Terms of Service

Signed agreements. If your company and MyBuki have signed a Customer Agreement or an order form, that signed agreement governs everything it covers, and these terms apply only to what it does not address. Everyone else buys on this page.

The whole agreement. These terms, the plan you select at checkout, our Privacy Policy, and any data processing agreement we have entered into with you, are the whole agreement for the Service. Language on a purchase order or a vendor portal does not change them, even if we receive it or process it.

The site and the demo. These terms also cover the public pages at mybuki.ai and the public demo. The demo illustrates how the product behaves. It is not a report about any real company, and it is not financial advice.

How you accept. You accept these terms in one of three ways, and only in those ways: by ticking the required box that links to them and then completing checkout; by completing another acceptance step in the product that identifies the version of these terms and requires you to click that you agree; or by signing an agreement with us. Viewing this site, or using the public demo, is not acceptance. If you do not agree, do not accept and do not use the Service.

The record we keep. Checkout asks you to tick a box confirming you agree to these terms before the payment button works, and our payment processor records whether that box was accepted. When the processor confirms that the purchase completed, we keep a record tied to your account holding the Checkout Session and event identifiers, the contact details the processor gives us for the person accepting, the version of these terms in effect at that moment together with a cryptographic hash and a copy of the text exactly as it was presented to you, the consent result the processor returned, and the time we received the processor's verified confirmation. That confirmation time is the one we treat as the legally meaningful one. The processor also stamps the moment it created the Checkout Session, which is earlier than anything you clicked, and we never present it as the time you ticked the box. We keep the record while the account is open, and afterwards for the longer of three years after acceptance or one year after the account closes. It is how we evidence your agreement, including your agreement to automatic renewal.

Electronic records and signature. You agree that clicking to accept is your signature, that it has the same legal effect as signing on paper, and that we may give you contracts, notices, disclosures, invoices, and records electronically. You need a device, a current browser, and a working email address to receive them. You can ask for a paper copy or withdraw this consent by writing to us, but we cannot run the Service on paper, so withdrawing consent ends the subscription at the end of the current billing period.

Notices. We send notices to your administrator's email address on file or show them in the product, and they count as delivered when we send or post them. Keep that address current, because a notice sent to a stale address still counts. You send notices to us at hello@mybuki.ai.

Authority to bind. The person accepting must be at least 18 years old and authorized to bind the company to a contract. If you are not authorized, do not accept. You confirm that the company is duly organized and can enter into this agreement.

Business use only. Buki is sold to businesses and other organizations for their own internal business use. It is not sold to consumers, and you may not buy it for personal, family, or household purposes.

Sanctions and export. You confirm that your company, and anyone you give access to, is not on a US restricted-party or sanctions list, is not located in or a national of an embargoed jurisdiction, and will not use the Service in breach of export-control or sanctions law. We can decline or close an account on those grounds.

Grounds to decline. We may decline to open an account, and may close one, where there is fraud risk, sanctions risk, serious abuse, or unpaid fees. Section 7 says how account closure works.

What you buy. You buy the plan you select at checkout, at the price shown on our pricing page when you subscribe. Every plan includes all modules and single sign-on. Plans differ in included seats and usage bounds, which are described on that page and confirmed at checkout. We do not restate prices here, so a price change is never a change to your contract terms.

Seats. A seat is one named individual, occupying one or more operating seats in the product, for example CEO, CFO, CRO, CHRO, or COO. Logins are personal to that individual and may not be shared or passed around. Sharing a login is a material breach.

Your administrator. The person who creates the account is its administrator. An administrator can add or remove seats, change the plan, set permissions, decide which seats can see payroll, salary, and individual compensation detail, and appoint further administrators. Adding seats or upgrading changes what we charge. Administrator actions bind your company.

Your license. While your subscription is active, we grant you a non-exclusive, non-transferable, non-sublicensable right for your users to access and use the Service for your internal business operations, subject to these terms.

Accurate details. Keep your company details, billing contact, and administrator email accurate and current. You are responsible for everything done under your account and for keeping credentials confidential.

Authorization to charge. You authorize us and our payment processor to charge the payment method you put on file for your subscription fee, for seats and upgrades you add, and for applicable taxes, on each billing date, on a recurring basis, without asking you again, until you cancel. You will keep those payment details valid and current, and you allow us and our processor to use card-updater services so a reissued or renewed card keeps working. Amounts are billed and payable in US dollars.

Upgrades, downgrades, and added seats. Upgrades and added seats take effect immediately, and we charge for them for the remainder of the current billing period on a pro rata basis. Downgrades and removed seats take effect on the first day of the next billing period, and we do not refund the difference for the current one.

Taxes. Prices exclude sales, use, VAT, GST, and similar taxes. Where we are required to collect them, we add them to your charge. You are responsible for those taxes, except taxes on our income. If you are exempt, send us a valid exemption certificate before the charge. If law requires you to withhold an amount, gross up your payment so we receive the full amount due.

Late amounts. Overdue amounts may accrue interest at 1.5% per month, or the highest rate permitted by law, whichever is lower, together with reasonable costs of collection.

Questions about a charge. Tell us within 30 days of a charge if you think it is wrong, and we will look into it. After 30 days a charge is treated as accepted. Contact us at hello@mybuki.ai before you dispute a charge with your bank. A chargeback is not a cancellation: it does not end your subscription, and we may suspend the account and recover the disputed amount and any fees we are charged.

Refunds. Fees are non-refundable except where these terms expressly say otherwise. If we choose to give a refund or a credit in a particular case, that does not entitle you to another one later.

Automatic renewal. A monthly plan renews every month and an annual plan renews every year, at the plan price then in effect, charged to the payment method on file, until you cancel. There is no separate renewal step and we do not ask you again.

How to cancel. Email us at hello@mybuki.ai from the administrator address, or use the billing controls in your account where they are available to you. One message is enough, we act on it the day we receive it, and cancelling never takes more steps than subscribing did.

When cancellation takes effect. Cancellation takes effect at the end of the current billing period. You keep access until then, and the fee for that period is still due. On a monthly plan, cancel any time before the next renewal date. On an annual plan, cancel before the renewal date and the subscription ends at the end of the annual term.

No refund for an unused part of a period. We do not refund the unused part of a billing period when you cancel. The exception is where you end the subscription because we materially breached these terms and did not fix it within the cure period in Section 21, in which case we refund prepaid fees for the unused remainder.

Trials and waived fees. If we offer a trial or waive fees for a period, we tell you the length and what happens at the end before you start. Unless we say otherwise, a trial converts to a paid subscription at the standard price for that plan when it ends, charged to the payment method on file, and you can cancel at any point before then. Trials and waived periods are provided as they are, with no availability commitment.

Price changes. We give at least 30 days advance notice by email to your administrator before a new price applies to you. On a monthly plan, a new price applies from the first renewal that falls at least 30 days after that notice. On an annual plan, it applies at the next renewal. A price never changes during a period you have already paid for. If you do not want the new price, cancel before it takes effect.

Failed payments. We retry the charge over the following days and email your administrator. If we still cannot collect after 10 days, we may move the account to read-only. If the amount is still unpaid 30 days after the due date, that is a material breach, and we may suspend or terminate the subscription.

Suspension versus cancellation. Suspending or downgrading an account does not cancel your subscription and does not waive amounts you already owe.

Other grounds for suspension. We may suspend access where there is a material breach of Section 8, an imminent security threat, suspected fraud or unauthorized access, or where the law requires it. Where it is practical and lawful, we tell you first, we keep the suspension no broader and no longer than the problem requires, and we restore access once it is resolved.

Closing an account. We may stop offering the Service to you, or decline to renew, on 30 days notice, and we refund prepaid fees for the unused remainder. We may close an account immediately for fraud, sanctions exposure, or serious abuse of the Service or of our people.

