Addressing the Jiraffe in the room

Before you take our time and we take yours, let's be explicitly clear about what superbime IS and IS NOT.

Request superbime demo access

A 15-minute direct walkthrough with our demo engineer. This is a live look at the workspace and architecture to see if it fits your team.

We do not send automated nurture emails, newsletters or other spam post-call. If you like what you see, you get an access key. If not, we part ways.

Your Name: Work Email: Company Name: Company Website: Note to your demo engineer (optional):

Request a Demo

Should we build it?

We will send exactly one automated email if we ever build what you came looking for. As you guessed, we don't do sales nurture, newsletters, or tracking spam. Your email stays private.

What did you need that superbime doesn't do?

Let us know your work email

Ping Me If You Build It Skip & Exit

Frequently Asked Questions

Superbime
Privacy Policy

Effective Date: October 1, 2026

This Enterprise Platform Privacy Policy (hereinafter referred to as this "Privacy Policy") constitutes a formal statement governing the collection, processing, storage, isolation, transmission, and protection of data by Superbime Pvt Ltd and its corporate affiliates (collectively, "Superbime", "we", "us", or "our") in connection with the provision and operation of Superbime’s multi-tenant orchestration system, encompassing real-time messaging, ticketing workflows, organizational analytics, and platform administrative control modules (collectively, the "Services").

This Privacy Policy applies to enterprise organizations and business entities that establish a workspace account with Superbime (hereinafter referred to as the "Customer", "Tenant", or "Employer"), as well as individual personnel, employees, contractors, and agents authorized by the Customer to access or interact with the Services (hereinafter referred to as "Authorized Users").

1. Definition and Scope

For the purposes of this Privacy Policy, "Customer Content" shall mean all electronic data, text, communications, messages, task items, tickets, form submissions, audio-visual files, attachments, system metadata, and operational performance metrics submitted, uploaded, transmitted, or generated within the Services by or on behalf of the Customer or its Authorized Users. "Personal Data" shall have the meaning ascribed to "personal data", "personal information", or "personally identifiable information" under Applicable Data Protection Legislation. "Applicable Data Protection Legislation" refers to all regional and international data protection laws, regulations, and statutory directives applicable to the processing of Personal Data hereunder, including, without limitation, the California Consumer Privacy Act as amended by the California Privacy Rights Act (collectively, "CCPA/CPRA"), the General Data Protection Regulation (EU) 2016/679 ("GDPR"), and the UK General Data Protection Regulation ("UK GDPR").

In determining statutory capacities under Applicable Data Protection Legislation, the Customer and Superbime acknowledge that with respect to all Customer Content processed within the Services, the Customer acts as the Data Controller (or "Business"), retaining sole legal responsibility for establishing the lawful basis for processing and directing the scope of processing operations. Superbime acts strictly as a Data Processor (or "Service Provider") processing Customer Content solely on behalf of, and pursuant to the documented instructions of, the Customer as set forth in the underlying Master Services Agreement and Data Processing Addendum. Superbime acts as a Data Controller solely with respect to minimal administrative contact records, billing data, and infrastructure security logs collected directly from Customer representatives and Authorized Users for the limited purposes of account provisioning, contract administration, identity verification, system security, and billing enforcement.

The scope and extent of individual Personal Data collected and processed across the Services are variable, conditional, and determined primarily by the Customer’s specific workspace configurations, active module toggles, identity provider integrations, administrative security choices, and contractual agreements. Superbime is designed to support a privacy-first operational posture that allows privacy-conscious Customers or smaller organizations to operate with an absolute minimal data footprint. However, depending on the administrative features, security protocols, identity configurations, and functional modules enabled or required by the Customer, Superbime may collect and process up to the following categories of individual Personal Data across the platform.

In connection with account administration and identity management, depending on whether the Customer deploys Single Sign-On (SSO) or local authentication, Superbime may process individual identifying details, including the Authorized User’s full legal name, professional work email address, corporate telephone number, job title, organizational department, display name, profile avatar image, Single Sign-On identity provider tokens, Security Assertion Markup Language (SAML) claims, encrypted password hashes for non-SSO accounts, Role-Based Access Control (RBAC) permission maps, and signed JSON Web Token (JWT) session claims. For billing and corporate administration, Superbime processes designated billing representative names, corporate billing email addresses, physical office addresses, tax identification numbers, payment card metadata, transaction histories, and enterprise subscription tier configurations.

In connection with system access, network security, and infrastructure logging, where device tracking, conditional access, or security logging features are explicitly enabled by the Customer administrator, Superbime may automatically collect technical and device telemetry, including unique hardware device identifiers, internet protocol (IP) addresses, operating system types and version builds, browser types and versions, browser user-agent strings, referring and exit page URLs, diagnostic crash reports, login attempt timestamps, interaction timing, and session duration logs. The Customer acknowledges and agrees that opting to disable or restrict these technical logging and device identification features minimizes the workspace data footprint, but may limit, impair, or compromise certain platform functionalities, including automated threat detection, device-level conditional access enforcement, session security auditing, and system diagnostic logs.

Within the operational execution of active functional modules (refer to Section 4), individual data processed as Customer Content may include user task assignments, ticket creation and resolution records, custom form entries, assignment matrices, SLA compliance logs, real-time presence indicators, synchronous and asynchronous message contents, thread interactions, file attachment properties, as well as individually attributed performance metrics compiled by the Statistics module, such as individual ticket resolution velocity, task completion rates, Key Result Area (KRA) monitoring outputs, and individual operational productivity analytics directly tied to the employee or Authorized User’s identity inside the workspace interface.

Where Superbime processes Personal Data in its capacity as a Data Controller (specifically Account and Administrative Data and Security Logs), Superbime relies on the following statutory legal bases under Applicable Data Protection Legislation: (a) Performance of a Contract under Article 6(1)(b) of the GDPR and UK GDPR to provision workspace accounts, administer Customer enterprise subscriptions, verify user identities, execute billing obligations, and provide technical account support; (b) Legitimate Interests under Article 6(1)(f) of the GDPR and UK GDPR to maintain infrastructure security, verify user access authorization, prevent fraudulent or unauthorized platform usage, protect network integrity, conduct internal threat monitoring, and enforce system access controls; and (c) Compliance with Legal Obligations under Article 6(1)(c) of the GDPR and UK GDPR where administrative records, billing details, and transactional data must be maintained to fulfill statutory accounting, tax, regulatory, or corporate recordkeeping mandates.

2. Fundamental Architectural Privacy Commitments

Superbime is engineered pursuant to strict statutory Privacy-by-Design and Privacy-by-Default principles. Superbime covenants that it shall not sell, rent, lease, trade, license, monetize, or otherwise disclose Customer Content or Personal Data to any third party for commercial, promotional, or advertising purposes. Superbime does not deploy third-party behavioral tracking tools, social media tracking pixels, advertising network software development kits, or cross-site fingerprinting technologies anywhere within the Services.

Superbime strictly prohibits unsolicited commercial outreach and shall not conduct marketing telephone calls or transmit promotional email communications to Authorized Users. All customer data processed by the Services is subjected to deterministic tenant isolation enforced at the software execution, network routing, and persistent database layers using explicit tenant identifiers. External infrastructure hosting providers engaged by Superbime operate strictly as encrypted, zero-knowledge storage hosts maintaining zero administrative, analytical, or human access to Customer Content.

3. Territorial Scope & Regional Restrictions

As of the Effective Date of this Privacy Policy, Superbime explicitly discloses that it does not maintain, lease, or operate server infrastructure, data storage facilities, or persistent processing nodes within the European Union (EU) or the European Economic Area (EEA). All data ingested, processed, or persisted by the Services is hosted in secure primary data centers situated outside the EU and EEA.

Because Superbime enforces strict alignment between data residency guarantees and its physical hosting footprint, Superbime does not currently onboard, accept enterprise subscriptions from, or render Services to organizations established or domiciled within the EU or EEA, nor does Superbime intentionally direct its offering to, or monitor the behavior of, data subjects situated inside the EU or EEA.

Superbime’s engineering roadmap includes the deployment of dedicated EU-region sovereign server cells. Native EU-region data residency and formal enterprise onboarding for EU and EEA-domiciled Tenants is scheduled for commercial release in February 2027. Prior to the formal deployment and operational activation of such infrastructure, any enterprise entity requiring local EU data residency must refrain from establishing a Superbime workspace.

4. System Architecture and Data Collection Scope

The Services operate across various integrated core domain modules executing within deterministic multi-tenant isolation boundaries. The modules ingest and process data as follows.

The Identity module governs user identity verification, organization hierarchies, Role-Based Access Control permission maps, single sign-on integration tokens, and signed JSON Web Token session claims. To maintain workspace integrity and enforce conditional access policies, the Identity and Directory Engine may record device identifiers, internet protocol addresses, operating system specifications, and browser user-agent strings within security authentication logs when enabled by the Customer. These system logs are used exclusively for security verification, threat detection, and session audit trails, and are never repurposed for cross-site tracking or user profiling.

