Legal

Terms of Service

These terms govern your organization's use of Devora, including the dashboard at app.devora.sh, our SDKs and our recording service. Please read them with our Privacy Policy.

Last updated October 14, 2026

Agreement

These terms are an agreement between Devora Labs Ltd ("Devora", "we", "us") and the organization that creates or uses a Devora workspace ("you"). The person who accepts them confirms that they are authorized to bind that organization. Devora is for business use only, and every user must be at least 18.

By creating a workspace, starting a trial, buying a plan or using Devora, you accept these terms. If you have signed a separate agreement with us, that agreement takes priority where it conflicts with these terms.

The service

Devora coordinates controlled access by your staff to your customers' accounts in your application. That includes access requests and approvals, time-limited read-only or write sessions, session termination, access history and, if you enable it, masked session recording.

Devora adds governance around access. It does not replace your authentication or your application's authorization. Your application must create and revoke the sign-in credential, keep its tenant and permission checks in place, and install our backend guard on the routes you want protected. Our security and shared responsibility page describes this split, and it forms part of these terms.

We improve Devora over time and may change or remove features. If a change materially reduces a paid feature you rely on, we will tell you in advance where we reasonably can.

Accounts and staff

  • Your staff sign in through our sign-in provider. You are responsible for who you invite, the roles you give them, and everything done under your workspace.
  • Keep sign-in methods and API keys secure, and tell us promptly at help@devora.sh if you suspect unauthorized use.
  • Staff limits for each plan include admins and approvers. Your customers' accounts accessed through your application do not count as staff.

Your responsibilities

For the personal data of your customers and end users that passes through Devora, you are the controller and we are your processor. You are responsible for:

  • having a lawful basis to access your customers' accounts and to record sessions, and giving your customers any notice, or obtaining any consent, the law or your contracts require;
  • choosing appropriate approval rules, scopes, durations, masking and retention for your use;
  • making sure staff access customer accounts only for legitimate purposes such as support, debugging and troubleshooting;
  • the accuracy of the data your application sends to Devora, such as search results; and
  • testing your integration, including that ending a session in Devora stops your application accepting its credential.

We process that data only to provide Devora to you, under your documented instructions, these terms and our Privacy Policy. Contact us if you need a data processing agreement signed for your records.

Acceptable use

You must not, and must not let anyone else:

  • use Devora to access any account without authorization, or for surveillance, harassment or any unlawful purpose;
  • record or process special category data, such as health data, unless you have the legal basis and safeguards the law requires;
  • get around plan limits, approvals, masking or other controls, or access another customer's workspace;
  • probe, scan or test the security of Devora without our written permission, except to report a vulnerability to us in good faith;
  • disrupt or overload the service, or upload malicious code;
  • copy, resell or sublicense the hosted service, or reverse engineer it except where the law allows; or
  • use Devora to build a competing product.

Our SDKs are published under the MIT License, which governs their source code. These terms govern your use of the hosted Devora service.

Plans, trials and payment

  • Plans: current plans, prices and limits are shown on our pricing page. Prices are in US dollars and exclude taxes.
  • Payment: Polar processes checkout, subscriptions, invoices and sales tax. Its terms also apply to your purchase. Paid plans are billed monthly in advance and renew automatically until cancelled.
  • Trials: a Pro trial lasts 14 days and includes 2.5 hours of session recording. No card is needed, and you return to the Free plan when it ends unless you choose a paid plan.
  • Changes: upgrades take effect after payment. Unused time on your current plan is credited against the new plan. Downgrades take effect at renewal.
  • Failed payments: if a renewal payment fails, we keep your plan for a 7-day grace period. If payment is still not made, the workspace moves to the Free plan.
  • Cancellation: you can cancel at any time. Your plan continues until the end of the period you paid for, then moves to Free.
  • Refunds: fees are non-refundable except where these terms or the law say otherwise, or where we agree in writing.
  • Partner and deal-site purchases: if you bought Devora through a partner or deal site, such as AppSumo, the plan, limits and refund terms of that offer apply to your workspace instead of our regular plans and limits.
  • Recording hour packs: a pack is a one-time purchase for workspaces on a paid plan, including partner and deal-site plans. Its hours are used after your monthly hours and expire 12 months after purchase.
  • Price changes: we will give you at least 30 days' notice before a price increase applies to your subscription.