Usage bounds. Where usage materially exceeds the bounds of your plan, we may throttle it, and we will talk to you about the right plan rather than surprising you with a charge.

Ownership. Your data means the data, records, files, and content you or your users submit to the Service, or that the Service retrieves from the systems you connect, including financial, accounting, sales, payroll, personnel, and banking data. Outputs means the answers, reports, analyses, summaries, and charts the Service generates for you from that data. As between us, you own both. Nothing here transfers ownership of your data to us.

The license you give us. You grant us a limited, non-exclusive license to host, process, transmit, and display your data solely to provide, secure, support, and maintain the Service for you, and as you otherwise instruct. We access your data only as far as those purposes require. We do not sell your data and we do not use it for advertising.

No training on your data. We do not use your data to train, fine-tune, or improve any artificial-intelligence or machine-learning model, and we do not permit anyone else to, including the providers we use to run the Service. We hold those providers to the same restriction by contract.

Flagged answers. If one of your users flags an answer or sends in-product feedback, our people may read that answer, the question that produced it, and its immediate context, in order to diagnose, correct, and improve the Service. That material stays your data and your confidential information, and the no-training commitment above still applies to it. If you would rather we did not read flagged answers, tell us and we will turn answer flagging off for your account.

Aggregated usage data. We collect and use aggregated, de-identified usage and performance data, for example feature usage, latency, and error rates, to operate and improve the Service. We do this only where that data does not identify, and cannot reasonably be used to identify, you, your users, your customers or personnel, or your confidential information.

Your authority to connect. You confirm that you have, and will maintain, the rights, consents, and authority needed to connect each system to the Service and to grant us the access you configure, including any approval required from your administrators, your accountants or IT providers, a parent company, or the terms of the system itself.

What we access, and why. We retrieve records from the systems you connect only to answer your questions, produce your reporting, and run the workflows you configure. Your use of each connected system stays governed by that vendor's own terms with you.

Scopes and write-back. The Service connects using the authorization each vendor makes available, which can technically confer broader access than the Service uses. Regardless of the technical scope granted, the Service will not write to, modify, or delete records in a connected system unless write-back is expressly enabled and approved by you. Actions that write to a connected system, and communications the Service prepares for anyone other than your own users, are subject to the human-approval controls you configure.

Disconnecting. You control the credentials, tokens, and authorizations, and can revoke or narrow them at any time from the system itself or by telling us. When a connection is revoked, we stop retrieving data from that system. Data already retrieved is handled under Section 21. Revoking is not a breach, but the Service will do less, and fees are not adjusted for functionality lost that way.

Information, not conclusions. Outputs are generated by AI from your own systems and data, and are provided for your information. They can contain errors, omissions, or misinterpretations, including of financial figures, and their accuracy depends on the accuracy, completeness, and configuration of the systems and data behind them.

Variation between answers. The same question can produce different answers at different times, and answers generated for you can resemble answers generated for other customers. That does not mean either answer is wrong, and it gives no one any right in your data.

Human review before reliance. You will ensure a qualified person reviews an output before you rely on it for any business, financial, accounting, tax, legal, employment, or investment decision, and before you put it in a statutory filing, a financial statement, or a communication to a third party.

Not your accountant or your adviser. MyBuki is not an accounting firm, auditor, bookkeeper, broker-dealer, law firm, or financial, tax, or investment adviser. The Service and its outputs are not accounting, audit, legal, tax, financial, or investment advice, and are not a substitute for advice from qualified professionals. Nothing here creates a fiduciary, advisory, or professional-client relationship.

Decisions about people. Do not use the Service, or anything it produces, as the basis of a decision that has a legal or similarly significant effect on an individual. That includes decisions about employment, pay, promotion or termination, credit or lending, housing, insurance, education, and access to healthcare or essential services. Those uses carry duties the Service is not configured to meet, including human review, record keeping, notice to the person affected, and disclosure of the logic involved. If you need to use Buki in that way, talk to us first: it needs a written addendum, and both of us need to agree how those duties are met.

The standard we hold ourselves to. We maintain reasonable administrative, technical, and physical safeguards designed to protect the security, confidentiality, and integrity of your data. The specific safeguards that apply to your data are the ones set out in the data processing agreement or security schedule in effect between us. Where none is in effect yet, this standard of care and the incident notice below are what we are promising, and we do not ask you to rely on anything more.

What we publish. Our security page describes how we work today and how our external assurance work stands. It is published for information, it changes as the product changes, and it is not a contractual standard: no version of it becomes part of these terms unless an agreement we have signed with you expressly incorporates a dated version of it.

Incident notice. If we become aware of unauthorized access to or disclosure of your data, we will tell you without undue delay, give you the information reasonably available to us about the incident, and take reasonable steps to contain and remediate it.

Your side of it. Keep credentials and connected-system authorizations secure, remove seats promptly when people leave, and tell us at security@mybuki.ai as soon as you suspect unauthorized access to your account.

Privacy Policy. Our Privacy Policy explains what we collect and how we handle it, and forms part of these terms.

Data processing agreement. Where applicable law requires a written processor, service-provider, or similar data processing agreement before we process personal data on your behalf, you and we have to enter into one first, and you must not enable the affected connection or submit that personal data until it is in effect between us. Once one is in effect, it governs that processing, and if it conflicts with these terms on the handling of personal data, it wins. Each of us will comply with the data-protection laws that apply to it.

Data you must not put into the Service. Some categories of data need protections the Service is not built to give, so they are out unless we have agreed otherwise in writing and signed the addendum that category requires. Do not connect a system to, or upload into, the Service: protected health information governed by HIPAA, unless we have signed a business associate agreement with you first; full payment card numbers, magnetic stripe data, or card security codes; government classified or export-controlled material; or biometric identifiers. Where your data includes personal data that a law such as GDPR, UK GDPR or CCPA regulates, do not enable the affected connection or submit that data until the data processing agreement described in Section 13 is in effect between us. If any of this reaches the Service anyway, tell us at privacy@mybuki.ai and we will work with you to remove it.

Our providers. We use third-party providers, including cloud infrastructure and language-model providers, to deliver the Service. We bind each of them to confidentiality and data-protection obligations no less protective than these terms, including the no-training commitment in Section 9, and we stay responsible for their performance. Our current list is available at privacy@mybuki.ai. If you reasonably object to a new provider on data-protection grounds and we cannot offer you a reasonable alternative, you may cancel and we will refund prepaid fees for the unused remainder.

What is confidential. Confidential information means non-public information one of us discloses to the other that is marked confidential, or that a reasonable person would understand to be confidential from its nature or the circumstances. Your data is your confidential information. The non-public features, architecture, prompts, workflows, pricing, and roadmap of the Service are ours.

How each of us treats it. The receiving side will use the other side's confidential information only to perform or exercise its rights under these terms, protect it with at least reasonable care, disclose it only to employees, contractors, and professional advisers who need it and are under obligations at least as protective, and stay responsible for those people.

What is not confidential. Information that is or becomes public without a breach, that was already lawfully known without restriction, that is lawfully received from a third party, or that is independently developed without using the other side's confidential information. Either of us may disclose where the law requires it, giving the other prompt notice where that is lawful.

How long it lasts. These obligations run for five years from the disclosure in question, and for as long as the information qualifies as a trade secret. Unauthorized disclosure can cause harm that money does not fix, so either of us may seek injunctive relief in addition to any other remedy. If we have a signed non-disclosure agreement in effect, it governs instead of this section for the information it covers.

What we own. We own the Service and everything in it, including the software, models, prompts, workflows, interfaces, documentation, and all improvements to them. You get the license in Section 4 and nothing else. The Buki name, marks, and the content of this site belong to us.

Your outputs, our know-how. You own the outputs generated for you. That ownership gives you no right in the models, prompts, or general know-how we use to produce them, and it does not stop us from producing similar answers for other customers from their own data.

Feedback. If you or your users give us suggestions, ideas, or other feedback about the Service, we may use, incorporate, and commercialize it without restriction, attribution, or obligation, provided we do not disclose your confidential information in doing so. Feedback gives you no ownership, license, approval right, or other interest in the Service, and you never have to give it.

Vendors are not parties. The systems you connect are provided by their own vendors under their own terms. No vendor of a connected system is a party to these terms, makes any warranty under them, or has any liability to you under them. Each such vendor may enforce this section, and the disclaimer in Section 19 as it applies to that vendor's product, as if it were a party.

Availability and change. We are not responsible for a connected system's availability or accuracy, or for changes to its data or its interfaces, though we will use reasonable efforts to adapt the Service to material interface changes.

Ongoing changes. We may change, add, or remove features as the product develops. We will not materially degrade the core functionality you are paying for during a period you have paid for. If we retire a material feature, we give reasonable advance notice by email or in the product, and if the change materially reduces the core functionality you paid for, you may cancel and we will refund prepaid fees for the unused remainder.

Preview features. Features labeled beta, preview, or early access are provided as they are. They may change or be withdrawn at any time, may never become generally available, and carry no availability or support commitment. Use them at your discretion. Our total liability arising from a preview feature is limited to US $1,000.

Support. Support is by email on US business days, and we aim to reply within one business day. We do not commit to an uptime figure in these terms. Reach support at hello@mybuki.ai.

What we cover. We will defend you against a third-party claim that the Service, as provided by us and used as permitted, infringes that party's patent, copyright, or trademark, or misappropriates its trade secret, and we will pay damages finally awarded or agreed in settlement. If such a claim arises or looks likely, we may modify the Service so it does not infringe, obtain the right for you to keep using it, or terminate the affected subscription and refund prepaid fees for the unused remainder. We do not cover claims arising from your data, from a connected system, from combining the Service with things we did not provide, or from use in breach of these terms.

What you cover. You will defend us against a third-party claim arising from an allegation that your data, as you or your users provided it, infringes or misappropriates that party's rights or breaches the law; from a breach of your confirmations in Section 10 about authority to connect systems; or from use of the Service or its outputs in breach of Section 8 or applicable law. You will pay damages finally awarded or agreed in settlement.

How a claim is handled. The side seeking cover must give prompt notice of the claim, let the other side control the defense and settlement, provided any settlement fully releases it without an admission of fault by it, and cooperate reasonably at the other side's expense.

What we promise. We will provide the Service with commercially reasonable skill and care, and we have the authority to enter into this agreement.

What you promise. You have the rights and authority described in Section 10, and your use of the Service will comply with these terms and applicable law.

The cap. Except for the claims listed below, neither of us is liable for more, in total, than the fees you paid or owe for the 12 months before the event that gave rise to the liability.

A higher cap for confidentiality and security. For a breach of Section 12, Section 14, or a data processing agreement in effect between us, that limit is two times the amount above.

No indirect damages. Neither of us is liable for indirect, incidental, special, consequential, or punitive damages, or for lost profits, revenue, goodwill, or data, even if warned they were possible.

What the cap does not cover. The cap does not apply to fraud, wilful misconduct, or gross negligence; to the indemnities in Section 18; to your payment obligations; or to your breach of the second, third, or fourth bullet of Section 8. Nothing here limits liability the law does not allow us to limit. The separate US $1,000 ceiling in Section 17 applies to preview features.

Why the limits are here. These limits are a deliberate allocation of risk between us, and our pricing depends on them. Any claim under these terms must be brought within one year after it arose, or it is waived, except a claim for unpaid fees.

Term. This agreement starts when you accept it and continues until the subscription is cancelled or terminated.

Termination for cause. Either of us may terminate if the other materially breaches these terms and does not fix it within 30 days of written notice describing the breach, or immediately if the other becomes insolvent or enters bankruptcy or similar proceedings.

Export window. When the subscription ends, access to the Service ends. For 30 days after that, you can export your data in a commonly used format from within the product, or by asking us and we will produce it.

Deletion, and what we cannot delete. We delete your data from active systems no later than 60 days after the subscription ends, or within 30 days of an earlier written deletion request from you. Copies held in routine backups are isolated from ordinary use and restore, and are purged on our backup cycle no later than 90 days after the data is deleted from active systems. We keep copies where the law requires it, including billing and tax records, and where a legal hold applies. Anything we retain stays protected under these terms and is used only for the reason it was retained. We cannot promise that every copy disappears the moment you ask, and we do not claim otherwise.

Fees on termination. You pay all fees accrued through the termination date. Termination does not entitle you to a refund of prepaid fees, except where these terms expressly provide one.

What survives. Sections 1, 2, 5, 8, 9, 11, 13, 14, 15, 16, 18, 19, 20, 21, 22, 24, and 25 survive the end of this agreement. Sections 9, 12, and 13 keep applying for as long as we hold any of your data, including copies in backups.

Names and logos. We will not use your name, logo, or trademarks, including in customer lists, press releases, and case studies, without your prior written consent, and you will not use ours without ours. Consent for one specific use is not consent for any other.

Updates to these terms. Every version of these terms carries its own version identifier and effective date, both shown at the top of this page. The acceptance record described in Section 2 holds the version your company accepted, a copy of the text as it was presented, and the time we received confirmation of acceptance, so we can tell you which version you accepted, when, and what it said.

Material changes. If a change materially reduces your rights, we give at least 30 days advance notice by email to your administrator or in the product before it takes effect. Continuing to use the Service after that is acceptance. If you do not accept, cancel before it takes effect and we will refund prepaid fees for the unused remainder of your current period.

Everything else. Other changes, for example clarifications or new features, take effect when we post them. A change never applies retroactively to a dispute already raised, and never changes the price of a period you have already paid for. Price changes follow Section 6, not this section.

Delaware law. These terms are governed by the laws of the State of Delaware, without regard to its conflict-of-laws rules.

Informal resolution first. Before starting a formal claim, email us at hello@mybuki.ai describing the problem and what you want. We will do the same. Give it 60 days to be resolved informally.

Where claims are heard. If it is not resolved, the state and federal courts located in Delaware have exclusive jurisdiction, and both of us consent to that venue and waive any objection to it. Both of us waive the right to a trial by jury.

No class actions. Claims may be brought only in your own name, and not as a plaintiff or class member in a class, consolidated, or representative proceeding.

Assignment. Neither of us may assign this agreement without the other's written consent, except to a successor in a merger, reorganization, or sale of all or substantially all assets, on notice to the other. Any other attempted assignment is void.

Entire agreement, and no reliance. These terms and the documents they incorporate are the entire agreement about the Service, and supersede earlier proposals, discussions, and understandings about it. You are not relying on any statement, demonstration, roadmap, or marketing material that is not written into these terms.

Severability and waiver. If a provision is held unenforceable, it is enforced as far as it can be and the rest stays in effect. Not enforcing a provision once does not waive it.

Force majeure. Neither of us is liable for delay or failure to perform, other than payment obligations, caused by events beyond reasonable control, including natural disasters, war, terrorism, labor disputes, internet or utility failures, or acts of government, provided reasonable efforts are used to resume.

Independent parties. We are independent contractors. Nothing here creates a partnership, joint venture, agency, or employment relationship. No one other than you and us has rights under these terms, apart from the connected-system vendors named in Section 16.

Compliance and government users. Each of us will comply with applicable anti-bribery and anti-corruption law. If you are a US government entity, the Service is commercial computer software and any rights granted are limited to those in these terms.

Interpretation. Headings are for convenience and do not affect meaning. Including and for example are not words of limitation.

General and legal notices. General questions and legal notices go to hello@mybuki.ai.

Privacy, data processing, and the provider list. Privacy questions, questions about data processing agreements, and requests for the provider list go to privacy@mybuki.ai.

Security reports. Security reports go to security@mybuki.ai.