Terms and Conditions

Last updated October 19, 2026

These terms set out the agreement between ManyRows Pty Ltd, Australia (‘ManyRows’, ‘we’, ‘us’), and the person or organisation using our hosted services (‘you’). They explain what we each agree to do, how subscriptions work, and how your content is handled. Contact [email protected] with questions.

1. Who these terms apply to

You agree to these terms when you create an account, accept them in the application, or place an order that incorporates them. They cover the ManyRows application, its APIs and related hosted features, and any other service expressly supplied under these terms (the ‘Services’).

If you act for an organisation, you must have authority to accept these terms for it, and ‘you’ means that organisation. An authorised user also needs to follow the account, security and acceptable-use rules. Simply viewing our public website does not create a paid subscription.

Your selected plan and any agreed order form describe the service you purchase. A separately signed agreement prevails over these terms to the extent of a conflict. The customer data processing agreement in section 26 governs personal data we process on your behalf. Our Privacy Policy explains our handling of account and service administration data; it does not make all processing dependent on consent. Marketing descriptions and future plans do not add commitments unless included in your agreement.

2. The ManyRows service

ManyRows helps teams manage product information, lifecycle workflows and sales-channel content. Depending on your plan, this can include configurable record types and relationships, bills of materials, changes and revisions, quality and approval records, files, images, publishing, exports and integrations.

You choose your data model, configure your workflows and review the resulting information. Check calculations, imported data, agent actions and published outputs against your source material before relying on them for manufacturing, safety, regulatory, commercial or other consequential decisions. A recorded workflow approval or evidence package does not itself establish regulatory certification or approval by an external authority.

We do not promise that the Services meet a particular industry certification or regulated use unless we expressly agree that in writing. Tell us about special regulatory or security requirements before using the Services for that purpose. This does not limit the commitments or mandatory rights in section 18.

3. Accounts and eligibility

You must be at least 18 and legally able to enter this agreement. Provide accurate registration and billing details, keep them current, and use accounts you are authorised to control.

Protect passwords, passkeys, recovery codes and other credentials. Use available additional authentication protections where appropriate. Do not share a personal sign-in account. Tell us promptly if you suspect unauthorised access, and cooperate with reasonable steps to secure the account.

You are responsible for use you authorise and for taking reasonable care of your credentials. This does not make you responsible for a security failure caused by us or override responsibility determined by applicable law.

4. Workspaces and authorised users

Your organisation’s authorised owners and administrators manage workspace membership, roles, connected tools and billing. Invite only people entitled to access the relevant content, assign suitable permissions and remove access when it is no longer needed.

Users should understand that authorised administrators can manage their workspace access and content under the organisation’s policies. Leaving a workspace does not automatically delete its business records or cancel its subscription. Transfer ownership where needed before removing the sole owner.

We may ask for reasonable evidence of authority before transferring control or acting on a disputed instruction. We do not decide an organisation’s internal ownership disputes, and will protect the affected data while those instructions are clarified.

5. Your content and ownership

‘Customer Content’ means the records, models, files, images, comments, history and other information you or your authorised users put into the Services, together with your customer-specific outputs. You and your licensors retain your rights in it. Uploading content gives us no ownership of it.

You give us the limited permission needed to host, copy, transmit, display, back up and otherwise process Customer Content to provide the Services, carry out your documented instructions, give requested support and meet applicable law. That permission remains subject to confidentiality, privacy, retention and the processing agreement below.

You must have the rights and lawful authority to supply and share Customer Content, including personal information about other people. We do not sell Customer Content or use it to train machine-learning models. We do not use it for unrelated advertising.

6. Our software and intellectual property

We and our licensors retain the rights in the Services, software, documentation, branding and general product functionality. Those rights do not extend to ownership of your Customer Content.

While your account or workspace is entitled to access, we grant you and your authorised users a non-exclusive right to use the Services for your lawful business activities, including supported collaboration and sharing, within your plan and these terms. You may export and use your own content. You may not copy or resell our software or branding without permission, except where applicable law or a separate licence allows it. Open-source and other separately licensed components remain subject to their own licences.

7. Plans, limits and trials

Your plan determines included capabilities and limits such as users, projects, records, storage, API requests and credentials. The pricing page and purchase flow show the applicable offer. Archived or trashed records and retained files can continue to count towards limits until eligible data is permanently purged.

A standard new workspace starts with a 7-day trial without a payment card. Trial capabilities and limits can differ from paid plans. Without an active subscription or another agreed entitlement, workspace access ends when the trial expires. A card-free trial does not automatically become a paid subscription.

We may enforce plan limits and reasonable measures to protect service stability. Where you need more capacity, you can upgrade or contact us. We will not charge for an additional purchase without the relevant authorisation.

8. Prices and payment

The price, currency, billing period and applicable taxes shown at checkout or in your agreed order govern your purchase. Public plans are currently advertised in US dollars (USD). Your bank may apply its own conversion or transaction fees.

Card payments and the billing portal are provided through Stripe. Full card details are entered with Stripe and are not stored by ManyRows. Keep billing contact and payment details up to date. You authorise charges for the subscription and changes you approve.

If a payment fails, we will notify you and give a reasonable opportunity to resolve it before suspending access, unless immediate action is required by law or to address fraud or a security risk. Contact us promptly about a billing error; raising a genuine dispute does not remove any statutory right.

9. Renewal, cancellation and refunds

Paid subscriptions renew for the billing period selected at purchase until cancelled. You can manage cancellation through workspace billing and the linked billing portal, or contact support if you cannot access those controls. Unless your order says otherwise, cancellation takes effect at the end of the current paid period and you retain access until then.

Removing an app from your device, leaving a workspace, stopping use, or making a privacy request does not by itself cancel a subscription. Check that cancellation has been confirmed before the next renewal. Account, workspace and privacy deletion are handled separately under section 13.

For an ordinary change-of-mind cancellation, we do not provide a pro-rata refund of an already started paid period. This does not affect refunds or other remedies required by law, expressly promised in your agreement, or provided under sections 16, 17, 22 or 26.

We give advance notice of a price increase with reasonable time to cancel before it applies. Unless you agree otherwise, an increase starts at a future renewal and does not change a period already paid for. Plan changes and any immediate charges are shown in the relevant purchase or billing flow.

10. APIs, integrations and AI agents

The Services can be accessed through supported APIs, API keys and the hosted Model Context Protocol (MCP) server. Access is limited by the credential’s scope, project or workspace permissions, plan and workflow rules. Request budgets may be shared across keys in the same workspace.

Treat keys, grants and integration credentials as secrets. Use only the permissions needed, monitor authorised use, and rotate or revoke access when appropriate. Do not place secrets in public repositories or client code exposed to others.

Connecting an external tool or AI agent is optional. You authorise the access and actions within the permissions you grant. That provider may receive your data and apply its own terms and privacy practices. Review important changes and outputs; the connection does not override human approvals or other enforced workflow rules. We remain responsible for our own service and security obligations.

We aim to give reasonable notice of materially incompatible API changes, except where urgent security, legal or reliability needs require faster action. We will explain the change and available migration steps.

11. Sharing, publishing and external recipients

Shared links, supplier responses, publications, channel exports and downloaded bundles can disclose content beyond your workspace. Check recipients, permissions and content before using these features, including whether files contain personal information, confidential material or third-party rights.

Revoking a link or integration can prevent future access through it, but cannot recall copies already downloaded, published or transferred to another system. You are responsible for your authorised disclosures and recipient instructions. We assist with applicable rights and deletion obligations for processing within our control under section 26.

Third-party services operate under their own agreements. We do not control changes or outages in a service you connect, but remain responsible for the parts of the integration we provide and for our own subprocessors.

12. Acceptable use

Use the Services lawfully and respect other people’s rights. You must not:

• access accounts, projects or data without authority, impersonate someone, or bypass permissions, plan limits or security controls;
• send spam, phishing messages or fraudulent communications, including through invitations, shared links or connected tools;
• upload malicious code, disrupt the service, or impose abusive traffic that threatens availability for others;
• store or distribute unlawful content, or infringe privacy, confidentiality or intellectual property rights;
• extract another customer’s content or our protected materials without permission; or
• use the Services in breach of applicable sanctions, export controls or other laws.

This does not prevent legitimate export of your own data or security activity expressly authorised by us or protected by law. Report a suspected vulnerability to support and avoid accessing or exposing other people’s data.

Report suspected abuse to [email protected]. We assess reports and may restrict or suspend access under section 17, with notice and an opportunity to resolve the issue where lawful and safe.

13. Export, retention and deletion

You can export portable project bundles containing model definitions, supported records and structures. Asset files, approval history and dedicated workflow evidence require separate downloads or exports. Save the material you need before access ends. Ask support for help with a required return or disclosure outside available exports.

The standard hosted lifecycle is:

• Deleted records: eligible trash is scheduled for purge after 30 days. Active references or retained revisions can prevent purge until dependencies are resolved.
• A workspace that never subscribes: deletion is scheduled 7 days after its 7-day trial ends, with a warning before deletion.
• A previously subscribed workspace: deletion is normally scheduled 30 days after the paid period ends, subject to current entitlement and subscription checks.
• Backups and external copies: backups remain protected and beyond ordinary use until scheduled expiry. Erasures, restrictions and revocations are reapplied before restored data returns to service. Files, versions, caches and processor copies require their own cleanup.

Purged content cannot be recovered through the application. Cancelling a subscription does not immediately erase an account or every copy of its data. We retain billing, security and limited accountability records only for the applicable lawful purpose and period described in our Privacy Policy.

For account data and rights requests, use Profile → Privacy or email support, including if you cannot sign in. Downloads state their coverage; workspace content, files and histories can need reviewed handling. A shared sign-in identity may remain where another application still requires it. Applicable privacy rights and controller instructions under section 26 take precedence over a default lifecycle where required.

14. Privacy and cookies

Our Privacy Policy describes what personal information we process, the purposes and lawful bases, recipients and transfers, retention, and how to exercise rights or complain. We act as controller for service administration and as processor for personal data in Customer Content, as explained in section 26.

We use authentication and security cookies and browser storage for service features and preferences. The website’s language cookie remembers a choice you make. Optional Google Analytics tracking is disabled. See the cookie information for purposes and durations. Accepting these terms does not give consent to optional tracking or waive privacy rights.

15. Confidentiality and security

Each party will protect the other’s confidential information with reasonable care, use it only to perform this agreement or exercise its rights, and disclose it only to people and providers who need it and are subject to appropriate confidentiality duties. Customer Content is your confidential information unless you make it public.

These duties do not cover information lawfully known without restriction, independently developed, received lawfully from another source, or public without a breach. A legally required disclosure is limited to what is required, with advance notice where permitted. Confidentiality continues while the information remains confidential.

We maintain technical and organisational security measures appropriate to the risks. You maintain appropriate access controls for your users and connected tools. Report incidents promptly; the processing agreement governs our breach notifications for covered customer data. No system can guarantee absolute security, but that does not reduce either party’s agreed or legal duties.

16. Availability, support and service changes

We use reasonable care to operate and maintain the Services. Support is available through our contact page and support email. A response-time or uptime guarantee applies only where expressly agreed in your plan or a separate service agreement.

Maintenance, faults and dependencies can cause interruptions. We aim to minimise disruption and give notice of planned work that materially affects use. We may update features for security, reliability and product development.

If we discontinue a paid service or materially reduce a paid capability during your current term, we give reasonable advance notice where practicable and offer a suitable alternative. If the change materially disadvantages you and no reasonable alternative resolves it, you may end the affected service and receive a refund of prepaid unused fees for the remainder. Urgent protective changes may take effect sooner. Mandatory remedies remain available.

17. Suspension and termination

We may restrict or suspend access where reasonably necessary to address a material breach, overdue payment after notice, a credible security threat, unlawful use or a legal requirement. We limit the scope and duration to what is reasonably needed, explain the reason where lawful, and give an opportunity to resolve the issue unless immediate action is necessary. We restore access when the grounds are resolved.

Either party may end the affected agreement for a material breach that is not remedied within a reasonable period after written notice, or immediately where the breach cannot be remedied or the law requires it. You may also cancel under section 9. If you terminate for our unremedied material breach, we refund prepaid unused fees for the affected service.

On termination, access ends as applicable and section 13 and the processing agreement govern return, retention and deletion. Where lawful and safe, we provide a reasonable opportunity to retrieve your content. Amounts properly due remain payable, and provisions intended to continue, including confidentiality and data processing while data remains held, survive termination.

18. Service commitments and consumer rights

We will provide the Services with reasonable care and skill and substantially in accordance with the agreed description. We do not promise error-free or uninterrupted operation, or that your configuration and content will produce a particular business or engineering outcome. These qualifications do not excuse a failure to meet an express commitment or a mandatory legal guarantee.

Nothing in these terms excludes, restricts or modifies a consumer guarantee, privacy right, remedy or other protection that cannot lawfully be excluded. This includes applicable rights under the Australian Consumer Law and mandatory law in your jurisdiction. Where those rights apply, they prevail over inconsistent terms, including cancellation, refund, liability and dispute provisions.

Any limitation of a remedy for a failure to meet a consumer guarantee applies only where the law permits it and only to the extent that the limitation is fair and reasonable. Contact support about a service problem; you do not lose statutory remedies by using our support process.

19. Liability

Subject to section 18 and the exceptions below, each party’s total aggregate liability arising from this agreement is limited to the greater of the fees paid or payable for the affected Services in the 12 months before the event giving rise to the claim and AUD 100.

To the extent permitted by law, neither party is liable for indirect or consequential loss that was not reasonably foreseeable when this agreement was made. Describing a loss as lost revenue, profit or data does not by itself exclude liability where it is a direct, reasonably foreseeable loss.

The limits and exclusions do not apply to fraud, wilful misconduct, liability that cannot lawfully be limited, or rights of individuals or authorities under applicable data protection law. They do not reduce subscription fees properly due or override mandatory transfer clauses. Each party’s responsibility is reduced to the extent that the other party caused or contributed to the loss.

Keep suitable exports and business continuity arrangements for your needs. Our recovery backups support service operation and are not a substitute for your own records; this does not remove our responsibility for agreed backup, recovery and data protection duties.

20. Third-party claims

Tell the other party promptly if a third-party claim concerns its content, software or conduct under this agreement. Each party is responsible under the applicable law and these terms for loss caused by its own breach or wrongdoing, taking account of the other party’s contribution and section 19.

We will cooperate reasonably on a response and the steps needed to prevent further harm. Neither party may admit liability or agree to a settlement on the other’s behalf without its consent. You are not required to cover a claim to the extent it results from our breach, negligence or unauthorised use of your content.

21. Feedback and preview features

If you choose to give us product suggestions, we may use them to improve the Services without payment or an obligation to implement them. That permission does not transfer ownership of Customer Content or permit disclosure of your confidential information.

We identify any evaluation, beta or preview feature as such. Its scope and availability may change, and it should be assessed before important production use. Any special evaluation conditions must be made available when you choose the feature; they do not remove mandatory rights or data protection obligations.

22. Changes to these terms

We may update these terms to reflect changes to the Services, law or reasonable operational needs. We publish the revised version and date. For a material change affecting an existing customer, we give reasonable advance notice by email or in the application and state when it takes effect. Necessary legal or urgent security changes may take effect sooner, with notice as soon as reasonably practicable.

If a change materially disadvantages you and you do not accept it, you may contact us to end the affected service before it takes effect and receive a refund of prepaid unused fees for the remainder. Changes do not retrospectively alter accrued rights or charges for a period already paid for. A change to processing or optional tracking is subject to the separate requirements in the processing agreement and applicable law.

23. Notices and communications

We send account, billing, security and contractual notices to the relevant registered contact or through the application as appropriate. Keep those details current. For formal notices to us, email [email protected] with enough detail to identify the account and issue.

Electronic notices and acceptances may be used where law permits. Service notices are separate from optional marketing, which follows its own applicable consent and opt-out rules. We do not treat silence or continued browsing as consent to unrelated processing.

24. Governing law and disputes

The agreement is governed by the laws of Victoria, Australia, and the Commonwealth of Australia. The courts of Victoria have non-exclusive jurisdiction. This does not remove a mandatory right to use another court, complain to a regulator, or rely on protections in your own jurisdiction.

If a dispute arises, either party may contact the other to try to resolve it informally. We aim to work towards a resolution within 30 days. This process does not prevent urgent action, statutory complaints or proceedings needed to preserve a right or limitation period, and does not require binding arbitration.

25. General terms and contact

These terms and the applicable agreed order or signed agreement form the agreement for the Services. An unrelated policy added to the website does not automatically change your contract. If a provision cannot lawfully operate, it is severed only to the extent necessary and the rest continues where possible. A failure to enforce a right is not a waiver.

Neither party may transfer this agreement without the other’s consent, which must not be unreasonably withheld, except as part of a genuine merger, reorganisation or sale of the relevant business where the successor assumes the obligations and the transfer does not materially reduce the other party’s rights. We will notify you of a transfer affecting your service or personal data where required.

A party is excused from a delay caused by circumstances beyond its reasonable control only to the extent it could not reasonably prevent or mitigate the delay. It must notify the other party and take reasonable steps to resume performance. This does not remove applicable refund rights, confidentiality, security or data protection duties.

For questions, complaints, billing help or privacy requests, contact ManyRows Pty Ltd, Australia, at [email protected] or through our contact page.

26. Customer data processing terms

This agreement is also available on our Data Processing Agreement page.

These terms form the data processing agreement between the customer identified in the service account or applicable order (‘Customer’) and ManyRows Pty Ltd (‘ManyRows’). They apply to personal data in Customer Content processed on Customer’s behalf under our Terms and Conditions. Customer is the controller, or an authorised processor acting for a controller; ManyRows is the processor or subprocessor respectively. A separately executed data processing agreement prevails where it conflicts with these processing terms. These processing terms prevail over the other service terms on the processing they cover.

26.1. Scope and duration

The subject matter is delivery of the hosted product data service. Processing includes collecting, organising, storing, retrieving, calculating, displaying, transmitting, backing up, correcting, restricting and deleting data to provide the features and support Customer instructs us to deliver. Processing lasts for the service relationship and the applicable return/deletion period below.

The people concerned may include Customer’s staff, contractors, collaborators, customers, suppliers and other people described in its records. Data types may include names, contact details, identifiers, assignments, comments, record and attachment contents, and authorship and change history. Customer chooses the content and purposes, must have authority and a lawful basis for its instructions, and must provide required notices. Before submitting special-category, criminal-offence or other specially regulated data, Customer must agree with us on its suitability and any additional safeguards.

26.2. Documented instructions

We process covered data only on Customer’s documented instructions, including for international transfers. Instructions consist of these terms, the applicable order, Customer’s authorised configuration and use of service features, and further written instructions accepted through support. We do not use this data for advertising, sale or model training. We promptly inform Customer if we consider an instruction to infringe applicable data protection law and suspend the affected instruction while it is resolved. Where Union or Member State law, or applicable UK law for UK processing, requires processing outside the instructions, we inform Customer of that requirement before processing unless that law prohibits notice.

26.3. Confidentiality and security

We ensure that people authorised to process covered data are bound to confidentiality, receive appropriate training and have access limited to their duties. We implement and maintain technical and organisational measures appropriate to the risks under Article 32, including access controls and tenant isolation, encryption in transit, protection of credentials and stored data, logging and incident handling, vulnerability management, backup and recovery procedures, and regular assessment of those measures. We do not materially reduce the overall protection during the service relationship.

26.4. Subprocessors

Customer gives general written authorisation to use the hosting, storage and transactional delivery providers identified in section 5 of the Privacy Policy for the covered processing. Payment providers acting independently and customer-selected recipients are distinguished there. We provide the actual subprocessor identities, functions and processing locations on request and keep that information current.

We notify Customer’s registered administrative contact at least 30 days before adding or replacing a subprocessor for covered data, giving an opportunity to object on reasonable data protection grounds. We work to resolve a timely objection; if we cannot, Customer may terminate the affected service before the change and receive a refund of prepaid unused fees for that affected service. We impose equivalent applicable data protection obligations on each subprocessor by written contract and remain responsible to Customer for its performance.

26.5. Assistance and requests

Taking account of the nature of processing and available information, we assist Customer through appropriate technical and organisational measures with individual rights requests and its obligations under Articles 32–36, including security, breach notifications, impact assessments and prior regulatory consultation. We promptly forward requests concerning covered data to Customer and act on its instructions unless applicable law requires otherwise. Customer’s authorised contact can request assistance at [email protected]. Automatic exports supplement the reviewed response and do not define its legal scope.

26.6. Personal data breaches

We notify Customer without undue delay after becoming aware of a personal data breach affecting covered data. We provide the nature of the breach, affected categories and approximate numbers where known, a contact point, likely consequences, and containment or mitigation measures. We supply further information in phases when necessary, cooperate with Customer’s assessment and response, and document the incident and corrective actions.

26.7. Return and deletion

At the end of processing, at Customer’s choice we return or delete covered personal data and delete existing copies unless Union or Member State law, or applicable UK law for UK processing, requires storage. Customer may use available exports and request assistance for data or evidence outside those exports. The standard lifecycle in section 13 of the Terms and Conditions applies unless a valid instruction or applicable agreement requires different handling. Any required retention is limited to its lawful purpose and protected from unrelated use.

Backup data awaiting scheduled expiry is isolated from ordinary use and remains protected by these terms. We reapply erasures, restrictions and revocations before restored data returns to service. On request we confirm completion, applicable backup expiry and any lawfully retained categories. Revoking credentials alone is not fulfilment of a deletion instruction.

26.8. Information and audits

We make available information needed to demonstrate compliance with these processing obligations and allow and contribute to audits and inspections by Customer or an auditor it appoints. We coordinate scope, confidentiality and reasonable scheduling to protect other customers and service security. Those arrangements do not prevent a necessary audit, restrict a regulator’s powers or delay an urgent response to a suspected breach.

26.9. International transfers and mandatory rights

Restricted international transfers require an applicable adequacy decision or valid transfer safeguards, with assessments and supplementary measures where necessary. We cooperate in executing the appropriate European Commission Standard Contractual Clauses and UK transfer instrument where required; these processing terms do not themselves replace or execute those instruments. Details and copies of applicable safeguards can be requested through our privacy contact, with confidential information protected.

Nothing in these terms limits rights or remedies of individuals or supervisory authorities under applicable data protection law, or overrides mandatory transfer clauses. These processing obligations continue while we or our subprocessors retain covered data.