The Core module operates as the system of record for task lifecycles, ticketing state machines, service level agreement trackers, form submissions, assignment matrices, and operational approval workflows. All data created or processed within this module is made accessible to authorized personnel inside the Customer’s workspace and is automatically appended to the relevant project group in which such tickets or tasks are raised.

The Messaging module governs synchronous and asynchronous channel communications, direct messages, thread metadata, attachment properties, presence indicators, and interactive ticket card objects embedded within conversation streams. Superbime treats conversational privacy as an unyielding fundamental feature even within an organizational, enterprise, or employment context. Superbime shall not, under any circumstances, including formal administrative demands or requests issued by the Customer or Customer representatives, disclose, extract, or provide the chat logs or conversational data of any employee or Authorized User to the Customer or its management representatives.

Superbime uses a Statistics module that calculates key result area metrics, ticket resolution velocity, and operational productivity analytics by passively ingesting time-series event streams off the system event bus and processing operational metrics. Within the internal Superbime system environment, these statistical and performance metrics are directly attributed and tied to individual employees and Authorized Users rather than utilizing aggregated, anonymized, or proxied data models, thereby enabling precise internal organizational tracking and performance evaluation. We also utilize an Admin module that manages workspace quotas, feature enablement matrices, subscription tiers, billing contacts, global security policy toggles, and system-wide health logs required to operate the enterprise environment. Furthermore, the Admin module provides designated workspace administrators with direct visibility into individual user performance statistics and metrics compiled by the Statistics module within the native Superbime user interface.

The processing of data within these modules is executed solely to calculate and display key organizational and individual metrics to the Customer within the platform interface. Superbime incorporates built-in technical safeguards designed to prevent the public disclosure or inadvertent exposure of individually identifiable metrics resulting from human error or unauthorized access, including strict platform controls that prohibit such statistics from being exported, extracted, or viewed outside the secure application interface. However, the Customer acknowledges and agrees that the ultimate responsibility for safeguarding administrative credentials, managing access permissions, and preventing human error or security lapses that could compromise individually identifiable metrics lies exclusively with the Customer organization. Superbime does not access or grant third parties access to such information, nor is this data accessible to third parties approved or designated by the Customer. Superbime shall not share, export, or transmit these administrative or statistical metrics outside the application to the Customer, Customer representatives, Customer-approved third parties, or any Governmental bodies through any physical or electronic medium, and all such metrics remain strictly confidential, non-exportable, and exclusively viewable inside the native Superbime administrative panel interface.

5. Third-Party Infrastructure, Subprocessors, and Security Commitments

Superbime engages vetted enterprise cloud infrastructure providers, including Amazon Web Services, Google Cloud Platform, and Microsoft Azure, to supply encrypted hosting, physical data center security, virtual infrastructure, and storage systems. These infrastructure vendors act strictly as Subprocessors operating under binding data protection agreements that restrict their operational scope to providing encrypted data hosting. Storing data on third-party cloud infrastructure does not grant the underlying provider technical access, authorization, or legal right to inspect, extract, or analyze Customer Content.

All data transmitted across public networks or between internal system modules is encrypted using TLS 1.3 protocols, and all persistent data at rest is encrypted using AES-256 cryptographic standards. Superbime does not integrate third-party web analytics services, commercial SDKs, or social media tracking mechanisms into the platform interface, nor does Superbime utilize Customer Content to train public or commercial artificial intelligence models.

Superbime maintains an updated list of authorized Subprocessors. Superbime shall provide the Customer with administrative notice at least thirty (30) days prior to engaging any new Subprocessor to host or process Customer Content. The Customer may object to the appointment of a new Subprocessor on reasonable data protection grounds by submitting a written objection to Superbime’s privacy team within fourteen (14) days of receiving such notice.

6. Data Retention, System Offboarding, and Purge Routines

Superbime retains Customer Content for the duration of the active subscription term, subject to the specific data retention schedules, workspace configurations, and deletion instructions established by the Customer’s designated workspace administrator. Upon the formal termination, cancellation, or expiration of the Master Services Agreement, Superbime executes an automated and irreversible system offboarding and data purge protocol. Data destruction and purge are primarily achieved through cryptographic erasure, whereby Superbime permanently revokes, overwrites, and destroys the tenant-specific cryptographic storage keys assigned to the Customer's isolated data payloads. The destruction of these cryptographic keys renders all associated Customer Content, database records, schema entries, and stored assets mathematically undecipherable, completely unrecoverable, and permanently inaccessible across all persistent storage volumes, active databases, and backup archives within fifteen days of contract termination. System security logs, containing device identifiers, internet protocol addresses, and session authentication telemetry, are segregated in isolated logging environments and retained solely for operational security and auditing purposes for a standard rotation cycle ranging between ninety and one hundred eighty days, following which they are permanently overwritten or cryptographically shredded in accordance with Superbime's automated infrastructure lifecycle protocols.

7. Policy Revisions and Administrative Notifications

Superbime reserves the right to update this Privacy Policy periodically to reflect technological modifications, architectural enhancements, or legal developments. In the event that Superbime makes material revisions to this Privacy Policy that alter the handling or protection of Customer Content or Personal Data, Superbime shall provide written notice to the Customer's designated administrative point of contact via electronic mail or through an administrative portal alert at least thirty days prior to the effective date of such changes.

8. Data Subject Rights and Request Routing

Because Superbime processes Customer Content strictly in the capacity of a Data Processor (or Service Provider) on behalf of the Customer, the Customer organization serves as the Data Controller (or Business) and retains sole legal authority, control, and responsibility over the workspace environment and the data processed therein. Consequently, any Authorized User or individual data subject seeking to exercise statutory data protection rights under Applicable Data Protection Legislation, including, without limitation, the rights to request information regarding data processing, access personal data, obtain copies of personal data, rectify inaccuracies, request erasure or deletion, restrict processing operations, object to processing, or request data portability, must direct such requests directly to the Customer’s designated workspace administrator. The Customer manages user accounts, site configurations, and permissions, and is legally responsible for verifying the identity of the requesting individual and evaluating the statutory applicability of any data subject request.

Superbime shall support the Customer in fulfilling its statutory obligations to respond to verified data subject requests. Superbime shall provide reasonable technical and organizational assistance to the Customer, in accordance with the procedures, operational protocols, and response timelines set forth in the governing Data Processing Addendum. In the event that an Authorized User or third-party data subject submits a data subject request directly to Superbime, Superbime shall promptly redirect the requesting individual to the Customer’s designated workspace administrator and notify the Customer of the incoming inquiry. Superbime shall not independently modify, extract, disclose, or delete any Customer Content or Personal Data contained within a Customer workspace in response to a direct data subject request, unless explicitly instructed in writing by the Customer’s authorized administrative representative.

Furthermore, where Superbime is served with a binding judicial court order, search warrant, subpoena, or mandatory statutory directive from a law enforcement or governmental body requiring the production of data, Superbime’s compliance shall be strictly limited to the minimum necessary base operational data, ticket state records, and task metadata processed exclusively by the Core module. Personal communications, direct messages, channel chat logs, and conversation threads transmitted via the Messaging module are treated as immutable, cryptographically protected private assets that are strictly off-limits. Under no circumstances, including the service of a binding court order, legal warrant, or governmental demand, shall Superbime extract, decrypt, access, or disclose any employee chat logs or messaging content to any third party, government authority, judicial body, or Customer management representative.

Certain self-service functionalities, such as updating basic profile credentials, managing individual display preferences, or correcting name and contact information, may be executed directly by Authorized Users within the user interface of the Identity module. However, requests pertaining to workspace content, task tickets, or operational metrics are governed by the Customer’s administrative policies. Furthermore, the Customer acknowledges that certain administrative and statistical metrics compiled within the Statistics or Admin modules are bound by platform security safeguards that render them non-exportable outside the application interface, and that security audit logs containing device identifiers and session telemetry are maintained within isolated environments subject to mandatory security rotation schedules that may exempt such technical logs from immediate erasure requests where retention is required for legal, auditing, or threat prevention purposes.

9. Security Incident and Data Breach Management

Superbime maintains a comprehensive incident response framework and continuous threat monitoring architecture designed to detect, isolate, investigate, and remediate potential security events, system vulnerabilities, or unauthorized access attempts. Superbime deploys enterprise-grade administrative, physical, technical, and organizational safeguards, including end-to-end encryption for data in transit, cryptographic storage isolation at rest, automated intrusion detection, and strict access controls, designed to protect Customer Content and Personal Data against accidental, unlawful, or unauthorized destruction, loss, alteration, disclosure, or access.

In the event that Superbime confirms a security incident resulting in verified unauthorized access, acquisition, exposure, alteration, or destruction of Customer Content or Personal Data residing on Superbime systems or infrastructure ("Security Incident"), Superbime shall notify the affected Customer’s designated primary administrative point of contact and security officer without undue delay and, in any event, no later than seventy-two hours following formal internal confirmation of the Security Incident. Such notification shall be delivered via electronic mail or direct administrative portal communication and shall set forth, to the extent known at the time of notification: a description of the nature and scope of the Security Incident; the categories and approximate volume of affected Customer Content or Personal Data records; the anticipated impact or consequences of the incident; the immediate containment and remediation measures undertaken by Superbime; and the contact details of Superbime’s dedicated security incident lead.

