ThisThis Software and SaaS End User License Agreement ("Agreement") is a legal agreement between BURO ONE MANAGEMENT CONSULTANCIES L.L.C, a Dubai limited liability company - single owner (LLC - SO), operating under the brand Buro 1 ("Buro 1," "we," "us," or "our"), and the person or entity accepting this Agreement or using the Software ("Customer," "you," or "your").Privacy Policy explains how Buro 1 collects, uses, stores, and protects personal data when you use the Pulse platform and the Buro 1 website (together, the "Services"). By accessing or using the Services, you acknowledge that you have read and understood this policy.
Buro 1 is licensed by the Government of Dubai, Department of Economy and Tourism / Department of Economic Development, under Commercial License No. 1626101, Register No. 2866389, DCCI No. 687828, issued on June 5, 2026 and expiring on June 4, 2027.
By downloading, installing, accessing, or using any Buro 1 software, hosted application, mobile application, API, website-based product, plug-in, extension, update, documentation, or related service identified in an order form, invoice, statement of work, online checkout, or product page (collectively, the "Software"), you agree to this Agreement, including the embedded policies and schedules at the end of this Agreement. If you use the Software on behalf of an organization, you represent that you have authority to bind that organization.
IF YOU DO NOT AGREE TO THIS AGREEMENT, DO NOT INSTALL, ACCESS, OR USE THE SOFTWARE.
For purposes of warranty disclaimers, liability limitations, indemnities, releases, and other protections in this Agreement, "Buro 1 Protected Parties" means Buro 1 and its affiliates, licensors, suppliers, subcontractors, service providers, predecessors, successors, assigns, directors, officers, managers, owners, members, shareholders, beneficial owners, employees, contractors, representatives, and agents, in each case whether past, present, or future and only to the maximum extent permitted by applicable law. The protections extended to individual owners, members, and beneficial owners under this Agreement are deliberate and material terms without which Buro 1 would not provide the Software on the same economic terms.
1. Agreement Structure
1.1 Order Forms. Commercial details such as product name, subscription term, users, fees, usage limits, support package, and hosting model may be set out in an order form, invoice, online checkout, proposal, or statement of work accepted by Buro 1 ("Order Form").
1.2 Incorporated Terms. The following terms are incorporated into and form part of this Agreement: the embedded Acceptable Use Policy (Schedule A), Privacy and Data Notice (Schedule B), Data Protection Terms Pending a Signed DPA (Schedule C), Support Policy (Schedule D), Availability, No-SLA, Maintenance, and Service Credits Policy (Schedule E), Security Statement and Shared Responsibility (Schedule F), Backup, Retention, Export, and Deletion Policy (Schedule G), Subprocessor and Third-Party Services Policy (Schedule H), API and Integration Terms (Schedule I), Product-Specific, Trial, Beta, and AI Notices (Schedule J), and any signed Order Form, Data Processing Addendum ("DPA"), Statement of Work ("SOW"), Change Order, Service Level Agreement ("SLA"), or written professional services terms accepted by Buro 1.
1.3 Conflict. If there is a conflict, the following order controls unless expressly stated otherwise: signed written agreement, DPA for personal data processing terms, Order Form, SOW or Change Order for professional services scope, Product-Specific Terms, SLA, this Agreement, and embedded policies. No purchase order, vendor portal term, procurement term, or other customer document modifies this Agreement unless Buro 1 expressly signs a written amendment referencing this Agreement.
1.4 Clickwrap Package. This Agreement is intended to function as Buro 1's primary clickwrap package for ordinary Software access. Customer acknowledges that the embedded policies are not merely informational; they are binding contractual terms. Customer should save or print a copy of this Agreement for its records.
2. License Grant
2.1 Limited License. Subject to your compliance with this Agreement and payment of applicable fees, Buro 1 grants you a limited, non-exclusive, non-transferable, non-sublicensable, revocable license during the applicable term to access and use the Software solely for your internal business purposes and only within the limits in the Order Form.
2.1 Limited License. Subject to your compliance with this Agreement and payment of applicable fees, Buro 1 grants you a limited, non-exclusive, non-transferable, non-sublicensable, revocable license during the applicable term to access and use the Software solely for your internal business purposes and only within the limits in the Order Form.
2.2 Authorized Users. You may permit your employees, contractors, and other authorized users to use the Software only for your benefit. You are responsible for all acts and omissions of your authorized users.
2.3 License Model. The Software is licensed, not sold. Buro 1 and its licensors reserve all rights not expressly granted.
2.4 Devices and Copies. For downloadable Software, you may install the number of copies permitted in the Order Form or documentation. You may make one backup copy solely for archival or disaster-recovery purposes unless prohibited by product-specific terms.
3. Restrictions
You must not, and must not permit anyone else to:
a. copy, modify, translate, adapt, create derivative works of, or distribute the Software except as expressly allowed;
b. rent, lease, lend, sell, sublicense, assign, host for third parties, timeshare, operate as a service bureau, or otherwise provide third-party access to the Software;
c. reverse engineer, decompile, disassemble, or attempt to derive source code, underlying models, algorithms, architecture, or non-public APIs except to the extent applicable law prohibits this restriction;
d. bypass, disable, or interfere with license keys, access controls, rate limits, security mechanisms, usage tracking, or technical restrictions;
e. use the Software to transmit malware, conduct phishing, scan or attack systems, violate law, infringe rights, process unlawful content, or harm Buro 1, other customers, or third parties;
f. perform penetration testing, vulnerability scanning, load testing, scraping, benchmarking, or competitive analysis without Buro 1's prior written approval, except as expressly allowed in a written security policy;
g. remove proprietary notices or misrepresent ownership of the Software;
h. use the Software in a high-risk environment where failure could cause death, personal injury, catastrophic property damage, or environmental harm unless Buro 1 expressly agrees in writing; or
i. use the Software with data or workloads prohibited by the Order Form, DPA, Acceptable Use Policy, or applicable law.
4. Customer Responsibilities
4.1 Accounts and Credentials. You are responsible for maintaining the confidentiality of accounts, passwords, API keys, tokens, devices, and administrator privileges. You must promptly notify Buro 1 of any suspected unauthorized access involving the Software.
4.2 Configuration and Access. You are responsible for configuring the Software, assigning user roles, revoking access when users leave, maintaining accurate account information, and ensuring your systems, networks, devices, browsers, integrations, and internet connections are secure and compatible.
4.3 Backups. Unless an Order Form or SLA expressly states that Buro 1 provides backup and restoration services, you are responsible for maintaining independent backups of Customer Data. Buro 1 is not responsible for loss of Customer Data caused by your failure to maintain backups, your configuration choices, your deletion or modification of data, credential compromise, third-party systems, or events outside Buro 1's reasonable control.
4.4 Lawful Use. You are responsible for determining whether the Software is appropriate for your intended use and for complying with laws, industry rules, client obligations, employment laws, privacy laws, export laws, consumer laws, and professional obligations that apply to your data and use.
4.5 Electronic Acceptance and Records. By clicking "I Agree," "Accept," "Continue," or a similar button, by checking an acceptance box, or by accessing or using the Software, you acknowledge that you have read, understood, and agree to be bound by this Agreement, including all embedded policies and schedules. Buro 1 may record the date, time, version of this Agreement, acceptance text presented, user identifier, account identifier, IP address, browser/device information, and means of acceptance for each user. This Agreement is valid as an electronic record under UAE Federal Decree-Law No. 46 of 2021 on Electronic Transactions and Trust Services and other applicable electronic-signature or electronic-contracting laws. You agree not to contest the validity, enforceability, or binding effect of this Agreement solely on the basis that it was accepted electronically.
4.6 Audit and Usage Compliance. Buro 1 may verify your compliance with this Agreement and the Order Form at any time, including by inspecting usage logs, license counts, user counts, and feature access records. Upon reasonable written notice of at least ten (10) business days, Buro 1 may request a self-certification of compliance or conduct a compliance review no more than once per twelve-month period unless Buro 1 reasonably suspects a material breach. Buro 1 will treat information obtained during a compliance review as confidential. If a review reveals underpayment or unauthorized use, you must promptly pay any amounts owed and Buro 1 may recover reasonable costs of the review.
5. Customer Data and Privacyfidentiality
5.1 Customer Data. "Customer Data" means data, files, content, records, messages, credentials, personal data, or other materials submitted to or processed through the Software by you or your authorized users.
5.2 Ownership. As between you and Buro 1, you retain ownership of Customer Data. You grant Buro 1 a non-exclusive right to host, copy, process, transmit, display, and use Customer Data solely as necessary to provide, secure, maintain, support, improve, and comply with legal obligations relating to the Software. Buro 1 will not use Customer Data to train or improve third-party or external AI models, and will not provide Customer Data to AI model providers in individually identifiable form, without Customer's prior written consent.
5.3 Personal Data. To the extent Buro 1 processes personal data on your behalf, the DPA governs that processing. If no DPA has been signed and Buro 1 processes personal data for Customer, the data protection terms embedded in this Agreement apply until a signed DPA is in place. You are responsible for providing required notices, obtaining required consents, establishing a lawful basis for processing, honoring data-subject or consumer rights requests where applicable, and ensuring your instructions to Buro 1 are lawful.
5.4 Sensitive Data. Unless expressly allowed in the Order Form or DPA, you must not submit regulated health information, payment card data, government identifiers, children's data, biometric data, financial account credentials, export-controlled technical data, or other highly sensitive data.
5.5 Usage Data. Buro 1 may collect technical, diagnostic, telemetry, security, performance, and usage information relating to the Software. Buro 1 may use aggregated or de-identified information to operate, secure, analyze, and improve its products, provided it does not identify you or any individual.
6. Security
6.1 Security Program. Buro 1 will maintain administrative, technical, and organizational safeguards designed to protect the security, confidentiality, integrity, and availability of Customer Data, taking into account the nature of the Software, the sensitivity of the data, the state of the art, implementation costs, and reasonably foreseeable risks.
6.2 No Absolute Security. You acknowledge that no software, network, hosting environment, encryption method, access-control system, backup process, or security program can be guaranteed to be error-free, uninterrupted, immune from attack, or incapable of unauthorized access. Buro 1 does not warrant that hacks, data leaks, malware, denial-of-service attacks, credential compromises, vulnerabilities, ransomware, or other security incidents will never occur.
6.3 Shared Responsibility. Security is a shared responsibility. Buro 1 is not responsible for security incidents, data loss, downtime, unauthorized access, or disclosure caused by your credentials, users, administrators, devices, networks, configurations, integrations, third-party services, failure to install updates, failure to follow documentation, or use of the Software outside this Agreement.
6.4 Security Incidents. "Security Incident" means a confirmed breach of Buro 1's security controls that results in unauthorized access to or disclosure of Customer Data processed by Buro 1. Buro 1 will investigate Security Incidents and, where required by applicable law or the DPA, notify you without undue delay after confirmation. Notice may be delayed where law enforcement, legal obligations, containment, or investigation needs require.
6.5 Customer Cooperation. You must cooperate with Buro 1's reasonable investigation, containment, remediation, and notification efforts, including by preserving logs, rotating credentials, disabling affected integrations, and providing relevant information.
6.6 Vulnerability Reports. You must promptly report suspected vulnerabilities to info@buro-1.com. You must not publicly disclose vulnerabilities, exploit vulnerabilities, access other customers' data, disrupt service, or perform security testing except as permitted by Buro 1 in writing.
6.7 Owner and Individual Liability Protection. This Agreement is entered into with and on behalf of Customer as a legal entity. Notwithstanding any other provision of this Agreement, no individual owner, member, manager, beneficial owner, shareholder, or equity holder of Buro 1 (each, a "Buro 1 Owner") shall be personally liable to Customer, Customer's authorized users, or any third party for any claim, loss, damage, obligation, or liability of any kind arising from or relating to this Agreement, the Software, its performance or non-performance, any Security Incident, any downtime, any data loss or data leak, or any other matter connected to the Software or Buro 1's business. Each Buro 1 Owner is an express intended third-party beneficiary of this Section and of all warranty disclaimers, liability limitations, indemnities, and releases that apply to the Buro 1 Protected Parties under this Agreement. Customer expressly agrees that any claims and remedies it may have are limited to claims against Buro 1 as a legal entity and not against any Buro 1 Owner personally. This individual protection is a material term of this Agreement, and Buro 1 would not provide the Software on the same terms without it.
7. Availability, Downtime, and Maintenance
7.1 As Available. Hosted Software and online features are provided on an "as available" basis unless an SLA expressly provides otherwise. Buro 1 does not guarantee uninterrupted, error-free, secure, or continuous availability.
7.2 Downtime. The Software may be unavailable, degraded, suspended, delayed, or interrupted due to: scheduled maintenance, emergency maintenance, updates, and upgrades; infrastructure failures; internet, telecom, or connectivity failures; cloud provider, data center, or hosting provider issues; power outages or grid failures; cyberattacks, denial-of-service attacks, ransomware, or other malicious acts; bugs, capacity limits, or unexpected traffic spikes; force majeure events as defined in Section 7.5; legal requirements or regulatory orders; or your acts, omissions, configurations, or integrations. Unless a signed SLA expressly provides otherwise, Customer's sole and exclusive remedy for downtime or unavailability is a service-term extension: Buro 1 will extend the affected subscription at no charge by the number of days of verified downtime, as verified against Buro 1's monitoring records (a "Downtime Extension"). Downtime Extensions are limited to a maximum of thirty (30) days in aggregate in any twelve (12) month period, regardless of the number or duration of downtime events, and do not accrue for downtime attributable to Customer's acts, omissions, systems, configurations, or integrations, or to causes excluded under Schedule E. No refund, credit, or monetary compensation is payable for downtime.
7.3 Maintenance and Updates. Buro 1 may modify, update, patch, suspend, replace, discontinue, or remove features to improve performance, address security issues, comply with law, prevent harm, or manage product lifecycle. Buro 1 will use commercially reasonable efforts to avoid material disruption where practical.
7.4 Suspension. Buro 1 may suspend access immediately if Buro 1 reasonably believes your use poses a security risk, violates this Agreement, may harm Buro 1 or others, may create legal liability, or if payment is overdue. Buro 1 will use reasonable efforts to restore access after the issue is resolved.
7.5 Force Majeure. Neither Buro 1 nor any Buro 1 Protected Party will be liable for any failure or delay in performing any obligation under this Agreement to the extent caused by a Force Majeure Event. A "Force Majeure Event" means any event or circumstance beyond the reasonable control of the affected party, including: acts of God, natural disasters, earthquakes, floods, hurricanes, fires, or extreme weather; war, armed conflict, terrorism, civil unrest, riots, or governmental action; pandemic, epidemic, or public health emergency; electrical, internet, telecom, or utility failures; cyberattacks, denial-of-service attacks, ransomware, or malicious intrusion by third parties; cloud provider, hosting provider, or infrastructure outages beyond Buro 1's control; strikes, labor actions, or supply-chain disruptions; or changes in law, regulation, or regulatory orders. Buro 1 will use commercially reasonable efforts to mitigate the effects of a Force Majeure Event and to resume performance as soon as reasonably practicable. If a Force Majeure Event affecting Buro 1's core obligations under a specific Order Form continues for more than sixty (60) consecutive days, either party may terminate the affected Order Form on written notice, with Buro 1 refunding prepaid unused fees for the unavailable period.
8. Support and Beta Features
8.1 Support. Buro 1 will provide support only as described in the Order Form or Support Policy. Unless expressly stated, Buro 1 does not guarantee response times, resolution times, custom development, training, data migration, or compatibility work.
8.2 Beta and Pre-Release Features. Buro 1 may offer software features, products, or services designated as "beta," "preview," "early access," "experimental," "pilot," or similar ("Beta Features"). Beta Features are provided AS IS without any warranty, service level commitment, support obligation, or availability guarantee. Beta Features may be inaccurate, incomplete, contain errors, or be unavailable or discontinued without notice. Buro 1 may collect additional data from your use of Beta Features to evaluate and improve them. Beta Features are not subject to any SLA and are expressly excluded from all uptime or performance commitments. Buro 1's liability for Beta Features is capped at USD 100, regardless of any other provision in this Agreement.
9. Third-Party Services, Open Source, and AI Features
9.1 Third-Party Services. The Software may interoperate with or depend on third-party platforms, hosting providers, APIs, applications, marketplaces, app stores, payment processors, identity providers, analytics tools, or integrations. Buro 1 is not responsible for third-party services, their availability, security, terms, data handling, changes, or failures.
9.2 Third-Party Terms. You must comply with applicable third-party terms when using third-party services with the Software.
9.3 Open Source. Some Software may include open-source components governed by separate licenses. Those licenses control only the applicable open-source components.
9.4 AI and Machine Learning Features. Some features of the Software may incorporate artificial intelligence, machine learning, large language models, generative AI, or similar technologies ("AI Features"). You acknowledge and agree that: (a) outputs generated by AI Features may not be accurate, complete, current, unique, or appropriate for your specific use; (b) AI outputs do not constitute legal, financial, medical, professional, or other expert advice; (c) Buro 1 does not warrant that AI outputs are free from bias, error, hallucination, or infringement of third-party rights; (d) you are solely responsible for reviewing, validating, and determining the suitability of any AI output before relying on or acting upon it; (e) you must not use AI Features to generate content that is unlawful, harmful, deceptive, or that violates third-party rights; and (f) you must not attempt to extract or infer Buro 1's underlying models, weights, training data, or proprietary AI architecture; and (g) Buro 1 will not use Customer Data to train or improve AI models without your prior written consent. Buro 1's liability for AI Features is limited to the extent stated in Section 14.
9. 10. Fees, Taxes, Payment, and Renewals-Party Services, Open Source, and AI Features
10.1 Payment Obligation. You must pay all fees in the Order Form. Fees are non-refundable except as expressly stated in the Order Form or required by law. You are responsible for taxes, duties, bank charges, payment processor fees, and similar charges other than taxes based on Buro 1's net income. Buro 1 may charge interest or suspend service for overdue amounts to the maximum extent permitted by law.
10.2 Auto-Renewal. Unless the Order Form specifies otherwise or you cancel before the renewal date, subscriptions will automatically renew at the end of each subscription period for the same period at the then-current price. Buro 1 will provide notice of upcoming auto-renewal to your account email address at least fourteen (14) days before the renewal date where required by applicable law. You must cancel before the renewal date to avoid being charged for the next period. Cancellation procedures are set out in the Order Form or Support Policy. If no cancellation procedure is specified, contact Buro 1 at info@buro-1.com before the renewal date.
10.3 Price Changes. Buro 1 may change fees for renewals with at least thirty (30) days' written notice. If you do not accept a price change, you must cancel the applicable subscription before the renewal date. Continued use after the renewal date constitutes acceptance of the new pricing.
10.4 Invoice Finality. Invoices are deemed accepted unless Customer disputes them in writing, with specific reasons, within ten (10) days of receipt. Undisputed amounts and the undisputed portion of any disputed invoice remain payable when due, and Customer may not withhold, set off, or deduct from amounts due except as required by law.
10.5 Free Trials and Evaluations. If Buro 1 offers the Software on a free-trial or evaluation basis, the trial is provided AS IS with no warranties and subject to any trial-specific terms communicated at the time of access. Buro 1 may terminate a free trial at any time without notice. At the end of the trial period, continued access may require conversion to a paid subscription at the applicable fee. Customer Data from a free trial may be deleted if you do not convert. Free-trial use does not create any obligation on Buro 1 to provide paid access on the same terms.
