Terms of Service (Invite-Only Pilot)

Acceptance: You must agree to these Terms and the Privacy Policy before continuing to Google/Microsoft sign-in (clickwrap).

Controller / provider: David Carvalhão (natural person) Contact: [SUPPORT_EMAIL] · Privacy: [PRIVACY_EMAIL] Address: Rua da Índia 4 - 3, 3080-137 Figueira da Foz Product / Service: Lighterate (invite-only pilot)

1. Binding agreement

By checking “I agree” (or equivalent) and continuing to sign in, you enter a binding agreement with David Carvalhão (“we”, “us”, “Provider”) under these Terms and the Privacy Policy. If you do not agree, do not use the Service.

2. Pilot; free; no reliance

2.1 The Service is an invite-only, free pilot. Features may change, break, lose data, or shut down at any time without notice.

2.2 There is no SLA, uptime promise, support obligation, or production warranty.

2.3 Do not rely on the pilot as your only copy of invoices or as a substitute for accounting, tax, legal, or bookkeeping systems. Keep originals in your mailbox or elsewhere.

2.4 The pilot is for personal / friends B2C use, not as a business processor service. No customer DPA is offered in stage 1.

3. Eligibility

You must be at least 18 (or the age of majority where you live), have received an invite, and be able to lawfully authorize mailbox access for the account you use.

4. The Service

4.1 The Service lets invited users: sign in with Google or a personal Microsoft account (Outlook.com / Live / MSA); in the same OAuth step, grant mailbox read-only access; have us detect invoice PDF attachments; store invoice PDFs and extracted fields; and show in-app notices of new invoices (no email push).

4.2 Microsoft work/school (Microsoft 365) accounts are not supported.

4.3 Login identity = that one mailbox of the same provider.

4.4 The pilot is currently available at https://lighterate.com, by invitation only. We do not promise that this domain, or the Service, will remain available.

5. Your warranties and acceptable use

You represent and warrant that:

(a) you own or are fully authorized to grant access to the mailbox and account you connect; (b) your use and any content processed through the Service is lawful; (c) you will not misuse the Service (including probing others’ data, abuse, scraping beyond normal use, circumventing security, or reverse engineering except where mandatory law allows); (d) you will keep your Google/Microsoft credentials secure and revoke our access when you stop using the pilot.

We may suspend or terminate access immediately if we reasonably believe you breached these Terms or create risk for us or others.

6. Privacy

Personal data is processed as described in the Privacy Policy. Continuing after acceptance means you acknowledge that policy.

7. OAuth, Google Testing mode, and third parties

7.1 Sign-in and mailbox access depend on Google and/or Microsoft. Their outages, policy changes, consent screens, token expiry, and account bans are outside our control.

7.2 Google apps in Testing / unverified mode may show warnings and often require re-consent about every 7 days. Sync may stop until you reconnect. That is expected in this pilot.

7.3 We are not responsible for Google’s or Microsoft’s acts, omissions, terms, or security.

8. AI extraction disclaimer

8.1 Invoice field extraction uses a third-party AI model (currently openai/gpt-4o-mini, accessed through OpenRouter, Inc., a US-based API router, and run only on zero-data-retention endpoints of providers that do not use requests for training, currently Microsoft Azure; if none is available, the invoice stays pending and its text is never sent to a provider that retains data). Only the text extracted from invoice PDFs is sent, and this may involve processing outside the EU/EEA, including in the United States, as described in the Privacy Policy. Output can be wrong, incomplete, or misleading.

8.2 You must review extracted data before any accounting, tax, payment, or legal use. We do not warrant accuracy of extraction or classification (including what is treated as an “invoice”).

9. Intellectual property

9.1 We retain all rights in the Service software, design, and branding.

9.2 You retain rights in your invoice PDFs and content. You grant us a limited, worldwide, royalty-free license to host, process, transmit, and display that content solely to provide the Service.

9.3 Feedback you give may be used freely to improve the Service without obligation to you.

10. Indemnity (to the extent permitted)

To the maximum extent permitted by applicable law, you will defend and indemnify David Carvalhão against claims, damages, losses, and reasonable costs (including legal fees) arising from: (a) your mailbox content or invoices; (b) your lack of authority to connect a mailbox; (c) your misuse of the Service; or (d) your breach of these Terms — except to the extent caused by our willful misconduct where such limitation is not allowed.