Superbime shall take immediate corrective action to contain, mitigate, and remediate the effects of any confirmed Security Incident. Superbime shall conduct a thorough post-incident forensic investigation and shall provide ongoing, reasonable status updates and supplementary reports to the Customer as additional verified details become available. Superbime shall further cooperate with the Customer to assist in fulfilling its statutory notification obligations to relevant supervisory authorities, government regulators, and affected data subjects under Applicable Data Protection Legislation. The Customer acknowledges and agrees that Superbime’s obligation to report a Security Incident under this section does not constitute an admission of fault or liability by Superbime. Routine, unsuccessful security events, such as unsuccessful ping attempts, port scans, denial-of-service attacks that do not breach perimeter defenses, or failed login attempts that do not compromise account security, shall not constitute a Security Incident triggering formal notification under this Privacy Policy.

10. Commercial Use and Age Restrictions

The Services are designed, marketed, and intended exclusively for enterprise business entities and commercial use by Authorized Users. Superbime enforces a mandatory global minimum age requirement: all Authorized Users must be at least eighteen (18) years of age, or have reached the minimum legal employment age or age of majority in their applicable jurisdiction, whichever is higher. Superbime enforces a strict baseline floor of eighteen (18) years globally; notwithstanding anything to the contrary under local or regional law, even where the legal age of majority, digital consent, or minimum employment age in a given jurisdiction is lower than eighteen (18) years, Superbime does not accept, permit, or onboard any individual under eighteen (18) years of age to access or utilize the Services. Conversely, where applicable local law in an Authorized User's jurisdiction mandates a statutory employment age or age of majority higher than eighteen (18) years, that higher legal age threshold shall automatically serve as the mandatory minimum floor for Authorized Users residing or operating within that jurisdiction.

Superbime does not knowingly collect, process, or solicit Personal Data from any individual who fails to satisfy these applicable age thresholds. If a Customer, employer, parent, or guardian becomes aware that an under-age individual has provided Personal Data or gained access to a Superbime workspace, they shall notify Superbime’s privacy operations team immediately for account remediation. Furthermore, if Superbime discovers, determines, or receives verified notice that a Customer organization has breached these age parameters by onboarding or permitting access to an under-age individual, Superbime reserves the right, in its sole discretion and without prior notice or liability to the Customer, to immediately suspend the workspace and execute an emergency cryptographic purge and permanent deletion of the violating Customer organization's entire database and workspace data. This immediate purge mechanism is maintained as an extraordinary protective safeguard to enforce statutory minor privacy rights, fulfill child data protection mandates, and prevent the persistence of minor Personal Data across Superbime infrastructure.

11. Contact Information and Escalations

Inquiries, formal notices, security audit requests, or data protection queries regarding this Privacy Policy or Superbime’s technical security measures shall be directed to Superbime’s dedicated privacy operations team. To ensure rapid response times, swift administrative action, and dedicated resource allocation, Superbime provisions dedicated privacy contact channels to Customer organizations at a ratio of one dedicated privacy line for every one hundred Authorized Users. The specific dedicated electronic mail addresses assigned to the Customer are communicated directly during the initial workspace onboarding process, displayed within the billing administrative portal, and explicitly set forth at the bottom of all official billing invoices and routine transactional communications transmitted to the Customer.

Formal legal written notices, statutory correspondence, or physical service of process may be delivered to the corporate physical address designated on the Customer's official billing invoice, Master Services Agreement, or enterprise order form corresponding to the Customer's applicable contracting regional entity.

Superbime
Terms of Use

Effective Date: October 1, 2026

This Enterprise Platform Terms of Use (hereinafter referred to as these "Terms") constitutes a legally binding agreement entered into by and between Superbime Pvt Ltd and its corporate affiliates (collectively, "Superbime", "we", "us", or "our") and the business entity or organization subscribing to, accessing, or utilizing the Services (hereinafter referred to as the "Customer", "Tenant", or "Employer").

By executing an Order Form, Master Services Agreement, or creating a Workspace, the Customer agrees to be bound by these Terms. Individual personnel authorized by the Customer to access the Services (hereinafter referred to as "Authorized Users") access the Services subject to these Terms and the Customer's organizational authority.

1. License Grant and Authorized Access

Subject to the Customer’s ongoing compliance with these Terms, payment of all applicable subscription fees set forth in the governing Order Form or Master Services Agreement, and adherence to established workspace parameters, Superbime grants to the Customer a limited, non-exclusive, non-transferable, non-sublicensable, worldwide, revocable right to access and use the Services solely for the Customer’s internal enterprise business operations during the active subscription term. This license constitutes a commercial subscription grant to access a multi-tenant, hosted Software-as-a-Service platform executing across Superbime infrastructure. These Terms do not convey, sell, or transfer any title, ownership, or physical software copy to the Customer or any Authorized User.

The Customer entity executing the Master Services Agreement or Order Form is the sole legal holder of the enterprise platform license and retains ultimate administrative authority, legal liability, and financial obligation for all activity occurring within its provisioned Workspace. Individual personnel, including direct employees, corporate officers, and authorized individual contractors, do not hold independent software licenses from Superbime. Authorized Users access the platform strictly as designated user pass-holders under the Customer’s enterprise subscription. An Authorized User’s right to access the Services is contingent upon their active association with the Customer’s Workspace and terminates immediately upon de-provisioning by the Customer administrator, account deactivation, or underlying contract termination.

The Services are licensed on a per-User seat model. A seat is defined as a unique, individually named account credential assigned to a single, specific natural human Authorized User inside the platform directory. Shared, generic, or group credentials, such as general department emails or shared team logins, are strictly prohibited and constitute a material breach of these Terms. Each human individual interacting with the Services must be provisioned with an individual, dedicated seat credential.

The total number of billable seats is calculated deterministically by the platform directory based on the total number of active user records provisioned within the Customer’s Workspace during a given billing cycle. Any user account configured in an active or provisioned state capable of authenticating via Single Sign-On or local password, regardless of whether the individual user actively logs into the platform during that specific billing window, is counted as an active billable seat. When the Customer administrator deactivates, suspends, or soft-deletes a user account in the identity system, that account transitions to an inactive state. De-provisioned accounts do not generate new user activity and cease to consume a billable seat starting in the subsequent billing cycle following deactivation.

The Customer may purchase additional seats at any time through the administrative billing portal or by executing a supplemental Order Form, with additions billed on a prorated basis for the remainder of the then-current billing term. If the Customer provisions user accounts in excess of the contracted seat count specified in the governing Order Form, whether via automated Identity Provider directory sync, SAML auto-provisioning, or manual administrator invites, Superbime automatically logs the overage. Excess seats are invoiced to the Customer at the prevailing non-discounted per-seat rate specified in the applicable pricing sheet, prorated for the remainder of the active billing period, and automatically added to the Customer's baseline commit for subsequent renewal terms.

Seats are transferable between individual Authorized Users within the same Customer organization. If an employee or contractor leaves the Customer organization or changes roles, the Customer administrator may de-provision the departing individual's account and reassign the liberated seat to a newly designated Authorized User at no additional charge. However, seats cannot be split, shared concurrently across multiple individuals, or transferred outside the contracting Customer entity.

Direct employees of the Customer may be provisioned seats without restriction up to the contracted seat limit, subject to mandatory global age parameters. Independent contractors, external agencies, and legal or financial consultants working directly for the Customer may occupy seats, provided they use the platform strictly for the Customer's internal business benefit and agree to abide by these Terms, with the Customer remaining fully liable for all contractor actions inside the Workspace. Affiliates majority-owned or controlled by the Customer may share the Customer’s Workspace or consume allocated Seats only if explicitly designated in the governing Master Services Agreement or Order Form; unaffiliated third parties or separate corporate entities cannot share or piggyback on a Customer's license. Multiple human users logging into a single account credential or utilizing automated credential-sharing proxies is explicitly forbidden and will result in automated account throttling or seat overage billing.

In the event the Customer undergoes a merger, acquisition, corporate restructuring, or asset sale, the license cannot be assigned or transferred to an acquiring entity or divested business unit without Superbime's prior express written consent. If Superbime suspends a Workspace due to delinquent payment or suspected security breach, the license grant is temporarily frozen, though the Customer remains obligated to pay recurring subscription fees during any period of lawful suspension. If a Workspace is subjected to an emergency cryptographic purge for violating global age floors, the workspace license for the affected entity is immediately revoked without refund or reinstatement rights.

Superbime and its licensors retain exclusive ownership of all right, title, and interest in and to the Services, including all underlying source code, system object code, software databases, system architectures, API designs, topologies, interface layouts, domain structures, trademarks, service marks, logos, and technical documentation. Nothing in these Terms shall be construed as conferring any right, title, or interest in the Services to the Customer or any Authorized User, except for the limited, conditional right of operational access expressly granted herein. Superbime reserves all rights not expressly granted under these Terms.

If the Customer, its employees, or Authorized Users submit suggestions, feature requests, structural enhancement ideas, architectural feedback, or performance evaluation notes to Superbime regarding the platform or any module, the Customer grants Superbime an absolute, worldwide, perpetual, irrevocable, royalty-free, fully paid-up license to freely adopt, modify, commercialize, implement, and incorporate such feedback into the Services and future product roadmaps without any obligation of attribution, confidentiality, or financial compensation to the Customer.

2. Account Eligibility

The Services are designed, engineered, and offered exclusively for enterprise, corporate, and organizational operational use by legally recognized business entities, non-profit corporations, healthcare facilities, and educational institutions. Individual consumer access, personal or non-commercial usage is strictly prohibited. Non-profit organizations, educational bodies, research institutions, hospitals, and healthcare providers are fully permitted to establish a Workspace and license the Services, provided they operate as formally constituted legal entities in good standing within their applicable jurisdiction and utilize the platform solely for internal organizational operations and administrative workflows.

The Customer retains sole responsibility for evaluating whether its procurement and operational use of the Services satisfies all sector-specific laws, municipal regulations, industry standards, and statutory directives applicable to its specific field, sector, or geographical region. This includes, without limitation, healthcare privacy frameworks, student record confidentiality regulations, medical data residency rules, financial software compliance standards, or governmental procurement mandates. Superbime makes no representation or warranty that the Services are certified, configured, or suitable for specialized regulated environments that require sector-specific statutory data controls, unless explicitly agreed upon in a signed Master Services Agreement addendum

If a hospital, educational institution, non-profit, or regulated organization establishes a Workspace in violation of local laws, regional data sovereignty directives, or sector-specific software deployment restrictions governing its industry, the Customer assumes all associated legal risk, regulatory liability, and statutory penalties. Any failure by the Customer to comply with industry-specific laws, regulatory mandates, or municipal software standards governing its operations remains strictly the Customer’s legal and financial responsibility. Superbime explicitly disclaims all liability, regulatory fines, or third-party claims resulting from the Customer’s unauthorized onboarding or deployment of the platform within a regulated industry or jurisdiction.

Superbime enforces an unyielding global baseline floor regarding individual user eligibility: all Authorized Users provisioned with Workspace access must be at least eighteen (18) years of age, or have reached the minimum legal employment age or age of majority in their applicable jurisdiction, whichever threshold is higher. Notwithstanding anything to the contrary under local, state, national, or international law, even where local statutory regulations permit digital consent, employment, or contractual capacity at an age lower than eighteen (18) years, Superbime explicitly prohibits and rejects access to any individual under eighteen (18) years of age. Conversely, where applicable local law in an Authorized User's operating jurisdiction mandates a statutory employment age or age of majority higher than eighteen (18) years, that higher legal threshold automatically serves as the mandatory minimum floor for Authorized Users within that jurisdiction.

In the context of educational institutions, schools, university systems, healthcare organizations, and community facilities, the Customer explicitly covenants that access to the Services shall be restricted strictly to adult personnel, staff, faculty, administrators, medical professionals, and contracted adult workers satisfying the global age floor. Students, minor patients, youth program participants, or any individuals failing to meet the mandatory age threshold are strictly prohibited from receiving account credentials, accessing workspace interfaces, or submitting data within the platform.

The Customer bears sole legal and operational responsibility for verifying the age, legal capacity, and authorization of all personnel provisioned with Workspace credentials prior to granting platform access. If Superbime discovers, determines, or receives verified notice that a Customer organization has breached these eligibility parameters by onboarding or permitting access to an under-age individual, or by operating in direct violation of mandatory local industry prohibitions, Superbime reserves the right, in its sole discretion and without prior notice or financial liability to the Customer, to immediately suspend the Workspace and execute an emergency cryptographic purge and permanent deletion of the Customer's entire database and Workspace records. This emergency purge mechanism constitutes an extraordinary protective safeguard maintained to enforce statutory minor privacy rights, comply with child data protection mandates, and eliminate unauthorized data persistence across Superbime infrastructure. The execution of an emergency cryptographic purge shall not entitle the Customer to any refund, credit, or offset of prepaid subscription fees.

3. Customer Responsibilities & Administrative Security

The Customer holds sole administrative authority and operational responsibility for the configuration, governance, and daily maintenance of its provisioned Workspace environment. This includes, without limitation, establishing role-based access control permission maps, defining organizational hierarchies, configuring Single Sign-On integrations, managing Security Assertion Markup Language claims, and assigning administrative rights to designated personnel. The Customer must maintain continuous oversight of all provisioned accounts and is strictly obligated to de-provision, suspend, or revoke account access for any employee, contractor, or agent immediately upon termination of employment, end of contract engagement, or change in organizational role. All actions, data submissions, workflow modifications, and administrative toggles executed under an active Authorized User credential or administrative account are legally attributed to the Customer, and the Customer assumes full liability for all platform activities occurring within its Workspace boundary.

The Customer is strictly required to implement and enforce robust credential security standards across all Authorized User accounts and master administrative profiles. This includes mandating multi-factor authentication, enforcing strong password policies for non-Single Sign-On accounts, safeguarding Single Sign-On identity provider tokens, and restricting access to administrative API keys, JSON Web Tokens, and root account credentials. The Customer must prevent unauthorized access, credential sharing, credential stuffing, phishing compromises, or session hijacking within its organization. Superbime shall not be liable for any unauthorized access, data alteration, security compromise, or accidental disclosure of Customer Content resulting from compromised administrative credentials, weak password practices, lost authentication tokens, or administrative negligence on the part of the Customer or its Authorized Users.

The platform natively compiles and displays individual productivity analytics, ticket resolution velocity, Key Result Area monitoring outputs, and operational metrics attributed directly to specific Authorized Users within the native administrative panel. Superbime incorporates hardcoded technical safeguards within the application layer that prohibit these individually attributed performance metrics from being exported, extracted, downloaded, or transmitted outside the secure application interface. The Customer acknowledges and agrees that the selection, assignment, and authorization of administrative personnel who are granted access to view these native performance metrics rests exclusively within the Customer's corporate discretion. The Customer bears sole legal and operational responsibility for governing internal access to these metrics, maintaining employee confidentiality, preventing unauthorized viewing within its corporate environment, and ensuring that internal access assignments align with the Customer's internal workplace policies and applicable labor regulations.

Superbime functions strictly as an enterprise technology provider and is not a party to any employment contract, contractor agreement, or labor relationship between the Customer and its Authorized Users. The Customer retains sole legal responsibility for how it interprets, utilizes, or acts upon the performance metrics displayed within the administrative panel. Superbime explicitly disclaims all liability for any employment disputes, labor tribunal claims, wrongful termination suits, discrimination allegations, constructive dismissal actions, or employee grievances arising from the Customer's internal management decisions, performance evaluations, disciplinary actions, or administrative access assignments. The Customer agrees that Superbime shall have no liability or legal exposure whatsoever for internal workplace claims resulting from the Customer's internal viewing, configuration, or administrative handling of operational statistics.

The Customer explicitly acknowledges and agrees that Superbime is engineered with unyielding architectural and cryptographic conversational isolation rules. Synchronous and asynchronous channel communications, direct messages, thread interactions, and messaging metadata transmitted within the platform are treated as cryptographically shielded private assets. The Customer covenants and agrees that it shall not, under any circumstances, including internal corporate investigations, administrative audits, executive demands, management disputes, or contractual notices, request, demand, or attempt to compel Superbime to extract, decrypt, disclose, or provide the chat logs, direct messages, or conversational contents of any Authorized User to Customer management, corporate officers, or third parties. The Customer waives all contractual, statutory, or implied rights to demand administrative backdoors, messaging export tools, or conversational data dumps from Superbime. The Customer explicitly acknowledges and agrees that under no condition or circumstance shall Superbime ever decrypt, extract, or disclose private user data, including chat logs, direct messages, and conversational content, and the Customer hereby irrevocably waives any right to initiate legal action, serve subpoenas, or seek court orders to compel such disclosure, explicitly agreeing that Superbime cannot be compelled to produce such data and shall bear no liability whatsoever, even in situations where the Customer faces civil litigation, criminal proceedings, regulatory investigations, or severe third-party liabilities arising out of employee misconduct, workplace harassment, fraud, trade secret theft, or unlawful behavior.

The Customer is solely responsible for fulfilling all statutory notification duties, legal disclosure obligations, and employee transparency mandates required under local labor laws, employment regulations, or works council agreements regarding the deployment of the platform. This includes providing adequate written notice to employees and Authorized Users regarding the scope of task tracking, ticket state logging, and administrative performance visibility features operating within the Workspace. The Customer warrants that its deployment of the platform and its internal administration of user access fully complies with all applicable workplace privacy directives, labor statutes, and statutory employee monitoring regulations within every jurisdiction where its Authorized Users operate. The Customer shall defend, indemnify, and hold harmless Superbime against any administrative fines, regulatory investigations, or employee claims alleging failure to provide proper workplace notices or violation of employee privacy statutes.

4. Prohibited Conduct.

The Customer and its Authorized Users shall not, directly or indirectly, reverse engineer, decompile, disassemble, decipher, decode, or otherwise attempt to derive, extract, or reconstruct the source code, underlying object code, software binary structures, database schemas, internal algorithms, trade secrets, network routing protocols, or event bus topologies of the Services or any platform module. The Customer is strictly prohibited from inspecting, analyzing, or sniffing application network traffic, API payloads, or client-server communications for the purpose of reverse-engineering internal messaging frameworks, state machine logic, or multi-tenant execution boundaries. Any attempt to decipher or extract Superbime’s proprietary code, data processing architectures, or software mechanics shall constitute an intentional, material breach of these Terms and a direct violation of applicable intellectual property statutes.

The Customer and its Authorized Users shall not modify, adapt, translate, alter, customize, white-label, frame, mirror, or create derivative works, competitive adaptations, or localized iterations based upon any portion of the Services, user interface designs, visual layouts, workflow engines, or technical documentation. The Customer shall not unbundle, disassemble, or isolate individual features, platform capabilities, or back-end domain services for independent use outside the unified Superbime application interface. Furthermore, the Customer shall not rent, lease, lend, sell, resell, sublicense, assign, distribute, time-share, host as a managed service bureau, or commercially exploit the Services or any portion thereof to or for the benefit of any unapproved third party, subsidiary, or non-contracting corporate affiliate.

The Customer and its Authorized Users are explicitly forbidden from attempting to bypass, breach, probe, scan, test, deactivate, or undermine any security controls, authentication mechanisms, identity verification filters, role-based access restrictions, or multi-tenant isolation boundaries implemented within the Services. The Customer shall not attempt to execute cross-tenant queries, inject unauthorized tenant identification parameters, manipulate session claims, bypass JSON Web Token signature verifications, or access database records, storage buckets, or memory spaces belonging to another Superbime tenant. Unsanctioned vulnerability scanning, automated security auditing, penetration testing, fuzzing, port scanning, or stress testing against Superbime infrastructure, APIs, or hosting environments without prior express written authorization from Superbime's security operations team is strictly prohibited.

The Customer and its Authorized Users shall not utilize the Services to store, transmit, process, link to, or distribute any content, material, file, or communication that is illegal, defamatory, libelous, tortious, fraudulent, deceptive, harassing, obscene, invasive of another's privacy, or that infringes upon the intellectual property, trade secret, or proprietary rights of any third party. The Customer shall not upload, introduce, transmit, or spread any software viruses, Trojan horses, worms, ransomware, logic bombs, spyware, adware, rootkits, or any other malicious, harmful, or destructive computer code, scripts, or automated routines designed to interrupt, destroy, impair, or limit the functionality of Superbime infrastructure or any third-party computer hardware, software, or telecommunications equipment.

The Customer and its Authorized Users are strictly prohibited from utilizing the Services, application interfaces, workflow logic, task outputs, system metadata, operational analytics, or Customer Content to train, fine-tune, validate, test, evaluate, or optimize any artificial intelligence, machine learning, deep learning, neural network, or large language model (LLM), whether public, private, open-source, or commercial. The Customer shall not deploy automated scrapers, web crawlers, data mining tools, or AI training bots to harvest platform interface layouts, conversational structures, workflow patterns, or ticketing taxonomies for the purpose of constructing or enhancing competing machine learning models or algorithmic automation tools.

The Customer and its Authorized Users shall not execute, deploy, or utilize any automated scraping, screen-scraping, web crawling, data extraction, bot, spider, or automated data harvesting software or scripts against the Services, application interfaces, or underlying network endpoints. The Customer shall not conduct competitive performance benchmarking, system latency testing, stress-testing, availability monitoring, or throughput evaluations against Superbime infrastructure for the purpose of publishing, sharing, or utilizing such data to build, market, or evaluate a competing software product or service.

The Customer and its Authorized Users shall not impersonate any person, business entity, corporate representative, or Superbime employee, nor misrepresent their affiliation with any person or entity. The Customer shall not forge HTTP header fields, alter Single Sign-On claims, spoof IP addresses, or manipulate authentication session tokens to disguise the origin of any content or transaction transmitted through the Services. The Customer shall not deploy automated proxy tools, multiplexing software, or credential-sharing frameworks designed to route multiple human users through a single account credential to evade mandatory per-seat licensing fees or directory counting mechanics.

Superbime reserves the right, in its sole discretion and without limiting its other contractual or legal remedies, to actively monitor system telemetry, API request rates, and network logs to verify compliance with these prohibited conduct rules. In the event Superbime detects or reasonably suspects a violation of any provision set forth herein, Superbime reserves the immediate right, without prior notice or financial liability to the Customer, to deploy automated rate-limiting, throttle API throughput, block suspicious IP addresses, isolate affected user accounts, or temporarily suspend the Customer's entire Workspace environment. Any material violation of these prohibited conduct rules grants Superbime the unilateral right to terminate the Master Services Agreement for cause, retain all prepaid fees, execute an immediate cryptographic offboarding purge, and seek injunctive relief, statutory damages, and legal cost recovery in a court of competent jurisdiction.

5. Intellectual Property Rights and Customer Content

As between Superbime and the Customer, the Customer retains all right, title, and interest, including all copyrights, trademark rights, trade secret rights, patent rights, and all other intellectual property or proprietary rights, in and to all Customer Content. Customer Content encompasses all electronic data, communications, text, files, task items, tickets, form submissions, audio-visual uploads, attachments, system metadata, and operational performance inputs submitted, uploaded, transmitted, or generated within the Services by or on behalf of the Customer or its Authorized Users. Superbime acquires no ownership rights, implied titles, or proprietary claims over any Customer Content processed within the Services, and all such data remains the exclusive property of the Customer.

The Customer grants to Superbime a limited, non-exclusive, worldwide, royalty-free, fully paid-up, revocable license to host, store, reproduce, transmit, modify solely for technical formatting, encrypt, back up, process, and display Customer Content strictly as necessary to provision, maintain, secure, troubleshoot, optimize, and operate the Services in accordance with these Terms, the governing Master Services Agreement, and the Data Processing Addendum. This operational license grant is strictly restricted to the technical execution and maintenance of the Services and automatically terminates upon the complete cryptographic offboarding and data purge of the Customer’s Workspace following contract termination.

Superbime and its corporate licensors retain sole and exclusive ownership of all right, title, and interest, including all worldwide intellectual property rights, patents, copyrights, trade secrets, trademarks, service marks, domain names, and proprietary designs, in and to the Services and all underlying software components. This includes, without limitation, the platform’s object code, source code, client-side scripts, database schemas, system architectures, microservice structures, API designs, topologies, interface layouts, visual designs, workflow engines, and all associated technical documentation. Neither these Terms nor the provision of access to the Services conveys any title, software ownership, or implied property right to the Customer or any Authorized User, and all rights not expressly granted to the Customer are reserved exclusively by Superbime.

Superbime retains exclusive ownership of all operational system logs, anonymized network performance statistics, aggregated diagnostic telemetry, platform execution metrics, and technical system health logs generated during the routine execution of the Services. To the extent any technical telemetry or diagnostic data is derived from platform execution, Superbime anonymizes and aggregates such data so that it contains no individually identifiable Personal Data or confidential Customer Content. Superbime may utilize such aggregated, non-identifiable technical telemetry for internal platform maintenance, network capacity planning, system security auditing, infrastructure optimization, and system health monitoring.

Technical security logs, which may contain transient hardware device identifiers, internet protocol addresses, browser user-agent strings, and authentication session timestamps, are segregated within isolated logging environments completely separated from primary Customer Content storage volumes. These system security logs are processed strictly under Superbime's legitimate security interest to maintain network integrity, prevent unauthorized intrusion, execute security audits, detect threat vectors, and enforce conditional access policies. Security logs are retained in accordance with automated rotation schedules ranging between ninety (90) and one hundred eighty (180) days, following which they are permanently overwritten or cryptographically shredded pursuant to Superbime’s automated infrastructure lifecycle protocols, exempt from immediate deletion requests where retention is required for legal, auditing, or security compliance.

Superbime covenants and warrants that it shall not utilize Customer Content, employee communications, messaging data, task metadata, or individual performance statistics to train, retrain, fine-tune, evaluate, or optimize any public, commercial, or third-party artificial intelligence models, machine learning algorithms, or large language models. Customer Content processed within the platform remains strictly isolated within the Customer’s multi-tenant boundary and is never ingested into shared machine learning datasets or commercial AI training pools.

6. Term, Termination, and Data Purge

These Terms become effective on the date the Customer executes an Order Form, enters into a Master Services Agreement, or provisions a Workspace, and shall remain in full force for the duration of the initial subscription term specified therein. Upon the expiration of the initial subscription term, the Customer’s subscription shall automatically renew for successive, consecutive renewal terms of equal duration, unless either party provides formal written notice of non-renewal to the other party at least thirty (30) days prior to the expiration of the then-current subscription term. Subscription pricing for any renewal term shall be governed by the applicable Master Services Agreement or prevailing enterprise rate schedule, subject to standard administrative notice for price adjustments delivered at least forty-five (45) days prior to renewal.