11. Intellectual Property and Feedback
11.1 Buro 1 IP. Buro 1 and its licensors own all rights in the Software, documentation, templates, interfaces, workflows, designs, know-how, trade secrets, trademarks, and related intellectual property, including rights protected under UAE Federal Decree-Law No. 38 of 2021 on Copyrights and Related Rights (which expressly covers software, applications, and databases) and other applicable intellectual property laws.
11.2 Feedback. If you provide ideas, suggestions, feature requests, bug reports, or other feedback, Buro 1 may use them without restriction or compensation.
11.3 Customer Marks. Buro 1 may use your name and logo to identify you as a customer unless you notify Buro 1 in writing that it may not do so.
12. Confidentiality
Each party may receive non-public information from the other party that is marked confidential or should reasonably be understood as confidential. The receiving party must use the confidential information only to perform under this Agreement and protect it using reasonable care. These obligations do not apply to information that is public, already known, independently developed, or lawfully received from a third party without confidentiality obligations. A party may disclose confidential information where required by law if it gives reasonable notice where legally permitted.
13. Warranties and Disclaimers
13.1 Mutual Authority. Each party represents that it has authority to enter this Agreement.
13.2 Disclaimer. EXCEPT AS EXPRESSLY STATED IN THIS AGREEMENT, THE SOFTWARE, DOCUMENTATION, SUPPORT, HOSTED SERVICES, OUTPUTS, AI FEATURES, INTEGRATIONS, AND RELATED SERVICES ARE PROVIDED BY THE BURO 1 PROTECTED PARTIES "AS IS" AND "AS AVAILABLE," WITH ALL FAULTS AND WITHOUT WARRANTIES OF ANY KIND.
TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE BURO 1 PROTECTED PARTIES DISCLAIM ALL EXPRESS, IMPLIED, STATUTORY, AND OTHER WARRANTIES, INCLUDING WARRANTIES OF MERCHANTABILITY, SATISFACTORY QUALITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT, ACCURACY, QUIET ENJOYMENT, SECURITY, AVAILABILITY, ERROR-FREE OPERATION, AND UNINTERRUPTED USE.
BURO 1 DOES NOT WARRANT THAT THE SOFTWARE WILL PREVENT HACKS, DATA LEAKS, DOWNTIME, DATA LOSS, VULNERABILITIES, UNAUTHORIZED ACCESS, MALWARE, RANSOMWARE, SERVICE INTERRUPTIONS, AI OUTPUT ERRORS, OR THIRD-PARTY FAILURES.
13.3 No Professional Advice. Unless expressly stated in an Order Form, the Software does not provide legal, financial, medical, tax, accounting, engineering, cybersecurity, compliance, or other professional advice. You are responsible for independent review of outputs and decisions.
14. Limitation of Liability
14.1 Exclusion of Damages. TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE BURO 1 PROTECTED PARTIES WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, PUNITIVE, ENHANCED, OR RELIANCE DAMAGES; LOSS OF PROFITS, REVENUE, GOODWILL, USE, BUSINESS, OPPORTUNITY, OR ANTICIPATED SAVINGS; BUSINESS INTERRUPTION; COSTS OF DELAY; LOSS, CORRUPTION, OR RECOVERY OF DATA; FAILURE OF SECURITY MECHANISMS; DOWNTIME; SECURITY INCIDENTS; DATA LEAKS; AI OUTPUT ERRORS OR INACCURACIES; OR COSTS OF SUBSTITUTE GOODS OR SERVICES, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
14.2 Liability Cap. TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE TOTAL AGGREGATE LIABILITY OF ALL BURO 1 PROTECTED PARTIES ARISING OUT OF OR RELATING TO THIS AGREEMENT, THE SOFTWARE, SUPPORT, SECURITY INCIDENTS, DATA LOSS, DATA LEAKS, DOWNTIME, AI FEATURES, BETA FEATURES, OR PROFESSIONAL SERVICES WILL NOT EXCEED THE AMOUNTS PAID BY YOU TO BURO 1 FOR THE SPECIFIC SOFTWARE OR SERVICE GIVING RISE TO THE CLAIM DURING THE TWELVE (12) MONTHS BEFORE THE EVENT GIVING RISE TO LIABILITY. IF NO FEES WERE PAID, THE CAP IS USD 100.
14.3 Multiple Claims. Multiple claims will not expand the liability cap.
14.4 Non-Waivable Rights. These limitations apply only to the maximum extent permitted by applicable law. Some jurisdictions do not allow certain exclusions or limits, and some statutory rights cannot be waived. Nothing in this Agreement limits liability to the extent such limitation is prohibited by applicable law, including for fraud, willful misconduct, or other liability that cannot lawfully be excluded.
14.5 Risk Allocation. The fees reflect the allocation of risk in this Agreement. You acknowledge that Buro 1 would not provide the Software on the same economic terms without these limitations.
14.6 Time Limitation on Claims. ANY CLAIM OR CAUSE OF ACTION ARISING OUT OF OR RELATING TO THIS AGREEMENT, THE SOFTWARE, OR THE SERVICES, WHETHER BASED IN CONTRACT, TORT, STATUTE, OR ANY OTHER LEGAL OR EQUITABLE THEORY, MUST BE BROUGHT WITHIN ONE (1) YEAR AFTER THE CLAIMANT FIRST KNEW OR REASONABLY SHOULD HAVE KNOWN OF THE FACTS GIVING RISE TO THE CLAIM. AFTER THAT PERIOD, ANY SUCH CLAIM IS PERMANENTLY BARRED, REGARDLESS OF WHEN IT IS DISCOVERED. THIS LIMITATION APPLIES TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW AND IS AN ESSENTIAL ELEMENT OF THE BASIS OF THE BARGAIN BETWEEN THE PARTIES.
14.7 Exclusive In-Kind Remedies. TO THE MAXIMUM EXTENT PERMITTED BY LAW, CUSTOMER'S SOLE AND EXCLUSIVE REMEDY, AND THE ENTIRE LIABILITY OF THE BURO 1 PROTECTED PARTIES: (A) FOR DOWNTIME OR UNAVAILABILITY, IS THE DOWNTIME EXTENSION DESCRIBED IN SECTION 7.2; AND (B) FOR ANY SECURITY INCIDENT (AS DEFINED IN SECTION 6.4), OR ANY DATA LEAK OR UNAUTHORIZED ACCESS TO CUSTOMER DATA RESULTING FROM A CONFIRMED BREACH OF BURO 1'S SECURITY CONTROLS, IS TWO (2) MONTHS' USE OF THE AFFECTED SOFTWARE FREE OF SUBSCRIPTION FEES, LIMITED TO A MAXIMUM OF TWO (2) FREE MONTHS IN ANY TWELVE (12) MONTH PERIOD REGARDLESS OF THE NUMBER OF INCIDENTS. THE REMEDY IN (B) DOES NOT APPLY TO EVENTS CAUSED BY CUSTOMER, ITS USERS, CREDENTIALS, DEVICES, NETWORKS, CONFIGURATIONS, OR INTEGRATIONS AS DESCRIBED IN SECTION 6.3, FOR WHICH NO REMEDY IS AVAILABLE. THESE IN-KIND REMEDIES REPLACE ALL MONETARY DAMAGES FOR SUCH EVENTS. IF AND ONLY TO THE EXTENT A COURT OF COMPETENT JURISDICTION HOLDS THESE EXCLUSIVE REMEDIES UNENFORCEABLE, THE EXCLUSIONS AND CAP IN SECTIONS 14.1 AND 14.2 APPLY IN FULL AS THE BACKSTOP.
14.8 Collective Action and Class Action Waiver. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, ALL DISPUTES MUST BE BROUGHT ON AN INDIVIDUAL BASIS ONLY. NEITHER PARTY MAY BRING A CLAIM AS A PLAINTIFF OR CLASS MEMBER IN ANY CLASS ACTION, COLLECTIVE ACTION, MASS ARBITRATION, CONSOLIDATED ACTION, OR REPRESENTATIVE PROCEEDING. THIS WAIVER APPLIES TO THE MAXIMUM EXTENT PERMITTED BY LAW. IF THIS WAIVER IS FOUND UNENFORCEABLE IN A PARTICULAR JURISDICTION, THAT UNENFORCEABLE PORTION SHALL NOT AFFECT THE REMAINDER OF THIS AGREEMENT.clusive In-Kind Remedies. TO THE MAXIMUM EXTENT PERMITTED BY LAW, CUSTOMER'S SOLE AND EXCLUSIVE REMEDY, AND THE ENTIRE LIABILITY OF THE BURO 1 PROTECTED PARTIES: (A) FOR DOWNTIME OR UNAVAILABILITY, IS THE DOWNTIME EXTENSION DESCRIBED IN SECTION 7.2; AND (B) FOR ANY SECURITY INCIDENT (AS DEFINED IN SECTION 6.4), OR ANY DATA LEAK OR UNAUTHORIZED ACCESS TO CUSTOMER DATA RESULTING FROM A CONFIRMED BREACH OF BURO 1'S SECURITY CONTROLS, IS TWO (2) MONTHS' USE OF THE AFFECTED SOFTWARE FREE OF SUBSCRIPTION FEES, LIMITED TO A MAXIMUM OF TWO (2) FREE MONTHS IN ANY TWELVE (12) MONTH PERIOD REGARDLESS OF THE NUMBER OF INCIDENTS. THE REMEDY IN (B) DOES NOT APPLY TO EVENTS CAUSED BY CUSTOMER, ITS USERS, CREDENTIALS, DEVICES, NETWORKS, CONFIGURATIONS, OR INTEGRATIONS AS DESCRIBED IN SECTION 6.3, FOR WHICH NO REMEDY IS AVAILABLE. THESE IN-KIND REMEDIES REPLACE ALL MONETARY DAMAGES FOR SUCH EVENTS. IF AND ONLY TO THE EXTENT A COURT OF COMPETENT JURISDICTION HOLDS THESE EXCLUSIVE REMEDIES UNENFORCEABLE, THE EXCLUSIONS AND CAP IN SECTIONS 14.1 AND 14.2 APPLY IN FULL AS THE BACKSTOP.
15. Customer Indemnity
You will defend, indemnify, and hold harmless the Buro 1 Protected Parties from and against claims, damages, losses, liabilities, penalties, fines, costs, and expenses, including reasonable attorneys' fees, arising from or relating to:
a. Customer Data;
b. your use of the Software in violation of this Agreement, law, or third-party rights;
c. your products, services, business, clients, or end users;on-Waivable Rights. These limitations apply only to the maximum extent permitted by applicable law. Some jurisdictions do not allow certain exclusions or limits, and some statutory rights cannot be waived. Nothing in this Agreement limits liability to the extent such limitation is prohibited by applicable law, including for fraud, willful misconduct, or other liability that cannot lawfully be excluded.
d. your security failures, credentials, devices, networks, systems, configurations, or integrations;
e. your failure to provide required notices, obtain consents, or comply with privacy, consumer, employment, industry, or data protection laws; or
f. disputes between you and your authorized users, clients, employees, contractors, or third parties.
16. Buro 1 IP Indemnity
If a third party claims that the Software, as provided by Buro 1 and used as authorized, infringes that third party's intellectual property right, Buro 1 may, at its option: procure the right for you to continue using the Software, modify the Software, replace the Software, or terminate the affected license and refund prepaid unused fees for the affected period.
Buro 1 has no obligation for claims arising from Customer Data, your modifications, unauthorized use, use after Buro 1 provides a workaround, third-party services, open-source components, AI outputs, combinations not provided by Buro 1, or use outside this Agreement. This section states Buro 1's entire liability and your exclusive remedy for intellectual property claims. Notwithstanding any other provision of this Agreement, the total aggregate monetary liability of the Buro 1 Protected Parties arising out of or relating to third-party intellectual property claims — including damages, losses, costs, and legal fees — will not exceed AED 5,000 (five thousand UAE dirhams), excluding only the refund of prepaid unused fees described in this Section, and will in all cases remain subject to Section 14.
17. Term and Termination
17.1 Term. This Agreement starts when you accept it or first use the Software and continues until all Order Forms expire or are terminated.
17.2 Termination for Breach. Either party may terminate for material breach if the breach is not cured within thirty (30) days after written notice. Buro 1 may terminate immediately for non-payment, unlawful use, security risk, infringement, or breach of Sections 3, 5, 6, 11, or 12.
17.3 Effect of Termination and Data Return. Upon termination or expiry of this Agreement or an Order Form, your license ends and you must stop using the Software, delete or return all copies, and pay outstanding amounts. For hosted Software: Buro 1 will make Customer Data available for export in a machine-readable format for thirty (30) days following the termination or expiry date. After that thirty (30) day window, Buro 1 may permanently delete Customer Data without further notice or obligation, subject to any longer retention required by applicable law or Buro 1's legal obligations. You are solely responsible for exporting your data before the export window closes. Buro 1 has no obligation to retain, archive, recover, or return Customer Data after the thirty (30) day export window unless required by law. Additional transition, migration, or data-extraction assistance beyond standard export tools is available only as professional services under a signed SOW at Buro 1's then-current rates.Termination for Breach. Either party may terminate for material breach if the breach is not cured within thirty (30) days after written notice. Buro 1 may terminate immediately for non-payment, unlawful use, security risk, infringement, or breach of Sections 3, 5, 6, 11, or 12.
17.4 Survival. Sections concerning restrictions, fees owed, ownership, confidentiality, disclaimers, liability limits, indemnities, termination effects, data deletion, governing law, dispute resolution, and general terms survive termination.ation for Breach. Either party may terminate for material breach if the breach is not cured within thirty (30) days after written notice. Buro 1 may terminate immediately for non-payment, unlawful use, security risk, infringement, or breach of Sections 3, 5, 6, 11, or 12.
18. Export, Sanctions, and Anti-Corruption
You must comply with export control, sanctions, anti-terrorism, anti-bribery, and anti-corruption laws. You represent that you and your authorized users are not located in, organized under, or ordinarily resident in a sanctioned jurisdiction and are not listed on any restricted-party list. You must not use the Software for prohibited military, nuclear, missile, chemical, biological, surveillance, or weapons-related purposes.
19. Consumer and Mandatory Rights
If applicable law gives you rights that cannot be excluded, restricted, or modified, nothing in this Agreement excludes, restricts, or modifies those rights except to the extent permitted by law. If you are a consumer, some business-use provisions may not apply to you.
20. Changes to this Agreement
Buro 1 may update this Agreement from time to time. Updated terms will be posted or provided through reasonable means, including by email to your account address or through in-product notice. Changes will apply to renewals, new orders, and continued use after the effective date of the update, except where applicable law requires additional consent. If you do not agree to a material change, you must stop using the affected Software and, if applicable, cancel before the next renewal date.
21. Governing Law, Disputes, and Language
21.1 Governing Law. This Agreement is governed by the federal laws of the United Arab Emirates as applicable in the Emirate of Dubai and the local laws of the Emirate of Dubai, excluding conflict-of-law rules and excluding the United Nations Convention on Contracts for the International Sale of Goods.
21.2 Forum. The parties consent to the exclusive jurisdiction and venue of the courts of Dubai, United Arab Emirates, unless the Order Form requires arbitration or another dispute forum.
21.3 Injunctive Relief. Either party may seek injunctive or equitable relief for misuse of intellectual property, confidentiality breaches, security abuse, or unauthorized access without first pursuing other dispute resolution steps.
21.4 Language. This Agreement is written in English. If it is translated into Arabic or any other language, the English version controls in the event of any inconsistency, conflict, or dispute, except to the extent applicable law requires otherwise.
22. Notices
Notices to Buro 1 must be sent by email to info@buro-1.com or by post to Buro 1's registered address in Dubai, United Arab Emirates. Buro 1 may send notices to the email address associated with your account, through the Software, or by other reasonable means. Notices sent to the account email are deemed received twenty-four (24) hours after sending.
23. General
This Agreement is the entire agreement concerning the Software and supersedes all prior discussions, representations, and agreements on that subject. You may not assign this Agreement without Buro 1's prior written consent; any purported assignment without such consent is void. Buro 1 may assign this Agreement in connection with a merger, acquisition, restructuring, or sale of assets. If any provision is found unenforceable, it will be modified to the minimum extent necessary to make it enforceable, and the remaining provisions remain in full effect. Failure to enforce a provision is not a waiver of the right to enforce it in the future. The parties are independent contractors; this Agreement does not create any partnership, joint venture, agency, franchise, or employment relationship. The Buro 1 Protected Parties — including individual owners, members, and beneficial owners — are express intended third-party beneficiaries of the warranty disclaimers, liability limitations, indemnities, releases, and other protections that apply to them under this Agreement. Section headings are for convenience only and do not affect interpretation.
24. Contact
BURO ONE MANAGEMENT CONSULTANCIES L.L.C
Trading as: Buro 1
Legal Type: Limited Liability Company - Single Owner (LLC - SO)
Commercial License No.: 1626101
Register No.: 2866389
DCCI No.: 687828
License Category: Department of Economic Development
Issue Date: June 5, 2026
Expiry Date: June 4, 2027
Dubai, United Arab Emirates
info@buro-1.com
Embedded Clickwrap Policies and Schedules
The following schedules are incorporated into and form part of the Agreement. They are intended to be accepted through the same "I Accept" mechanism as the Agreement unless a signed Order Form, DPA, SOW, Change Order, or SLA states otherwise.
Schedule A: Acceptable Use Policy
Customer and authorized users must not:
a. access or use the Software in violation of law, regulation, third-party rights, or this Agreement;
b. upload, transmit, store, or process malware, ransomware, spyware, viruses, worms, Trojan horses, harmful code, phishing content, credential-harvesting content, or unlawful material;
c. attempt to gain unauthorized access to the Software, Buro 1 systems, another customer's account, third-party systems, or non-public areas of any network;
d. conduct denial-of-service attacks, load attacks, stress tests, vulnerability scans, penetration tests, scraping, crawling, or benchmarking without Buro 1's prior written approval;
e. use the Software to send spam, unlawful marketing, deceptive messages, fraudulent content, or communications that violate anti-spam or telecom rules;
f. bypass usage limits, account controls, billing controls, seat limits, API limits, rate limits, authentication controls, or security mechanisms;
g. reverse engineer, decompile, disassemble, copy, train on, extract, or attempt to derive source code, object code, non-public APIs, models, prompts, architecture, workflows, or trade secrets except to the extent applicable law prohibits the restriction;
h. submit highly sensitive data except as expressly permitted in an Order Form or DPA;
i. use the Software for high-risk activities where failure could cause death, personal injury, catastrophic property damage, environmental harm, or critical-infrastructure disruption unless Buro 1 expressly agrees in writing;
j. use the Software in a way that harms Buro 1's reputation, operations, systems, customers, service providers, owners, employees, or other protected parties; or
k. allow anyone else to do any of the above.
Buro 1 may investigate suspected violations and may suspend or terminate access if Buro 1 reasonably believes a violation has occurred or may occur. Buro 1 is not liable for suspensions taken in good faith to protect security, legal compliance, Buro 1, customers, users, or third parties.
Schedule B: Privacy and Data Notice
This Schedule explains how Buro 1 handles data in connection with the Software. If a separate Privacy Policy is published by Buro 1, that Privacy Policy also applies and may provide more operational detail.
