Terms of Service
Effective 6 October 2026 · Version 1.1 (Section 11 expanded) · Custom Ai Apps LLC
These Terms of Service (the "Terms") govern access to and use of the Zipplee platform operated by Custom Ai Apps LLC, a Texas limited liability company ("we," "us," "Custom Ai Apps"). By creating an account, signing an Order Form, or using the Services, you agree to these Terms.
If you have signed a Master Services Agreement with us, that agreement controls wherever it conflicts with these Terms. These Terms govern self-serve, trial, and evaluation access where no signed agreement exists.
1. Definitions
- Services — the Zipplee platform: benefits and workplace communication tools including guide creation and publication, microsites, employee hubs, virtual benefits fairs, video and audio generation, messaging, and the reporting and analytics that accompany them.
- Customer — the organization that has subscribed to or is evaluating the Services. If you are accepting these Terms on behalf of an organization, you represent that you are authorized to bind it.
- Authorized User — an individual the Customer permits to access the Services, including administrators and employees of the Customer.
- Customer Data — all content, documents, plan information, media, and personal data that the Customer or its Authorized Users submit to, or generate within, the Services.
- Output — material generated by the AI features of the Services in response to Customer Data and Customer instructions.
2. The Services
We grant the Customer a non-exclusive, non-transferable right to access and use the Services during the term, for the Customer's internal business purposes and for communicating with its own workforce.
We may improve, modify, or discontinue individual features. Where a change would materially reduce the core functionality the Customer relies on, we will give reasonable prior notice.
3. Accounts and access
- The Customer is responsible for its Authorized Users' use of the Services and for keeping credentials confidential.
- Accounts are for named individuals. Credentials may not be shared between people.
- The Customer must promptly remove access for anyone who leaves the organization or changes role, and must notify us of any suspected unauthorized access at todd@customaiapps.ai.
- Administrative roles carry the ability to read and change data across the Customer's whole account. The Customer decides who holds them.
4. Customer Data
The Customer owns its Customer Data. Nothing in these Terms transfers ownership to us.
The Customer grants us a limited licence to host, process, transmit, display, and adapt Customer Data solely to provide, secure, and support the Services, and to comply with law. That licence ends when the data is deleted.
We do not sell Customer Data. We do not use Customer Data to train our own models, and we do not permit our AI providers to train their models on Customer Data.
The Customer is responsible for having a lawful basis to provide the Customer Data it submits, including any personal data about its employees, and for the accuracy of plan information it publishes to its workforce.
5. Employees as end users
Where the Customer's employees use the Services — reading a guide, asking questions of an assistant, attending a virtual fair, completing an acknowledgement — they do so under the Customer's account. The Customer is the controller of their personal data and we are the processor. Requests from an individual employee about their own data are directed to their employer, except where law requires us to respond directly. See our Data Retention & Deletion Policy.
6. AI features
Parts of the Services generate text, narration, audio, video, and summaries using artificial intelligence. Three things follow, and we would rather state them plainly than bury them:
- Output can be wrong. AI-generated material may be inaccurate, incomplete, or misleading, including about benefits, eligibility, and cost. Output is a draft for human review, not advice.
- The Customer is responsible for what it publishes. The Services provide review and approval steps before content reaches employees. Publishing Output without reviewing it is the Customer's decision and the Customer's risk.
- We are not a benefits advisor. Nothing produced by the Services is legal, tax, medical, insurance, or investment advice, and it is not a substitute for plan documents. Where Output and the governing plan document disagree, the plan document controls.
As between the parties, the Customer owns the Output generated from its Customer Data. Given the nature of generative systems, we cannot warrant that Output is unique.
7. Acceptable use
The Customer and its Authorized Users will not:
- use the Services in violation of law, or to send unlawful, harassing, deceptive, or infringing content;
- upload material they lack the right to upload;
- attempt to access another customer's data, probe or test the security of the Services without our written permission, or circumvent access controls or rate limits;
- reverse engineer the Services, or use them to build a competing product;
- resell, sublicense, or provide the Services to third parties except to the Customer's own workforce and its authorized advisors, such as its broker or carrier representatives;
- upload payment card numbers, government identification numbers, or clinical medical records into free-text fields. The Services are not designed to hold that data.
