HumioHumio
Sign in

Draft: company details in this document are not filled in yet, and it has not been reviewed. It is not yet in effect.

Terms of Service

Effective [Effective date, e.g. 1 November 2026]

In short: Humio is for businesses. You own your data and are responsible for having your employees' consent — especially for face attendance and medical certificates. You pay per active employee (minimum 5), can cancel any time, and can always export your records, even after your subscription ends.

This summary is for convenience; the full terms below apply.

1. About these terms

These Terms of Service (“Terms”) are an agreement between [Company legal name] Sdn. Bhd. (registration no. [SSM registration no.]) (“we”, “us”) and the business that signs up for Humio (“Customer”, “you”).

Humio is for business use. By creating a company account, you confirm that you are authorised to accept these Terms on behalf of that business. Our Privacy Policy forms part of these Terms.

2. Definitions

  • Service: Humio, including its website, web app and related support.
  • Users: people you give access to your company account, including your employees.
  • Admins: Users with the Admin role, who manage the account, its Users and its subscription.
  • Customer Data: everything you or your Users put into the Service, including personal data about your employees.
  • Active employees: Users whose access has not been suspended or offboarded.

3. Your account

The person who creates your company account becomes its first Admin. Admins decide who gets access and which roles they hold, and are responsible for keeping that up to date — for example, removing access when someone leaves.

You are responsible for everything done under your account. Keep sign-in details confidential and tell us promptly at [support@your-domain] if you suspect unauthorised access. Each sign-in belongs to one person and one company.

4. Free trial

New companies get a 14-day free trial with every feature and no payment details required. When the trial ends without a paid plan, your account becomes read-only for 7 days and is then locked, as described in section 12. Nothing is deleted when a trial ends.

5. Plans, fees and payment

  • Pricing. Plans are priced per active employee, per month, in US dollars, as shown on our website at the time you subscribe. Each subscription is billed for at least 5 active employees.
  • Billing. Fees are charged in advance for each monthly or annual period, by card through our payment processor, Stripe, or by invoice where we agree.
  • Automatic renewal. Subscriptions renew at the end of each period until cancelled.
  • Changes in headcount. When you add or remove active employees, the number billed updates automatically and the difference is prorated for the rest of the period.
  • Changing plans. Upgrades and downgrades take effect when made, with proration. A downgrade removes features not included in the new plan, but existing records stay available.
  • Taxes. Fees exclude taxes, including sales and service tax, which are added where applicable.
  • Price changes. We will give Admins at least 30 days' notice of a price change, which applies from your next renewal.
  • Late payment. If a payment fails, your account becomes read-only until it is paid, and is locked if it remains unpaid 7 days after the end of the paid period.

6. Cancellation and refunds

Admins can cancel at any time from the billing page. Cancellation takes effect at the end of the current paid period, and you keep full access until then. Fees already paid are not refundable, except where required by law or where we end the Service without cause, in which case we refund the unused part of any prepaid period.

7. Fair-use limits

Some features rely on costly processing, so they have limits set well above normal use:

  • Receipt scanning: 20 scans per billed employee each month on paid plans, with a lower limit during a trial. Beyond the limit, receipts can still be entered by hand.
  • Face attendance: 12 scans per employee per day, with a monthly limit during a trial.

We may adjust these limits with reasonable notice. We will not reduce them during a paid period in a way that removes something you rely on without telling you first.

8. Your data and your responsibilities

You own Customer Data. You give us permission to host, process and transmit it only as needed to provide and support the Service, keep it secure, and meet our legal obligations. We process personal data in Customer Data on your behalf, as your data processor, as described in our Privacy Policy.

As the data controller for your employees' personal data, you are responsible for:

  • having a lawful basis for the data you put into the Service and giving your employees the notices the PDPA requires;
  • obtaining each employee's explicit consent before processing their biometric data (face attendance) or health data (such as medical certificates), and offering a reasonable alternative to employees who do not consent;
  • the accuracy of Customer Data, including leave entitlements, holiday calendars and reporting lines;
  • keeping your own records for as long as the law requires you to. You can export your expense records at any time (section 12).