Roles. Buro 1 may act as an independent controller/business for account, billing, security, analytics, marketing, and legal-compliance data. Buro 1 may act as processor/service provider for Customer Data processed on Customer's behalf.
Categories of Data. Buro 1 may process account details, contact details, login credentials or tokens, billing information, support communications, usage logs, device/browser data, IP addresses, API activity, telemetry, security logs, Customer Data, and information submitted through integrations.
Purposes. Buro 1 may process data to provide, secure, maintain, support, bill for, improve, and analyze the Software; prevent abuse; detect security incidents; comply with law; enforce contracts; communicate with Customer; and manage business operations.
Customer Instructions. Customer instructs Buro 1 to process Customer Data as necessary to provide the Software and related services. Customer is responsible for ensuring that Customer's instructions are lawful.
Data Subject and Consumer Requests. Customer is responsible for responding to requests from individuals whose personal data is included in Customer Data. Buro 1 will provide reasonable assistance where required by applicable law or the DPA.
International Transfers. Buro 1 and its subprocessors may process data in the United Arab Emirates and other jurisdictions where Buro 1 or its service providers operate. Customer is responsible for ensuring its use of the Software permits such transfers, and the DPA may set out additional transfer terms where required.
De-Identified and Aggregated Data. Buro 1 may use aggregated, anonymized, or de-identified data for analytics, benchmarking, security, and product improvement, provided it does not identify Customer or an individual.
Cookies and Telemetry. The Software may use cookies, local storage, pixels, telemetry, logging, analytics, or similar technologies for authentication, security, preferences, product analytics, performance, and support.
Legal Requests. Buro 1 may disclose data where required by law, court order, regulator, law enforcement, or legal process, and may notify Customer where legally permitted and reasonably practicable.
Schedule C: Data Protection Terms Pending a Signed DPA
These interim terms apply when Buro 1 processes personal data on Customer's behalf and no signed DPA is yet in place.
Subject Matter and Duration. Buro 1 processes personal data to provide the Software for the term of the applicable subscription or engagement and for any retention period required by law, backup operations, security, dispute resolution, or legitimate business records.
Nature and Purpose. Processing may include hosting, storage, retrieval, transmission, support, maintenance, security monitoring, logging, backup, deletion, analysis, and other processing necessary to provide the Software.
Categories of Personal Data. Categories may include user account data, contact data, business records, communications, files, usage logs, identifiers, device data, support data, and any personal data Customer submits to the Software.
Categories of Data Subjects. Categories may include Customer personnel, clients, suppliers, employees, contractors, representatives, end users, and other individuals whose data Customer submits.
Processor Obligations. Buro 1 will process personal data only on documented instructions from Customer, maintain confidentiality obligations for personnel with access to personal data, apply appropriate security measures, assist Customer as required by applicable law, and delete or return personal data as described in this Agreement.
Subprocessors. Customer authorizes Buro 1 to use subprocessors and third-party service providers as described in Schedule H. Buro 1 will impose contractual obligations on subprocessors designed to protect personal data.
Breach Assistance. Buro 1 will notify Customer without undue delay after confirming a Security Incident involving personal data processed by Buro 1 on Customer's behalf where notification is required by law or the DPA.
Audit. Customer's audit rights are limited to reasonable written security questionnaires, compliance summaries, certifications, or similar documentation, unless applicable law requires more. Any audit must be subject to confidentiality, security, and reasonable scheduling restrictions.
Signed DPA Controls. If the parties sign a DPA, the signed DPA controls over this Schedule for personal data processing terms.
Schedule D: Support Policy
Support Channels. Buro 1 provides support through the support email, in-product support channel, or other channels stated in an Order Form.
Support Hours. Unless an Order Form states otherwise, support is provided during Buro 1's normal business hours, excluding UAE public holidays and company holidays.
Severity Levels. Buro 1 may prioritize issues based on severity, customer impact, security risk, number of affected users, reproducibility, and whether a workaround exists.
Exclusions. Support does not include custom development, training, data migration, third-party system support, customer network/device troubleshooting, customer-created integrations, unsupported configurations, user error, or issues caused by Customer's systems unless expressly included in an Order Form or SOW.
No Guaranteed Resolution. Unless a signed SLA says otherwise, Buro 1 does not guarantee response times, resolution times, root-cause delivery, or continuous support availability.
Customer Cooperation. Customer must provide accurate information, logs, screenshots, reproduction steps, access permissions, and timely responses needed to investigate support requests.
Schedule E: Availability, No-SLA, Maintenance, and Service Credits
No Default SLA. Unless a signed Order Form or SLA expressly provides uptime commitments, the Software is provided on an "as available" basis with no uptime guarantee, no service-credit obligation, and no refund obligation for downtime. Customer's sole and exclusive remedy for downtime is the Downtime Extension described in Section 7.2.
Maintenance. Buro 1 may perform scheduled or emergency maintenance, updates, patches, migrations, security fixes, and infrastructure changes. Buro 1 may provide advance notice when practical but may act without notice for security, legal, urgent operational, or third-party-provider reasons.
Standard Maintenance Window. Buro 1 maintains a standing weekly maintenance window each Friday from 20:00 to Saturday 02:00 Gulf Standard Time (UTC+4). Maintenance performed within the Standard Maintenance Window is deemed notified without further notice, is Excluded Downtime for all purposes (including any signed SLA and the Downtime Extension in Section 7.2), and does not count toward any maintenance-hours limit. Buro 1 may change the window with reasonable notice.
Exclusions. Any uptime or availability commitment excludes downtime or degradation caused by Customer systems, credentials, configurations, misuse, integrations, third-party services, internet or telecom failures, force majeure, cyberattacks, emergency maintenance, beta features, trials, unsupported use, or events outside Buro 1's reasonable control.
Service Credits. If an Order Form or SLA provides service credits, those credits are Customer's sole and exclusive remedy for covered downtime. Service credits are not refunds, may not be converted to cash, and may not exceed the fees paid for the affected service during the affected period unless a signed SLA states otherwise.
Schedule F: Security Statement and Shared Responsibility
Buro 1 Controls. Buro 1 will use reasonable administrative, technical, and organizational safeguards designed to protect Customer Data. These may include access controls, least-privilege practices, authentication controls, logging, backups, vendor review, vulnerability management, secure configuration, and incident response procedures appropriate to the Software.
Customer Controls. Customer is responsible for user provisioning, access reviews, administrator permissions, credential security, MFA where available, endpoint security, secure networks, secure integrations, backup exports, lawful data input, role configuration, and timely notice of suspected incidents.
No Security Warranty. Security controls reduce risk but do not eliminate risk. Buro 1 does not guarantee that the Software will be free from vulnerabilities, unauthorized access, data leaks, malware, ransomware, phishing, credential compromise, or cyberattacks.
Vulnerability Handling. Customer must report suspected vulnerabilities confidentially to Buro 1 and must not publicly disclose, exploit, or test vulnerabilities except under written authorization.
Security Documentation. Buro 1 may provide security summaries, questionnaires, certifications, or other materials under confidentiality, but Buro 1 is not required to disclose sensitive internal security architecture, vulnerability details, source code, credentials, or information that could increase security risk.
Schedule G: Backup, Retention, Export, and Deletion Policy
Customer Export Responsibility. Customer is responsible for exporting and backing up Customer Data where the Software provides export tools or where Customer requires independent retention.
Operational Backups. Buro 1 may maintain backups for disaster recovery, business continuity, security, or operational purposes. Backups are not guaranteed to restore any particular customer record unless an Order Form or SLA expressly provides backup restoration services.
Retention After Termination. Unless a signed Order Form or DPA states otherwise, Customer has thirty (30) days after termination or expiry to export Customer Data. After that period, Buro 1 may delete Customer Data.
Backup Deletion. Customer Data may remain in encrypted or access-restricted backups for up to ninety (90) days or longer where technically necessary, legally required, or retained for dispute, security, compliance, audit, or business-continuity purposes.
No Liability for Customer Failure to Export. Buro 1 is not liable for Customer's failure to export, preserve, or back up Customer Data before termination, deletion, suspension, or expiration.
Schedule H: Subprocessor and Third-Party Services Policy
General Authorization. Customer authorizes Buro 1 to use third-party service providers and subprocessors to provide, host, secure, support, analyze, bill for, and improve the Software.
Typical Provider Categories. Providers may include cloud hosting, database hosting, storage, CDN, email, SMS/communications, payment processing, analytics, logging, monitoring, security, customer support, CRM, identity management, development operations, AI/model providers, and professional advisers.
Provider Changes. Buro 1 may add, replace, or remove providers from time to time. If a signed DPA requires notice of new subprocessors, the DPA controls that notice process.
Third-Party Failures. Buro 1 is not responsible for downtime, data loss, security incidents, feature changes, discontinuation, or failures caused by third-party providers outside Buro 1's reasonable control.
Customer Integrations. Customer is responsible for third-party services it connects to the Software, including permissions, data transfers, credentials, API tokens, configuration, and third-party terms.
Schedule I: API and Integration Terms
API Access. Buro 1 may provide APIs, webhooks, connectors, scripts, plug-ins, or integrations. Buro 1 may set and change rate limits, quotas, authentication requirements, and technical restrictions.
API Credentials. Customer is responsible for securing API keys, secrets, tokens, webhooks, and credentials. Activity under Customer credentials is deemed Customer activity.
Abuse and Stability. Buro 1 may throttle, suspend, revoke, or block API or integration access that Buro 1 reasonably believes threatens security, availability, performance, legal compliance, or other customers.
No Scraping or Competitive Use. Customer must not use APIs, integrations, or automated access to scrape, replicate, benchmark, compete with, or reverse engineer the Software except as expressly permitted in writing.
Integration Data. Customer authorizes Buro 1 to transmit Customer Data to integrations enabled by Customer or Customer's users. Buro 1 is not responsible for how Customer-selected integrations process Customer Data after transmission.
Schedule J: Product-Specific, Trial, Beta, and AI Notices
Product-Specific Terms. Buro 1 may provide product-specific terms for particular products, modules, APIs, integrations, industries, or deployment models. Those terms apply in addition to this Agreement.
Trials and Pilots. Trial, evaluation, demo, pilot, and proof-of-concept access is provided for evaluation only, may be time-limited, may be disabled at any time, and is provided without SLA, warranty, support commitment, or refund obligation.
Beta Features. Beta Features are experimental and may change, fail, produce inaccurate results, or be discontinued without notice. Customer uses Beta Features at its own risk.
AI Features. Customer is responsible for reviewing and validating AI outputs before use. AI outputs may be inaccurate, incomplete, non-unique, biased, or unsuitable. Customer must not rely on AI outputs as professional advice or as a substitute for human judgment
Schedule K: Recommended Clickwrap Acceptance Tex
Product-Specific Terms. Buro 1 may provide product-specific terms for particular products, modules, APIs, integrations, industries, or deployment models. Those terms apply in addition to this Agreement.
Trials and Pilots. Trial, evaluation, demo, pilot, and proof-of-concept access is provided for evaluation only, may be time-limited, may be disabled at any time, and is provided without SLA, warranty, support commitment, or refund obligation.
Beta Features. Beta Features are experimental and may change, fail, produce inaccurate results, or be discontinued without notice. Customer uses Beta Features at its own risk.
AI Features. Customer is responsible for reviewing and validating AI outputs before use. AI outputs may be inaccurate, incomplete, non-unique, biased, or unsuitable. Customer must not rely on AI outputs as professional advice or as a substitute for human judgment.
Schedule K: Recommended Clickwrap Acceptance TextK: Recommended Clickwrap Acceptance Tex
Schedule K is operational guidance for Buro 1's implementation team. Notwithstanding the general statement above, Schedule K is not a contractual term, imposes no obligations on Customer, and grants Customer no rights.
For implementation by the platform team. Present the following at account registration and on first login after any material update to this Agreement, with an unchecked checkbox and an "I Accept" button:
I have read and agree to the Buro 1 Software and SaaS End User License Agreement, including all embedded policies and schedules, and I acknowledge the Privacy Policy. I confirm that I have authority to bind the organization on whose behalf I am accepting.
Implementation requirements:
The checkbox must not be pre-ticked, and the "I Accept" button must remain disabled until the checkbox is ticked.
The words "Buro 1 Software and SaaS End User License Agreement" and "Privacy Policy" must be hyperlinks to the full current text of each document, accessible before acceptance.
For each acceptance, record: date and time (UTC), Agreement version, acceptance text presented, user identifier, account identifier, IP address, browser/device information, and means of acceptance, in accordance with Section 4.5.
On any material update to this Agreement, require re-acceptance through the same mechanism before continued use, and retain the record of each version accepted.
BURO ONE MANAGEMENT CONSULTANCIES L.L.C · Commercial Licence No. 162
We transform organizations.
Your success is next.
Start your project now by booking a one-on-one consultation with our expert.

Buro One designs, builds and maintains the systems companies run on.
current Time zone (GMT+1)
ThisThis Software and SaaS End User License Agreement ("Agreement") is a legal agreement between BURO ONE MANAGEMENT CONSULTANCIES L.L.C, a Dubai limited liability company - single owner (LLC - SO), operating under the brand Buro 1 ("Buro 1," "we," "us," or "our"), and the person or entity accepting this Agreement or using the Software ("Customer," "you," or "your").Privacy Policy explains how Buro 1 collects, uses, stores, and protects personal data when you use the Pulse platform and the Buro 1 website (together, the "Services"). By accessing or using the Services, you acknowledge that you have read and understood this policy.
Buro 1 is licensed by the Government of Dubai, Department of Economy and Tourism / Department of Economic Development, under Commercial License No. 1626101, Register No. 2866389, DCCI No. 687828, issued on June 5, 2026 and expiring on June 4, 2027.
By downloading, installing, accessing, or using any Buro 1 software, hosted application, mobile application, API, website-based product, plug-in, extension, update, documentation, or related service identified in an order form, invoice, statement of work, online checkout, or product page (collectively, the "Software"), you agree to this Agreement, including the embedded policies and schedules at the end of this Agreement. If you use the Software on behalf of an organization, you represent that you have authority to bind that organization.
IF YOU DO NOT AGREE TO THIS AGREEMENT, DO NOT INSTALL, ACCESS, OR USE THE SOFTWARE.
For purposes of warranty disclaimers, liability limitations, indemnities, releases, and other protections in this Agreement, "Buro 1 Protected Parties" means Buro 1 and its affiliates, licensors, suppliers, subcontractors, service providers, predecessors, successors, assigns, directors, officers, managers, owners, members, shareholders, beneficial owners, employees, contractors, representatives, and agents, in each case whether past, present, or future and only to the maximum extent permitted by applicable law. The protections extended to individual owners, members, and beneficial owners under this Agreement are deliberate and material terms without which Buro 1 would not provide the Software on the same economic terms.
1. Agreement Structure
1.1 Order Forms. Commercial details such as product name, subscription term, users, fees, usage limits, support package, and hosting model may be set out in an order form, invoice, online checkout, proposal, or statement of work accepted by Buro 1 ("Order Form").
1.2 Incorporated Terms. The following terms are incorporated into and form part of this Agreement: the embedded Acceptable Use Policy (Schedule A), Privacy and Data Notice (Schedule B), Data Protection Terms Pending a Signed DPA (Schedule C), Support Policy (Schedule D), Availability, No-SLA, Maintenance, and Service Credits Policy (Schedule E), Security Statement and Shared Responsibility (Schedule F), Backup, Retention, Export, and Deletion Policy (Schedule G), Subprocessor and Third-Party Services Policy (Schedule H), API and Integration Terms (Schedule I), Product-Specific, Trial, Beta, and AI Notices (Schedule J), and any signed Order Form, Data Processing Addendum ("DPA"), Statement of Work ("SOW"), Change Order, Service Level Agreement ("SLA"), or written professional services terms accepted by Buro 1.
1.3 Conflict. If there is a conflict, the following order controls unless expressly stated otherwise: signed written agreement, DPA for personal data processing terms, Order Form, SOW or Change Order for professional services scope, Product-Specific Terms, SLA, this Agreement, and embedded policies. No purchase order, vendor portal term, procurement term, or other customer document modifies this Agreement unless Buro 1 expressly signs a written amendment referencing this Agreement.
1.4 Clickwrap Package. This Agreement is intended to function as Buro 1's primary clickwrap package for ordinary Software access. Customer acknowledges that the embedded policies are not merely informational; they are binding contractual terms. Customer should save or print a copy of this Agreement for its records.
2. License Grant
2.1 Limited License. Subject to your compliance with this Agreement and payment of applicable fees, Buro 1 grants you a limited, non-exclusive, non-transferable, non-sublicensable, revocable license during the applicable term to access and use the Software solely for your internal business purposes and only within the limits in the Order Form.
2.1 Limited License. Subject to your compliance with this Agreement and payment of applicable fees, Buro 1 grants you a limited, non-exclusive, non-transferable, non-sublicensable, revocable license during the applicable term to access and use the Software solely for your internal business purposes and only within the limits in the Order Form.
2.2 Authorized Users. You may permit your employees, contractors, and other authorized users to use the Software only for your benefit. You are responsible for all acts and omissions of your authorized users.
2.3 License Model. The Software is licensed, not sold. Buro 1 and its licensors reserve all rights not expressly granted.
2.4 Devices and Copies. For downloadable Software, you may install the number of copies permitted in the Order Form or documentation. You may make one backup copy solely for archival or disaster-recovery purposes unless prohibited by product-specific terms.
3. Restrictions
You must not, and must not permit anyone else to:
a. copy, modify, translate, adapt, create derivative works of, or distribute the Software except as expressly allowed;
b. rent, lease, lend, sell, sublicense, assign, host for third parties, timeshare, operate as a service bureau, or otherwise provide third-party access to the Software;
c. reverse engineer, decompile, disassemble, or attempt to derive source code, underlying models, algorithms, architecture, or non-public APIs except to the extent applicable law prohibits this restriction;
d. bypass, disable, or interfere with license keys, access controls, rate limits, security mechanisms, usage tracking, or technical restrictions;
e. use the Software to transmit malware, conduct phishing, scan or attack systems, violate law, infringe rights, process unlawful content, or harm Buro 1, other customers, or third parties;
f. perform penetration testing, vulnerability scanning, load testing, scraping, benchmarking, or competitive analysis without Buro 1's prior written approval, except as expressly allowed in a written security policy;
g. remove proprietary notices or misrepresent ownership of the Software;
h. use the Software in a high-risk environment where failure could cause death, personal injury, catastrophic property damage, or environmental harm unless Buro 1 expressly agrees in writing; or
i. use the Software with data or workloads prohibited by the Order Form, DPA, Acceptable Use Policy, or applicable law.
4. Customer Responsibilities
4.1 Accounts and Credentials. You are responsible for maintaining the confidentiality of accounts, passwords, API keys, tokens, devices, and administrator privileges. You must promptly notify Buro 1 of any suspected unauthorized access involving the Software.
4.2 Configuration and Access. You are responsible for configuring the Software, assigning user roles, revoking access when users leave, maintaining accurate account information, and ensuring your systems, networks, devices, browsers, integrations, and internet connections are secure and compatible.
4.3 Backups. Unless an Order Form or SLA expressly states that Buro 1 provides backup and restoration services, you are responsible for maintaining independent backups of Customer Data. Buro 1 is not responsible for loss of Customer Data caused by your failure to maintain backups, your configuration choices, your deletion or modification of data, credential compromise, third-party systems, or events outside Buro 1's reasonable control.
