Advisor and Firm Subscribers
Version: 2.0
These Terms and Conditions (Terms) govern your access to and use of the VibeCFO Platform. The VibeCFO Platform, including the EVA AI service, its associated websites, domains, subdomains, mobile applications and software-as-a-service offerings (together, the Platform), is owned and operated by One Place Business Platform Pty Ltd (ACN 612 278 180) trading as VibeCFO Business Platform (VibeCFO, we, us, our).
By signing up for, accessing or using the Platform, you (the Customer, you, your) agree to be bound by these Terms. If you do not agree, you must not access or use the Platform.
These Terms incorporate by reference our Privacy Policy, our End User Licence Agreement (which governs the access rights of your end users and client invitees), and where executed by the parties, our Data Processing Addendum.
In these Terms:
VibeCFO grants you a non-exclusive, non-transferable, revocable licence to access and use the Platform for the conduct of your business, subject to these Terms and payment of applicable fees.
The features and Users available to you are determined by the subscription plan you select. You must not exceed the limits of your plan or seek to circumvent them.
You must not, and must ensure your Users do not: (a) alter or attempt to alter the source code or object code of the Platform; (b) reverse engineer, decompile or disassemble the Platform except to the extent permitted by law; (c) use the Platform to develop a competing product; (d) resell, sublicense or otherwise commercially exploit the Platform other than as expressly permitted; or (e) use the Platform for any unlawful purpose.
You are responsible for: (a) all activity that occurs under your account and the accounts of your Users; (b) maintaining the confidentiality of credentials and access tokens; (c) the authority of any person to whom you grant access; and (d) ensuring your Users comply with these Terms and the End User Licence Agreement.
Access to the Platform includes access to EVA, our AI service. EVA's primary function is text-to-SQL: translating natural-language questions into SQL queries against your Platform database. EVA does not generate financial numbers; the numbers it returns come from your database.
VibeCFO uses frontier large language models from Anthropic and OpenAI to power EVA, hosted on AWS infrastructure. These providers do not train their models on your Customer Data. Under our Xero partnership obligations, we are contractually prohibited from using Customer Data sourced from Xero to train AI models.
On the user profile page, individual Users may opt in or out of having the phrasing of their EVA questions used to improve EVA's natural-language understanding. This setting covers question phrasing only -- never financial data, numerical results, Personal Information or Client information.
EVA is provided as an analytical and decision-support tool. EVA's output is not financial advice, taxation advice, audit assurance, or a substitute for the professional judgement of a qualified accountant, advisor or other professional. You are responsible for reviewing EVA's output before relying on it.
The terms applicable to AI-generated content are set out in the EVA Disclaimer, User Agreement and Content Generation Terms, which form part of these Terms.
The Platform integrates with Third-Party Connectors at your direction. Your agreement with any Third-Party Connector is solely between you and that connector. To the extent of any inconsistency between a Third-Party Connector's terms and these Terms with respect to VibeCFO's rights or obligations, these Terms prevail.
You are responsible for: (a) holding the necessary authority to connect a Third-Party Connector and to import the Customer Data; (b) any content you create, transmit, display or analyse that is based on Third-Party Data; and (c) complying with the terms of each Third-Party Connector.
VibeCFO engages Third-Party Suppliers (including AWS, Anthropic and OpenAI) to operate the Platform. A current list of material subprocessors is published at vibecfo.ai/subprocessors. We will provide reasonable advance notice of material changes to our subprocessor list.
Fees are set out in the pricing schedule applicable to your subscription. Unless otherwise agreed in writing, fees are billed monthly in advance and payable by the due date specified on the invoice.
If any fee is unpaid more than 14 days after its due date, we may suspend access to the Platform, in whole or in part, after providing written notice. Suspension does not relieve you of the obligation to pay outstanding fees.
We may vary fees on no less than 30 days' written notice. If you do not agree to a fee variation, you may terminate your subscription before the new fees take effect.
All fees are exclusive of GST and other applicable taxes unless stated otherwise.
VibeCFO will use commercially reasonable efforts to make the Platform available with a target uptime of 99.5% per calendar month, measured at the application layer and excluding Excluded Downtime (defined below).
“Excluded Downtime” means downtime caused by: (a) scheduled maintenance notified at least 24 hours in advance; (b) emergency maintenance reasonably necessary to address a security or stability risk; (c) failures of a Third-Party Connector or Third-Party Supplier outside our reasonable control; (d) force majeure events; or (e) acts or omissions of the Customer, its Users, or its end users.
Service-level targets are operational commitments. Service credits, if any, are as set out in your subscription order or in the Data Processing Addendum (where executed).
VibeCFO implements and maintains technical and organisational security measures appropriate to the risk of processing Customer Data, including:
VibeCFO is working towards ISO 27001 certification with a target date of December 2026. Current security practices and progress are published at vibecfo.ai/security.
Detailed security commitments, including audit log retention, backup objectives and breach notification, are set out in clauses 8 to 10 below and, where executed, in the Data Processing Addendum.
Customer Data is hosted on AWS Aurora Serverless v2 with continuous point-in-time backup retained for a rolling 35-day period.
Backups are encrypted at rest (AES-256) and stored in the same AWS region as the primary database, with cross-availability-zone redundancy.
Our target Recovery Point Objective (RPO) is 5 minutes and our target Recovery Time Objective (RTO) is 4 hours for a full database restore scenario. RPO and RTO are targets, not guarantees.
