Terms of Service

1. Acceptance of Terms

By registering an account, logging in, or otherwise accessing Duevora (the "Service"), you agree to comply with and be bound by these Terms of Service ("Terms"). If you are using Duevora on behalf of an agency, business, or client team, you represent that you have the authority to bind that entity to these Terms. If you do not agree to these Terms, you must not use or access the Service.

2. Description of the Service & Operational Scope

Duevora is an operational client deadline and renewal tracking platform designed specifically for freelancers, developers, and boutique agencies. Duevora connects client directories, itemized quotes, project delivery milestones, and recurring renewal tracking into one workspace.

Operational Scope: Duevora is strictly an operational tracking and reminder software. Duevora does not execute automatic renewal transactions with third-party domain registrars, hosting companies, cloud providers, or DNS hosts (e.g., Cloudflare, Namecheap, AWS, Google Domains). You retain total control over your vendor relationships and manual payment executions.

3. Account Security & Cybersecurity Protections

We treat security as a first-class feature and deploy multi-tiered cybersecurity protections:

• Multi-Tenant Data Isolation: Every workspace is strictly partitioned at the database query level by your account identifier. Access to another user’s clients, projects, or financial quotes is strictly prevented.
• Credential & Password Security: Passwords are cryptographic hashes produced using industry-standard hashing algorithms with per-user salt. Plaintext passwords are never logged, stored, or readable by anyone.
• Two-Factor Authentication (2FA): Duevora provides optional TOTP-based two-factor authentication. When enabled, valid TOTP tokens are required at every login session.
• Rate Limiting & Anti-Brute-Force: Authentication endpoints, email reminder triggers, and checkout sessions are aggressively rate-limited to prevent automated credential stuffing and denial-of-service abuse.
• Security Headers & Transport Protection: All communication requires TLS. Responses include strict HSTS, X-Content-Type-Options (nosniff), X-Frame-Options (clickjacking prevention), and tight Referrer-Policy headers.

4. Subscription Plans, Billing & Payment Processing

Duevora offers a 14-day free trial followed by monthly subscription tiers (Solo and Studio), as well as custom add-on capacities upon request.

• Free Trial: New registrations receive a 14-day free trial with standard trial quotas. No payment information is required to start your trial. Trials expire automatically into a read-only state unless upgraded.
• Payment Providers: Paid subscriptions and billing checkouts are processed through authorized, PCI-DSS compliant third-party payment platforms. Duevora does not store or process raw credit card numbers, CVVs, or bank credentials on our servers.
• Custom Add-ons: Users may submit an "Add-on Request" inside the application for capacities exceeding Studio. Invoices are issued separately, and custom limits are verified and activated upon confirmed payment receipt.
• Read-Only Grace Experience: If a subscription expires, your account transitions into read-only mode. Existing client records, renewals, history, and CSV exports remain accessible; adding new records is paused until renewed.

5. Client Portal & Shared Projects

Duevora allows account owners to share project review portals with their clients. When using client project sharing:

• Access tokens are cryptographically generated and time-limited.
• You retain sole authority to pause, resume, or revoke client access at any time.
• Revoking client access immediately releases the shared project slot in your plan quota.

6. Data Ownership & Data Portability

Your Data Belongs to You: You retain complete ownership of all client directory data, renewal schedules, itemized quotes, deliverables, and notes you create within Duevora. We never sell, monetize, or train machine learning models on your client records.

Instant CSV Export: You can export all your client and renewal records to industry-standard CSV format with a single click at any time from your dashboard or settings.

7. Acceptable Use & Prohibited Conduct

You agree not to: (a) attempt to probe, scan, or breach the cybersecurity layers of Duevora; (b) distribute spam, phishing, or malicious invitations via client email features; (c) reverse engineer or decompile the application; (d) use automated bots to access non-public endpoints; or (e) use the service for any unlawful or deceptive purpose.

8. Account Deletion & Data Purging

You may terminate your account at any time directly through the application settings. Upon confirmed deletion, your user profile, client records, renewal schedules, and quotes are permanently purged from active production databases in accordance with our data retention schedule.

9. Contact & Security Notifications

If you have any questions about these Terms, or if you believe you have identified a cybersecurity concern or vulnerability, please contact our team immediately at: