Terms of service

These terms are the agreement between [Registered company name] ([RC number]), a company registered in Nigeria and referred to here as KREO, we or us, and the organisation whose workspace you are using, referred to as you.

The agreement is with the organisation, not with the person who typed the password. Whoever creates a workspace confirms they are authorised to accept these terms for that organisation, and everyone they invite into it is covered by them. If you are using KREO on your own account with no organisation behind you, the agreement is with you personally.

Creating a workspace, or accepting an invitation into one, is acceptance of these terms and of the privacy policy, which forms part of them.

You are responsible for who is in your workspace and for what they do there. KREO gives you five roles, and the difference between them is enforced by the database rather than by the buttons on screen: an owner and an admin can invite people, change roles and delete records; a manager can additionally record money; a contributor can create and edit work but not touch the ledger; a viewer can only read.

Choose the narrowest role that lets someone do their job, and remove people when they leave. An invitation is only valid for the address it was sent to and expires on its own, but a member who is still in the workspace stays there until somebody takes them out.

Keep your password to yourself and tell us at [hello@example.com] if you think an account has been reached by someone who should not have it. Passwords are stored hashed and nobody here can read yours, which also means nobody here can recover it for you.

KREO is for running creator campaigns: recording the deal, tracking what was delivered, holding the files, and keeping the licence attached to the work it covers. Use it for that.

What you must not do

• Enter personal data about somebody when you have no lawful basis to hold it. You decide what goes into a creator record, so this one is yours - see clause 4 and the privacy policy.
• Upload material you do not have the right to store or share, including a contract you are not a party to and creative you have not licensed.
• Use the service to hold special-category data. Health, religious or political information, biometrics, and bank or card details do not belong in a creator record or in a notes field.
• Probe, scan or attempt to reach another organisation's workspace, or test the service's security without written permission.
• Resell access, or run KREO as a service for a third party without agreeing that with us first.
• Automate the interface at a volume that degrades it for anybody else.

Everything you put into KREO remains yours: the campaigns, the deals, the contracts you upload, the creative your creators deliver, and the rights records built on top of them. We claim no ownership of any of it and acquire no licence to use it beyond what is needed to run the service for you - storing it, showing it back to the people in your workspace, and sending the notices you have asked for.

We do not sell your records, do not share them with anyone outside the three suppliers named in the privacy policy, and do not use them to train machine learning models - ours or anybody else’s.

For the same reason, you are the one answerable for what is in there. You confirm that you have the right to hold the personal data you enter about creators and clients, and that where the law requires those people to be told, they have been. The privacy policy sets out how that responsibility divides between us.

This is the most important clause in the document, so it is written plainly. KREO stores what your team enters about a licence. It does not read your contract, does not check that what was entered matches what was signed, and cannot tell you whether a right is valid or enforceable. Nothing in this service is legal advice.

The expiry date is arithmetic

Where a licence has a fixed term, KREO computes the end date from the start date and the duration you gave it. Reminders at 30, 14, 7 and 1 days before that date are a scheduling convenience. They are not a legal warning, they depend on the dates being entered correctly and on email arriving, and no reminder failing to appear makes a lapsed licence live.

A blank is not a yes and not a no

Where a permission - exclusivity, paid media, whitelisting - has not been recorded, KREO shows Not specified and will never show it as refused. That is deliberate: the product will not invent a legal answer. It means nobody has told KREO, and the only place the answer exists is the contract.

Where they disagree, the contract wins

A KREO record is evidence of what your team recorded. It is not evidence of what was agreed. If the record and the signed agreement conflict, the signed agreement governs, and the decision about whether you may use a piece of content is yours to make and yours to defend.

Contracts and assets are held in private storage and served only through links that expire shortly after they are generated. There is no public URL for a file in KREO, and a link only ever works for somebody signed in to the workspace that owns it.

Contracts are limited to 25 MB and to PDF and Word formats. Assets are limited to 1 GB, which is set for video. We may refuse or remove a file that breaks these terms, that we are required by law to remove, or that threatens the service or the people using it.

You are responsible for what you upload, including making sure it is free of malware before it goes in. Keep your own copies of anything you cannot afford to lose. KREO is a working record, not a backup service.

What we scan, and what we cannot

Malware scanning is built into KREO but is not switched on for this deployment yet, so assume no file here has been checked. We would rather say that than let this page imply a protection you are not getting. When it is switched on, this clause will say so and will also say what it cannot cover.

No fee applies to your workspace unless you have agreed one with us in writing. Where a fee has been agreed, it is payable as set out in that agreement, prices are in Nigerian naira unless stated otherwise, and they exclude any tax you are required to pay.

If we introduce a charge for a workspace that is currently free, we will tell you at least 30 days before it starts, and you may close the workspace and export your records before it does rather than pay it.

We work to keep KREO available and will give notice of planned maintenance where we reasonably can. We do not promise uninterrupted service, and the service is provided as it is: without a warranty that it will be free of faults, or that it will meet a requirement you have not told us about.

Parts of KREO depend on suppliers we do not control - the database, the host, the mail provider - and an outage at one of them is an outage here. That is a reason to keep your own copies of anything critical, which clause 6 also says.

You may stop using KREO at any time. To close a workspace and have its records deleted, write to us from an owner’s address at [hello@example.com].

We may suspend or close a workspace if these terms are broken in a way that is serious or that is not put right after we ask, if we are required to by law, or if an account is being used to attack the service. Except where the law prevents it or the breach makes it unsafe, we will tell you first and give you a chance to export.

Inside the product, archiving is the reversible action and deletion is not. A record that has history attached - a campaign with deals under it, a creator with a licence - cannot be deleted at all while that history exists, because destroying the evidence of a commercial agreement is not an outcome a single click should be able to produce.

While your workspace is open, KREO exports campaigns, creators, deals, deliverables, rights records and payments as CSV from inside the app. Uploaded contracts and assets can be downloaded from the records they are attached to.

After a workspace is closed we keep its data for 30 days so it can be recovered if the closure was a mistake, and then delete it. If you need a full copy in that window, ask and we will provide one.

Nothing in these terms limits liability that cannot lawfully be limited, including liability for death or personal injury caused by negligence, or for fraud.

Subject to that, neither of us is liable to the other for loss of profit, loss of business, loss of goodwill, or any indirect or consequential loss, and our total liability to you for all claims in any twelve-month period is limited to the fees you paid us in that period, or to ₦100,000 where no fee was paid.

In particular, and following clause 5, we are not liable for a decision you make about whether content may be used. That decision rests on your contract and on your own judgement, and KREO’s record of it is a convenience rather than a guarantee.

We may change these terms as the service changes. Where a change materially affects your rights or obligations, we will tell every workspace owner by email at least 30 days before it takes effect, and the date at the top of this page always says which version is in force.

Continuing to use KREO after a change takes effect is acceptance of it. If you would rather not accept, close the workspace before that date and export your records under clause 10.

These terms are governed by the laws of the Federal Republic of Nigeria.

If something goes wrong, write to us first at [hello@example.com] and give us 30 days to sort it out; most disputes are a misunderstanding that a conversation fixes. Where that does not work, the courts of Lagos State, Nigeria have exclusive jurisdiction.

[Registered company name] ([RC number])
[Registered address, Nigeria]
[hello@example.com]

For anything about personal data specifically, the privacy policy has its own contact route and a deadline we hold ourselves to.