Legal

Terms of Service

Last updated 28 July 2026

1. Who these terms are between

These terms are an agreement between [LEGAL ENTITY NAME](“we”, “us”), the provider of Embaro, and the organization that signs up to use it (“you”). Our registered address is [REGISTERED BUSINESS ADDRESS].

By creating an account or using the service you accept these terms. If you are accepting on behalf of a company, you confirm you are authorized to bind it.

2. What Embaro does

Embaro is software for preparing, approving and sending employee onboarding, offboarding and role-change requests. You configure a request form, your people fill it in, and completed requests are emailed to an address you nominate.

Embaro does not provision accounts or grant access in any other system. It produces a request; acting on that request remains entirely your responsibility.

3. Accounts and your users

You are responsible for everyone you invite, for keeping credentials secure, and for what is done under your account. Tell us promptly if you believe an account has been compromised.

Each plan includes a fixed number of user accounts. You cannot exceed the number included in your plan, and you cannot move to a plan with fewer seats than you are currently using without first removing users.

We offer two-factor authentication. We strongly recommend enabling it on every administrator account.

4. Free trial

New organizations get a 5-day free trial with no card required. We will email you before anything changes.

If you have not subscribed by the end of the trial, your account becomes read-only: your data is still visible but you cannot create new requests. 14 days after that, the account and all of its data are permanently deleted. Subscribing at any point before deletion restores full access with your data intact.

Do not use a trial account as the only copy of anything you need to keep. Deletion is irreversible.

This deletion is automatic. It runs on a schedule, without human review, and nobody at [LEGAL ENTITY NAME] approves it or is asked to look first. It is a real deletion, not a flag: the organization and every record belonging to it — users, requests, employee records, resources, forms and sessions — are removed together. We cannot undo it, and we cannot restore it from a backup on request. Backups exist for our own disaster recovery, age out on our providers’ own cycles, and are not restored selectively for one account.

If you are an IT provider (MSP): deleting your account deletes every client organization you run inside it, and all of their data with it. Those companies are not our customers and have no agreement with us — keeping your account in good standing is what protects their records, and that responsibility is yours, not ours. We notify their administrators directly before the deletion date as a courtesy, not as a substitute for you acting.

5. Subscriptions, pricing and renewal

Plans are billed monthly in advance: Starter at $25 per month, Team at $35 per month, Business at $50 per month. Custom-quoted plans (such as our plan for MSPs and IT providers) are billed at the price agreed with you in writing. Prices exclude any sales tax or VAT, which is added where applicable.

Subscriptions renew automatically each month until canceled. Payments are processed by Stripe; we never receive or store your card details.

We may change prices, but not for an existing subscription without at least 30 days’ notice by email. If you do not accept a price change you may cancel before it takes effect.

6. Cancellation and refunds

You can cancel at any time from your billing settings. Cancellation takes effect at the end of the period you have already paid for, and you keep access until then.

Because the service is billed monthly and can be canceled at any time, payments already made are non-refundable except where required by law, or where we have clearly failed to provide the service.

If you cancel, export anything you need. Data from a cancelled account is deleted on the same schedule as an expired trial.

7. Your data

Everything you put into Embaro — your organization details, request forms, filed requests, employee records and resource catalog — remains yours. We claim no ownership of it.

You grant us only the permission needed to run the service for you: to store, process and transmit that content, including sending completed requests to the address you nominate. We do not sell it, and we do not use it to train AI models.

Exporting is your responsibility. Forms, resources and the employee directory export from their own pages, and every request downloads as a PDF. We do not send a copy of your data before deletion and we cannot produce one afterwards, so take an export while the account is live — including during the read-only period, when exporting still works.

You can export your data and can ask us to delete it at any time. How we handle personal data is described in our Privacy Policy.

Handed-back credentials. When your IT desk records login details against a completed request, secret values are encrypted in their browser before reaching us, using a key we never receive. We store only the sealed result, which can be revealed once and is then destroyed — automatically on expiry if never opened. Because we never hold the key, we cannot open, recover or reconstruct these values for you — not on request, not with a court order, not after a mistake. Retrieve them promptly and store them somewhere durable; if they are lost, your IT desk must issue them again.

AI-drafted forms. The form builder can draft your request form, and propose catalog entries, from a description you write. Drafts are suggestions: nothing takes effect until you review and save, and you are responsible for what you approve — including checking that the form collects what your process actually needs and nothing it shouldn’t.

8. Acceptable use

You agree not to use Embaro to:

  • break the law, or infringe anyone’s rights
  • store data you have no lawful basis to hold
  • attempt to access another customer’s data, or probe our security
  • send unsolicited bulk email through the service
  • resell or white-label the service without our written agreement
  • place excessive automated load on the service

Embaro is not designed to hold special-category personal data (such as health or biometric records), payment card numbers, or government identity numbers. Please do not put them into request forms.

9. Availability and support

We aim to keep Embaro available and to respond to support requests promptly, but we do not currently offer a contractual uptime guarantee or service credits. We may take the service down for maintenance, and will give notice where we reasonably can.

Support is by email at hello@embaro.app, or from the Help section inside your account, which keeps the conversation in one place and emails you when we reply.

If your account is run by a managed IT provider, your support goes to that provider, not to us — they are who you have the relationship with, and they can bring us in when they need to. Nothing in this section is a promise by us to answer you directly in that case.

10. No warranty

Embaro is provided “as is”. To the fullest extent permitted by law we disclaim all warranties, express or implied, including fitness for a particular purpose and non-infringement.

In particular, Embaro is a tool for preparing and routing requests. It is not a system of record for employment or HR compliance, and it does not verify that the access granted or revoked in your other systems is correct. Reviewing what a request asks for, before acting on it, is your responsibility.

11. Limitation of liability

To the fullest extent permitted by law, neither party is liable for indirect or consequential loss, loss of profit, loss of business, or loss of data.

Our total liability arising out of or relating to these terms is limited to the amount you paid us in the twelve months before the event giving rise to the claim.

Nothing in these terms limits liability that cannot be limited by law, including for death or personal injury caused by negligence, or for fraud.

12. Indemnity

You will indemnify us against claims arising from your content, from your use of the service in breach of these terms, or from your failure to hold the rights or lawful basis needed for the personal data you put into it.

13. Confidentiality

Each party will keep the other’s non-public information confidential and use it only to perform under these terms. This does not apply to information that is public through no fault of the receiving party, or that must be disclosed by law.

14. Suspension and termination

You may stop using Embaro and close your account at any time. We may suspend or terminate an account that materially breaches these terms, that has not paid, or where we are required to by law. Where the circumstances allow it, we will warn you first and give you a chance to put things right.

On termination you lose access to the service, and your data is deleted on the schedule described in section 4. Export anything you need before that.

15. Changes to these terms

We may update these terms. For material changes we will give at least 30 days’ notice by email to account administrators. Continuing to use Embaro after a change takes effect means you accept the updated terms.

16. Governing law

These terms are governed by the laws of the State of New Jersey, USA, without regard to conflict-of-law rules, and the state and federal courts located in New Jersey have exclusive jurisdiction over any dispute.

17. Contact

Questions about these terms: hello@embaro.app, or via the contact page.