Either party may terminate these Terms and the underlying Master Services Agreement for cause upon written notice if the other party materially breaches any provision of these Terms and fails to cure such material breach within thirty (30) days of receiving written notice specifying the nature of the breach. Notwithstanding the foregoing thirty-day cure period, Superbime reserves the right to immediately terminate these Terms and revoke Workspace access without prior cure notice or financial liability in the event of: (a) Customer’s material breach of Section 4 (Prohibited Conduct) or Section 1 (License Grant); (b) Customer’s violation of global age parameters resulting in an emergency purge under Section 2; (c) Customer’s insolvency, bankruptcy filing, receivership, or assignment for the benefit of creditors; or (d) intentional infringement or misappropriation of Superbime’s intellectual property rights.

Unless explicitly set forth in a signed Master Services Agreement, the Customer possesses no right to terminate its subscription for convenience prior to the expiration of the active committed term. If the Customer purports to terminate its subscription, cancels its Workspace, or abandons platform access prior to the conclusion of the active subscription term without cause, all unpaid subscription fees for the unexpired remainder of the then-current committed term shall immediately accelerate and become fully due, payable, and non-refundable. Prepaid subscription fees are strictly non-refundable upon early cancellation or termination for cause resulting from Customer breach.

If the Customer fails to pay any undisputed subscription fees within fifteen (15) days of receiving a past-due notice, or if Superbime detects a severe security threat, network intrusion, or prohibited activity originating from the Customer’s Workspace, Superbime reserves the right to immediately suspend Workspace access. Suspension of access does not terminate the underlying contract, and the Customer remains fully obligated to pay all recurring subscription fees accruing during any period of lawful suspension. Superbime shall restore Workspace access upon the Customer’s full cure of the payment default or remediation of the security breach to Superbime’s reasonable satisfaction.

The Customer is solely responsible for exporting and downloading its Customer Content prior to the effective date of subscription cancellation, contract expiration, or account termination. Throughout the active subscription term, the Customer may utilize self-service administrative tools and standard application interfaces to retrieve task records, tickets, custom forms, and attachments, subject always to platform safeguards prohibiting the export of individual performance metrics or employee chat logs. Upon the effective date of contract termination, the Customer’s administrative access rights are immediately revoked, and the Customer shall have no right to compel Superbime to perform manual data extractions, database dumps, or custom file transfers.

Upon the effective date of contract termination, expiration, or cancellation, Superbime initiates an automated, irreversible system offboarding and data purge pipeline. Data destruction is executed via cryptographic erasure (cryptographic key destruction), whereby Superbime permanently revokes, overwrites, and shreds the tenant-specific cryptographic encryption keys assigned to the Customer's isolated multi-tenant database payloads and object storage volumes. The destruction of these tenant keys renders all associated Customer Content, database records, schema entries, task tickets, form submissions, and stored assets mathematically undecipherable, completely unrecoverable, and permanently inaccessible across all active production servers and live database clusters within fifteen (15) calendar days of contract termination.

Tenant data residing within automated rolling system backups is rendered unreadable instantly upon the primary cryptographic key destruction, and underlying backup storage media is permanently overwritten as part of Superbime's automated backup rotation lifecycle. System security authentication logs, containing transient device identifiers, internet protocol addresses, and session telemetry, are maintained in isolated logging environments separate from primary Customer Content storage and are retained strictly for operational security, auditing, and threat prevention purposes for a standard rotation cycle ranging between ninety (90) and one hundred eighty (180) days, after which they are permanently overwritten or cryptographically shredded in accordance with Superbime's automated infrastructure lifecycle protocols.

Upon any termination or expiration of these Terms, all rights and licenses granted to the Customer shall immediately cease, and the Customer shall promptly discontinue all access to and use of the Services. The provisions of these Terms that by their nature are intended to survive termination shall survive indefinitely. Termination shall not relieve either party of any liabilities or payment obligations accrued prior to the effective date of termination.

7. Warranties, Disclaimers, and Limitation of Liability

Each party represents and warrants that it has the legal power, corporate authority, and capacity to enter into these Terms and perform its obligations hereunder, and that its execution and performance of these Terms does not and will not conflict with, violate, or breach any other contractual agreement, corporate charter, or legal obligation to which it is bound.

Except as explicitly provided in a formal, written Master Services Agreement executed by an authorized representative of Superbime, the Services, software modules, platform interfaces, performance analytics, real-time messaging, and all associated technical documentation are provided strictly on an "as is" and "as available" basis. Superbime, on behalf of itself, its corporate affiliates, officers, directors, employees, agents, subprocessors, and enterprise licensors, explicitly disclaims all warranties, guarantees, conditions, and representations of any kind, whether express, implied, statutory, or arising through course of dealing, usage of trade, or custom. This absolute disclaimer encompasses, without limitation, any implied warranties or conditions of merchantability, satisfactory quality, fitness for a particular purpose, quiet enjoyment, system integration, title, non-infringement, accuracy, data integrity, or complete error-free operation.

Superbime does not warrant or guarantee that the Services will operate without interruption, latency, software bugs, diagnostic glitches, or system downtime, or that the platform will meet the Customer's specific operational, technical, or commercial requirements. Superbime makes no warranty that system defects will be corrected within any specific timeframe, or that the platform infrastructure is completely immune to third-party cyberattacks, distributed denial-of-service events, zero-day vulnerabilities, unauthorized access, or network intrusions. The Customer acknowledges that cloud-based Software-as-a-Service platforms depend on public internet routing, third-party cloud infrastructure, global domain name systems, and external telecommunication backbones, and that Superbime bears no liability or warranty obligation for service interruptions, data packet losses, or transmission delays caused by external network infrastructure or third-party telecommunication failures outside Superbime's immediate physical control.

The Services are engineered and intended solely for routine corporate administration, project management, organizational ticketing, internal communications, and workflow orchestration. The Services are not designed, fail-safe, or fault-tolerant, and are not intended or licensed for use in high-risk, hazardous, or emergency environments requiring fail-safe operational controls. Superbime specifically disclaims any express or implied warranty of fitness for high-risk activities, including without limitation the operation of nuclear facilities, aircraft navigation or direct communication systems, air traffic control, emergency medical life-support machinery, weapons systems, autonomous vehicle navigation, or direct emergency response services where software failure could lead directly to death, personal injury, severe physical damage, or catastrophic environmental harm. The Customer agrees not to deploy or rely upon the Services for any such high-risk or life-critical applications, and assumes all legal and financial risk for any unauthorized deployment

To the maximum extent permitted by applicable law, in no event shall Superbime, its corporate affiliates, officers, directors, employees, agents, suppliers, subprocessors, or licensors be liable to the Customer, its Authorized Users, corporate affiliates, or any third party for any indirect, consequential, incidental, special, exemplary, treble, or punitive damages arising out of, resulting from, or in connection with these Terms, the Master Services Agreement, or the provision, performance, failure, or use of the Services. This total exclusion of indirect damages applies regardless of the legal theory, form of action, or basis of liability, whether grounded in contract, tort (including active or passive negligence), strict liability, product liability, statutory breach, indemnity, or breach of warranty, and regardless of whether Superbime was advised, warned, or should have been aware of the possibility or probability of such damages.

Without limiting the generality of the foregoing exclusion, the damages expressly excluded under this section include, but are not limited to: loss of corporate profits, loss of operational revenue, loss of business opportunities, loss of prospective contracts, loss of anticipated cost savings, loss of data, loss of business goodwill, damage to corporate reputation, commercial downtime, system disruption, procurement costs for substitute software or replacement services, management time lost, or administrative disruption. The Customer explicitly agrees that Superbime shall not be held liable for any loss, corruption, or mathematical unrecoverability of Customer Content resulting from automated offboarding, cryptographic key destruction, or emergency purges executed in accordance with these Terms.

Except for liability resulting directly from Superbime's proven willful misconduct or intentional fraud, Superbime's maximum cumulative aggregate financial liability arising out of, relating to, or in connection with these Terms, the Master Services Agreement, the Data Processing Addendum, or the platform Services shall be strictly limited, capped, and bounded. Under no circumstances shall Superbime's total liability across all claims, causes of action, legal suits, losses, arbitrations, statutory fines, or administrative proceedings in the aggregate exceed the total subscription fees actually paid by the Customer to Superbime during the twelve (12) month period immediately preceding the specific event, act, or omission giving rise to the initial liability.

The financial liability cap established herein is a single, cumulative aggregate cap that applies across all claims raised by the Customer, its corporate affiliates, and its Authorized Users collectively under these Terms or any underlying agreement. The existence of multiple claims, distinct causes of action, or separate legal suits arising from different incidents during the subscription term shall not enlarge, expand, or extend this aggregate financial monetary ceiling. In the event the Customer pays no subscription fees during the applicable twelve-month window, including during any free trial, proof-of-concept phase, or complimentary evaluation period, Superbime shall bear no liability whatsoever to the Customer, its Authorized Users, or any third party across all theories of law, and the Services during such unpaid periods are provided entirely at the Customer's sole risk without any right to damages, monetary recovery, or legal recourse of any kind against Superbime.

The Customer explicitly acknowledges and agrees that the warranty disclaimers, exclusions of indirect damages, and aggregate liability caps set forth in this section represent a fundamental, bargained-for allocation of operational and financial risk between Superbime and the Customer. Superbime has calculated its subscription pricing, service tiers, and commercial terms in direct reliance upon these limitations of liability and disclaimers of warranty. These disclaimers and liability limitations shall apply to the maximum extent permitted by applicable law and shall remain fully enforceable and effective notwithstanding any failure of the essential purpose of any limited, exclusive, or contractual remedy provided under these Terms or the Master Services Agreement.

8. Indemnificationg

The Customer shall defend, indemnify, and hold harmless Superbime Pvt Ltd, its corporate affiliates, parent companies, subsidiaries, successors, and assigns, as well as their respective officers, directors, employees, agents, contractors, subprocessors, licensors, and legal representatives (collectively, the "Indemnified Parties") from and against any and all third-party claims, demands, suits, legal actions, government inquiries, regulatory enforcement proceedings, losses, liabilities, damages, settlements, judgments, administrative fines, statutory penalties, interest, and associated costs and expenses. These recoverable costs explicitly include reasonable attorneys' fees, court costs, expert witness fees, investigation costs, and litigation expenses incurred by the Indememnified Parties arising out of, relating to, or resulting from the specific indemnification triggers set forth below.

The Customer shall fully defend and indemnify the Indemnified Parties against any third-party claim, suit, or demand alleging that Customer Content, including any data, communications, text, custom forms, attachments, audio-visual files, or operational materials uploaded, transmitted, or processed within the Workspace, infringes, misappropriates, or violates any third-party copyright, trademark, patent, trade secret, privacy right, publicity right, or proprietary interest. This includes any claims alleging that Customer Content is libelous, defamatory, fraudulent, unlawful, or processed without a valid legal basis or mandatory statutory data consent required under Applicable Data Protection Legislation.

The Customer shall defend and indemnify the Indemnified Parties against any civil lawsuit, parental complaint, statutory enforcement action, or regulatory fine arising out of or resulting from the Customer’s breach of Section 2 (Account Eligibility and Mandatory Age Limits). This includes any instance where the Customer provisions, invites, or permits access to an Authorized User who fails to satisfy Superbime's global baseline floor of eighteen (18) years or the local jurisdiction's higher statutory employment or majority age. The Customer assumes full financial and legal liability for all regulatory penalties (including statutory child privacy fines under COPPA, GDPR, or regional minor protection laws) and legal costs resulting from the onboarding of minor personnel or the execution of an emergency cryptographic purge triggered by such violations.

The Customer shall defend and indemnify the Indemnified Parties against any third-party claim, operational loss, or infrastructure damage resulting from the Customer’s or its Authorized Users' breach of Section 4 (Prohibited Conduct). This encompasses all claims and liabilities arising from reverse engineering attempts, security probing, vulnerability scanning, multi-tenant isolation circumvention, introduction of malicious code or ransomware, automated scraping, unauthorized artificial intelligence model training, multiplexing to evade per-seat licensing, or credential spoofing executing within or originating from the Customer's Workspace.

The Customer shall defend and indemnify the Indemnified Parties against any third-party suit, regulatory investigation, labor tribunal proceeding, or employee grievance arising out of or relating to: (a) the Customer's failure to maintain administrative credential security, resulting in unauthorized access or internal data exposure; (b) the Customer's internal handling, configuration, or assignment of administrative viewing rights over individual user performance metrics; (c) any employment action, disciplinary measure, termination, or performance evaluation executed by the Customer based on operational statistics compiled within the platform; or (d) any claim by employees, contractors, or works councils alleging improper workplace monitoring, failure to provide statutory workplace notices, or violation of employment privacy regulations.

The Customer shall defend and indemnify the Indemnified Parties against any third-party claim, administrative fine, or legal liability arising out of the Customer's procurement, onboarding, or operational deployment of the Services in violation of sector-specific laws, municipal regulations, or legal prohibitions governing its specific industry. This includes any regulatory enforcement actions or third-party lawsuits resulting from healthcare facilities, educational institutions, non-profit organizations, or government entities utilizing the Services without implementing mandatory, specialized statutory data controls required within their specific regulated sector.

In the event an Indemnified Party becomes subject to a third-party claim or legal action subject to indemnification under this section, Superbime shall provide the Customer with prompt written notice of the claim. However, any delay or failure by Superbime to provide prompt written notice shall not relieve the Customer of its indemnification obligations, except to the extent the Customer demonstrates that its defense of the claim was materially prejudiced by such delay. Upon receiving written notice, the Customer shall immediately assume sole control of the defense and settlement of the claim at its own expense, utilizing competent legal counsel reasonably acceptable to Superbime. Superbime reserves the right, at its own expense, to participate in the defense of any claim with separate legal counsel of its own choosing. If the Customer fails to promptly assume defense or vigorously contest an indemnified claim, Superbime may assume control of the defense at the Customer's sole cost and expense, and the Customer shall reimburse Superbime upon demand for all reasonable legal fees and litigation costs incurred.

The Customer shall not settle, compromise, execute a consent decree, or enter into any arrangement that resolves an indemnified claim without obtaining Superbime's express prior written consent. The Customer explicitly agrees that it shall not enter into any settlement or compromise that: (a) admits liability, fault, or wrongdoing on behalf of Superbime or any Indemnified Party; (b) imposes any financial obligation, injunctive restriction, or operational burden on Superbime; (c) impairs, limits, or transfers any of Superbime's intellectual property rights; or (d) creates negative publicity or damages the commercial reputation of Superbime.

The Customer's indemnification obligations set forth in this section shall survive the expiration, cancellation, or termination of these Terms, the Master Services Agreement, and any associated subscription term, as well as the complete cryptographic offboarding and data purge of the Customer's Workspace. The indemnification rights provided herein are independent of, and in addition to, any other contractual, statutory, or equitable remedies available to Superbime under applicable law.

9. Modifications to Terms

Superbime reserves the right to update these Terms periodically. Superbime shall provide written notice to the Customer's designated administrative contact via email or administrative portal alert at least thirty (30) days prior to the effective date of material modifications. Continued use of the Services after the effective date constitutes acceptance of the updated Terms.

10. Contact Information and Escalations

Inquiries, formal notices, security audit requests, or data protection queries regarding this Privacy Policy or Superbime’s technical security measures shall be directed to Superbime’s dedicated privacy operations team. To ensure rapid response times, swift administrative action, and dedicated resource allocation, Superbime provisions dedicated privacy contact channels to Customer organizations at a ratio of one dedicated privacy line for every one hundred Authorized Users. The specific dedicated electronic mail addresses assigned to the Customer are communicated directly during the initial workspace onboarding process, displayed within the billing administrative portal, and explicitly set forth at the bottom of all official billing invoices and routine transactional communications transmitted to the Customer.

Formal legal written notices, statutory correspondence, or physical service of process may be delivered to the corporate physical address designated on the Customer's official billing invoice, Master Services Agreement, or enterprise order form corresponding to the Customer's applicable contracting regional entity.

Superbime
Data Collection & Storage Architecture

Effective Date: October 1, 2026

This Data Collection and Storage Architecture Document establishes a technical, structural, and legal disclosure regarding the ingestion, processing, multi-tenant isolation, cryptographic protection, storage, retention, and purge routines enforced across the Superbime Enterprise B2B Platform operated by Superbime Pvt Ltd and its corporate affiliates. This document functions as a technical and architectural companion to the Superbime Enterprise Privacy Policy and the Superbime Enterprise Terms of Use. While this document delineates the underlying technical data flows, encryption mechanics, and infrastructure safeguards, readers, enterprise procurement officers, and compliance auditors must refer directly to the Privacy Policy and Terms of Use for the complete legal framework governing statutory data subject rights, subscription licensing rules, administrative liability boundaries, acceptable use constraints, and contractual dispute resolution mechanisms.

1. Data Classification and Statutory Processing Capacities

Superbime operates under a strict bifurcated data capacity model in alignment with global data protection frameworks, including the General Data Protection Regulation, the UK General Data Protection Regulation, and the California Consumer Privacy Act as amended by the California Privacy Rights Act. With respect to all Customer Content submitted, processed, or generated within the platform, encompassing task state machines, ticketing records, form entries, file attachments, real-time messaging assets, and operational performance metrics, Superbime acts strictly as a Data Processor or Service Provider. The Customer organization acts as the sole Data Controller or Business, maintaining full legal ownership, administrative control, and responsibility for directing the scope of processing operations.

