Terms of Service & Acceptable Use Policy

Effective Date: October 16, 2026
Entity: GraceSoft (Singapore)

1. Agreement to Terms

By accessing or using any websites, SaaS applications, APIs, or software products provided by GraceSoft ("Company", "we", "us", or "our"), you ("User", "Customer", or "you") agree to be bound by these Terms of Service and Acceptable Use Policy ("Terms"). If you do not agree, do not use our services.

2. Description of Services

GraceSoft provides software development, SaaS products, and standalone AI-powered applications, including GraceSoft Capture, a form builder with a built-in inbox.

3. Account & Registration

You must provide accurate and complete information when creating an account. You are responsible for safeguarding your credentials and all activities occurring under your account.

4. Artificial Intelligence (AI) Outputs & Disclaimers

• As-Is Provision: All AI-generated outputs, predictions, recommendations, content, and data ("Outputs") are provided strictly on an "AS-IS" and "AS-AVAILABLE" basis.
• No Guarantee of Accuracy: GraceSoft makes no warranties or representations regarding the accuracy, completeness, reliability, or correctness of AI Outputs.
• Human Oversight: Outputs do not constitute professional legal, medical, financial, or technical advice. You agree to evaluate and verify all Outputs with human oversight prior to reliance or deployment.

5. Intellectual Property Rights

• Our Platform: GraceSoft retains all rights, title, and interest in and to our software, platforms, brand assets, source code, and underlying architecture.
• User Content & Outputs: You retain ownership of inputs provided to our services and any resulting Outputs, subject to third-party provider licenses and applicable law.

6. Acceptable Use Policy (AUP)

You agree NOT to:

1. Reverse engineer, decompile, or attempt to extract source code or underlying AI models.
2. Perform prompt injection attacks, jailbreaks, or intentionally bypass safety barriers.
3. Use automated web scrapers, bots, or extraction tools without prior written authorization.
4. Generate, upload, or transmit illegal, harmful, harassing, defamatory, or infringing content.
5. Resell, sublicense, or redistribute API access without authorization.
6. Use GraceSoft Capture forms to collect passwords, payment card data, government identification numbers, or special categories of personal data, or to impersonate another person or organization (including phishing).
7. Collect personal data through GraceSoft Capture without a lawful basis and any notice or consent required by applicable law. As the form owner, you are responsible for the data your forms collect.

7. Infrastructure Vendors & Sub-Processors

Our applications leverage third-party hosting, infrastructure, and API providers, including but not limited to Cloudflare, Vercel, Railway, Laravel Cloud, Postmark, Stripe, and AI model providers. By using our Services, you acknowledge that data processing may occur across these vendor infrastructures in accordance with our Privacy Policy. The current list is published on our Sub-processors page.

Where GraceSoft Capture processes personal data submitted through your forms, GraceSoft acts as your data intermediary (processor), and that processing is governed by the GraceSoft Capture Data Processing Agreement.

8. Independent Security Testing

To verify that our software keeps its security-first commitments, GraceSoft may engage independent, qualified third parties to test the security of our websites, applications, APIs, and supporting infrastructure, including through penetration testing, vulnerability assessments, and code review ("Security Testing").

• Safeguards: Security testers act only on GraceSoft's written instructions and are bound by written confidentiality and data protection obligations no less protective than these Terms and our Privacy Policy. GraceSoft remains responsible for their work.
• Data Minimisation: Where practicable, Security Testing is performed against test environments using synthetic data. If testing involves live systems, any access to your data is limited to what is strictly necessary for the test, and testers may not copy, keep, or use it for any other purpose.
• Service Impact: We plan Security Testing to avoid disrupting the Services. Any planned downtime is handled in the same way as routine maintenance.
• Your Own Testing: This section does not authorize you to conduct security testing of the Services. The Acceptable Use Policy in section 6 continues to apply. If you believe you have found a vulnerability, please report it to legal@gracesoft.dev.

9. Limitation of Liability & Indemnification

• Liability Cap: To the maximum extent permitted by applicable law, GraceSoft's maximum aggregate liability arising out of or in connection with the Services or these Terms shall be strictly capped at the total amount paid by you to GraceSoft in the three (3) months preceding the event giving rise to liability, or SGD $100, whichever is lower.
• Consequential Damages: GraceSoft shall not be liable for any indirect, incidental, special, consequential, or punitive damages, lost profits, or loss of data.

10. Privacy & Personal Data

Your privacy is important to us. Processing of personal data is governed by our Privacy Policy and complies with the Singapore Personal Data Protection Act (PDPA).

11. Governing Law & Dispute Resolution

These Terms are governed by and construed in accordance with the laws of the Republic of Singapore. Any dispute arising out of or in connection with these Terms shall be subject to the exclusive jurisdiction of the courts of Singapore.

12. Termination & Changes to Terms

GraceSoft reserves the right to suspend or terminate access to the Services immediately for violation of these Terms. We may update these Terms periodically, and continued use signifies acceptance of updated terms.

13. Contact Information

For legal inquiries, contact GraceSoft at legal@gracesoft.dev.