4.4 Lawful Use. You are responsible for determining whether the Software is appropriate for your intended use and for complying with laws, industry rules, client obligations, employment laws, privacy laws, export laws, consumer laws, and professional obligations that apply to your data and use.
4.5 Electronic Acceptance and Records. By clicking "I Agree," "Accept," "Continue," or a similar button, by checking an acceptance box, or by accessing or using the Software, you acknowledge that you have read, understood, and agree to be bound by this Agreement, including all embedded policies and schedules. Buro 1 may record the date, time, version of this Agreement, acceptance text presented, user identifier, account identifier, IP address, browser/device information, and means of acceptance for each user. This Agreement is valid as an electronic record under UAE Federal Decree-Law No. 46 of 2021 on Electronic Transactions and Trust Services and other applicable electronic-signature or electronic-contracting laws. You agree not to contest the validity, enforceability, or binding effect of this Agreement solely on the basis that it was accepted electronically.
4.6 Audit and Usage Compliance. Buro 1 may verify your compliance with this Agreement and the Order Form at any time, including by inspecting usage logs, license counts, user counts, and feature access records. Upon reasonable written notice of at least ten (10) business days, Buro 1 may request a self-certification of compliance or conduct a compliance review no more than once per twelve-month period unless Buro 1 reasonably suspects a material breach. Buro 1 will treat information obtained during a compliance review as confidential. If a review reveals underpayment or unauthorized use, you must promptly pay any amounts owed and Buro 1 may recover reasonable costs of the review.
5. Customer Data and Privacyfidentiality
5.1 Customer Data. "Customer Data" means data, files, content, records, messages, credentials, personal data, or other materials submitted to or processed through the Software by you or your authorized users.
5.2 Ownership. As between you and Buro 1, you retain ownership of Customer Data. You grant Buro 1 a non-exclusive right to host, copy, process, transmit, display, and use Customer Data solely as necessary to provide, secure, maintain, support, improve, and comply with legal obligations relating to the Software. Buro 1 will not use Customer Data to train or improve third-party or external AI models, and will not provide Customer Data to AI model providers in individually identifiable form, without Customer's prior written consent.
5.3 Personal Data. To the extent Buro 1 processes personal data on your behalf, the DPA governs that processing. If no DPA has been signed and Buro 1 processes personal data for Customer, the data protection terms embedded in this Agreement apply until a signed DPA is in place. You are responsible for providing required notices, obtaining required consents, establishing a lawful basis for processing, honoring data-subject or consumer rights requests where applicable, and ensuring your instructions to Buro 1 are lawful.
5.4 Sensitive Data. Unless expressly allowed in the Order Form or DPA, you must not submit regulated health information, payment card data, government identifiers, children's data, biometric data, financial account credentials, export-controlled technical data, or other highly sensitive data.
5.5 Usage Data. Buro 1 may collect technical, diagnostic, telemetry, security, performance, and usage information relating to the Software. Buro 1 may use aggregated or de-identified information to operate, secure, analyze, and improve its products, provided it does not identify you or any individual.
6. Security
6.1 Security Program. Buro 1 will maintain administrative, technical, and organizational safeguards designed to protect the security, confidentiality, integrity, and availability of Customer Data, taking into account the nature of the Software, the sensitivity of the data, the state of the art, implementation costs, and reasonably foreseeable risks.
6.2 No Absolute Security. You acknowledge that no software, network, hosting environment, encryption method, access-control system, backup process, or security program can be guaranteed to be error-free, uninterrupted, immune from attack, or incapable of unauthorized access. Buro 1 does not warrant that hacks, data leaks, malware, denial-of-service attacks, credential compromises, vulnerabilities, ransomware, or other security incidents will never occur.
6.3 Shared Responsibility. Security is a shared responsibility. Buro 1 is not responsible for security incidents, data loss, downtime, unauthorized access, or disclosure caused by your credentials, users, administrators, devices, networks, configurations, integrations, third-party services, failure to install updates, failure to follow documentation, or use of the Software outside this Agreement.
6.4 Security Incidents. "Security Incident" means a confirmed breach of Buro 1's security controls that results in unauthorized access to or disclosure of Customer Data processed by Buro 1. Buro 1 will investigate Security Incidents and, where required by applicable law or the DPA, notify you without undue delay after confirmation. Notice may be delayed where law enforcement, legal obligations, containment, or investigation needs require.
6.5 Customer Cooperation. You must cooperate with Buro 1's reasonable investigation, containment, remediation, and notification efforts, including by preserving logs, rotating credentials, disabling affected integrations, and providing relevant information.
6.6 Vulnerability Reports. You must promptly report suspected vulnerabilities to info@buro-1.com. You must not publicly disclose vulnerabilities, exploit vulnerabilities, access other customers' data, disrupt service, or perform security testing except as permitted by Buro 1 in writing.
6.7 Owner and Individual Liability Protection. This Agreement is entered into with and on behalf of Customer as a legal entity. Notwithstanding any other provision of this Agreement, no individual owner, member, manager, beneficial owner, shareholder, or equity holder of Buro 1 (each, a "Buro 1 Owner") shall be personally liable to Customer, Customer's authorized users, or any third party for any claim, loss, damage, obligation, or liability of any kind arising from or relating to this Agreement, the Software, its performance or non-performance, any Security Incident, any downtime, any data loss or data leak, or any other matter connected to the Software or Buro 1's business. Each Buro 1 Owner is an express intended third-party beneficiary of this Section and of all warranty disclaimers, liability limitations, indemnities, and releases that apply to the Buro 1 Protected Parties under this Agreement. Customer expressly agrees that any claims and remedies it may have are limited to claims against Buro 1 as a legal entity and not against any Buro 1 Owner personally. This individual protection is a material term of this Agreement, and Buro 1 would not provide the Software on the same terms without it.
7. Availability, Downtime, and Maintenance
7.1 As Available. Hosted Software and online features are provided on an "as available" basis unless an SLA expressly provides otherwise. Buro 1 does not guarantee uninterrupted, error-free, secure, or continuous availability.
7.2 Downtime. The Software may be unavailable, degraded, suspended, delayed, or interrupted due to: scheduled maintenance, emergency maintenance, updates, and upgrades; infrastructure failures; internet, telecom, or connectivity failures; cloud provider, data center, or hosting provider issues; power outages or grid failures; cyberattacks, denial-of-service attacks, ransomware, or other malicious acts; bugs, capacity limits, or unexpected traffic spikes; force majeure events as defined in Section 7.5; legal requirements or regulatory orders; or your acts, omissions, configurations, or integrations. Unless a signed SLA expressly provides otherwise, Customer's sole and exclusive remedy for downtime or unavailability is a service-term extension: Buro 1 will extend the affected subscription at no charge by the number of days of verified downtime, as verified against Buro 1's monitoring records (a "Downtime Extension"). Downtime Extensions are limited to a maximum of thirty (30) days in aggregate in any twelve (12) month period, regardless of the number or duration of downtime events, and do not accrue for downtime attributable to Customer's acts, omissions, systems, configurations, or integrations, or to causes excluded under Schedule E. No refund, credit, or monetary compensation is payable for downtime.
7.3 Maintenance and Updates. Buro 1 may modify, update, patch, suspend, replace, discontinue, or remove features to improve performance, address security issues, comply with law, prevent harm, or manage product lifecycle. Buro 1 will use commercially reasonable efforts to avoid material disruption where practical.
7.4 Suspension. Buro 1 may suspend access immediately if Buro 1 reasonably believes your use poses a security risk, violates this Agreement, may harm Buro 1 or others, may create legal liability, or if payment is overdue. Buro 1 will use reasonable efforts to restore access after the issue is resolved.
7.5 Force Majeure. Neither Buro 1 nor any Buro 1 Protected Party will be liable for any failure or delay in performing any obligation under this Agreement to the extent caused by a Force Majeure Event. A "Force Majeure Event" means any event or circumstance beyond the reasonable control of the affected party, including: acts of God, natural disasters, earthquakes, floods, hurricanes, fires, or extreme weather; war, armed conflict, terrorism, civil unrest, riots, or governmental action; pandemic, epidemic, or public health emergency; electrical, internet, telecom, or utility failures; cyberattacks, denial-of-service attacks, ransomware, or malicious intrusion by third parties; cloud provider, hosting provider, or infrastructure outages beyond Buro 1's control; strikes, labor actions, or supply-chain disruptions; or changes in law, regulation, or regulatory orders. Buro 1 will use commercially reasonable efforts to mitigate the effects of a Force Majeure Event and to resume performance as soon as reasonably practicable. If a Force Majeure Event affecting Buro 1's core obligations under a specific Order Form continues for more than sixty (60) consecutive days, either party may terminate the affected Order Form on written notice, with Buro 1 refunding prepaid unused fees for the unavailable period.
8. Support and Beta Features
8.1 Support. Buro 1 will provide support only as described in the Order Form or Support Policy. Unless expressly stated, Buro 1 does not guarantee response times, resolution times, custom development, training, data migration, or compatibility work.
8.2 Beta and Pre-Release Features. Buro 1 may offer software features, products, or services designated as "beta," "preview," "early access," "experimental," "pilot," or similar ("Beta Features"). Beta Features are provided AS IS without any warranty, service level commitment, support obligation, or availability guarantee. Beta Features may be inaccurate, incomplete, contain errors, or be unavailable or discontinued without notice. Buro 1 may collect additional data from your use of Beta Features to evaluate and improve them. Beta Features are not subject to any SLA and are expressly excluded from all uptime or performance commitments. Buro 1's liability for Beta Features is capped at USD 100, regardless of any other provision in this Agreement.
9. Third-Party Services, Open Source, and AI Features
9.1 Third-Party Services. The Software may interoperate with or depend on third-party platforms, hosting providers, APIs, applications, marketplaces, app stores, payment processors, identity providers, analytics tools, or integrations. Buro 1 is not responsible for third-party services, their availability, security, terms, data handling, changes, or failures.
9.2 Third-Party Terms. You must comply with applicable third-party terms when using third-party services with the Software.
9.3 Open Source. Some Software may include open-source components governed by separate licenses. Those licenses control only the applicable open-source components.
9.4 AI and Machine Learning Features. Some features of the Software may incorporate artificial intelligence, machine learning, large language models, generative AI, or similar technologies ("AI Features"). You acknowledge and agree that: (a) outputs generated by AI Features may not be accurate, complete, current, unique, or appropriate for your specific use; (b) AI outputs do not constitute legal, financial, medical, professional, or other expert advice; (c) Buro 1 does not warrant that AI outputs are free from bias, error, hallucination, or infringement of third-party rights; (d) you are solely responsible for reviewing, validating, and determining the suitability of any AI output before relying on or acting upon it; (e) you must not use AI Features to generate content that is unlawful, harmful, deceptive, or that violates third-party rights; and (f) you must not attempt to extract or infer Buro 1's underlying models, weights, training data, or proprietary AI architecture; and (g) Buro 1 will not use Customer Data to train or improve AI models without your prior written consent. Buro 1's liability for AI Features is limited to the extent stated in Section 14.
9. 10. Fees, Taxes, Payment, and Renewals-Party Services, Open Source, and AI Features
10.1 Payment Obligation. You must pay all fees in the Order Form. Fees are non-refundable except as expressly stated in the Order Form or required by law. You are responsible for taxes, duties, bank charges, payment processor fees, and similar charges other than taxes based on Buro 1's net income. Buro 1 may charge interest or suspend service for overdue amounts to the maximum extent permitted by law.
10.2 Auto-Renewal. Unless the Order Form specifies otherwise or you cancel before the renewal date, subscriptions will automatically renew at the end of each subscription period for the same period at the then-current price. Buro 1 will provide notice of upcoming auto-renewal to your account email address at least fourteen (14) days before the renewal date where required by applicable law. You must cancel before the renewal date to avoid being charged for the next period. Cancellation procedures are set out in the Order Form or Support Policy. If no cancellation procedure is specified, contact Buro 1 at info@buro-1.com before the renewal date.
10.3 Price Changes. Buro 1 may change fees for renewals with at least thirty (30) days' written notice. If you do not accept a price change, you must cancel the applicable subscription before the renewal date. Continued use after the renewal date constitutes acceptance of the new pricing.
10.4 Invoice Finality. Invoices are deemed accepted unless Customer disputes them in writing, with specific reasons, within ten (10) days of receipt. Undisputed amounts and the undisputed portion of any disputed invoice remain payable when due, and Customer may not withhold, set off, or deduct from amounts due except as required by law.
10.5 Free Trials and Evaluations. If Buro 1 offers the Software on a free-trial or evaluation basis, the trial is provided AS IS with no warranties and subject to any trial-specific terms communicated at the time of access. Buro 1 may terminate a free trial at any time without notice. At the end of the trial period, continued access may require conversion to a paid subscription at the applicable fee. Customer Data from a free trial may be deleted if you do not convert. Free-trial use does not create any obligation on Buro 1 to provide paid access on the same terms.
11. Intellectual Property and Feedback
11.1 Buro 1 IP. Buro 1 and its licensors own all rights in the Software, documentation, templates, interfaces, workflows, designs, know-how, trade secrets, trademarks, and related intellectual property, including rights protected under UAE Federal Decree-Law No. 38 of 2021 on Copyrights and Related Rights (which expressly covers software, applications, and databases) and other applicable intellectual property laws.
11.2 Feedback. If you provide ideas, suggestions, feature requests, bug reports, or other feedback, Buro 1 may use them without restriction or compensation.
11.3 Customer Marks. Buro 1 may use your name and logo to identify you as a customer unless you notify Buro 1 in writing that it may not do so.
12. Confidentiality
Each party may receive non-public information from the other party that is marked confidential or should reasonably be understood as confidential. The receiving party must use the confidential information only to perform under this Agreement and protect it using reasonable care. These obligations do not apply to information that is public, already known, independently developed, or lawfully received from a third party without confidentiality obligations. A party may disclose confidential information where required by law if it gives reasonable notice where legally permitted.
13. Warranties and Disclaimers
13.1 Mutual Authority. Each party represents that it has authority to enter this Agreement.
13.2 Disclaimer. EXCEPT AS EXPRESSLY STATED IN THIS AGREEMENT, THE SOFTWARE, DOCUMENTATION, SUPPORT, HOSTED SERVICES, OUTPUTS, AI FEATURES, INTEGRATIONS, AND RELATED SERVICES ARE PROVIDED BY THE BURO 1 PROTECTED PARTIES "AS IS" AND "AS AVAILABLE," WITH ALL FAULTS AND WITHOUT WARRANTIES OF ANY KIND.
TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE BURO 1 PROTECTED PARTIES DISCLAIM ALL EXPRESS, IMPLIED, STATUTORY, AND OTHER WARRANTIES, INCLUDING WARRANTIES OF MERCHANTABILITY, SATISFACTORY QUALITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT, ACCURACY, QUIET ENJOYMENT, SECURITY, AVAILABILITY, ERROR-FREE OPERATION, AND UNINTERRUPTED USE.
BURO 1 DOES NOT WARRANT THAT THE SOFTWARE WILL PREVENT HACKS, DATA LEAKS, DOWNTIME, DATA LOSS, VULNERABILITIES, UNAUTHORIZED ACCESS, MALWARE, RANSOMWARE, SERVICE INTERRUPTIONS, AI OUTPUT ERRORS, OR THIRD-PARTY FAILURES.
13.3 No Professional Advice. Unless expressly stated in an Order Form, the Software does not provide legal, financial, medical, tax, accounting, engineering, cybersecurity, compliance, or other professional advice. You are responsible for independent review of outputs and decisions.
14. Limitation of Liability
14.1 Exclusion of Damages. TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE BURO 1 PROTECTED PARTIES WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, PUNITIVE, ENHANCED, OR RELIANCE DAMAGES; LOSS OF PROFITS, REVENUE, GOODWILL, USE, BUSINESS, OPPORTUNITY, OR ANTICIPATED SAVINGS; BUSINESS INTERRUPTION; COSTS OF DELAY; LOSS, CORRUPTION, OR RECOVERY OF DATA; FAILURE OF SECURITY MECHANISMS; DOWNTIME; SECURITY INCIDENTS; DATA LEAKS; AI OUTPUT ERRORS OR INACCURACIES; OR COSTS OF SUBSTITUTE GOODS OR SERVICES, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
14.2 Liability Cap. TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE TOTAL AGGREGATE LIABILITY OF ALL BURO 1 PROTECTED PARTIES ARISING OUT OF OR RELATING TO THIS AGREEMENT, THE SOFTWARE, SUPPORT, SECURITY INCIDENTS, DATA LOSS, DATA LEAKS, DOWNTIME, AI FEATURES, BETA FEATURES, OR PROFESSIONAL SERVICES WILL NOT EXCEED THE AMOUNTS PAID BY YOU TO BURO 1 FOR THE SPECIFIC SOFTWARE OR SERVICE GIVING RISE TO THE CLAIM DURING THE TWELVE (12) MONTHS BEFORE THE EVENT GIVING RISE TO LIABILITY. IF NO FEES WERE PAID, THE CAP IS USD 100.
14.3 Multiple Claims. Multiple claims will not expand the liability cap.
14.4 Non-Waivable Rights. These limitations apply only to the maximum extent permitted by applicable law. Some jurisdictions do not allow certain exclusions or limits, and some statutory rights cannot be waived. Nothing in this Agreement limits liability to the extent such limitation is prohibited by applicable law, including for fraud, willful misconduct, or other liability that cannot lawfully be excluded.
14.5 Risk Allocation. The fees reflect the allocation of risk in this Agreement. You acknowledge that Buro 1 would not provide the Software on the same economic terms without these limitations.
14.6 Time Limitation on Claims. ANY CLAIM OR CAUSE OF ACTION ARISING OUT OF OR RELATING TO THIS AGREEMENT, THE SOFTWARE, OR THE SERVICES, WHETHER BASED IN CONTRACT, TORT, STATUTE, OR ANY OTHER LEGAL OR EQUITABLE THEORY, MUST BE BROUGHT WITHIN ONE (1) YEAR AFTER THE CLAIMANT FIRST KNEW OR REASONABLY SHOULD HAVE KNOWN OF THE FACTS GIVING RISE TO THE CLAIM. AFTER THAT PERIOD, ANY SUCH CLAIM IS PERMANENTLY BARRED, REGARDLESS OF WHEN IT IS DISCOVERED. THIS LIMITATION APPLIES TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW AND IS AN ESSENTIAL ELEMENT OF THE BASIS OF THE BARGAIN BETWEEN THE PARTIES.
14.7 Exclusive In-Kind Remedies. TO THE MAXIMUM EXTENT PERMITTED BY LAW, CUSTOMER'S SOLE AND EXCLUSIVE REMEDY, AND THE ENTIRE LIABILITY OF THE BURO 1 PROTECTED PARTIES: (A) FOR DOWNTIME OR UNAVAILABILITY, IS THE DOWNTIME EXTENSION DESCRIBED IN SECTION 7.2; AND (B) FOR ANY SECURITY INCIDENT (AS DEFINED IN SECTION 6.4), OR ANY DATA LEAK OR UNAUTHORIZED ACCESS TO CUSTOMER DATA RESULTING FROM A CONFIRMED BREACH OF BURO 1'S SECURITY CONTROLS, IS TWO (2) MONTHS' USE OF THE AFFECTED SOFTWARE FREE OF SUBSCRIPTION FEES, LIMITED TO A MAXIMUM OF TWO (2) FREE MONTHS IN ANY TWELVE (12) MONTH PERIOD REGARDLESS OF THE NUMBER OF INCIDENTS. THE REMEDY IN (B) DOES NOT APPLY TO EVENTS CAUSED BY CUSTOMER, ITS USERS, CREDENTIALS, DEVICES, NETWORKS, CONFIGURATIONS, OR INTEGRATIONS AS DESCRIBED IN SECTION 6.3, FOR WHICH NO REMEDY IS AVAILABLE. THESE IN-KIND REMEDIES REPLACE ALL MONETARY DAMAGES FOR SUCH EVENTS. IF AND ONLY TO THE EXTENT A COURT OF COMPETENT JURISDICTION HOLDS THESE EXCLUSIVE REMEDIES UNENFORCEABLE, THE EXCLUSIONS AND CAP IN SECTIONS 14.1 AND 14.2 APPLY IN FULL AS THE BACKSTOP.
14.8 Collective Action and Class Action Waiver. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, ALL DISPUTES MUST BE BROUGHT ON AN INDIVIDUAL BASIS ONLY. NEITHER PARTY MAY BRING A CLAIM AS A PLAINTIFF OR CLASS MEMBER IN ANY CLASS ACTION, COLLECTIVE ACTION, MASS ARBITRATION, CONSOLIDATED ACTION, OR REPRESENTATIVE PROCEEDING. THIS WAIVER APPLIES TO THE MAXIMUM EXTENT PERMITTED BY LAW. IF THIS WAIVER IS FOUND UNENFORCEABLE IN A PARTICULAR JURISDICTION, THAT UNENFORCEABLE PORTION SHALL NOT AFFECT THE REMAINDER OF THIS AGREEMENT.clusive In-Kind Remedies. TO THE MAXIMUM EXTENT PERMITTED BY LAW, CUSTOMER'S SOLE AND EXCLUSIVE REMEDY, AND THE ENTIRE LIABILITY OF THE BURO 1 PROTECTED PARTIES: (A) FOR DOWNTIME OR UNAVAILABILITY, IS THE DOWNTIME EXTENSION DESCRIBED IN SECTION 7.2; AND (B) FOR ANY SECURITY INCIDENT (AS DEFINED IN SECTION 6.4), OR ANY DATA LEAK OR UNAUTHORIZED ACCESS TO CUSTOMER DATA RESULTING FROM A CONFIRMED BREACH OF BURO 1'S SECURITY CONTROLS, IS TWO (2) MONTHS' USE OF THE AFFECTED SOFTWARE FREE OF SUBSCRIPTION FEES, LIMITED TO A MAXIMUM OF TWO (2) FREE MONTHS IN ANY TWELVE (12) MONTH PERIOD REGARDLESS OF THE NUMBER OF INCIDENTS. THE REMEDY IN (B) DOES NOT APPLY TO EVENTS CAUSED BY CUSTOMER, ITS USERS, CREDENTIALS, DEVICES, NETWORKS, CONFIGURATIONS, OR INTEGRATIONS AS DESCRIBED IN SECTION 6.3, FOR WHICH NO REMEDY IS AVAILABLE. THESE IN-KIND REMEDIES REPLACE ALL MONETARY DAMAGES FOR SUCH EVENTS. IF AND ONLY TO THE EXTENT A COURT OF COMPETENT JURISDICTION HOLDS THESE EXCLUSIVE REMEDIES UNENFORCEABLE, THE EXCLUSIONS AND CAP IN SECTIONS 14.1 AND 14.2 APPLY IN FULL AS THE BACKSTOP.
15. Customer Indemnity
You will defend, indemnify, and hold harmless the Buro 1 Protected Parties from and against claims, damages, losses, liabilities, penalties, fines, costs, and expenses, including reasonable attorneys' fees, arising from or relating to:
a. Customer Data;
b. your use of the Software in violation of this Agreement, law, or third-party rights;
c. your products, services, business, clients, or end users;on-Waivable Rights. These limitations apply only to the maximum extent permitted by applicable law. Some jurisdictions do not allow certain exclusions or limits, and some statutory rights cannot be waived. Nothing in this Agreement limits liability to the extent such limitation is prohibited by applicable law, including for fraud, willful misconduct, or other liability that cannot lawfully be excluded.
d. your security failures, credentials, devices, networks, systems, configurations, or integrations;
e. your failure to provide required notices, obtain consents, or comply with privacy, consumer, employment, industry, or data protection laws; or
f. disputes between you and your authorized users, clients, employees, contractors, or third parties.
16. Buro 1 IP Indemnity
If a third party claims that the Software, as provided by Buro 1 and used as authorized, infringes that third party's intellectual property right, Buro 1 may, at its option: procure the right for you to continue using the Software, modify the Software, replace the Software, or terminate the affected license and refund prepaid unused fees for the affected period.
Buro 1 has no obligation for claims arising from Customer Data, your modifications, unauthorized use, use after Buro 1 provides a workaround, third-party services, open-source components, AI outputs, combinations not provided by Buro 1, or use outside this Agreement. This section states Buro 1's entire liability and your exclusive remedy for intellectual property claims. Notwithstanding any other provision of this Agreement, the total aggregate monetary liability of the Buro 1 Protected Parties arising out of or relating to third-party intellectual property claims — including damages, losses, costs, and legal fees — will not exceed AED 5,000 (five thousand UAE dirhams), excluding only the refund of prepaid unused fees described in this Section, and will in all cases remain subject to Section 14.
17. Term and Termination
17.1 Term. This Agreement starts when you accept it or first use the Software and continues until all Order Forms expire or are terminated.
17.2 Termination for Breach. Either party may terminate for material breach if the breach is not cured within thirty (30) days after written notice. Buro 1 may terminate immediately for non-payment, unlawful use, security risk, infringement, or breach of Sections 3, 5, 6, 11, or 12.
17.3 Effect of Termination and Data Return. Upon termination or expiry of this Agreement or an Order Form, your license ends and you must stop using the Software, delete or return all copies, and pay outstanding amounts. For hosted Software: Buro 1 will make Customer Data available for export in a machine-readable format for thirty (30) days following the termination or expiry date. After that thirty (30) day window, Buro 1 may permanently delete Customer Data without further notice or obligation, subject to any longer retention required by applicable law or Buro 1's legal obligations. You are solely responsible for exporting your data before the export window closes. Buro 1 has no obligation to retain, archive, recover, or return Customer Data after the thirty (30) day export window unless required by law. Additional transition, migration, or data-extraction assistance beyond standard export tools is available only as professional services under a signed SOW at Buro 1's then-current rates.Termination for Breach. Either party may terminate for material breach if the breach is not cured within thirty (30) days after written notice. Buro 1 may terminate immediately for non-payment, unlawful use, security risk, infringement, or breach of Sections 3, 5, 6, 11, or 12.
17.4 Survival. Sections concerning restrictions, fees owed, ownership, confidentiality, disclaimers, liability limits, indemnities, termination effects, data deletion, governing law, dispute resolution, and general terms survive termination.ation for Breach. Either party may terminate for material breach if the breach is not cured within thirty (30) days after written notice. Buro 1 may terminate immediately for non-payment, unlawful use, security risk, infringement, or breach of Sections 3, 5, 6, 11, or 12.
18. Export, Sanctions, and Anti-Corruption
You must comply with export control, sanctions, anti-terrorism, anti-bribery, and anti-corruption laws. You represent that you and your authorized users are not located in, organized under, or ordinarily resident in a sanctioned jurisdiction and are not listed on any restricted-party list. You must not use the Software for prohibited military, nuclear, missile, chemical, biological, surveillance, or weapons-related purposes.
19. Consumer and Mandatory Rights
If applicable law gives you rights that cannot be excluded, restricted, or modified, nothing in this Agreement excludes, restricts, or modifies those rights except to the extent permitted by law. If you are a consumer, some business-use provisions may not apply to you.
20. Changes to this Agreement
Buro 1 may update this Agreement from time to time. Updated terms will be posted or provided through reasonable means, including by email to your account address or through in-product notice. Changes will apply to renewals, new orders, and continued use after the effective date of the update, except where applicable law requires additional consent. If you do not agree to a material change, you must stop using the affected Software and, if applicable, cancel before the next renewal date.
21. Governing Law, Disputes, and Language
21.1 Governing Law. This Agreement is governed by the federal laws of the United Arab Emirates as applicable in the Emirate of Dubai and the local laws of the Emirate of Dubai, excluding conflict-of-law rules and excluding the United Nations Convention on Contracts for the International Sale of Goods.
21.2 Forum. The parties consent to the exclusive jurisdiction and venue of the courts of Dubai, United Arab Emirates, unless the Order Form requires arbitration or another dispute forum.
21.3 Injunctive Relief. Either party may seek injunctive or equitable relief for misuse of intellectual property, confidentiality breaches, security abuse, or unauthorized access without first pursuing other dispute resolution steps.
21.4 Language. This Agreement is written in English. If it is translated into Arabic or any other language, the English version controls in the event of any inconsistency, conflict, or dispute, except to the extent applicable law requires otherwise.
22. Notices
Notices to Buro 1 must be sent by email to info@buro-1.com or by post to Buro 1's registered address in Dubai, United Arab Emirates. Buro 1 may send notices to the email address associated with your account, through the Software, or by other reasonable means. Notices sent to the account email are deemed received twenty-four (24) hours after sending.
23. General
This Agreement is the entire agreement concerning the Software and supersedes all prior discussions, representations, and agreements on that subject. You may not assign this Agreement without Buro 1's prior written consent; any purported assignment without such consent is void. Buro 1 may assign this Agreement in connection with a merger, acquisition, restructuring, or sale of assets. If any provision is found unenforceable, it will be modified to the minimum extent necessary to make it enforceable, and the remaining provisions remain in full effect. Failure to enforce a provision is not a waiver of the right to enforce it in the future. The parties are independent contractors; this Agreement does not create any partnership, joint venture, agency, franchise, or employment relationship. The Buro 1 Protected Parties — including individual owners, members, and beneficial owners — are express intended third-party beneficiaries of the warranty disclaimers, liability limitations, indemnities, releases, and other protections that apply to them under this Agreement. Section headings are for convenience only and do not affect interpretation.
24. Contact
BURO ONE MANAGEMENT CONSULTANCIES L.L.C
Trading as: Buro 1
Legal Type: Limited Liability Company - Single Owner (LLC - SO)
Commercial License No.: 1626101
Register No.: 2866389
DCCI No.: 687828
License Category: Department of Economic Development
Issue Date: June 5, 2026
Expiry Date: June 4, 2027
Dubai, United Arab Emirates
info@buro-1.com
Embedded Clickwrap Policies and Schedules
The following schedules are incorporated into and form part of the Agreement. They are intended to be accepted through the same "I Accept" mechanism as the Agreement unless a signed Order Form, DPA, SOW, Change Order, or SLA states otherwise.
Schedule A: Acceptable Use Policy
Customer and authorized users must not:
a. access or use the Software in violation of law, regulation, third-party rights, or this Agreement;
b. upload, transmit, store, or process malware, ransomware, spyware, viruses, worms, Trojan horses, harmful code, phishing content, credential-harvesting content, or unlawful material;
c. attempt to gain unauthorized access to the Software, Buro 1 systems, another customer's account, third-party systems, or non-public areas of any network;
d. conduct denial-of-service attacks, load attacks, stress tests, vulnerability scans, penetration tests, scraping, crawling, or benchmarking without Buro 1's prior written approval;
e. use the Software to send spam, unlawful marketing, deceptive messages, fraudulent content, or communications that violate anti-spam or telecom rules;
f. bypass usage limits, account controls, billing controls, seat limits, API limits, rate limits, authentication controls, or security mechanisms;
g. reverse engineer, decompile, disassemble, copy, train on, extract, or attempt to derive source code, object code, non-public APIs, models, prompts, architecture, workflows, or trade secrets except to the extent applicable law prohibits the restriction;
h. submit highly sensitive data except as expressly permitted in an Order Form or DPA;
i. use the Software for high-risk activities where failure could cause death, personal injury, catastrophic property damage, environmental harm, or critical-infrastructure disruption unless Buro 1 expressly agrees in writing;
j. use the Software in a way that harms Buro 1's reputation, operations, systems, customers, service providers, owners, employees, or other protected parties; or
k. allow anyone else to do any of the above.
Buro 1 may investigate suspected violations and may suspend or terminate access if Buro 1 reasonably believes a violation has occurred or may occur. Buro 1 is not liable for suspensions taken in good faith to protect security, legal compliance, Buro 1, customers, users, or third parties.
Schedule B: Privacy and Data Notice
This Schedule explains how Buro 1 handles data in connection with the Software. If a separate Privacy Policy is published by Buro 1, that Privacy Policy also applies and may provide more operational detail.
Roles. Buro 1 may act as an independent controller/business for account, billing, security, analytics, marketing, and legal-compliance data. Buro 1 may act as processor/service provider for Customer Data processed on Customer's behalf.
Categories of Data. Buro 1 may process account details, contact details, login credentials or tokens, billing information, support communications, usage logs, device/browser data, IP addresses, API activity, telemetry, security logs, Customer Data, and information submitted through integrations.
Purposes. Buro 1 may process data to provide, secure, maintain, support, bill for, improve, and analyze the Software; prevent abuse; detect security incidents; comply with law; enforce contracts; communicate with Customer; and manage business operations.
Customer Instructions. Customer instructs Buro 1 to process Customer Data as necessary to provide the Software and related services. Customer is responsible for ensuring that Customer's instructions are lawful.
Data Subject and Consumer Requests. Customer is responsible for responding to requests from individuals whose personal data is included in Customer Data. Buro 1 will provide reasonable assistance where required by applicable law or the DPA.
International Transfers. Buro 1 and its subprocessors may process data in the United Arab Emirates and other jurisdictions where Buro 1 or its service providers operate. Customer is responsible for ensuring its use of the Software permits such transfers, and the DPA may set out additional transfer terms where required.
De-Identified and Aggregated Data. Buro 1 may use aggregated, anonymized, or de-identified data for analytics, benchmarking, security, and product improvement, provided it does not identify Customer or an individual.
Cookies and Telemetry. The Software may use cookies, local storage, pixels, telemetry, logging, analytics, or similar technologies for authentication, security, preferences, product analytics, performance, and support.
Legal Requests. Buro 1 may disclose data where required by law, court order, regulator, law enforcement, or legal process, and may notify Customer where legally permitted and reasonably practicable.
Schedule C: Data Protection Terms Pending a Signed DPA
These interim terms apply when Buro 1 processes personal data on Customer's behalf and no signed DPA is yet in place.
Subject Matter and Duration. Buro 1 processes personal data to provide the Software for the term of the applicable subscription or engagement and for any retention period required by law, backup operations, security, dispute resolution, or legitimate business records.
Nature and Purpose. Processing may include hosting, storage, retrieval, transmission, support, maintenance, security monitoring, logging, backup, deletion, analysis, and other processing necessary to provide the Software.
Categories of Personal Data. Categories may include user account data, contact data, business records, communications, files, usage logs, identifiers, device data, support data, and any personal data Customer submits to the Software.
Categories of Data Subjects. Categories may include Customer personnel, clients, suppliers, employees, contractors, representatives, end users, and other individuals whose data Customer submits.
Processor Obligations. Buro 1 will process personal data only on documented instructions from Customer, maintain confidentiality obligations for personnel with access to personal data, apply appropriate security measures, assist Customer as required by applicable law, and delete or return personal data as described in this Agreement.
Subprocessors. Customer authorizes Buro 1 to use subprocessors and third-party service providers as described in Schedule H. Buro 1 will impose contractual obligations on subprocessors designed to protect personal data.
Breach Assistance. Buro 1 will notify Customer without undue delay after confirming a Security Incident involving personal data processed by Buro 1 on Customer's behalf where notification is required by law or the DPA.
Audit. Customer's audit rights are limited to reasonable written security questionnaires, compliance summaries, certifications, or similar documentation, unless applicable law requires more. Any audit must be subject to confidentiality, security, and reasonable scheduling restrictions.
Signed DPA Controls. If the parties sign a DPA, the signed DPA controls over this Schedule for personal data processing terms.
Schedule D: Support Policy
Support Channels. Buro 1 provides support through the support email, in-product support channel, or other channels stated in an Order Form.
Support Hours. Unless an Order Form states otherwise, support is provided during Buro 1's normal business hours, excluding UAE public holidays and company holidays.
Severity Levels. Buro 1 may prioritize issues based on severity, customer impact, security risk, number of affected users, reproducibility, and whether a workaround exists.
Exclusions. Support does not include custom development, training, data migration, third-party system support, customer network/device troubleshooting, customer-created integrations, unsupported configurations, user error, or issues caused by Customer's systems unless expressly included in an Order Form or SOW.
No Guaranteed Resolution. Unless a signed SLA says otherwise, Buro 1 does not guarantee response times, resolution times, root-cause delivery, or continuous support availability.
Customer Cooperation. Customer must provide accurate information, logs, screenshots, reproduction steps, access permissions, and timely responses needed to investigate support requests.
Schedule E: Availability, No-SLA, Maintenance, and Service Credits
No Default SLA. Unless a signed Order Form or SLA expressly provides uptime commitments, the Software is provided on an "as available" basis with no uptime guarantee, no service-credit obligation, and no refund obligation for downtime. Customer's sole and exclusive remedy for downtime is the Downtime Extension described in Section 7.2.
Maintenance. Buro 1 may perform scheduled or emergency maintenance, updates, patches, migrations, security fixes, and infrastructure changes. Buro 1 may provide advance notice when practical but may act without notice for security, legal, urgent operational, or third-party-provider reasons.
Standard Maintenance Window. Buro 1 maintains a standing weekly maintenance window each Friday from 20:00 to Saturday 02:00 Gulf Standard Time (UTC+4). Maintenance performed within the Standard Maintenance Window is deemed notified without further notice, is Excluded Downtime for all purposes (including any signed SLA and the Downtime Extension in Section 7.2), and does not count toward any maintenance-hours limit. Buro 1 may change the window with reasonable notice.
Exclusions. Any uptime or availability commitment excludes downtime or degradation caused by Customer systems, credentials, configurations, misuse, integrations, third-party services, internet or telecom failures, force majeure, cyberattacks, emergency maintenance, beta features, trials, unsupported use, or events outside Buro 1's reasonable control.
Service Credits. If an Order Form or SLA provides service credits, those credits are Customer's sole and exclusive remedy for covered downtime. Service credits are not refunds, may not be converted to cash, and may not exceed the fees paid for the affected service during the affected period unless a signed SLA states otherwise.
Schedule F: Security Statement and Shared Responsibility
Buro 1 Controls. Buro 1 will use reasonable administrative, technical, and organizational safeguards designed to protect Customer Data. These may include access controls, least-privilege practices, authentication controls, logging, backups, vendor review, vulnerability management, secure configuration, and incident response procedures appropriate to the Software.
Customer Controls. Customer is responsible for user provisioning, access reviews, administrator permissions, credential security, MFA where available, endpoint security, secure networks, secure integrations, backup exports, lawful data input, role configuration, and timely notice of suspected incidents.
No Security Warranty. Security controls reduce risk but do not eliminate risk. Buro 1 does not guarantee that the Software will be free from vulnerabilities, unauthorized access, data leaks, malware, ransomware, phishing, credential compromise, or cyberattacks.
Vulnerability Handling. Customer must report suspected vulnerabilities confidentially to Buro 1 and must not publicly disclose, exploit, or test vulnerabilities except under written authorization.
Security Documentation. Buro 1 may provide security summaries, questionnaires, certifications, or other materials under confidentiality, but Buro 1 is not required to disclose sensitive internal security architecture, vulnerability details, source code, credentials, or information that could increase security risk.
Schedule G: Backup, Retention, Export, and Deletion Policy
Customer Export Responsibility. Customer is responsible for exporting and backing up Customer Data where the Software provides export tools or where Customer requires independent retention.
Operational Backups. Buro 1 may maintain backups for disaster recovery, business continuity, security, or operational purposes. Backups are not guaranteed to restore any particular customer record unless an Order Form or SLA expressly provides backup restoration services.
Retention After Termination. Unless a signed Order Form or DPA states otherwise, Customer has thirty (30) days after termination or expiry to export Customer Data. After that period, Buro 1 may delete Customer Data.
Backup Deletion. Customer Data may remain in encrypted or access-restricted backups for up to ninety (90) days or longer where technically necessary, legally required, or retained for dispute, security, compliance, audit, or business-continuity purposes.
No Liability for Customer Failure to Export. Buro 1 is not liable for Customer's failure to export, preserve, or back up Customer Data before termination, deletion, suspension, or expiration.
Schedule H: Subprocessor and Third-Party Services Policy
General Authorization. Customer authorizes Buro 1 to use third-party service providers and subprocessors to provide, host, secure, support, analyze, bill for, and improve the Software.
Typical Provider Categories. Providers may include cloud hosting, database hosting, storage, CDN, email, SMS/communications, payment processing, analytics, logging, monitoring, security, customer support, CRM, identity management, development operations, AI/model providers, and professional advisers.
Provider Changes. Buro 1 may add, replace, or remove providers from time to time. If a signed DPA requires notice of new subprocessors, the DPA controls that notice process.
Third-Party Failures. Buro 1 is not responsible for downtime, data loss, security incidents, feature changes, discontinuation, or failures caused by third-party providers outside Buro 1's reasonable control.
Customer Integrations. Customer is responsible for third-party services it connects to the Software, including permissions, data transfers, credentials, API tokens, configuration, and third-party terms.
Schedule I: API and Integration Terms
API Access. Buro 1 may provide APIs, webhooks, connectors, scripts, plug-ins, or integrations. Buro 1 may set and change rate limits, quotas, authentication requirements, and technical restrictions.
API Credentials. Customer is responsible for securing API keys, secrets, tokens, webhooks, and credentials. Activity under Customer credentials is deemed Customer activity.
Abuse and Stability. Buro 1 may throttle, suspend, revoke, or block API or integration access that Buro 1 reasonably believes threatens security, availability, performance, legal compliance, or other customers.
No Scraping or Competitive Use. Customer must not use APIs, integrations, or automated access to scrape, replicate, benchmark, compete with, or reverse engineer the Software except as expressly permitted in writing.
Integration Data. Customer authorizes Buro 1 to transmit Customer Data to integrations enabled by Customer or Customer's users. Buro 1 is not responsible for how Customer-selected integrations process Customer Data after transmission.
Schedule J: Product-Specific, Trial, Beta, and AI Notices
Product-Specific Terms. Buro 1 may provide product-specific terms for particular products, modules, APIs, integrations, industries, or deployment models. Those terms apply in addition to this Agreement.
Trials and Pilots. Trial, evaluation, demo, pilot, and proof-of-concept access is provided for evaluation only, may be time-limited, may be disabled at any time, and is provided without SLA, warranty, support commitment, or refund obligation.
Beta Features. Beta Features are experimental and may change, fail, produce inaccurate results, or be discontinued without notice. Customer uses Beta Features at its own risk.
AI Features. Customer is responsible for reviewing and validating AI outputs before use. AI outputs may be inaccurate, incomplete, non-unique, biased, or unsuitable. Customer must not rely on AI outputs as professional advice or as a substitute for human judgment
Schedule K: Recommended Clickwrap Acceptance Tex
Product-Specific Terms. Buro 1 may provide product-specific terms for particular products, modules, APIs, integrations, industries, or deployment models. Those terms apply in addition to this Agreement.
Trials and Pilots. Trial, evaluation, demo, pilot, and proof-of-concept access is provided for evaluation only, may be time-limited, may be disabled at any time, and is provided without SLA, warranty, support commitment, or refund obligation.
Beta Features. Beta Features are experimental and may change, fail, produce inaccurate results, or be discontinued without notice. Customer uses Beta Features at its own risk.
AI Features. Customer is responsible for reviewing and validating AI outputs before use. AI outputs may be inaccurate, incomplete, non-unique, biased, or unsuitable. Customer must not rely on AI outputs as professional advice or as a substitute for human judgment.
Schedule K: Recommended Clickwrap Acceptance TextK: Recommended Clickwrap Acceptance Tex
Schedule K is operational guidance for Buro 1's implementation team. Notwithstanding the general statement above, Schedule K is not a contractual term, imposes no obligations on Customer, and grants Customer no rights.
For implementation by the platform team. Present the following at account registration and on first login after any material update to this Agreement, with an unchecked checkbox and an "I Accept" button:
I have read and agree to the Buro 1 Software and SaaS End User License Agreement, including all embedded policies and schedules, and I acknowledge the Privacy Policy. I confirm that I have authority to bind the organization on whose behalf I am accepting.
Implementation requirements:
The checkbox must not be pre-ticked, and the "I Accept" button must remain disabled until the checkbox is ticked.
The words "Buro 1 Software and SaaS End User License Agreement" and "Privacy Policy" must be hyperlinks to the full current text of each document, accessible before acceptance.
For each acceptance, record: date and time (UTC), Agreement version, acceptance text presented, user identifier, account identifier, IP address, browser/device information, and means of acceptance, in accordance with Section 4.5.
On any material update to this Agreement, require re-acceptance through the same mechanism before continued use, and retain the record of each version accepted.
BURO ONE MANAGEMENT CONSULTANCIES L.L.C · Commercial Licence No. 162
We transform organizations.
Your success is next.
Start your project now by booking a one-on-one consultation with our expert.


Buro One designs, builds and maintains the systems companies run on.
Timezone (GMT+4)
Dubai, United Arab Emirates
Buro One Management Consultancies L.L.C
ThisThis Software and SaaS End User License Agreement ("Agreement") is a legal agreement between BURO ONE MANAGEMENT CONSULTANCIES L.L.C, a Dubai limited liability company - single owner (LLC - SO), operating under the brand Buro 1 ("Buro 1," "we," "us," or "our"), and the person or entity accepting this Agreement or using the Software ("Customer," "you," or "your").Privacy Policy explains how Buro 1 collects, uses, stores, and protects personal data when you use the Pulse platform and the Buro 1 website (together, the "Services"). By accessing or using the Services, you acknowledge that you have read and understood this policy.
Buro 1 is licensed by the Government of Dubai, Department of Economy and Tourism / Department of Economic Development, under Commercial License No. 1626101, Register No. 2866389, DCCI No. 687828, issued on June 5, 2026 and expiring on June 4, 2027.
By downloading, installing, accessing, or using any Buro 1 software, hosted application, mobile application, API, website-based product, plug-in, extension, update, documentation, or related service identified in an order form, invoice, statement of work, online checkout, or product page (collectively, the "Software"), you agree to this Agreement, including the embedded policies and schedules at the end of this Agreement. If you use the Software on behalf of an organization, you represent that you have authority to bind that organization.
IF YOU DO NOT AGREE TO THIS AGREEMENT, DO NOT INSTALL, ACCESS, OR USE THE SOFTWARE.
For purposes of warranty disclaimers, liability limitations, indemnities, releases, and other protections in this Agreement, "Buro 1 Protected Parties" means Buro 1 and its affiliates, licensors, suppliers, subcontractors, service providers, predecessors, successors, assigns, directors, officers, managers, owners, members, shareholders, beneficial owners, employees, contractors, representatives, and agents, in each case whether past, present, or future and only to the maximum extent permitted by applicable law. The protections extended to individual owners, members, and beneficial owners under this Agreement are deliberate and material terms without which Buro 1 would not provide the Software on the same economic terms.
1. Agreement Structure
1.1 Order Forms. Commercial details such as product name, subscription term, users, fees, usage limits, support package, and hosting model may be set out in an order form, invoice, online checkout, proposal, or statement of work accepted by Buro 1 ("Order Form").
1.2 Incorporated Terms. The following terms are incorporated into and form part of this Agreement: the embedded Acceptable Use Policy (Schedule A), Privacy and Data Notice (Schedule B), Data Protection Terms Pending a Signed DPA (Schedule C), Support Policy (Schedule D), Availability, No-SLA, Maintenance, and Service Credits Policy (Schedule E), Security Statement and Shared Responsibility (Schedule F), Backup, Retention, Export, and Deletion Policy (Schedule G), Subprocessor and Third-Party Services Policy (Schedule H), API and Integration Terms (Schedule I), Product-Specific, Trial, Beta, and AI Notices (Schedule J), and any signed Order Form, Data Processing Addendum ("DPA"), Statement of Work ("SOW"), Change Order, Service Level Agreement ("SLA"), or written professional services terms accepted by Buro 1.
1.3 Conflict. If there is a conflict, the following order controls unless expressly stated otherwise: signed written agreement, DPA for personal data processing terms, Order Form, SOW or Change Order for professional services scope, Product-Specific Terms, SLA, this Agreement, and embedded policies. No purchase order, vendor portal term, procurement term, or other customer document modifies this Agreement unless Buro 1 expressly signs a written amendment referencing this Agreement.
1.4 Clickwrap Package. This Agreement is intended to function as Buro 1's primary clickwrap package for ordinary Software access. Customer acknowledges that the embedded policies are not merely informational; they are binding contractual terms. Customer should save or print a copy of this Agreement for its records.
2. License Grant
2.1 Limited License. Subject to your compliance with this Agreement and payment of applicable fees, Buro 1 grants you a limited, non-exclusive, non-transferable, non-sublicensable, revocable license during the applicable term to access and use the Software solely for your internal business purposes and only within the limits in the Order Form.
2.1 Limited License. Subject to your compliance with this Agreement and payment of applicable fees, Buro 1 grants you a limited, non-exclusive, non-transferable, non-sublicensable, revocable license during the applicable term to access and use the Software solely for your internal business purposes and only within the limits in the Order Form.
2.2 Authorized Users. You may permit your employees, contractors, and other authorized users to use the Software only for your benefit. You are responsible for all acts and omissions of your authorized users.
2.3 License Model. The Software is licensed, not sold. Buro 1 and its licensors reserve all rights not expressly granted.
2.4 Devices and Copies. For downloadable Software, you may install the number of copies permitted in the Order Form or documentation. You may make one backup copy solely for archival or disaster-recovery purposes unless prohibited by product-specific terms.
3. Restrictions
You must not, and must not permit anyone else to:
a. copy, modify, translate, adapt, create derivative works of, or distribute the Software except as expressly allowed;
b. rent, lease, lend, sell, sublicense, assign, host for third parties, timeshare, operate as a service bureau, or otherwise provide third-party access to the Software;
c. reverse engineer, decompile, disassemble, or attempt to derive source code, underlying models, algorithms, architecture, or non-public APIs except to the extent applicable law prohibits this restriction;
d. bypass, disable, or interfere with license keys, access controls, rate limits, security mechanisms, usage tracking, or technical restrictions;
e. use the Software to transmit malware, conduct phishing, scan or attack systems, violate law, infringe rights, process unlawful content, or harm Buro 1, other customers, or third parties;
f. perform penetration testing, vulnerability scanning, load testing, scraping, benchmarking, or competitive analysis without Buro 1's prior written approval, except as expressly allowed in a written security policy;
g. remove proprietary notices or misrepresent ownership of the Software;
h. use the Software in a high-risk environment where failure could cause death, personal injury, catastrophic property damage, or environmental harm unless Buro 1 expressly agrees in writing; or
i. use the Software with data or workloads prohibited by the Order Form, DPA, Acceptable Use Policy, or applicable law.
4. Customer Responsibilities
4.1 Accounts and Credentials. You are responsible for maintaining the confidentiality of accounts, passwords, API keys, tokens, devices, and administrator privileges. You must promptly notify Buro 1 of any suspected unauthorized access involving the Software.
4.2 Configuration and Access. You are responsible for configuring the Software, assigning user roles, revoking access when users leave, maintaining accurate account information, and ensuring your systems, networks, devices, browsers, integrations, and internet connections are secure and compatible.
4.3 Backups. Unless an Order Form or SLA expressly states that Buro 1 provides backup and restoration services, you are responsible for maintaining independent backups of Customer Data. Buro 1 is not responsible for loss of Customer Data caused by your failure to maintain backups, your configuration choices, your deletion or modification of data, credential compromise, third-party systems, or events outside Buro 1's reasonable control.
4.4 Lawful Use. You are responsible for determining whether the Software is appropriate for your intended use and for complying with laws, industry rules, client obligations, employment laws, privacy laws, export laws, consumer laws, and professional obligations that apply to your data and use.
4.5 Electronic Acceptance and Records. By clicking "I Agree," "Accept," "Continue," or a similar button, by checking an acceptance box, or by accessing or using the Software, you acknowledge that you have read, understood, and agree to be bound by this Agreement, including all embedded policies and schedules. Buro 1 may record the date, time, version of this Agreement, acceptance text presented, user identifier, account identifier, IP address, browser/device information, and means of acceptance for each user. This Agreement is valid as an electronic record under UAE Federal Decree-Law No. 46 of 2021 on Electronic Transactions and Trust Services and other applicable electronic-signature or electronic-contracting laws. You agree not to contest the validity, enforceability, or binding effect of this Agreement solely on the basis that it was accepted electronically.
4.6 Audit and Usage Compliance. Buro 1 may verify your compliance with this Agreement and the Order Form at any time, including by inspecting usage logs, license counts, user counts, and feature access records. Upon reasonable written notice of at least ten (10) business days, Buro 1 may request a self-certification of compliance or conduct a compliance review no more than once per twelve-month period unless Buro 1 reasonably suspects a material breach. Buro 1 will treat information obtained during a compliance review as confidential. If a review reveals underpayment or unauthorized use, you must promptly pay any amounts owed and Buro 1 may recover reasonable costs of the review.
5. Customer Data and Privacyfidentiality
5.1 Customer Data. "Customer Data" means data, files, content, records, messages, credentials, personal data, or other materials submitted to or processed through the Software by you or your authorized users.
5.2 Ownership. As between you and Buro 1, you retain ownership of Customer Data. You grant Buro 1 a non-exclusive right to host, copy, process, transmit, display, and use Customer Data solely as necessary to provide, secure, maintain, support, improve, and comply with legal obligations relating to the Software. Buro 1 will not use Customer Data to train or improve third-party or external AI models, and will not provide Customer Data to AI model providers in individually identifiable form, without Customer's prior written consent.
5.3 Personal Data. To the extent Buro 1 processes personal data on your behalf, the DPA governs that processing. If no DPA has been signed and Buro 1 processes personal data for Customer, the data protection terms embedded in this Agreement apply until a signed DPA is in place. You are responsible for providing required notices, obtaining required consents, establishing a lawful basis for processing, honoring data-subject or consumer rights requests where applicable, and ensuring your instructions to Buro 1 are lawful.
5.4 Sensitive Data. Unless expressly allowed in the Order Form or DPA, you must not submit regulated health information, payment card data, government identifiers, children's data, biometric data, financial account credentials, export-controlled technical data, or other highly sensitive data.
5.5 Usage Data. Buro 1 may collect technical, diagnostic, telemetry, security, performance, and usage information relating to the Software. Buro 1 may use aggregated or de-identified information to operate, secure, analyze, and improve its products, provided it does not identify you or any individual.
6. Security
6.1 Security Program. Buro 1 will maintain administrative, technical, and organizational safeguards designed to protect the security, confidentiality, integrity, and availability of Customer Data, taking into account the nature of the Software, the sensitivity of the data, the state of the art, implementation costs, and reasonably foreseeable risks.
6.2 No Absolute Security. You acknowledge that no software, network, hosting environment, encryption method, access-control system, backup process, or security program can be guaranteed to be error-free, uninterrupted, immune from attack, or incapable of unauthorized access. Buro 1 does not warrant that hacks, data leaks, malware, denial-of-service attacks, credential compromises, vulnerabilities, ransomware, or other security incidents will never occur.
6.3 Shared Responsibility. Security is a shared responsibility. Buro 1 is not responsible for security incidents, data loss, downtime, unauthorized access, or disclosure caused by your credentials, users, administrators, devices, networks, configurations, integrations, third-party services, failure to install updates, failure to follow documentation, or use of the Software outside this Agreement.
6.4 Security Incidents. "Security Incident" means a confirmed breach of Buro 1's security controls that results in unauthorized access to or disclosure of Customer Data processed by Buro 1. Buro 1 will investigate Security Incidents and, where required by applicable law or the DPA, notify you without undue delay after confirmation. Notice may be delayed where law enforcement, legal obligations, containment, or investigation needs require.
6.5 Customer Cooperation. You must cooperate with Buro 1's reasonable investigation, containment, remediation, and notification efforts, including by preserving logs, rotating credentials, disabling affected integrations, and providing relevant information.
6.6 Vulnerability Reports. You must promptly report suspected vulnerabilities to info@buro-1.com. You must not publicly disclose vulnerabilities, exploit vulnerabilities, access other customers' data, disrupt service, or perform security testing except as permitted by Buro 1 in writing.
6.7 Owner and Individual Liability Protection. This Agreement is entered into with and on behalf of Customer as a legal entity. Notwithstanding any other provision of this Agreement, no individual owner, member, manager, beneficial owner, shareholder, or equity holder of Buro 1 (each, a "Buro 1 Owner") shall be personally liable to Customer, Customer's authorized users, or any third party for any claim, loss, damage, obligation, or liability of any kind arising from or relating to this Agreement, the Software, its performance or non-performance, any Security Incident, any downtime, any data loss or data leak, or any other matter connected to the Software or Buro 1's business. Each Buro 1 Owner is an express intended third-party beneficiary of this Section and of all warranty disclaimers, liability limitations, indemnities, and releases that apply to the Buro 1 Protected Parties under this Agreement. Customer expressly agrees that any claims and remedies it may have are limited to claims against Buro 1 as a legal entity and not against any Buro 1 Owner personally. This individual protection is a material term of this Agreement, and Buro 1 would not provide the Software on the same terms without it.
7. Availability, Downtime, and Maintenance
7.1 As Available. Hosted Software and online features are provided on an "as available" basis unless an SLA expressly provides otherwise. Buro 1 does not guarantee uninterrupted, error-free, secure, or continuous availability.
7.2 Downtime. The Software may be unavailable, degraded, suspended, delayed, or interrupted due to: scheduled maintenance, emergency maintenance, updates, and upgrades; infrastructure failures; internet, telecom, or connectivity failures; cloud provider, data center, or hosting provider issues; power outages or grid failures; cyberattacks, denial-of-service attacks, ransomware, or other malicious acts; bugs, capacity limits, or unexpected traffic spikes; force majeure events as defined in Section 7.5; legal requirements or regulatory orders; or your acts, omissions, configurations, or integrations. Unless a signed SLA expressly provides otherwise, Customer's sole and exclusive remedy for downtime or unavailability is a service-term extension: Buro 1 will extend the affected subscription at no charge by the number of days of verified downtime, as verified against Buro 1's monitoring records (a "Downtime Extension"). Downtime Extensions are limited to a maximum of thirty (30) days in aggregate in any twelve (12) month period, regardless of the number or duration of downtime events, and do not accrue for downtime attributable to Customer's acts, omissions, systems, configurations, or integrations, or to causes excluded under Schedule E. No refund, credit, or monetary compensation is payable for downtime.
7.3 Maintenance and Updates. Buro 1 may modify, update, patch, suspend, replace, discontinue, or remove features to improve performance, address security issues, comply with law, prevent harm, or manage product lifecycle. Buro 1 will use commercially reasonable efforts to avoid material disruption where practical.
7.4 Suspension. Buro 1 may suspend access immediately if Buro 1 reasonably believes your use poses a security risk, violates this Agreement, may harm Buro 1 or others, may create legal liability, or if payment is overdue. Buro 1 will use reasonable efforts to restore access after the issue is resolved.
7.5 Force Majeure. Neither Buro 1 nor any Buro 1 Protected Party will be liable for any failure or delay in performing any obligation under this Agreement to the extent caused by a Force Majeure Event. A "Force Majeure Event" means any event or circumstance beyond the reasonable control of the affected party, including: acts of God, natural disasters, earthquakes, floods, hurricanes, fires, or extreme weather; war, armed conflict, terrorism, civil unrest, riots, or governmental action; pandemic, epidemic, or public health emergency; electrical, internet, telecom, or utility failures; cyberattacks, denial-of-service attacks, ransomware, or malicious intrusion by third parties; cloud provider, hosting provider, or infrastructure outages beyond Buro 1's control; strikes, labor actions, or supply-chain disruptions; or changes in law, regulation, or regulatory orders. Buro 1 will use commercially reasonable efforts to mitigate the effects of a Force Majeure Event and to resume performance as soon as reasonably practicable. If a Force Majeure Event affecting Buro 1's core obligations under a specific Order Form continues for more than sixty (60) consecutive days, either party may terminate the affected Order Form on written notice, with Buro 1 refunding prepaid unused fees for the unavailable period.
8. Support and Beta Features
8.1 Support. Buro 1 will provide support only as described in the Order Form or Support Policy. Unless expressly stated, Buro 1 does not guarantee response times, resolution times, custom development, training, data migration, or compatibility work.
8.2 Beta and Pre-Release Features. Buro 1 may offer software features, products, or services designated as "beta," "preview," "early access," "experimental," "pilot," or similar ("Beta Features"). Beta Features are provided AS IS without any warranty, service level commitment, support obligation, or availability guarantee. Beta Features may be inaccurate, incomplete, contain errors, or be unavailable or discontinued without notice. Buro 1 may collect additional data from your use of Beta Features to evaluate and improve them. Beta Features are not subject to any SLA and are expressly excluded from all uptime or performance commitments. Buro 1's liability for Beta Features is capped at USD 100, regardless of any other provision in this Agreement.
9. Third-Party Services, Open Source, and AI Features
9.1 Third-Party Services. The Software may interoperate with or depend on third-party platforms, hosting providers, APIs, applications, marketplaces, app stores, payment processors, identity providers, analytics tools, or integrations. Buro 1 is not responsible for third-party services, their availability, security, terms, data handling, changes, or failures.
9.2 Third-Party Terms. You must comply with applicable third-party terms when using third-party services with the Software.
9.3 Open Source. Some Software may include open-source components governed by separate licenses. Those licenses control only the applicable open-source components.
9.4 AI and Machine Learning Features. Some features of the Software may incorporate artificial intelligence, machine learning, large language models, generative AI, or similar technologies ("AI Features"). You acknowledge and agree that: (a) outputs generated by AI Features may not be accurate, complete, current, unique, or appropriate for your specific use; (b) AI outputs do not constitute legal, financial, medical, professional, or other expert advice; (c) Buro 1 does not warrant that AI outputs are free from bias, error, hallucination, or infringement of third-party rights; (d) you are solely responsible for reviewing, validating, and determining the suitability of any AI output before relying on or acting upon it; (e) you must not use AI Features to generate content that is unlawful, harmful, deceptive, or that violates third-party rights; and (f) you must not attempt to extract or infer Buro 1's underlying models, weights, training data, or proprietary AI architecture; and (g) Buro 1 will not use Customer Data to train or improve AI models without your prior written consent. Buro 1's liability for AI Features is limited to the extent stated in Section 14.
9. 10. Fees, Taxes, Payment, and Renewals-Party Services, Open Source, and AI Features
10.1 Payment Obligation. You must pay all fees in the Order Form. Fees are non-refundable except as expressly stated in the Order Form or required by law. You are responsible for taxes, duties, bank charges, payment processor fees, and similar charges other than taxes based on Buro 1's net income. Buro 1 may charge interest or suspend service for overdue amounts to the maximum extent permitted by law.
10.2 Auto-Renewal. Unless the Order Form specifies otherwise or you cancel before the renewal date, subscriptions will automatically renew at the end of each subscription period for the same period at the then-current price. Buro 1 will provide notice of upcoming auto-renewal to your account email address at least fourteen (14) days before the renewal date where required by applicable law. You must cancel before the renewal date to avoid being charged for the next period. Cancellation procedures are set out in the Order Form or Support Policy. If no cancellation procedure is specified, contact Buro 1 at info@buro-1.com before the renewal date.
10.3 Price Changes. Buro 1 may change fees for renewals with at least thirty (30) days' written notice. If you do not accept a price change, you must cancel the applicable subscription before the renewal date. Continued use after the renewal date constitutes acceptance of the new pricing.
10.4 Invoice Finality. Invoices are deemed accepted unless Customer disputes them in writing, with specific reasons, within ten (10) days of receipt. Undisputed amounts and the undisputed portion of any disputed invoice remain payable when due, and Customer may not withhold, set off, or deduct from amounts due except as required by law.
10.5 Free Trials and Evaluations. If Buro 1 offers the Software on a free-trial or evaluation basis, the trial is provided AS IS with no warranties and subject to any trial-specific terms communicated at the time of access. Buro 1 may terminate a free trial at any time without notice. At the end of the trial period, continued access may require conversion to a paid subscription at the applicable fee. Customer Data from a free trial may be deleted if you do not convert. Free-trial use does not create any obligation on Buro 1 to provide paid access on the same terms.
11. Intellectual Property and Feedback
11.1 Buro 1 IP. Buro 1 and its licensors own all rights in the Software, documentation, templates, interfaces, workflows, designs, know-how, trade secrets, trademarks, and related intellectual property, including rights protected under UAE Federal Decree-Law No. 38 of 2021 on Copyrights and Related Rights (which expressly covers software, applications, and databases) and other applicable intellectual property laws.
11.2 Feedback. If you provide ideas, suggestions, feature requests, bug reports, or other feedback, Buro 1 may use them without restriction or compensation.
11.3 Customer Marks. Buro 1 may use your name and logo to identify you as a customer unless you notify Buro 1 in writing that it may not do so.
12. Confidentiality
Each party may receive non-public information from the other party that is marked confidential or should reasonably be understood as confidential. The receiving party must use the confidential information only to perform under this Agreement and protect it using reasonable care. These obligations do not apply to information that is public, already known, independently developed, or lawfully received from a third party without confidentiality obligations. A party may disclose confidential information where required by law if it gives reasonable notice where legally permitted.
13. Warranties and Disclaimers
13.1 Mutual Authority. Each party represents that it has authority to enter this Agreement.
13.2 Disclaimer. EXCEPT AS EXPRESSLY STATED IN THIS AGREEMENT, THE SOFTWARE, DOCUMENTATION, SUPPORT, HOSTED SERVICES, OUTPUTS, AI FEATURES, INTEGRATIONS, AND RELATED SERVICES ARE PROVIDED BY THE BURO 1 PROTECTED PARTIES "AS IS" AND "AS AVAILABLE," WITH ALL FAULTS AND WITHOUT WARRANTIES OF ANY KIND.
TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE BURO 1 PROTECTED PARTIES DISCLAIM ALL EXPRESS, IMPLIED, STATUTORY, AND OTHER WARRANTIES, INCLUDING WARRANTIES OF MERCHANTABILITY, SATISFACTORY QUALITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT, ACCURACY, QUIET ENJOYMENT, SECURITY, AVAILABILITY, ERROR-FREE OPERATION, AND UNINTERRUPTED USE.
BURO 1 DOES NOT WARRANT THAT THE SOFTWARE WILL PREVENT HACKS, DATA LEAKS, DOWNTIME, DATA LOSS, VULNERABILITIES, UNAUTHORIZED ACCESS, MALWARE, RANSOMWARE, SERVICE INTERRUPTIONS, AI OUTPUT ERRORS, OR THIRD-PARTY FAILURES.
13.3 No Professional Advice. Unless expressly stated in an Order Form, the Software does not provide legal, financial, medical, tax, accounting, engineering, cybersecurity, compliance, or other professional advice. You are responsible for independent review of outputs and decisions.
14. Limitation of Liability
14.1 Exclusion of Damages. TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE BURO 1 PROTECTED PARTIES WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, PUNITIVE, ENHANCED, OR RELIANCE DAMAGES; LOSS OF PROFITS, REVENUE, GOODWILL, USE, BUSINESS, OPPORTUNITY, OR ANTICIPATED SAVINGS; BUSINESS INTERRUPTION; COSTS OF DELAY; LOSS, CORRUPTION, OR RECOVERY OF DATA; FAILURE OF SECURITY MECHANISMS; DOWNTIME; SECURITY INCIDENTS; DATA LEAKS; AI OUTPUT ERRORS OR INACCURACIES; OR COSTS OF SUBSTITUTE GOODS OR SERVICES, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
14.2 Liability Cap. TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE TOTAL AGGREGATE LIABILITY OF ALL BURO 1 PROTECTED PARTIES ARISING OUT OF OR RELATING TO THIS AGREEMENT, THE SOFTWARE, SUPPORT, SECURITY INCIDENTS, DATA LOSS, DATA LEAKS, DOWNTIME, AI FEATURES, BETA FEATURES, OR PROFESSIONAL SERVICES WILL NOT EXCEED THE AMOUNTS PAID BY YOU TO BURO 1 FOR THE SPECIFIC SOFTWARE OR SERVICE GIVING RISE TO THE CLAIM DURING THE TWELVE (12) MONTHS BEFORE THE EVENT GIVING RISE TO LIABILITY. IF NO FEES WERE PAID, THE CAP IS USD 100.
14.3 Multiple Claims. Multiple claims will not expand the liability cap.
14.4 Non-Waivable Rights. These limitations apply only to the maximum extent permitted by applicable law. Some jurisdictions do not allow certain exclusions or limits, and some statutory rights cannot be waived. Nothing in this Agreement limits liability to the extent such limitation is prohibited by applicable law, including for fraud, willful misconduct, or other liability that cannot lawfully be excluded.
14.5 Risk Allocation. The fees reflect the allocation of risk in this Agreement. You acknowledge that Buro 1 would not provide the Software on the same economic terms without these limitations.
14.6 Time Limitation on Claims. ANY CLAIM OR CAUSE OF ACTION ARISING OUT OF OR RELATING TO THIS AGREEMENT, THE SOFTWARE, OR THE SERVICES, WHETHER BASED IN CONTRACT, TORT, STATUTE, OR ANY OTHER LEGAL OR EQUITABLE THEORY, MUST BE BROUGHT WITHIN ONE (1) YEAR AFTER THE CLAIMANT FIRST KNEW OR REASONABLY SHOULD HAVE KNOWN OF THE FACTS GIVING RISE TO THE CLAIM. AFTER THAT PERIOD, ANY SUCH CLAIM IS PERMANENTLY BARRED, REGARDLESS OF WHEN IT IS DISCOVERED. THIS LIMITATION APPLIES TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW AND IS AN ESSENTIAL ELEMENT OF THE BASIS OF THE BARGAIN BETWEEN THE PARTIES.
14.7 Exclusive In-Kind Remedies. TO THE MAXIMUM EXTENT PERMITTED BY LAW, CUSTOMER'S SOLE AND EXCLUSIVE REMEDY, AND THE ENTIRE LIABILITY OF THE BURO 1 PROTECTED PARTIES: (A) FOR DOWNTIME OR UNAVAILABILITY, IS THE DOWNTIME EXTENSION DESCRIBED IN SECTION 7.2; AND (B) FOR ANY SECURITY INCIDENT (AS DEFINED IN SECTION 6.4), OR ANY DATA LEAK OR UNAUTHORIZED ACCESS TO CUSTOMER DATA RESULTING FROM A CONFIRMED BREACH OF BURO 1'S SECURITY CONTROLS, IS TWO (2) MONTHS' USE OF THE AFFECTED SOFTWARE FREE OF SUBSCRIPTION FEES, LIMITED TO A MAXIMUM OF TWO (2) FREE MONTHS IN ANY TWELVE (12) MONTH PERIOD REGARDLESS OF THE NUMBER OF INCIDENTS. THE REMEDY IN (B) DOES NOT APPLY TO EVENTS CAUSED BY CUSTOMER, ITS USERS, CREDENTIALS, DEVICES, NETWORKS, CONFIGURATIONS, OR INTEGRATIONS AS DESCRIBED IN SECTION 6.3, FOR WHICH NO REMEDY IS AVAILABLE. THESE IN-KIND REMEDIES REPLACE ALL MONETARY DAMAGES FOR SUCH EVENTS. IF AND ONLY TO THE EXTENT A COURT OF COMPETENT JURISDICTION HOLDS THESE EXCLUSIVE REMEDIES UNENFORCEABLE, THE EXCLUSIONS AND CAP IN SECTIONS 14.1 AND 14.2 APPLY IN FULL AS THE BACKSTOP.
14.8 Collective Action and Class Action Waiver. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, ALL DISPUTES MUST BE BROUGHT ON AN INDIVIDUAL BASIS ONLY. NEITHER PARTY MAY BRING A CLAIM AS A PLAINTIFF OR CLASS MEMBER IN ANY CLASS ACTION, COLLECTIVE ACTION, MASS ARBITRATION, CONSOLIDATED ACTION, OR REPRESENTATIVE PROCEEDING. THIS WAIVER APPLIES TO THE MAXIMUM EXTENT PERMITTED BY LAW. IF THIS WAIVER IS FOUND UNENFORCEABLE IN A PARTICULAR JURISDICTION, THAT UNENFORCEABLE PORTION SHALL NOT AFFECT THE REMAINDER OF THIS AGREEMENT.clusive In-Kind Remedies. TO THE MAXIMUM EXTENT PERMITTED BY LAW, CUSTOMER'S SOLE AND EXCLUSIVE REMEDY, AND THE ENTIRE LIABILITY OF THE BURO 1 PROTECTED PARTIES: (A) FOR DOWNTIME OR UNAVAILABILITY, IS THE DOWNTIME EXTENSION DESCRIBED IN SECTION 7.2; AND (B) FOR ANY SECURITY INCIDENT (AS DEFINED IN SECTION 6.4), OR ANY DATA LEAK OR UNAUTHORIZED ACCESS TO CUSTOMER DATA RESULTING FROM A CONFIRMED BREACH OF BURO 1'S SECURITY CONTROLS, IS TWO (2) MONTHS' USE OF THE AFFECTED SOFTWARE FREE OF SUBSCRIPTION FEES, LIMITED TO A MAXIMUM OF TWO (2) FREE MONTHS IN ANY TWELVE (12) MONTH PERIOD REGARDLESS OF THE NUMBER OF INCIDENTS. THE REMEDY IN (B) DOES NOT APPLY TO EVENTS CAUSED BY CUSTOMER, ITS USERS, CREDENTIALS, DEVICES, NETWORKS, CONFIGURATIONS, OR INTEGRATIONS AS DESCRIBED IN SECTION 6.3, FOR WHICH NO REMEDY IS AVAILABLE. THESE IN-KIND REMEDIES REPLACE ALL MONETARY DAMAGES FOR SUCH EVENTS. IF AND ONLY TO THE EXTENT A COURT OF COMPETENT JURISDICTION HOLDS THESE EXCLUSIVE REMEDIES UNENFORCEABLE, THE EXCLUSIONS AND CAP IN SECTIONS 14.1 AND 14.2 APPLY IN FULL AS THE BACKSTOP.
15. Customer Indemnity
You will defend, indemnify, and hold harmless the Buro 1 Protected Parties from and against claims, damages, losses, liabilities, penalties, fines, costs, and expenses, including reasonable attorneys' fees, arising from or relating to:
a. Customer Data;
b. your use of the Software in violation of this Agreement, law, or third-party rights;
c. your products, services, business, clients, or end users;on-Waivable Rights. These limitations apply only to the maximum extent permitted by applicable law. Some jurisdictions do not allow certain exclusions or limits, and some statutory rights cannot be waived. Nothing in this Agreement limits liability to the extent such limitation is prohibited by applicable law, including for fraud, willful misconduct, or other liability that cannot lawfully be excluded.
d. your security failures, credentials, devices, networks, systems, configurations, or integrations;
e. your failure to provide required notices, obtain consents, or comply with privacy, consumer, employment, industry, or data protection laws; or
f. disputes between you and your authorized users, clients, employees, contractors, or third parties.
16. Buro 1 IP Indemnity
If a third party claims that the Software, as provided by Buro 1 and used as authorized, infringes that third party's intellectual property right, Buro 1 may, at its option: procure the right for you to continue using the Software, modify the Software, replace the Software, or terminate the affected license and refund prepaid unused fees for the affected period.
Buro 1 has no obligation for claims arising from Customer Data, your modifications, unauthorized use, use after Buro 1 provides a workaround, third-party services, open-source components, AI outputs, combinations not provided by Buro 1, or use outside this Agreement. This section states Buro 1's entire liability and your exclusive remedy for intellectual property claims. Notwithstanding any other provision of this Agreement, the total aggregate monetary liability of the Buro 1 Protected Parties arising out of or relating to third-party intellectual property claims — including damages, losses, costs, and legal fees — will not exceed AED 5,000 (five thousand UAE dirhams), excluding only the refund of prepaid unused fees described in this Section, and will in all cases remain subject to Section 14.
17. Term and Termination
17.1 Term. This Agreement starts when you accept it or first use the Software and continues until all Order Forms expire or are terminated.
17.2 Termination for Breach. Either party may terminate for material breach if the breach is not cured within thirty (30) days after written notice. Buro 1 may terminate immediately for non-payment, unlawful use, security risk, infringement, or breach of Sections 3, 5, 6, 11, or 12.
17.3 Effect of Termination and Data Return. Upon termination or expiry of this Agreement or an Order Form, your license ends and you must stop using the Software, delete or return all copies, and pay outstanding amounts. For hosted Software: Buro 1 will make Customer Data available for export in a machine-readable format for thirty (30) days following the termination or expiry date. After that thirty (30) day window, Buro 1 may permanently delete Customer Data without further notice or obligation, subject to any longer retention required by applicable law or Buro 1's legal obligations. You are solely responsible for exporting your data before the export window closes. Buro 1 has no obligation to retain, archive, recover, or return Customer Data after the thirty (30) day export window unless required by law. Additional transition, migration, or data-extraction assistance beyond standard export tools is available only as professional services under a signed SOW at Buro 1's then-current rates.Termination for Breach. Either party may terminate for material breach if the breach is not cured within thirty (30) days after written notice. Buro 1 may terminate immediately for non-payment, unlawful use, security risk, infringement, or breach of Sections 3, 5, 6, 11, or 12.
