HumioHumio
Sign in

Terms of Service

Effective 19 September 2026

In short: Humio is for businesses. You own your data and are responsible for having your employees' consent — especially for face attendance, medical certificates and checking location at events you hold at a venue — and for checking payroll before you finalise it. You pay a base fee plus a fee per active employee, can cancel any time, and can always export your records, even after your subscription ends.

This summary is for convenience; the full terms below apply.

Contents
  1. 1. About these terms
  2. 2. Definitions
  3. 3. Your account
  4. 4. Free trial
  5. 5. Plans, fees and payment
  6. 6. Cancellation and refunds
  7. 7. Fair-use limits
  8. 8. Your data and your responsibilities
  9. 9. Receipt reading, face recognition, venue checks and payroll calculations
  10. 10. Acceptable use
  11. 11. Availability, support and changes
  12. 12. Suspension, termination and your data afterwards
  13. 13. Confidentiality
  14. 14. Intellectual property
  15. 15. Third-party services
  16. 16. Warranties and disclaimers
  17. 17. Limitation of liability
  18. 18. Indemnity
  19. 19. Changes to these Terms
  20. 20. General
  21. 21. Contact us

1. About these terms

These Terms of Service (“Terms”) are an agreement between Nuvio Technologies, registration no. 202602486669 (003891431-V), (“we”, “us”) and the business that signs up for Humio (“Customer”, “you”).

Humio is for business use. By creating a company account, you confirm that you are authorised to accept these Terms on behalf of that business. Our Privacy Policy forms part of these Terms.

2. Definitions

  • Service: Humio, including its website, web app and related support.
  • Users: people you give access to your company account, including your employees.
  • Admins: Users with the Admin role, who manage the account, its Users and its subscription.
  • Customer Data: everything you or your Users put into the Service, including personal data about your employees.
  • Active employees: Users whose access has not been suspended or offboarded.

3. Your account

The person who creates your company account becomes its first Admin. Admins decide who gets access and which roles they hold, and are responsible for keeping that up to date — for example, removing access when someone leaves.

You are responsible for everything done under your account. Keep sign-in details confidential and tell us promptly at xqteoh@thenuviotech.com if you suspect unauthorised access. Each sign-in belongs to one person and one company.

4. Free trial

New companies get a 14-day free trial with every feature and no payment details required. When the trial ends without a paid plan, your account becomes read-only for 7 days and is then locked, as described in section 12. Nothing is deleted when a trial ends.

5. Plans, fees and payment

  • Pricing. Plans are priced as a base fee per company plus a fee per active employee, including you, per month, in Malaysian ringgit, as shown on our website at the time you subscribe. There is no minimum number of employees. An Enterprise plan agreed with us in writing, such as a dedicated server or custom features, has the features, prices and terms set out in that agreement, which take precedence over these Terms where they differ.
  • Billing. Fees are charged in advance for each monthly or annual period, by card through our payment processor, Stripe, or by invoice where we agree.
  • Automatic renewal. Subscriptions renew at the end of each period until cancelled.
  • Changes in headcount. When you add or remove active employees, the number billed updates automatically and the difference is prorated for the rest of the period. On monthly plans that difference appears on your next invoice. On annual plans, employees you add are invoiced and charged straight away for the rest of the year; employees you remove are credited against your next invoice.
  • Changing plans. Upgrades and downgrades take effect when made, with proration. A downgrade removes features not included in the new plan, but existing records stay available.
  • Taxes. Fees exclude taxes, including sales and service tax, which are added where applicable.
  • Price changes. We will give Admins at least 30 days' notice of a price change, which applies from your next renewal.
  • Late payment. If a payment fails, your account becomes read-only until it is paid, and is locked if it remains unpaid 7 days after the end of the paid period.

6. Cancellation and refunds

Admins can cancel at any time from the billing page. Cancellation takes effect at the end of the current paid period, and you keep full access until then. Fees already paid are not refundable, except where required by law or where we end the Service without cause, in which case we refund the unused part of any prepaid period.

7. Fair-use limits

Some features rely on costly processing, so they have limits set well above normal use:

  • Receipt scanning: 20 scans per billed employee each month on paid plans, with a lower limit during a trial. Beyond the limit, receipts can still be entered by hand.
  • Face attendance: no limit on a paid plan, because a scan that is refused is an employee who cannot start work. A trial has a monthly limit for the whole company, which grows with the number of people on it.

We may adjust these limits with reasonable notice. We will not reduce them during a paid period in a way that removes something you rely on without telling you first.

8. Your data and your responsibilities

You own Customer Data. You give us permission to host, process and transmit it only as needed to provide and support the Service, keep it secure, and meet our legal obligations. We process personal data in Customer Data on your behalf, as your data processor, as described in our Privacy Policy.

As the data controller for your employees' personal data, you are responsible for:

  • having a lawful basis for the data you put into the Service and giving your employees the notices the PDPA requires;
  • obtaining each employee's explicit consent before processing their biometric data (face attendance), health data (such as medical certificates or a disability recorded for tax relief) or data that reveals their religion (such as zakat deductions), and offering a reasonable alternative to employees who do not consent;
  • telling your employees, before you turn on calendar sync, that anyone in a department who connects their own Google Calendar or Outlook will receive their colleagues' approved leave, including names and leave types, and that a leave type such as medical leave can reveal something about a person's health;
  • telling your employees, before you set a venue on an event, that checking in or out of it reads their device's location, and offering another way to record attendance to anyone who will not or cannot share it. The Service reads location only at the moment of a scan and does not store the reading (see our Privacy Policy), but the decision to check location at all is yours;
  • the accuracy of Customer Data, including leave entitlements, holiday calendars, reporting lines, salaries and employees' tax details;
  • checking each payroll run before you finalise it, paying salaries, and paying and reporting contributions and tax to the authorities — such as EPF, PERKESO and LHDN — on time;
  • keeping your own records for as long as the law requires you to. You can export your expense records at any time (section 12).

