Terms of Service

1.1 Service Provision: Rovekey provides a multi-tenant, cloud-based platform for hotel operations, property management, and workflow automation (the "Services").

1.2 Tenant Boundaries & Administration: The Services are logically isolated by Organization (organization_id). The Customer must designate at least one Organization Admin. The Organization Admin is solely responsible for provisioning workspaces, managing property-scoped access, assigning user roles, and configuring permission gates (has_permission) for all invited staff and contractors.

1.3 Account Security: Customer is responsible for maintaining the confidentiality of all user credentials. Rovekey authenticates sessions strictly via validated tokens. Customer is fully liable for all activities that occur under its Organization account resulting from authorized or unauthorized access.

2.1 Rovekey IP: Rovekey and its licensors exclusively own all rights, title, and interest in the Services, including all source code, APIs, UI/UX designs, system modules, and documentation. Rovekey grants Customer a limited, non-exclusive, non-transferable, revocable license to access and use the Services during the active Subscription Term.

2.2 Acceptable Use: Customer shall not (and shall not permit any third party to): (a) reverse engineer, decompile, or attempt to extract the source code of the Services; (b) use the Services to build a competitive product; (c) bypass or breach any security device or multi-tenant protection implemented by Rovekey; or (d) license, sublicense, sell, or resell the Services to third parties not affiliated with the Customer's authorized hotel properties.

2.3 Customer Feedback: If Customer provides suggestions, feature requests, or feedback, Rovekey may use and incorporate such input into the Services globally without any obligation, royalty, or restriction.

3.1 Ownership: Customer retains all rights, title, and interest in all operational records, logs, staff details, guest data, and files uploaded to or generated within the Customer’s instance ("Customer Data").

3.2 Data Processing: To the extent Customer Data includes personal data governed by global privacy laws (including the Singapore PDPA, or Hong Kong PDPO), the processing of such data is governed exclusively by the Rovekey Data Processing Agreement (DPA), located at rovekey.com/legal/dpa, which is incorporated herein by reference.

3.3 Telemetry & Analytics: Rovekey may collect and analyze aggregated, de-identified telemetry data (e.g., module usage rates, API latency) to monitor platform security, conduct capacity engineering, and improve the Services. This telemetry data does not contain Customer Data or personal data.

4.1 Subscriptions & Modules: The Services are billed on a subscription basis according to the Customer's selected plan and activated system modules.

4.2 Payment Terms: Payments are processed via Rovekey’s authorized third-party payment gateway (Stripe). Subscription fees are billed in advance on a recurring billing cycle. All fees are non-refundable except as required by applicable law.

4.3 Taxes: Fees do not include local, state, or national taxes, VAT, or goods and services taxes (GST). Customer is responsible for paying all applicable taxes associated with its purchases.

4.4 Suspension for Non-Payment: If a payment method fails or an invoice becomes past due, Rovekey reserves the right to suspend the Customer's access to the Services until all undisputed past-due balances are paid in full.

5.1 Term: This Agreement commences on the date Customer registers an Organization account and continues until all subscriptions expire or are terminated.

5.2 Cancellation: Customer may cancel its subscription at any time. Cancellations take effect at the end of the current paid billing period (cancel-at-period-end). Rovekey will not prorate or refund fees for the remainder of a billing cycle.

5.3 Termination for Cause: Either party may terminate this Agreement immediately upon written notice if the other party materially breaches this Agreement and fails to cure the breach within thirty (30) days.

5.4 Post-Termination Data Deletion: Upon expiration or termination of the Agreement, Rovekey will restrict access to the Organization workspace. Rovekey will securely delete or anonymize Customer Data in accordance with the retention limits specified in the DPA. Customer is responsible for exporting any necessary Customer Data prior to the end of the subscription term.

6.1 Mutual Warranties: Each party represents and warrants that it has the legal power and authority to enter into this Agreement.

6.2 Disclaimer: EXCEPT AS EXPRESSLY PROVIDED HEREIN, THE SERVICES ARE PROVIDED "AS IS" AND "AS AVAILABLE". TO THE MAXIMUM EXTENT PERMITTED BY GLOBAL LAW, ROVEKEY DISCLAIMS ALL IMPLIED WARRANTIES, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. ROVEKEY DOES NOT WARRANT THAT THE SERVICES WILL BE UNINTERRUPTED, ERROR-FREE, OR COMPLETELY SECURE.

7.1 Exclusion of Indirect Damages: TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL EITHER PARTY BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, PUNITIVE, OR CONSEQUENTIAL DAMAGES, INCLUDING LOSS OF PROFITS, LOSS OF REVENUE, LOSS OF DATA, OR BUSINESS INTERRUPTION, REGARDLESS OF THE THEORY OF LIABILITY.

7.2 Liability Cap: ROVEKEY’S TOTAL AGGREGATE LIABILITY ARISING OUT OF OR RELATING TO THIS AGREEMENT SHALL NOT EXCEED THE TOTAL AMOUNT PAID BY CUSTOMER TO ROVEKEY DURING THE TWELVE (12) MONTHS IMMEDIATELY PRECEDING THE EVENT GIVING RISE TO THE LIABILITY.

10.1 Modifications: Rovekey may update these terms from time to time. We will notify Organization Admins of material changes via email or an in-app platform notification at least thirty (30) days prior to the changes taking effect. Continued use of the Services constitutes acceptance of the modified terms.

10.2 Severability: If any provision of this Agreement is found to be unenforceable or invalid, that provision will be limited or eliminated to the minimum extent necessary so that this Agreement will otherwise remain in full force and effect.

10.3 Entire Agreement: This Agreement, along with the DPA and Privacy Policy, constitutes the complete and exclusive understanding between the parties, superseding all prior agreements or terms (including any terms embedded in Customer purchase orders).