Usage limits

Each plan has limits, including staff seats, monthly recording hours, and history and retention periods. A session that starts with recording time left is recorded to its end. Plans bought through a partner or deal site, such as AppSumo, have their own limits, shown in that offer; those apply instead of the limits on our pricing page. When monthly hours run out, you get an extra 10% (at least 1 hour). Recordings made in that extra time are saved but locked until unlocked with pack hours or an upgrade. After that, new sessions are not recorded until hours reset. We never charge for extra usage automatically. We may also apply reasonable technical limits to protect the service and your own backend, such as rate limits and timeouts.

Your data and privacy

You keep all rights in the data your organization and your application send to Devora ("your data"). You give us permission to host, process and transmit your data only as needed to provide, secure and support Devora and to comply with the law.

We keep your data for the retention periods your workspace's plan and settings allow, then delete it. From the dashboard, admins can export or erase the records held about a specific end user, and can erase the whole workspace. Exports contain metadata, not recording replays. Our Privacy Policy describes our data practices, service providers and international transfers.

Ownership and feedback

We and our licensors own Devora, including the hosted service, dashboard, documentation and brand. These terms do not give you any rights in them beyond the right to use the service while these terms apply. If you send us feedback or suggestions, we may use them without any obligation to you.

Confidentiality

Each of us will keep the other's non-public information confidential, use it only for this agreement, and protect it with at least reasonable care. This does not cover information that is public through no fault of the receiver, was already known to it, is independently developed, or must be disclosed by law, in which case the receiver will give notice where it lawfully can.

Suspension and termination

  • You can stop using Devora and delete your workspace at any time.
  • We may suspend access immediately if your use breaches these terms, puts the service or others at risk, or is required by law. Where reasonable, we will tell you first and give you a chance to fix the problem.
  • We may end these terms if you materially breach them and do not fix the breach within 14 days of notice, or with 30 days' notice for any reason. If we end them without cause, we will refund any prepaid fees for the unused period.
  • When these terms end, your access stops. Your data is deleted under your retention settings and our erasure process, so export anything you need first. Sections that by their nature should survive, such as payment obligations, confidentiality, liability and indemnity, will survive.

Availability and disclaimers

We work to keep Devora available and secure, but we do not offer a service level agreement or uptime guarantee unless we have signed one with you. Planned maintenance and outages can happen.

Except as expressly stated in these terms, Devora is provided "as is" and "as available". To the extent the law allows, we disclaim all implied warranties, including merchantability, fitness for a particular purpose and non-infringement. Devora supports your compliance work but is not legal advice, and using it does not by itself make you compliant with any law or standard. We do not currently hold a SOC 2 certification.

Limitation of liability

To the extent the law allows, neither of us is liable for indirect or consequential loss, or for loss of profits, revenue, goodwill or data, arising from these terms or the service.

To the extent the law allows, each party's total liability arising from these terms or the service in any 12-month period is limited to the fees you paid us in the 12 months before the claim arose, or US$100 if you used only the Free plan.

Nothing in these terms limits liability for death or personal injury caused by negligence, for fraud, for your payment obligations, for your indemnity obligations, or for anything else that cannot be limited by law.

Indemnity

You will defend and indemnify us against third-party claims, and the resulting losses and reasonable costs, that arise from your use of Devora in breach of these terms or the law. That includes accessing or recording your customers' accounts without a lawful basis or required notice. We will tell you promptly about any such claim and let you control its defense, and you will not settle it in a way that imposes obligations on us without our consent.

General terms

  • Changes to these terms: we may update these terms. We will give account holders at least 30 days' notice of material changes by email or in the dashboard. If you keep using Devora after the change takes effect, you accept it. If you do not agree, you can cancel before then.
  • Governing law: these terms are governed by the law of England and Wales, and the courts of England and Wales have exclusive jurisdiction, unless mandatory law where you are based says otherwise.
  • Assignment: neither party may transfer these terms without the other's consent, except to a successor in a merger, acquisition or sale of substantially all of its relevant business.
  • Events beyond control: neither party is responsible for delays caused by events beyond its reasonable control, except for payment obligations.
  • Notices: we send notices to the account owner's email address. Send notices to us at help@devora.sh.
  • Entire agreement: these terms, our Privacy Policy and any order or agreement you sign with us are the entire agreement on this subject. If any part is unenforceable, the rest still applies. Not enforcing a right is not a waiver of it. No third party has rights under these terms.

Contact

Devora Labs Ltd, Suite RA01, 195-197 Wood Street, London, E17 3NU, United Kingdom. Email help@devora.sh.