Consumer note: If mandatory Portuguese or EU consumer law limits indemnity against consumers, those limits apply and this clause is enforced only to the permitted extent.

11. Disclaimer of warranties

TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE SERVICE IS PROVIDED “AS IS” AND “AS AVAILABLE”, WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, QUIET ENJOYMENT, AND ACCURACY OF AI OUTPUT.

12. Limitation of liability

12.1 TO THE MAXIMUM EXTENT PERMITTED BY LAW, WE ARE NOT LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, PUNITIVE, EXEMPLARY, OR LOST-PROFIT DAMAGES, OR FOR LOSS, CORRUPTION, OR UNAVAILABILITY OF DATA, ARISING FROM THE SERVICE OR THESE TERMS, WHETHER IN CONTRACT, TORT (INCLUDING NEGLIGENCE), OR OTHERWISE, EVEN IF ADVISED OF THE POSSIBILITY.

12.2 TO THE MAXIMUM EXTENT PERMITTED BY LAW, OUR TOTAL AGGREGATE LIABILITY FOR ALL CLAIMS ARISING OUT OF THE SERVICE OR THESE TERMS IS LIMITED TO EUR 0 (zero euros — free as-is pilot).

12.3 Mandatory consumer rights carve-out. Nothing in these Terms excludes or limits liability where Portuguese or EU law prohibits that exclusion or limitation — including liability for death or personal injury caused by negligence where such rule applies, fraud or fraudulent misrepresentation, or other non-waivable rights of consumers under Portuguese law (including the Consumer Protection Law / Lei de Defesa do Consumidor) and EU consumer acquis. Those mandatory rights remain intact. Where a waiver would be unfair or void, it is severed and the rest of these Terms continue.

12.4 Some jurisdictions do not allow certain limitations; in those cases our liability is limited to the minimum extent still allowed.

13. Disconnect, suspension, termination

13.1 You may disconnect your mailbox anytime. Disconnect deletes the encrypted token, sync cursor, stored invoice PDFs, and related invoice data as described in the Privacy Policy. Also revoke the app in Google/Microsoft settings.

13.2 Invoice PDFs and extracted fields are kept at most 24 months from storage, then auto-deleted, unless deleted earlier.

13.3 We may suspend or end your access or the whole pilot at any time, with or without cause. On termination we will delete mailbox tokens and stored invoice data as described in the Privacy Policy, subject to any later legal retention duty.

14. Changes

We may change these Terms for the pilot. Material changes will be notified to invitees in-app. Continued use after notice constitutes acceptance, except where mandatory law requires a new consent — in which case we will ask again before OAuth or continued use.

15. Governing law and venue

15.1 These Terms are governed by the laws of Portugal, excluding conflict-of-law rules that would refer another law.

15.2 Subject to mandatory consumer venue rules, the courts of Figueira da Foz, Portugal have jurisdiction. If you are a consumer, you may also bring proceedings in the courts of your Member State of residence where mandatory law so provides.

16. General

16.1 If a provision is invalid, the remainder stays in force (severability).

16.2 No waiver is implied by delay in enforcing a right.

16.3 You may not assign these Terms without our consent; we may assign to a successor of the pilot.

16.4 These Terms and the Privacy Policy are the entire agreement for the pilot Service and supersede prior understandings on the same subject.

16.5 Languages: English and Portuguese versions may be provided. For interpretation in Portugal, if there is a conflict and mandatory rules require it, the Portuguese version may prevail for consumers in Portugal; otherwise English controls for this pilot draft until counsel localizes.

17. Contact

Support: [SUPPORT_EMAIL] · Privacy: [PRIVACY_EMAIL]

Counsel review flags (not exhaustive)

Have a Portuguese lawyer review before relying on these Terms in a dispute, especially: §10 indemnity against consumers; §11–12 warranty/liability caps for B2C; clickwrap evidence retention; governing law/venue vs consumer forum; bilingual prevalence; and whether a natural-person controller offering a free pilot needs additional consumer notices or CNPD considerations.