We may suspend access without prior notice where use threatens the security, integrity, or availability of the Services or another customer's data. We will tell the Customer why, and restore access once the cause is resolved.
8. Security
We maintain administrative, technical, and physical safeguards designed to protect Customer Data. These include tenant separation enforced in the database rather than in application code, encryption in transit and at rest, multi-factor authentication on every administrative console, an automated security gate that must pass before any change reaches production, continuous dependency scanning, and a documented incident response plan.
If we confirm that Customer Data has been or may have been exposed, we will notify the affected Customer within 72 hours of confirming the exposure, with what we know, what we have done, and what we recommend.
Our current security posture, including where we are in independent audit, is described on our Trust & Security page. We do not claim certifications we do not hold.
9. Availability
We aim to keep the Services available and we monitor them continuously. These Terms do not include an uptime service level commitment. Customers who need a contractual availability commitment should ask for one in a Master Services Agreement, where it can be written against defined measurement and remedies.
The Services depend on third-party infrastructure. Scheduled maintenance, provider outages, and events outside our reasonable control may interrupt access.
10. Sub-processors
We use third-party providers to operate the Services. The current list, what each one does, and what data it handles, is published at zipplee.io/legal/subprocessors. We will notify customers of material additions and give a reasonable opportunity to raise legitimate data-protection concerns before the change takes effect.
11. Confidentiality
11.1 What is confidential. "Confidential Information" means any non-public information one party (the "discloser") shares with the other (the "recipient") in connection with the Services, in any form, that is marked confidential or that a reasonable person would understand to be confidential given what it is and how it was shared. The Customer's Confidential Information includes Customer Data and information about the Customer's employees. Our Confidential Information includes the non-public parts of the Services, our pricing proposals, and our security documentation.
11.2 How it is protected. The recipient will protect the discloser's Confidential Information with at least the care it uses for its own information of a similar kind, and never less than reasonable care. It will use it only to perform under these Terms, and disclose it only to its employees, contractors and sub-processors who need it for that purpose and are bound by confidentiality duties at least as protective as these. The recipient is responsible for any breach of this section by those people.
11.3 What is not covered. This section does not apply to information that is or becomes public through no fault of the recipient, that the recipient already knew without a duty of confidence, that the recipient develops independently without using the discloser's information, or that the recipient lawfully receives from a third party without a duty of confidence.
11.4 Disclosure required by law. If the law, a court or a regulator requires the recipient to disclose Confidential Information, the recipient will, where the law allows, give the discloser prompt notice so it can seek protection, and will disclose only what is required.
11.5 How long it lasts. These duties start when the information is first shared and continue for three (3) years after these Terms end. For trade secrets and for personal data, including Customer Data, they continue for as long as the recipient holds the information.
11.6 Return or deletion. When these Terms end, or at the discloser's written request, the recipient will return or delete the discloser's Confidential Information, except copies kept in routine backups or required by law, which stay protected by this section until they are deleted in the normal course. Customer Data is returned and deleted as set out in our Data Processing Agreement.
11.7 Remedies. Unauthorized use or disclosure of Confidential Information may cause harm that money alone cannot fix, so the discloser may seek an injunction or other court order to stop it, in addition to any other remedy.
12. Fees
Where access is provided free of charge, on trial, or for evaluation, no fees are due and we may end access at any time. Paid subscriptions are governed by an Order Form or a signed Master Services Agreement, which set price, term, and payment terms. Fees are exclusive of taxes.
13. Term and termination
These Terms apply for as long as the Customer uses the Services. Either party may terminate on 30 days' written notice, and either party may terminate immediately for a material breach the other fails to cure within 30 days of notice.
On termination, we will make Customer Data available for export for 30 days. After that window we delete it from live systems within 30 days; residual copies age out of routine backups on the normal rotation and are then overwritten. See the Data Retention & Deletion Policy.
14. Warranties and disclaimers
We warrant that we will provide the Services with reasonable skill and care, and in a manner consistent with the security practices described in section 8.
Except as expressly stated, the Services and all Output are provided "as is." To the fullest extent permitted by law, we disclaim all other warranties, express or implied, including merchantability, fitness for a particular purpose, non-infringement, and any warranty that the Services will be uninterrupted, error-free, or that Output will be accurate.
15. Limitation of liability
Neither party is liable for indirect, incidental, special, consequential, or punitive damages, or for lost profits, revenue, goodwill, or anticipated savings, even if advised such damages were possible.
Each party's total aggregate liability arising out of or relating to these Terms is limited to the fees paid by the Customer in the twelve months before the event giving rise to the claim, or US $1,000 where no fees have been paid.
These limits do not apply to: a party's indemnification obligations; the Customer's obligation to pay fees; or either party's fraud, willful misconduct, or gross negligence.
Customers who need a higher limit, including a specific figure for a security or data protection failure, should ask for a Master Services Agreement. The enhanced limit available there is set against the insurance we actually carry, and we will not agree to a figure our coverage could not answer for.
16. Indemnification
We will defend the Customer against a third-party claim that the Services, used as permitted, infringe that third party's intellectual property rights, and pay damages finally awarded or agreed in settlement. This does not cover claims arising from Customer Data, from Output the Customer published without review, or from use of the Services in breach of these Terms.
The Customer will defend us against third-party claims arising from Customer Data, from content the Customer published through the Services, or from the Customer's breach of section 7.
The party seeking indemnity must give prompt notice, allow the other to control the defense, and provide reasonable cooperation.
17. Changes to these Terms
We may update these Terms. For material changes we will give at least 30 days' notice by email to account administrators and by updating the effective date above. Continued use after the effective date constitutes acceptance. A Customer who does not accept a material change may terminate before it takes effect and receive a pro-rata refund of prepaid, unused fees.
Each version is dated and superseded versions are retained, so a Customer can see what changed and when.
18. Governing law and disputes
These Terms are governed by the laws of the State of Texas, without regard to conflict of laws rules. The parties submit to the exclusive jurisdiction of the state and federal courts located in Dallas County, Texas. Either party may seek injunctive relief in any court of competent jurisdiction to protect its intellectual property or confidential information.
Before filing, the parties will attempt in good faith to resolve the dispute through discussion between people with authority to settle it, for 30 days after written notice.
19. General
- Entire agreement. These Terms, together with any Order Form, Master Services Agreement, and Data Processing Agreement, are the entire agreement on this subject and supersede prior discussions.
- Order of precedence. A signed Master Services Agreement, then an Order Form, then the Data Processing Agreement, then these Terms.
- Assignment. Neither party may assign without the other's consent, except to a successor in a merger or sale of substantially all assets, on notice.
- Publicity. We will not use the Customer's name or logo publicly without prior written consent.
- Force majeure. Neither party is liable for delay or failure caused by events beyond its reasonable control.
- Severability and waiver. If a provision is unenforceable, the rest survives. A failure to enforce is not a waiver.
- Notices. To us at todd@customaiapps.ai; to the Customer at the administrator email on the account.
- Survival. Sections 4, 11, 13, 14, 15, 16, 18, and 19 survive termination.
20. Text messages
Employers may send their employees text reminders through Zipplee only to people who have opted in as described on our Text message program page. Message frequency varies; message and data rates may apply. Reply STOP to opt out and HELP for help. Carriers are not liable for delayed or undelivered messages. We do not share, sell, or provide mobile phone numbers or text messaging consent to third parties or affiliates for marketing or promotional purposes, and text messaging opt-in data and consent will not be shared with any third parties.
21. Contact
| Legal and contracts | todd@customaiapps.ai |
|---|---|
| Security and vulnerability reports | todd@customaiapps.ai |
| Privacy and deletion requests | todd@customaiapps.ai |
Custom Ai Apps LLC, a Texas limited liability company.