Superbime operates as a Data Controller solely with respect to a minimal dataset comprised of account administrative contact details, corporate billing records, and infrastructure security logs collected directly from Customer representatives and Authorized Users. This minimal data collection is executed under the statutory legal bases of contract performance, legitimate security interests, and legal recordkeeping compliance. All Customer Content, private messaging streams, and operational analytics are encrypted using AES-256 standards at rest and TLS 1.3 in transit, with data cryptographically isolated per tenant as detailed in Section 2: Data Ingestion, Processing, Storage, Access, and Lifecycle Across System Capabilities. Account and identity data, including passwords hashed via salted algorithms, are maintained within encrypted persistent storage volumes. Infrastructure security logs are segregated within isolated, write-once logging environments subject to automated rotation schedules ranging between ninety and one hundred eighty days.

2. Data Ingestion, Processing, Storage, Access, and Lifecycle Across System Capabilities

The platform operates an integrated microservices architecture executing within deterministic tenant isolation boundaries, where data ingestion varies dynamically based on administrative toggles and active platform features configured by the Customer. Within identity and access workflows, data is ingested directly during workspace setup, directory synchronization, user provisioning, or Single Sign-On SAML and OAuth assertion handshakes via TLS 1.3 encrypted API endpoints, as well as via passive client-side agent headers when conditional access tracking is explicitly activated by the Customer administrator.

The dataset processed within identity operations includes Authorized User legal names, professional work email addresses, corporate telephone numbers, job titles, departments, profile avatar binaries, SAML assertion tokens, salted password hashes utilizing Argon2id or bcrypt algorithms for non-SSO accounts, Role-Based Access Control permission maps, and signed JSON Web Token session claims. Where security logging features are enabled, the system automatically records technical device telemetry, including hardware device identifiers, internet protocol addresses, operating system version builds, browser user-agent strings, referring URLs, login timestamps, interaction timing, and session duration logs.

This identity data is processed strictly to authenticate user identities, enforce role-based authorization vectors, execute conditional access controls, maintain session security, and provide automated threat detection. All identity records are stored in AES-256 encrypted relational database schemas and high-speed in-memory session caches hosted in secure tier-four cloud data centers operated by AWS, GCP, and Azure, with profile images persisted in server-side encrypted object storage buckets. Access to identity data is governed strictly by tenant-scoped API gateways validating cryptographically signed JWT claims and RBAC maps, ensuring zero administrative or analytical access by cloud infrastructure hosts. Upon contract termination, all account credentials, identity maps, and user profiles are permanently erased and rendered unrecoverable within fifteen calendar days via tenant storage key destruction, while transient security logs are segregated in isolated logging environments and shredded on a rolling ninety to one hundred eighty-day lifecycle, or immediately wiped via an emergency cryptographic purge in the event of an age floor breach.

Within core task and workflow features, data is ingested in real-time as Authorized Users create tickets, submit custom forms, reassign workflow items, upload file attachments, and transition state machines across secure HTTPS and WebSocket endpoints. Data processed as Customer Content within this domain includes user task assignments, ticketing state machine updates, custom form entries, assignment matrices, SLA compliance tracking logs, operational approval records, file attachment properties, and project association trees. This data is processed exclusively to serve as the enterprise system of record for Customer project management, workflow automation, SLA tracking, and ticket lifecycle orchestration.

All core workflow data is persisted across AES-256 encrypted database tables and document stores in secure cloud data center regions, with file attachments residing in server-side encrypted object storage buckets assigned explicit tenant identifiers. Access to workflow records is strictly restricted to authenticated Authorized Users belonging to the contracting Customer Workspace whose assigned RBAC permissions grant explicit visibility into the target project group or ticket state. Customer administrators retain self-service deletion rights over task items during the active term, and upon Master Services Agreement termination, all core task records, schema entries, and attachments are cryptographically purged within fifteen calendar days through the destruction of the tenant's primary encryption keys.

Within real-time messaging capabilities, data is ingested via real-time WebSocket streams and secure REST API calls as Authorized Users transmit synchronous and asynchronous channel communications, direct chat messages, thread replies, presence indicators, and interactive ticket card interactions. Ingested data includes direct message contents, channel chat logs, thread interaction trees, file attachment properties, online or offline presence status indicators, and embedded interactive card objects. This data is processed solely to enable synchronous and asynchronous team collaboration, real-time presence awareness, and context-driven operational discussions. Messaging data is encrypted at rest using AES-256 standards within dedicated, cryptographically isolated messaging stores and memory caches situated across secure cloud data center regions.

Access to messaging data is restricted exclusively to active human participants in the specific conversation thread or channel within the native application user interface. All real-time messaging assets are ingested as cryptographically shielded private user assets that are completely isolated from administrative export tools, corporate compliance dumps, and court-order extractions. Under no circumstances—including corporate management demands, internal audits, civil litigation, criminal proceedings, or binding judicial subpoenas—shall Superbime extract, decrypt, or disclose employee messaging data to Customer management, government bodies, or third parties. Messaging assets are retained according to workspace policy during the active subscription and are completely destroyed within fifteen calendar days of contract termination via automated tenant cryptographic key destruction.

The platform compiles organizational analytics and performance metrics by passively ingesting time-series event streams off the internal system event bus, processing time-stamped telemetry generated during ticket state changes, task updates, and workflow resolutions. Data processed within this statistical domain includes ticket resolution velocity, task completion rates, Key Result Area monitoring outputs, and operational productivity analytics. Within the platform architecture, these statistical metrics are directly attributed and tied to individual Authorized Users inside the system environment rather than utilizing aggregated or proxied data models, enabling precise internal productivity evaluation. These metrics are processed solely to calculate and display operational performance statistics to designated Customer administrators within the native platform user interface.

Analytics data is stored in AES-256 encrypted time-series databases and analytical caches located in isolated secure cloud data center clusters. Access to these metrics is strictly restricted to authorized Customer administrators within the secure native application panel. Built-in application guardrails prohibit these individually attributed metrics from being exported, extracted, downloaded, queried via external APIs, or transmitted outside the secure application interface, and Superbime personnel hold zero access rights to these statistics. All organizational analytics and performance metrics are cryptographically erased alongside all tenant workspace data within fifteen calendar days of Master Services Agreement termination through automated storage key destruction.

General administrative and billing data is ingested directly from Customer corporate representatives during workspace onboarding, subscription ordering, feature enablement selection, and billing transactions. Data processed includes workspace resource quotas, feature enablement matrices, subscription tier configurations, designated billing contact names, corporate email addresses, physical office addresses, tax identification numbers, payment transaction metadata, global security policy toggles, system health logs, and administrative audit trails. This data is processed to provision workspace accounts, enforce subscription tiers, execute billing obligations, maintain system health, and fulfill legal accounting mandates.

Administrative data is stored in encrypted relational databases and isolated security logging volumes located in primary secure cloud hosting facilities. Access is restricted solely to authorized Customer administrators and designated Superbime billing and security personnel operating under strict RBAC constraints. Corporate billing transaction records are retained in isolated accounting vaults for statutory retention windows mandated by applicable tax and corporate recordkeeping laws. System health and administrative audit logs are overwritten on a rolling ninety to one hundred eighty-day lifecycle.

3. System-Wide Offboarding, Backup Destruction, and Emergency Purge

Master Services Agreement termination triggers an automated, system-wide offboarding pipeline executing cryptographic key destruction within fifteen calendar days, rendering all database schemas, active volumes, and persistent storage mathematically unrecoverable across the entire workspace boundary. Secondary tenant data residing within automated rolling system backups is rendered unreadable instantly upon primary tenant key destruction, with underlying backup media permanently overwritten pursuant to automated cloud backup rotation lifecycles. Furthermore, Superbime maintains an overarching system safeguard: if verified notice confirms an age floor breach under Section 2, Superbime reserves the right to execute an immediate, unilateral emergency cryptographic purge, permanently deleting the violating workspace database without prior notice or financial liability.

4. Subprocessor Oversight, Judicial Protocols, and Escalation Channels

Superbime maintains a list of vetted infrastructure subprocessors operating under binding data protection agreements. Superbime provides enterprise Customers with at least thirty days' administrative notice prior to engaging any new subprocessor to host or process Customer Content, during which Customers may object on reasonable data protection grounds within fourteen days. Where Superbime is served with a binding judicial court order, search warrant, subpoena, or mandatory statutory directive requiring data production, legal compliance is contractually and technically limited strictly to base operational data, ticket state records, and task metadata processed exclusively by the Core module. Direct messages, channel communications, and thread interactions are treated as cryptographically shielded private assets that shall not be extracted, decrypted, or disclosed to any third party, government authority, judicial body, or Customer management representative under any circumstances.

In the event of a confirmed Security Incident resulting in verified unauthorized access or exposure of Customer Content, Superbime shall notify the Customer’s primary administrative point of contact without undue delay and no later than seventy-two hours following internal confirmation. Superbime provisions dedicated operational and privacy contact channels to enterprise Customer organizations with specific contact addresses communicated during workspace onboarding and set forth on all official billing invoices. Formal legal correspondence and physical service of process are directed to the regional corporate physical address designated on the Customer's official billing invoice or Master Services Agreement.