You are responsible for maintaining your own backups of any Customer Data you wish to retain independently of the Platform.
VibeCFO maintains two layers of logging:
On request, we will provide an export of audit log activity relating to your account before the effective date of termination.
On termination, audit logs relating to Customer Data are deleted in line with our data deletion practices set out in clause 13, except where retention is required by law.
VibeCFO maintains an incident response process covering detection, triage, containment, eradication, recovery and post-incident review.
If we become aware of a confirmed security incident that has resulted in unauthorised access to, disclosure of, or loss of your Customer Data, we will notify your nominated security contact without undue delay and in any event within 72 hours of confirmation of the incident.
Initial notification will include the information reasonably available at the time, including: (a) the nature of the incident; (b) the categories of data affected, to the extent known; (c) likely consequences; and (d) the measures taken or proposed to address the incident. Further information will be provided as it becomes available.
Where the incident constitutes an eligible data breach under the Privacy Act 1988 (Cth), we will cooperate with you and where applicable with the Office of the Australian Information Commissioner. Each party retains its own statutory notification obligations.
Notifications do not constitute an admission of fault or liability.
As between the parties, you own all Customer Data. You grant VibeCFO a non-exclusive, royalty-free, worldwide licence to host, copy, process, transmit and display Customer Data solely as necessary to provide and improve the Platform and to comply with these Terms.
VibeCFO may use de-identified and aggregated data derived from Customer Data for the purposes of operating, securing, benchmarking, improving and analysing the Platform, provided that such data does not identify you, any User, any Client or any individual.
VibeCFO does not sell Customer Data and does not use Customer Data to train third-party AI models.
Each party will keep confidential, and not disclose to any third party other than as permitted by these Terms, the Confidential Information of the other party. “Confidential Information” means information disclosed by one party to the other that is identified as confidential or that a reasonable person would understand to be confidential, including Customer Data.
The obligations of confidentiality do not apply to information that: (a) is or becomes publicly available other than by breach of these Terms; (b) was rightfully in the receiving party's possession without obligation of confidentiality prior to disclosure; (c) is independently developed without reference to the disclosing party's Confidential Information; or (d) is required to be disclosed by law, court order or regulatory authority.
These Terms continue while you have an active subscription to the Platform.
Either party may terminate the subscription: (a) at the end of the then-current billing period, by giving notice in accordance with the subscription plan; or (b) immediately, by written notice, if the other party commits a material breach that is not cured within 30 days of written notice.
VibeCFO may suspend or terminate access immediately if: (a) fees remain unpaid for more than 30 days; (b) we reasonably believe your use of the Platform presents a security risk; (c) you become insolvent or the subject of insolvency proceedings; or (d) we are required to do so by law.
On termination: (a) your right to access the Platform ends; (b) you may request an export of your Customer Data within 30 days of termination; and (c) after that 30-day period, we will delete your Customer Data from production systems within 90 days and from backups in line with backup retention cycles. Audit logs are deleted on the same timeline, except where retention is required by law.
VibeCFO will provide written confirmation of deletion on request.
Clauses that by their nature should survive termination (including 11, 12, 14, 15, 16 and 17) survive termination.
Except as expressly set out in these Terms and to the extent permitted by law, the Platform is provided on an “as is” and “as available” basis, and VibeCFO makes no warranties, express or implied, including warranties of merchantability, fitness for a particular purpose, or non-infringement.
VibeCFO does not warrant that the Platform will be uninterrupted, error-free or free from inaccuracies arising from Third-Party Connector data, and the operational availability target in clause 6 is the sole commitment regarding uptime.
EVA output is generated by AI and may contain errors. You must review EVA output before relying on it for material decisions.
Nothing in these Terms excludes, restricts or modifies any right or remedy that cannot be excluded, restricted or modified by law, including consumer guarantees under the Australian Consumer Law.
To the maximum extent permitted by law, neither party is liable to the other for any indirect, incidental, special or consequential loss, loss of profits, loss of revenue, loss of goodwill, loss of business opportunity, or loss or corruption of data (other than Customer Data which is the subject of a security incident), arising out of or in connection with these Terms, whether in contract, tort, statute or otherwise.
To the maximum extent permitted by law, VibeCFO's total aggregate liability arising out of or in connection with these Terms (whether in contract, tort, statute or otherwise) is limited to the fees paid by you to VibeCFO in the 12 months preceding the event giving rise to the liability.
Where liability for breach of an implied term cannot be excluded but may be limited, our liability is limited, at our option, to: (a) the supply of the Platform again; or (b) the payment of the cost of having the Platform supplied again.
VibeCFO may amend these Terms from time to time. We will notify you of material changes by email to your nominated billing contact and by an in-platform notification, with at least 30 days' notice before the changes take effect.
If you do not agree to a material change, you may terminate your subscription before the changes take effect, in which case you will receive a pro-rata refund of any pre-paid fees relating to the period after termination.
Continued use of the Platform after the effective date of a notified change constitutes acceptance of the amended Terms. We will not require re-signature or re-acceptance for variations notified in accordance with this clause.
Minor, non-material changes (including changes to correct typographical errors, reflect legal or regulatory requirements, or reflect operational changes that do not adversely affect your rights) may be made without notice.
One Place Business Platform Pty Ltd (ACN 612 278 180)
Trading as VibeCFO Business Platform
PO Box 6233, Linden Park, South Australia 5065
Email: support@vibecfo.ai