Leave types and public holidays we preload are starting points based on published figures. They are not legal advice or a compliance check. You are responsible for configuring the Service to match your obligations under the Employment Act 1955, Sabah and Sarawak Labour Ordinances, and your employment contracts.

Payroll calculations — statutory contributions, PCB and Form EA — follow the rates and methods published by the authorities, applied to the data you enter. Rates and rules change, and you can override them in the Service. The figures are a tool to help you, not tax or legal advice, and you remain responsible for the amounts you pay and report.

9. Receipt reading, face recognition, venue checks and payroll calculations

Receipt reading and face matching are automated and can be wrong. Scanned receipt values are suggestions for the employee to check, and approvers can see where they were changed. A face scan may fail to match a genuine employee or, rarely, match the wrong person. You remain responsible for reviewing claims before approving them, for having another way to record attendance when a scan fails, and for reviewing payroll figures before you finalise a run.

Where you set a venue on an event, check-in and check-out are refused outside the radius you choose. That check is only as good as the position the employee's device reports, which indoors, on a weak signal or on an older phone can be wrong by a wide margin or unavailable altogether. A radius too tight for the venue will refuse people who are standing in it. You choose the venue and the radius, you are responsible for the attendance you record on the strength of them, and you should not treat a refused scan on its own as evidence that an employee was absent.

10. Acceptable use

You must not, and must not let anyone else:

  • use the Service unlawfully, or to process personal data without the required basis or consent;
  • upload anything malicious, infringing, or that you have no right to use;
  • try to access another company's data, bypass security or usage limits, or probe or disrupt the Service;
  • use automated means to scan receipts or faces beyond genuine business use;
  • copy, resell or build a competing product from the Service.

11. Availability, support and changes

We aim to keep the Service available and working well, but it may be interrupted for maintenance, updates or events beyond our control, and we do not guarantee uninterrupted availability. Support is available by email at xqteoh@thenuviotech.com. We improve the Service over time and may change or remove features; we will give reasonable notice before removing a feature your plan includes.

12. Suspension, termination and your data afterwards

If your subscription ends or lapses — a trial ending, cancellation taking effect, or unpaid fees — your account becomes read-only for 7 days: Users can view existing records but not submit anything new. It is then locked, and Users can no longer access company data. Nothing is deleted when an account is locked, and renewing restores access.

We may suspend your account immediately if you seriously breach these Terms, if your use threatens the security or operation of the Service, or if the law requires it. Where practical, we will tell you why and give you a chance to fix the problem first.

Your records afterwards. Admins can export expense records, with receipts, at any time, including while the account is locked. We keep Customer Data for at least 90 days after your account ends so you can do so, and may delete it after that, except where we must keep it by law. Please export anything you need to keep.

13. Confidentiality

Each of us will keep the other's non-public information confidential and use it only for the purposes of these Terms, except where it becomes public through no fault of the recipient or must be disclosed by law.

14. Intellectual property

We own the Service and everything we provide as part of it. These Terms give you a right to use the Service during your subscription; they do not transfer any ownership. If you send us suggestions, we may use them without obligation to you.

15. Third-party services

The Service runs on Amazon Web Services and takes payments through Stripe. Your payments are also subject to Stripe's terms. Venue search, the map on the event setup screen and the Directions link are provided by Google Maps Platform, and using them is also subject to Google's terms. If you turn on calendar sync, employees who connect Google Calendar or Outlook receive their department's approved leave in that account, which is also subject to Google's or Microsoft's terms. We are not responsible for third-party services you choose to connect or link to.

16. Warranties and disclaimers

We will provide the Service with reasonable care and skill. Otherwise, to the extent the law allows, the Service is provided “as is” and we exclude all other warranties, including fitness for a particular purpose and that the Service will be error-free.

17. Limitation of liability

To the extent the law allows:

  • neither of us is liable for indirect or consequential loss, or for loss of profits, revenue, goodwill or data that could have been avoided by keeping your own records;
  • each party's total liability under these Terms is limited to the fees you paid or owed us in the 12 months before the event giving rise to the claim.

These limits do not apply to your obligation to pay fees, to either party's fraud, or to liability that cannot be limited by law.

18. Indemnity

You will compensate us for claims by third parties, including your employees, arising from Customer Data you had no right to process — including processing biometric or health data without consent — or from your breach of the acceptable use rules.

19. Changes to these Terms

We may update these Terms. We will give Admins at least 30 days' notice of material changes by email or in the app. Continuing to use the Service after a change takes effect means you accept it; if you do not, you may cancel before then.

20. General

  • Governing law. These Terms are governed by the laws of Malaysia, and the courts of Kuala Lumpur have jurisdiction.
  • Events beyond control. Neither of us is liable for delay or failure caused by events beyond reasonable control.
  • Assignment. You may not transfer these Terms without our consent. We may transfer them to a successor to our business.
  • Entire agreement. These Terms and the Privacy Policy are the whole agreement between us about the Service. If any part is unenforceable, the rest still applies.
  • Notices. We send notices to your Admins' email addresses. You can send notices to xqteoh@thenuviotech.com.

21. Contact us

Nuvio Technologies
Email: xqteoh@thenuviotech.com

You can also reach the founders directly: