Terms of Service

"Service" means the TurboFinOps multi-cloud FinOps, security, governance, and audit platform, including the web application, APIs, background workers, integrations, documentation, and any related tooling provided by TurboFinOps under these Terms.

"TurboFinOps", "we", "us", or "our" means TurboFinOps, a company registered at Romania, and any of its authorized affiliates operating the TurboFinOps platform.

"Customer" or "you" means the legal entity or individual that creates an account, subscribes to a plan, or otherwise accesses the Service. If you are acting on behalf of an organization, you represent that you have authority to bind that organization to these Terms.

"User"means any individual granted access to the Service within a Customer's organization, including administrators, operators, auditors, and viewers, as defined by the role-based access control system.

"Customer Data" means all data, content, and information submitted to the Service by or on behalf of the Customer, including cloud credentials, resource metadata, findings, audit logs, and configuration settings.

"Cloud Actions"means any remediation, modification, or operational change executed against a Customer's cloud infrastructure through the Service using Customer-provided credentials, whether initiated manually, in safe mode, or through automated approval workflows.

By registering for an account, clicking "I agree", or otherwise accessing or using the Service, you confirm that you have read, understood, and agree to be legally bound by these Terms and our Privacy Policy, which is incorporated herein by reference.

You must be at least 18 years of age to use the Service. You represent and warrant that you have the legal capacity to enter into a binding agreement and that your use of the Service does not violate any applicable laws or regulations in your jurisdiction.

If you are accepting these Terms on behalf of a company, organization, or other legal entity, you represent that you are duly authorized to do so and that the entity agrees to be bound by these Terms. Unauthorized use of the Service on behalf of an entity you do not represent is prohibited and may result in account suspension.

TurboFinOps reserves the right to decline service to any individual or entity at its discretion, including without limitation where the use would violate applicable export controls, sanctions, or where the applicant has previously been suspended from the Service.

TurboFinOps is a multi-cloud SaaS control plane that connects to Amazon Web Services, Microsoft Azure, and Google Cloud Platform environments using credentials provided by the Customer. The Service provides cloud resource inventory scanning, cost optimization findings, security posture assessment, governance policy enforcement, audit evidence generation, and automated remediation capabilities.

The Service operates in two planes: a control plane (authentication, RBAC, settings, billing, dashboards) and an execution plane(background scanning workers, pricing sync, action execution, evidence generation). Long-running operations are processed asynchronously via queued background jobs and do not block the platform's API responsiveness.

AI-assisted recommendations and summaries are available where the Customer configures a supported AI provider (BYOAI -- Bring Your Own AI). AI features are supplementary and are never the sole source of operational decisions. When AI is unavailable, the platform falls back to rule-based recommendations automatically.

Third-party integrations (Jira, ServiceNow, Slack, and others) are available for ticket creation and notification dispatch. The Customer is responsible for maintaining the validity of integration credentials and for complying with the terms of those third-party services.

TurboFinOps may modify, add, or remove features of the Service at any time, subject to the notice requirements in Section 13. Material reductions in functionality for paid plans will be communicated with reasonable advance notice.

To access the Service, you must register for an account and provide accurate, complete, and current information. You agree to update your account information promptly if it changes. Account registration is completed via Supabase Auth, which supports email/password, OAuth (Google, GitHub, Microsoft), and enterprise SSO/SAML configurations.

You are solely responsible for maintaining the confidentiality of your account credentials, including passwords, API keys, and SSO sessions. You must notify TurboFinOps immediately at security@turbofinops.com if you become aware of any unauthorized access to or use of your account.

Each organization account may have multiple Users assigned roles through the built-in role-based access control system (Admin, FinOps, Security, Auditor, Viewer). The organization Admin is responsible for managing User access, revoking credentials for departing team members, and ensuring that Users comply with these Terms.

You must not share account credentials, circumvent authentication mechanisms, or allow unauthorized individuals to access the Service through your account. Violation of these obligations may result in immediate account suspension and may render the Customer liable for any resulting damages.

The Service is offered under subscription plans with varying feature access and usage limits, as published on the pricing page at the time of subscription. Billing is managed through Stripe, and by subscribing you authorize TurboFinOps to charge the payment method on file for all applicable fees in advance of each billing period.

Subscriptions renew automatically at the end of each billing period (monthly or annual, as selected) unless cancelled before the renewal date. Cancellation takes effect at the end of the current paid period; no refunds are issued for unused portions of a subscription period except where required by applicable law.

All fees are stated in US dollars (or another currency as presented at checkout) and are exclusive of applicable taxes. The Customer is responsible for all applicable taxes, levies, or duties imposed by taxing authorities. Where TurboFinOps is legally required to collect taxes, they will be added to invoices.

Usage-based components (where applicable) are calculated based on data reported by the platform's metering system. In the event of a billing dispute, the Customer must notify TurboFinOps in writing within 30 days of the invoice date. Undisputed amounts remain due.

TurboFinOps reserves the right to modify pricing with at least 30 days' prior written notice for existing subscribers. Continued use of the Service after a price change constitutes acceptance of the new pricing.

Failure to pay fees when due may result in suspension of access to the Service. Accounts suspended for non-payment will have access restored upon receipt of all outstanding amounts, subject to any applicable reconnection fees.

You agree to use the Service only for lawful purposes and in accordance with these Terms. You must not use the Service in any manner that could damage, disable, overburden, or impair the Service or interfere with any other party's use and enjoyment of the Service.

The following uses are strictly prohibited:

• Accessing cloud accounts, infrastructure, or data for which you do not have explicit authorization from the resource owner.
• Using the Service to execute Cloud Actions against infrastructure you do not own or have not been expressly authorized to manage.
• Attempting to reverse engineer, decompile, disassemble, or otherwise derive source code from the Service.
• Submitting false, misleading, or fraudulent data to the Service, including fabricating cloud credentials.
• Using automated tools, scripts, or bots to scrape, crawl, or extract data from the Service in ways not permitted by the API.
• Reselling, sublicensing, or providing access to the Service to third parties without written authorization from TurboFinOps.
• Using the Service to store or transmit malicious code, malware, or any content that violates applicable law.
• Attempting to probe, scan, or test the vulnerability of the Service or its underlying infrastructure without written authorization.

TurboFinOps reserves the right to investigate suspected violations of this policy and to cooperate with law enforcement authorities regarding activities that may be unlawful. Violation of this Acceptable Use Policy may result in immediate suspension or termination of access without refund.

As between TurboFinOps and the Customer, the Customer retains all ownership of and responsibility for Customer Data. TurboFinOps processes Customer Data solely as necessary to provide and improve the Service, in accordance with the Privacy Policy and, where applicable, a data processing addendum executed between the parties.

Cloud credentials (AWS IAM access keys, Azure service principal credentials, GCP service account keys, and equivalent) provided by the Customer are stored encrypted at rest and used exclusively to execute scans, retrieve resource metadata, pricing data, and perform authorized Cloud Actions on behalf of the Customer. TurboFinOps will not use cloud credentials for any purpose beyond the delivery of the Service.

Customer Responsibility for Cloud Actions: The Customer bears full and sole responsibility for any Cloud Actions executed through the Service. This includes actions initiated manually, approved through the platform's approval workflow, or executed under automated action modes configured by the Customer. The Customer acknowledges that modifying, stopping, deleting, or otherwise altering cloud resources may be irreversible and may have significant operational or financial consequences. TurboFinOps strongly recommends testing all actions in non-production environments before applying them to production infrastructure.

The Service includes a conflict detection guard that checks for IaC ownership tags, freeze windows, policy protection flags, and ticket requirements before any Cloud Action is executed. However, this guard operates based on data and configuration available at the time of execution and does not constitute a guarantee that any given action is safe or appropriate for the Customer's specific environment. The Customer is responsible for reviewing and validating all recommended actions before authorizing execution.

You grant TurboFinOps a limited, non-exclusive license to access, process, and store Customer Data for the purpose of providing the Service during the subscription term. This license terminates upon account deletion or Service termination, subject to applicable data retention obligations.

TurboFinOps will maintain reasonable technical and organizational safeguards to protect Customer Data. However, the Customer is responsible for independently backing up critical data and for ensuring that cloud credentials granted to the Service are scoped with least-privilege access appropriate to the Customer's security requirements.

The Service, including all software, algorithms, user interfaces, rule catalogs, scoring methodologies, documentation, and branding, is and remains the exclusive intellectual property of TurboFinOps and its licensors. These Terms do not convey any ownership interest in the Service to the Customer.

Subject to these Terms and payment of applicable fees, TurboFinOps grants the Customer a limited, non-exclusive, non-transferable, revocable license to access and use the Service during the subscription term solely for the Customer's internal business purposes.

The Customer must not copy, modify, distribute, sell, or lease any part of the Service, nor may the Customer reverse engineer the Service except to the extent expressly permitted by applicable law. The "TurboFinOps" name, logo, and all related marks are trademarks of TurboFinOps. Use of these marks without prior written consent is prohibited.

Feedback, suggestions, or ideas submitted by the Customer or its Users regarding the Service may be used by TurboFinOps without restriction or compensation. The Customer grants TurboFinOps a perpetual, irrevocable, royalty-free license to use such feedback for any purpose, including improving the Service.

Each party may receive confidential information of the other party in connection with the Service. "Confidential Information" means any information designated as confidential or that reasonably should be understood to be confidential given the nature of the information and the circumstances of disclosure, including but not limited to business plans, technical architecture, pricing, and Customer Data.

Each party agrees to hold the other's Confidential Information in confidence using at least the same degree of care it uses for its own confidential information (but not less than reasonable care), and to use Confidential Information only for the purposes of these Terms. Neither party will disclose the other's Confidential Information to third parties without prior written consent, except as required by law or court order.

Confidentiality obligations do not apply to information that: (a) is or becomes publicly known through no fault of the receiving party; (b) was rightfully known before disclosure; (c) is independently developed without use of Confidential Information; or (d) is received from a third party without restriction.

The obligations in this section shall survive termination of these Terms for a period of five (5) years, except with respect to trade secrets, for which the obligations shall survive indefinitely.

TurboFinOps will use commercially reasonable efforts to maintain the availability of the Service. Planned maintenance windows will be communicated in advance where practicable. However, the Service is provided on an "as is" and "as available" basis without warranties of any kind, whether express, implied, statutory, or otherwise.

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, TurboFinOps EXPRESSLY DISCLAIMS ALL WARRANTIES, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND ACCURACY OF DATA. TurboFinOps DOES NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, OR FREE OF HARMFUL COMPONENTS.

Cloud cost estimates, savings recommendations, security findings, and optimization scores generated by the Service are based on data retrieved from cloud provider APIs and are provided for informational purposes only. These outputs do not constitute professional financial, security, legal, or compliance advice. The Customer is solely responsible for validating and acting upon any recommendations generated by the Service.

The Service relies on cloud provider APIs (AWS, Azure, GCP) and third-party infrastructure providers (Supabase, Aiven, Resend, Stripe). TurboFinOps is not responsible for disruptions, rate limits, API changes, or data inaccuracies attributable to those providers. The Customer acknowledges that cloud provider API responses may be delayed, incomplete, or inconsistent, and that this may affect the accuracy of Service outputs.

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, TurboFinOps AND ITS AFFILIATES, OFFICERS, EMPLOYEES, AGENTS, AND LICENSORS SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, PUNITIVE, OR EXEMPLARY DAMAGES, INCLUDING LOSS OF PROFITS, LOSS OF DATA, LOSS OF GOODWILL, BUSINESS INTERRUPTION, OR THE COST OF SUBSTITUTE SERVICES, EVEN IF TurboFinOps HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

IN NO EVENT SHALL TurboFinOps'S AGGREGATE LIABILITY TO THE CUSTOMER FOR ALL CLAIMS ARISING UNDER OR RELATED TO THESE TERMS EXCEED THE GREATER OF (A) THE AMOUNT PAID BY THE CUSTOMER TO TurboFinOps IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM, OR (B) ONE HUNDRED US DOLLARS (USD 100).

Cloud Action Liability: The Customer expressly acknowledges and agrees that TurboFinOps shall have no liability whatsoever for any damage, data loss, service disruption, cost overrun, or operational consequence resulting from Cloud Actions executed through the Service using Customer-provided credentials and Customer-approved action configurations. The Customer assumes all risk associated with the execution of Cloud Actions, including actions executed under automated approval modes configured by the Customer.

The Customer agrees to indemnify, defend, and hold harmless TurboFinOps and its affiliates, officers, directors, employees, and agents from and against any claims, liabilities, damages, losses, and expenses (including reasonable legal fees) arising out of or related to: (a) the Customer's use of the Service in violation of these Terms; (b) Cloud Actions executed through the Service on the Customer's behalf; (c) the Customer's cloud credentials or infrastructure; or (d) any third-party claims arising from the Customer's data or operations.

Some jurisdictions do not allow the exclusion of certain warranties or limitation of liability. In such jurisdictions, the limitations above shall apply to the maximum extent permitted by law.

TurboFinOps may suspend the Customer's access to the Service immediately and without prior notice if: (a) the Customer materially breaches these Terms and fails to cure the breach within 10 business days of written notice; (b) the Customer's account poses a security risk or is being used for unlawful activity; (c) fees are overdue by more than 15 days; or (d) required by applicable law or a court order.

The Customer may terminate their subscription at any time through the billing portal or by providing written notice to legal@turbofinops.com. Termination takes effect at the end of the current billing period. The Customer will retain read-only access to their account for the remainder of the paid period following a cancellation request.

Upon termination, TurboFinOps will retain Customer Data according to the plan retention window published in the Data Handling documentation (30 days for Free, 6 months for Professional, and custom contractual terms for Enterprise), after which it will be deleted from production systems in accordance with the data retention policy. The Customer is solely responsible for exporting any required data (audit logs, evidence artifacts, findings exports) before this period expires.

Sections that by their nature should survive termination shall survive, including without limitation: Definitions, Intellectual Property, Confidentiality, Limitation of Liability, and Governing Law.

TurboFinOps reserves the right to modify these Terms at any time. Material changes will be communicated to registered customers via email at least 30 days before the effective date. Non-material changes (such as clarifications, formatting corrections, or legal reorganization without substantive effect) may be made without advance notice.

Continued use of the Service after the effective date of updated Terms constitutes acceptance of those changes. If the Customer does not agree with the updated Terms, the Customer may terminate their subscription before the effective date without penalty for early termination attributable solely to the Terms change.

TurboFinOps may modify, add, or discontinue features of the Service at any time for reasons including technical improvements, security requirements, changes in cloud provider APIs, or business reasons. TurboFinOps will use reasonable efforts to provide advance notice of material feature removals that affect paid plan functionality.

These Terms are governed by and construed in accordance with the laws of Romania, without regard to its conflict of law principles. The United Nations Convention on Contracts for the International Sale of Goods does not apply to these Terms.

In the event of a dispute arising out of or relating to these Terms or the Service, the parties agree to first attempt to resolve the dispute through good-faith negotiations. Either party may initiate this process by sending written notice to the other party describing the dispute in reasonable detail. The parties shall have 30 days from receipt of such notice to attempt to resolve the dispute informally.

If the parties cannot resolve the dispute informally, either party may pursue binding arbitration administered under the rules of Romania, or may bring an action in the competent courts of Romania. The Customer agrees that any dispute resolution proceedings will be conducted on an individual basis and not as part of a class, consolidated, or representative action.

Notwithstanding the above, either party may seek injunctive or other equitable relief in any court of competent jurisdiction to protect its intellectual property rights or to prevent imminent harm.

Entire Agreement: These Terms, together with the Privacy Policy, any executed data processing addendum, and any Order Form or Subscription Agreement, constitute the entire agreement between the parties with respect to the Service and supersede all prior or contemporaneous understandings, representations, or agreements.

Severability: If any provision of these Terms is found to be unenforceable or invalid by a court of competent jurisdiction, that provision shall be limited or eliminated to the minimum extent necessary so that these Terms otherwise remain in full force and effect.

Waiver:Failure by either party to enforce any provision of these Terms shall not constitute a waiver of that party's right to enforce that provision or any other provision in the future.

Assignment: The Customer may not assign or transfer these Terms or any rights hereunder without the prior written consent of TurboFinOps. TurboFinOps may assign these Terms in connection with a merger, acquisition, or sale of substantially all of its assets, provided that the assignee assumes all obligations under these Terms.

Force Majeure:Neither party shall be liable for delays or failures in performance resulting from circumstances beyond that party's reasonable control, including natural disasters, government actions, internet disruptions, or widespread infrastructure failures, provided that the affected party uses commercially reasonable efforts to mitigate the impact.

For questions about these Terms of Service, please contact us using the information below. We will endeavour to respond to all inquiries within 5 business days.