement may add to these Terms. If terms conflict, the signed enterprise agreement, data-processing agreement, order form, service schedule and these Terms apply in that order for the relevant subject.

Service

Mimova

Operator

Khyal Studio

Country

Kingdom of Saudi Arabia

Legal notices

legal@mimova.ai

2. The Services

Mimova provides configurable business operations capabilities that may include CRM, projects, finance, people, files, communications, marketing, digital media, analytics, automation, client portals, integrations and governed AI. Availability depends on the purchased plan, region, deployment model, configuration, provider approval and applicable law. A screen, roadmap item or connection marked preview, sandbox, unavailable or requiring certification is not a promise of production availability.

3. Accounts and administrators

• Provide accurate registration, billing and organization information and keep it current.
• Protect passwords, authenticators, recovery methods, domains, API credentials and devices.
• Assign least-privilege roles and promptly remove people who no longer need access.
• Ensure administrators are authorized to configure modules, integrations, retention, AI, exports and client access.
• Notify us promptly of suspected compromise or unauthorized use.

The customer is responsible for activity under its accounts except to the extent caused by Mimova's breach of its obligations. Platform control-plane access is reserved for specifically authorized Mimova administrators and is separate from customer administration.

4. Customer data and privacy

The customer retains its rights in data it or its users submit to the Services. The customer grants Mimova the limited rights needed to host, process, transmit, back up and otherwise operate the Services. The customer must have lawful authority and provide all notices and choices needed for personal data, communications, employee monitoring, marketing, recordings, connected accounts and AI processing. Our Privacy Notice explains our practices. Where we process customer-controlled personal data, the applicable data-processing agreement governs that processing.

5. Acceptable use

You must not use the Services to:

• break law, infringe rights, deceive people, discriminate unlawfully, harass, exploit or distribute unlawful or harmful material;
• send spam, unlawful direct marketing or messages without required consent, identification and opt-out mechanisms;
• access another tenant, user, system or provider without authorization, bypass security, probe vulnerabilities without written permission, or introduce malicious code;
• overload, scrape, reverse engineer or interfere with the Services except where a non-waivable law expressly allows it;
• upload secrets to ordinary records, use regulated data without appropriate controls, or submit data the customer has no right to use;
• use AI or automation for prohibited surveillance, illegal profiling, deceptive impersonation, high-impact decisions without required safeguards, or actions outside approved permissions and budgets.

6. Integrations and third-party services

The customer chooses and authorizes connected services. Provider availability, data, permissions, review, pricing, rate limits and terms are controlled by that provider and may change. The customer is responsible for its provider accounts and compliance with provider policies. Mimova may suspend a connection that is insecure, unlawful, revoked or threatening platform reliability. We are not responsible for third-party services, but remain responsible for our own contracted obligations and for selecting and overseeing our subprocessors as required by applicable law.

7. AI, automation and approvals

AI output may be incomplete, inaccurate or unsuitable. The customer must review output and maintain qualified human oversight for legal, financial, employment, safety, regulated, reputational and other consequential decisions. Tool access, data scope, budgets, approvals, evidence and kill switches must be configured before autonomous operation. Mimova does not provide legal, tax, accounting, medical or investment advice. Unless separately agreed, customer content is not used to train a shared model.

8. Plans, usage and payment

Fees, included usage, billing cycle, taxes, currency, renewal and any implementation services are stated in the order or plan. Usage above an allowance may be limited, paused or charged at the disclosed rate. Fees are due as stated on the invoice and are non-refundable except where the agreement or applicable consumer law requires otherwise. We may change future plan pricing with prior notice; a change does not alter a committed term unless the agreement allows it. Customers are responsible for applicable taxes other than taxes on our net income.

9. Confidentiality and security

Each party will protect the other's non-public confidential information with reasonable care, use it only for the agreement and disclose it only to people who need it and are bound to protect it, unless law requires disclosure. Mimova maintains risk-based security and incident response controls. The customer remains responsible for its endpoint, identity, access, sharing, retention, backup and integration choices.

10. Intellectual property and feedback

Mimova and its licensors retain rights in the Services, software, designs, documentation and trademarks. The subscription is a limited, non-exclusive, non-transferable right to use the Services during the term, subject to the agreement. Customer data and customer-owned brand assets remain the customer's. If you provide feedback, you allow us to use it without restriction or payment, without identifying you publicly unless you agree.

11. White-label and self-hosted deployments

White-label customers are responsible for their brand, domain, customer notices, commercial terms and end-user support unless an order says otherwise. Self-hosted customers are responsible for infrastructure, operating systems, network security, certificates, backups, monitoring, capacity, deployment and third-party credentials. Mimova retains licensing and integrity controls. Hosted connector brokerage, managed updates or support are provided only when included in the order and may require secure outbound communication with Mimova services.

12. Availability, support and changes

We aim to provide reliable Services and will perform maintenance, security updates and capacity work as needed. Any binding uptime, support response or service credit is stated in an applicable service schedule. We may improve or replace features while preserving the material value of a paid service. Emergency changes may occur without advance notice where needed to protect users, data or providers.

13. Suspension, termination and data return

Either party may terminate as stated in the order or for an uncured material breach. We may immediately suspend access that presents a credible security, legal, payment or platform-integrity risk, using the narrowest reasonable scope where practicable. On termination, the customer must pay accrued amounts and stop using the Services. Data export and deletion follow the order, data-processing agreement and Privacy Notice. Legal holds and required records may delay deletion.

14. Warranties and disclaimers

Each party warrants it has authority to enter the agreement. Mimova warrants that paid Services will materially conform to applicable documentation and will be provided with reasonable skill and care. The customer's remedy for a verified breach of this warranty is correction, re-performance or, if that is not commercially reasonable, termination of the affected Service and refund of prepaid fees for the unused affected period. To the extent law permits, other implied warranties are excluded. Previews and free services are provided as available and without service commitments.

15. Liability

Nothing excludes liability that cannot lawfully be excluded, including fraud, wilful misconduct or other non-excludable liability. To the extent permitted by law, neither party is liable for indirect, incidental, special or consequential loss, or lost profits, revenue, goodwill or data, except where the applicable agreement expressly says otherwise. Each party's aggregate liability arising from the Services is limited to fees paid or payable for the affected Services during the twelve months before the event, subject to any different cap in a signed enterprise agreement and any non-excludable law.

16. Governing law and disputes

The parties should first try in good faith to resolve a dispute through authorized representatives. Unless a signed agreement specifies otherwise, these Terms are governed by the laws of the Kingdom of Saudi Arabia and disputes fall within the competent courts of Saudi Arabia. Mandatory consumer, privacy or employment protections continue to apply where they cannot be waived. The Arabic version will govern where Saudi law requires it; an English version is provided for accessibility.

17. General

Neither party may assign the agreement without the other's consent, except to an affiliate or in connection with a merger, reorganization or sale of substantially all relevant assets, provided obligations are assumed. Neither party is liable for delay caused by events beyond reasonable control, excluding payment duties. Notices must use the account or order contact and, for legal notices to Mimova, legal@mimova.ai. If a provision is unenforceable it will be adjusted only as necessary; the rest remains effective. Failure to enforce a term is not a waiver.