17.4 Survival. Sections concerning restrictions, fees owed, ownership, confidentiality, disclaimers, liability limits, indemnities, termination effects, data deletion, governing law, dispute resolution, and general terms survive termination.ation for Breach. Either party may terminate for material breach if the breach is not cured within thirty (30) days after written notice. Buro 1 may terminate immediately for non-payment, unlawful use, security risk, infringement, or breach of Sections 3, 5, 6, 11, or 12.
18. Export, Sanctions, and Anti-Corruption
You must comply with export control, sanctions, anti-terrorism, anti-bribery, and anti-corruption laws. You represent that you and your authorized users are not located in, organized under, or ordinarily resident in a sanctioned jurisdiction and are not listed on any restricted-party list. You must not use the Software for prohibited military, nuclear, missile, chemical, biological, surveillance, or weapons-related purposes.
19. Consumer and Mandatory Rights
If applicable law gives you rights that cannot be excluded, restricted, or modified, nothing in this Agreement excludes, restricts, or modifies those rights except to the extent permitted by law. If you are a consumer, some business-use provisions may not apply to you.
20. Changes to this Agreement
Buro 1 may update this Agreement from time to time. Updated terms will be posted or provided through reasonable means, including by email to your account address or through in-product notice. Changes will apply to renewals, new orders, and continued use after the effective date of the update, except where applicable law requires additional consent. If you do not agree to a material change, you must stop using the affected Software and, if applicable, cancel before the next renewal date.
21. Governing Law, Disputes, and Language
21.1 Governing Law. This Agreement is governed by the federal laws of the United Arab Emirates as applicable in the Emirate of Dubai and the local laws of the Emirate of Dubai, excluding conflict-of-law rules and excluding the United Nations Convention on Contracts for the International Sale of Goods.
21.2 Forum. The parties consent to the exclusive jurisdiction and venue of the courts of Dubai, United Arab Emirates, unless the Order Form requires arbitration or another dispute forum.
21.3 Injunctive Relief. Either party may seek injunctive or equitable relief for misuse of intellectual property, confidentiality breaches, security abuse, or unauthorized access without first pursuing other dispute resolution steps.
21.4 Language. This Agreement is written in English. If it is translated into Arabic or any other language, the English version controls in the event of any inconsistency, conflict, or dispute, except to the extent applicable law requires otherwise.
22. Notices
Notices to Buro 1 must be sent by email to info@buro-1.com or by post to Buro 1's registered address in Dubai, United Arab Emirates. Buro 1 may send notices to the email address associated with your account, through the Software, or by other reasonable means. Notices sent to the account email are deemed received twenty-four (24) hours after sending.
23. General
This Agreement is the entire agreement concerning the Software and supersedes all prior discussions, representations, and agreements on that subject. You may not assign this Agreement without Buro 1's prior written consent; any purported assignment without such consent is void. Buro 1 may assign this Agreement in connection with a merger, acquisition, restructuring, or sale of assets. If any provision is found unenforceable, it will be modified to the minimum extent necessary to make it enforceable, and the remaining provisions remain in full effect. Failure to enforce a provision is not a waiver of the right to enforce it in the future. The parties are independent contractors; this Agreement does not create any partnership, joint venture, agency, franchise, or employment relationship. The Buro 1 Protected Parties — including individual owners, members, and beneficial owners — are express intended third-party beneficiaries of the warranty disclaimers, liability limitations, indemnities, releases, and other protections that apply to them under this Agreement. Section headings are for convenience only and do not affect interpretation.
24. Contact
BURO ONE MANAGEMENT CONSULTANCIES L.L.C
Trading as: Buro 1
Legal Type: Limited Liability Company - Single Owner (LLC - SO)
Commercial License No.: 1626101
Register No.: 2866389
DCCI No.: 687828
License Category: Department of Economic Development
Issue Date: June 5, 2026
Expiry Date: June 4, 2027
Dubai, United Arab Emirates
info@buro-1.com
Embedded Clickwrap Policies and Schedules
The following schedules are incorporated into and form part of the Agreement. They are intended to be accepted through the same "I Accept" mechanism as the Agreement unless a signed Order Form, DPA, SOW, Change Order, or SLA states otherwise.
Schedule A: Acceptable Use Policy
Customer and authorized users must not:
a. access or use the Software in violation of law, regulation, third-party rights, or this Agreement;
b. upload, transmit, store, or process malware, ransomware, spyware, viruses, worms, Trojan horses, harmful code, phishing content, credential-harvesting content, or unlawful material;
c. attempt to gain unauthorized access to the Software, Buro 1 systems, another customer's account, third-party systems, or non-public areas of any network;
d. conduct denial-of-service attacks, load attacks, stress tests, vulnerability scans, penetration tests, scraping, crawling, or benchmarking without Buro 1's prior written approval;
e. use the Software to send spam, unlawful marketing, deceptive messages, fraudulent content, or communications that violate anti-spam or telecom rules;
f. bypass usage limits, account controls, billing controls, seat limits, API limits, rate limits, authentication controls, or security mechanisms;
g. reverse engineer, decompile, disassemble, copy, train on, extract, or attempt to derive source code, object code, non-public APIs, models, prompts, architecture, workflows, or trade secrets except to the extent applicable law prohibits the restriction;
h. submit highly sensitive data except as expressly permitted in an Order Form or DPA;
i. use the Software for high-risk activities where failure could cause death, personal injury, catastrophic property damage, environmental harm, or critical-infrastructure disruption unless Buro 1 expressly agrees in writing;
j. use the Software in a way that harms Buro 1's reputation, operations, systems, customers, service providers, owners, employees, or other protected parties; or
k. allow anyone else to do any of the above.
Buro 1 may investigate suspected violations and may suspend or terminate access if Buro 1 reasonably believes a violation has occurred or may occur. Buro 1 is not liable for suspensions taken in good faith to protect security, legal compliance, Buro 1, customers, users, or third parties.
Schedule B: Privacy and Data Notice
This Schedule explains how Buro 1 handles data in connection with the Software. If a separate Privacy Policy is published by Buro 1, that Privacy Policy also applies and may provide more operational detail.
Roles. Buro 1 may act as an independent controller/business for account, billing, security, analytics, marketing, and legal-compliance data. Buro 1 may act as processor/service provider for Customer Data processed on Customer's behalf.
Categories of Data. Buro 1 may process account details, contact details, login credentials or tokens, billing information, support communications, usage logs, device/browser data, IP addresses, API activity, telemetry, security logs, Customer Data, and information submitted through integrations.
Purposes. Buro 1 may process data to provide, secure, maintain, support, bill for, improve, and analyze the Software; prevent abuse; detect security incidents; comply with law; enforce contracts; communicate with Customer; and manage business operations.
Customer Instructions. Customer instructs Buro 1 to process Customer Data as necessary to provide the Software and related services. Customer is responsible for ensuring that Customer's instructions are lawful.
Data Subject and Consumer Requests. Customer is responsible for responding to requests from individuals whose personal data is included in Customer Data. Buro 1 will provide reasonable assistance where required by applicable law or the DPA.
International Transfers. Buro 1 and its subprocessors may process data in the United Arab Emirates and other jurisdictions where Buro 1 or its service providers operate. Customer is responsible for ensuring its use of the Software permits such transfers, and the DPA may set out additional transfer terms where required.
De-Identified and Aggregated Data. Buro 1 may use aggregated, anonymized, or de-identified data for analytics, benchmarking, security, and product improvement, provided it does not identify Customer or an individual.
Cookies and Telemetry. The Software may use cookies, local storage, pixels, telemetry, logging, analytics, or similar technologies for authentication, security, preferences, product analytics, performance, and support.
Legal Requests. Buro 1 may disclose data where required by law, court order, regulator, law enforcement, or legal process, and may notify Customer where legally permitted and reasonably practicable.
Schedule C: Data Protection Terms Pending a Signed DPA
These interim terms apply when Buro 1 processes personal data on Customer's behalf and no signed DPA is yet in place.
Subject Matter and Duration. Buro 1 processes personal data to provide the Software for the term of the applicable subscription or engagement and for any retention period required by law, backup operations, security, dispute resolution, or legitimate business records.
Nature and Purpose. Processing may include hosting, storage, retrieval, transmission, support, maintenance, security monitoring, logging, backup, deletion, analysis, and other processing necessary to provide the Software.
Categories of Personal Data. Categories may include user account data, contact data, business records, communications, files, usage logs, identifiers, device data, support data, and any personal data Customer submits to the Software.
Categories of Data Subjects. Categories may include Customer personnel, clients, suppliers, employees, contractors, representatives, end users, and other individuals whose data Customer submits.
Processor Obligations. Buro 1 will process personal data only on documented instructions from Customer, maintain confidentiality obligations for personnel with access to personal data, apply appropriate security measures, assist Customer as required by applicable law, and delete or return personal data as described in this Agreement.
Subprocessors. Customer authorizes Buro 1 to use subprocessors and third-party service providers as described in Schedule H. Buro 1 will impose contractual obligations on subprocessors designed to protect personal data.
Breach Assistance. Buro 1 will notify Customer without undue delay after confirming a Security Incident involving personal data processed by Buro 1 on Customer's behalf where notification is required by law or the DPA.
Audit. Customer's audit rights are limited to reasonable written security questionnaires, compliance summaries, certifications, or similar documentation, unless applicable law requires more. Any audit must be subject to confidentiality, security, and reasonable scheduling restrictions.
Signed DPA Controls. If the parties sign a DPA, the signed DPA controls over this Schedule for personal data processing terms.
Schedule D: Support Policy
Support Channels. Buro 1 provides support through the support email, in-product support channel, or other channels stated in an Order Form.
Support Hours. Unless an Order Form states otherwise, support is provided during Buro 1's normal business hours, excluding UAE public holidays and company holidays.
Severity Levels. Buro 1 may prioritize issues based on severity, customer impact, security risk, number of affected users, reproducibility, and whether a workaround exists.
Exclusions. Support does not include custom development, training, data migration, third-party system support, customer network/device troubleshooting, customer-created integrations, unsupported configurations, user error, or issues caused by Customer's systems unless expressly included in an Order Form or SOW.
No Guaranteed Resolution. Unless a signed SLA says otherwise, Buro 1 does not guarantee response times, resolution times, root-cause delivery, or continuous support availability.
Customer Cooperation. Customer must provide accurate information, logs, screenshots, reproduction steps, access permissions, and timely responses needed to investigate support requests.
Schedule E: Availability, No-SLA, Maintenance, and Service Credits
No Default SLA. Unless a signed Order Form or SLA expressly provides uptime commitments, the Software is provided on an "as available" basis with no uptime guarantee, no service-credit obligation, and no refund obligation for downtime. Customer's sole and exclusive remedy for downtime is the Downtime Extension described in Section 7.2.
Maintenance. Buro 1 may perform scheduled or emergency maintenance, updates, patches, migrations, security fixes, and infrastructure changes. Buro 1 may provide advance notice when practical but may act without notice for security, legal, urgent operational, or third-party-provider reasons.
Standard Maintenance Window. Buro 1 maintains a standing weekly maintenance window each Friday from 20:00 to Saturday 02:00 Gulf Standard Time (UTC+4). Maintenance performed within the Standard Maintenance Window is deemed notified without further notice, is Excluded Downtime for all purposes (including any signed SLA and the Downtime Extension in Section 7.2), and does not count toward any maintenance-hours limit. Buro 1 may change the window with reasonable notice.
Exclusions. Any uptime or availability commitment excludes downtime or degradation caused by Customer systems, credentials, configurations, misuse, integrations, third-party services, internet or telecom failures, force majeure, cyberattacks, emergency maintenance, beta features, trials, unsupported use, or events outside Buro 1's reasonable control.
Service Credits. If an Order Form or SLA provides service credits, those credits are Customer's sole and exclusive remedy for covered downtime. Service credits are not refunds, may not be converted to cash, and may not exceed the fees paid for the affected service during the affected period unless a signed SLA states otherwise.
Schedule F: Security Statement and Shared Responsibility
Buro 1 Controls. Buro 1 will use reasonable administrative, technical, and organizational safeguards designed to protect Customer Data. These may include access controls, least-privilege practices, authentication controls, logging, backups, vendor review, vulnerability management, secure configuration, and incident response procedures appropriate to the Software.
Customer Controls. Customer is responsible for user provisioning, access reviews, administrator permissions, credential security, MFA where available, endpoint security, secure networks, secure integrations, backup exports, lawful data input, role configuration, and timely notice of suspected incidents.
No Security Warranty. Security controls reduce risk but do not eliminate risk. Buro 1 does not guarantee that the Software will be free from vulnerabilities, unauthorized access, data leaks, malware, ransomware, phishing, credential compromise, or cyberattacks.
Vulnerability Handling. Customer must report suspected vulnerabilities confidentially to Buro 1 and must not publicly disclose, exploit, or test vulnerabilities except under written authorization.
Security Documentation. Buro 1 may provide security summaries, questionnaires, certifications, or other materials under confidentiality, but Buro 1 is not required to disclose sensitive internal security architecture, vulnerability details, source code, credentials, or information that could increase security risk.
Schedule G: Backup, Retention, Export, and Deletion Policy
Customer Export Responsibility. Customer is responsible for exporting and backing up Customer Data where the Software provides export tools or where Customer requires independent retention.
Operational Backups. Buro 1 may maintain backups for disaster recovery, business continuity, security, or operational purposes. Backups are not guaranteed to restore any particular customer record unless an Order Form or SLA expressly provides backup restoration services.
Retention After Termination. Unless a signed Order Form or DPA states otherwise, Customer has thirty (30) days after termination or expiry to export Customer Data. After that period, Buro 1 may delete Customer Data.
Backup Deletion. Customer Data may remain in encrypted or access-restricted backups for up to ninety (90) days or longer where technically necessary, legally required, or retained for dispute, security, compliance, audit, or business-continuity purposes.
No Liability for Customer Failure to Export. Buro 1 is not liable for Customer's failure to export, preserve, or back up Customer Data before termination, deletion, suspension, or expiration.
Schedule H: Subprocessor and Third-Party Services Policy
General Authorization. Customer authorizes Buro 1 to use third-party service providers and subprocessors to provide, host, secure, support, analyze, bill for, and improve the Software.
Typical Provider Categories. Providers may include cloud hosting, database hosting, storage, CDN, email, SMS/communications, payment processing, analytics, logging, monitoring, security, customer support, CRM, identity management, development operations, AI/model providers, and professional advisers.
Provider Changes. Buro 1 may add, replace, or remove providers from time to time. If a signed DPA requires notice of new subprocessors, the DPA controls that notice process.
Third-Party Failures. Buro 1 is not responsible for downtime, data loss, security incidents, feature changes, discontinuation, or failures caused by third-party providers outside Buro 1's reasonable control.
Customer Integrations. Customer is responsible for third-party services it connects to the Software, including permissions, data transfers, credentials, API tokens, configuration, and third-party terms.
Schedule I: API and Integration Terms
API Access. Buro 1 may provide APIs, webhooks, connectors, scripts, plug-ins, or integrations. Buro 1 may set and change rate limits, quotas, authentication requirements, and technical restrictions.
API Credentials. Customer is responsible for securing API keys, secrets, tokens, webhooks, and credentials. Activity under Customer credentials is deemed Customer activity.
Abuse and Stability. Buro 1 may throttle, suspend, revoke, or block API or integration access that Buro 1 reasonably believes threatens security, availability, performance, legal compliance, or other customers.
No Scraping or Competitive Use. Customer must not use APIs, integrations, or automated access to scrape, replicate, benchmark, compete with, or reverse engineer the Software except as expressly permitted in writing.
Integration Data. Customer authorizes Buro 1 to transmit Customer Data to integrations enabled by Customer or Customer's users. Buro 1 is not responsible for how Customer-selected integrations process Customer Data after transmission.
Schedule J: Product-Specific, Trial, Beta, and AI Notices
Product-Specific Terms. Buro 1 may provide product-specific terms for particular products, modules, APIs, integrations, industries, or deployment models. Those terms apply in addition to this Agreement.
Trials and Pilots. Trial, evaluation, demo, pilot, and proof-of-concept access is provided for evaluation only, may be time-limited, may be disabled at any time, and is provided without SLA, warranty, support commitment, or refund obligation.
Beta Features. Beta Features are experimental and may change, fail, produce inaccurate results, or be discontinued without notice. Customer uses Beta Features at its own risk.
AI Features. Customer is responsible for reviewing and validating AI outputs before use. AI outputs may be inaccurate, incomplete, non-unique, biased, or unsuitable. Customer must not rely on AI outputs as professional advice or as a substitute for human judgment
Schedule K: Recommended Clickwrap Acceptance Tex
Product-Specific Terms. Buro 1 may provide product-specific terms for particular products, modules, APIs, integrations, industries, or deployment models. Those terms apply in addition to this Agreement.
Trials and Pilots. Trial, evaluation, demo, pilot, and proof-of-concept access is provided for evaluation only, may be time-limited, may be disabled at any time, and is provided without SLA, warranty, support commitment, or refund obligation.
Beta Features. Beta Features are experimental and may change, fail, produce inaccurate results, or be discontinued without notice. Customer uses Beta Features at its own risk.
AI Features. Customer is responsible for reviewing and validating AI outputs before use. AI outputs may be inaccurate, incomplete, non-unique, biased, or unsuitable. Customer must not rely on AI outputs as professional advice or as a substitute for human judgment.
Schedule K: Recommended Clickwrap Acceptance TextK: Recommended Clickwrap Acceptance Tex
Schedule K is operational guidance for Buro 1's implementation team. Notwithstanding the general statement above, Schedule K is not a contractual term, imposes no obligations on Customer, and grants Customer no rights.
For implementation by the platform team. Present the following at account registration and on first login after any material update to this Agreement, with an unchecked checkbox and an "I Accept" button:
I have read and agree to the Buro 1 Software and SaaS End User License Agreement, including all embedded policies and schedules, and I acknowledge the Privacy Policy. I confirm that I have authority to bind the organization on whose behalf I am accepting.
Implementation requirements:
The checkbox must not be pre-ticked, and the "I Accept" button must remain disabled until the checkbox is ticked.
The words "Buro 1 Software and SaaS End User License Agreement" and "Privacy Policy" must be hyperlinks to the full current text of each document, accessible before acceptance.
For each acceptance, record: date and time (UTC), Agreement version, acceptance text presented, user identifier, account identifier, IP address, browser/device information, and means of acceptance, in accordance with Section 4.5.
On any material update to this Agreement, require re-acceptance through the same mechanism before continued use, and retain the record of each version accepted.
BURO ONE MANAGEMENT CONSULTANCIES L.L.C · Commercial Licence No. 162
We transform organizations.
Your success is next.
Start your project now by booking a one-on-one consultation with our expert.


Buro One designs, builds and maintains the systems companies run on.
Timezone (GMT+4)
Dubai, United Arab Emirates
Buro One Management Consultancies L.L.C