Leave types and public holidays we preload are starting points based on published figures. They are not legal advice or a compliance check. You are responsible for configuring the Service to match your obligations under the Employment Act 1955, Sabah and Sarawak Labour Ordinances, and your employment contracts.

9. Receipt reading and face recognition

Receipt reading and face matching are automated and can be wrong. Scanned receipt values are suggestions for the employee to check, and approvers can see where they were changed. A face scan may fail to match a genuine employee or, rarely, match the wrong person. You remain responsible for reviewing claims before approving them, and for having another way to record attendance when a scan fails.

10. Acceptable use

You must not, and must not let anyone else:

  • use the Service unlawfully, or to process personal data without the required basis or consent;
  • upload anything malicious, infringing, or that you have no right to use;
  • try to access another company's data, bypass security or usage limits, or probe or disrupt the Service;
  • use automated means to scan receipts or faces beyond genuine business use;
  • copy, resell or build a competing product from the Service.

11. Availability, support and changes

We aim to keep the Service available and working well, but it may be interrupted for maintenance, updates or events beyond our control, and we do not guarantee uninterrupted availability. Support is available by email at [support@your-domain]. We improve the Service over time and may change or remove features; we will give reasonable notice before removing a feature your plan includes.

12. Suspension, termination and your data afterwards

If your subscription ends or lapses — a trial ending, cancellation taking effect, or unpaid fees — your account becomes read-only for 7 days: Users can view existing records but not submit anything new. It is then locked, and Users can no longer access company data. Nothing is deleted when an account is locked, and renewing restores access.

We may suspend your account immediately if you seriously breach these Terms, if your use threatens the security or operation of the Service, or if the law requires it. Where practical, we will tell you why and give you a chance to fix the problem first.

Your records afterwards. Admins can export expense records, with receipts, at any time, including while the account is locked. We keep Customer Data for at least 90 days after your account ends so you can do so, and may delete it after that, except where we must keep it by law. Please export anything you need to keep.

13. Confidentiality

Each of us will keep the other's non-public information confidential and use it only for the purposes of these Terms, except where it becomes public through no fault of the recipient or must be disclosed by law.

14. Intellectual property

We own the Service and everything we provide as part of it. These Terms give you a right to use the Service during your subscription; they do not transfer any ownership. If you send us suggestions, we may use them without obligation to you.

15. Third-party services

The Service runs on Amazon Web Services and takes payments through Stripe. Your payments are also subject to Stripe's terms. We are not responsible for third-party services you choose to connect or link to.

16. Warranties and disclaimers

We will provide the Service with reasonable care and skill. Otherwise, to the extent the law allows, the Service is provided “as is” and we exclude all other warranties, including fitness for a particular purpose and that the Service will be error-free.

17. Limitation of liability

To the extent the law allows:

  • neither of us is liable for indirect or consequential loss, or for loss of profits, revenue, goodwill or data that could have been avoided by keeping your own records;
  • each party's total liability under these Terms is limited to the fees you paid or owed us in the 12 months before the event giving rise to the claim.

These limits do not apply to your obligation to pay fees, to either party's fraud, or to liability that cannot be limited by law.

18. Indemnity

You will compensate us for claims by third parties, including your employees, arising from Customer Data you had no right to process — including processing biometric or health data without consent — or from your breach of the acceptable use rules.

19. Changes to these Terms

We may update these Terms. We will give Admins at least 30 days' notice of material changes by email or in the app. Continuing to use the Service after a change takes effect means you accept it; if you do not, you may cancel before then.

20. General

  • Governing law. These Terms are governed by the laws of Malaysia, and the courts of Kuala Lumpur have jurisdiction.
  • Events beyond control. Neither of us is liable for delay or failure caused by events beyond reasonable control.
  • Assignment. You may not transfer these Terms without our consent. We may transfer them to a successor to our business.
  • Entire agreement. These Terms and the Privacy Policy are the whole agreement between us about the Service. If any part is unenforceable, the rest still applies.
  • Notices. We send notices to your Admins' email addresses. You can send notices to [support@your-domain].

21. Contact us

[Company legal name] Sdn. Bhd.
[Registered business address], Malaysia
Support: [support@your-domain]
Billing: [billing@your-domain]