Terms of Service

For the purposes of these Terms, the following terms have the meanings given here. Defined terms appear capitalised throughout the document; cross-references in the form “§N” refer to the section number printed in the table of contents.

• “Service” means the OperaFO software-as-a-service platform, including the web application served at webapp.operafo.ae, the authenticated REST and GraphQL APIs, AI Analyst features, the Faraid / Zakat / Shariah analytical surfaces, the Reports module, the Document RAG ingestion pipeline, the SuitabilityChecker trust gate, the Morning Brief autopilot, the audit-trail export endpoint, and any successor or auxiliary services we designate in the Documentation. The Service does not include any third-party integrations Customer connects through open-banking, brokerage, or custodian APIs even where such integrations are surfaced inside the Service.
• “Customer Data” means any data, information, or material that Customer or its Authorised Users upload, input, type into a chat surface, ingest via API, attach to the Document RAG index, or generate within the tenant assigned to Customer, including without limitation portfolio holdings, transaction ledgers, beneficiary registers, Faraid declarations, Zakat valuations, IPS drafts, meeting notes, and any narrative output the AI Analyst produces specifically for Customer’s tenant.
• “Authorised User” means an individual employee, principal, advisor, contractor, or family-office staff member that Customer authorises to use the Service on Customer’s behalf, subject to seat limits in the applicable Order Form. Each Authorised User must hold an individually-named login; shared logins are prohibited under §4.
• “Documentation” means the user-facing guides, tier-feature pages, security whitepaper, API reference, in-product help articles, release notes, and any other materials we publish at operafo.ae/docs and within the Service itself, in each case as updated from time to time. The Documentation is incorporated by reference but ranks below these Terms in the order of precedence set out in §22.
• “Order Form” means an ordering document referencing these Terms, executed by Customer (electronically via Stripe Checkout, the in-app billing flow, or in writing) that specifies the subscription tier, term, fees, seat count, any bespoke service-level commitments, and any negotiated data-residency, processing-region, or Shariah-board oversight elections.
• “Tier” means the subscription level Customer purchases, being one of Tier 1 (Free), Tier 2 (Starter), Tier 3 (Professional), or Tier 4 (Agentic), each of which carries a distinct feature set, seat allowance, AI quota, and support envelope as published on the Pricing page and in the Documentation. References to a numbered Tier in these Terms are to the same Tier on the Pricing page in effect as of the Effective Date.
• “Confidential Information” is defined in §8.
• “DPA” means the Data Processing Agreement published at operafo.ae/legal/dpa, as updated from time to time, which sets out the Controller / Processor allocation, the Schedule of Sub-processors, and the technical and organisational measures applicable to processing of personal data.
• “Effective Date” means the earlier of (a) the date Customer first accesses the Service or (b) the date Customer signs an Order Form.
• “Subscription Term” means the period beginning on the Effective Date and ending on the earlier of (a) cancellation under §9, (b) termination under §15, or (c) expiry of the paid-up cycle if not renewed.
• “Sanctioned Person” means any individual or entity that is the subject of, or controlled by a person who is the subject of, sanctions administered by the UAE Executive Office for Control and Non-Proliferation, the UN Security Council, OFAC, HMT, or the EU.
• “Fees” means all amounts payable by Customer under an Order Form or under the published Pricing page, including subscription fees, overage charges, professional-service fees, and applicable taxes.
• “Affiliate” means, in relation to a party, any entity that directly or indirectly controls, is controlled by, or is under common control with that party, where “control” means ownership of more than fifty percent (50%) of the voting equity or the equivalent right to direct management.
• “PDPL” means UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and any implementing regulations issued by the UAE Data Office.
• “DIFC DP Law” means the Dubai International Financial Centre Data Protection Law No. 5 of 2020 as administered by the DIFC Commissioner of Data Protection.
• “ADGM DP Regulations” means the Abu Dhabi Global Market Data Protection Regulations 2021 as administered by the Office of Data Protection of the Registration Authority.

Subject to Customer’s compliance with these Terms and timely payment of Fees, OperaFO grants Customer a non-exclusive, non-transferable, non-sublicensable, world-wide, revocable right during the Subscription Term to access and use the Service for Customer’s internal business purposes only. The right is personal to Customer and its Authorised Users; it does not extend to Customer’s clients, beneficiaries, or counterparties unless those persons are themselves Authorised Users named on Customer’s seat roster.

The Service performs computed analytics over Customer Data. Specifically, OperaFO offers (without limitation):

• Portfolio analytics, including the Dashboard, Holdings ledger, Risk surface (volatility, drawdown, VaR, CVaR), Factor exposure (style and sector), Performance attribution (Brinson and contribution-based), benchmark comparison, scenario stress testing, and the Predictor / Monte-Carlo forward-looking module.
• Wealth-planning surfaces, including Net Worth (assets and liabilities), Cash flow, Goals, the Faraid succession planner, the Zakat calculator (with selectable nisab method), the IPS generator, Sharia analytics (compliance screen, purification estimator, income-source mix), Waqf structuring, and the Digital Wealth Vault for document custody.
• AI-augmented narratives, including the Daily Brief, per-surface AI summary cards, the PortfolioConcierge multi-turn chat, and the Morning Brief autopilot output for Tier 4 tenants, in each case subject to the Tier-specific AI quotas, output-length caps, and retention windows stated in the Documentation.
• The Reports module (server-side PDF generation with per-tenant branding), Document RAG over uploaded files (Tier 3 and above), and agent-driven proposals routed through the SuitabilityChecker trust gate (Tier 4 only). Where the SuitabilityChecker blocks output, OperaFO will surface a redacted explanation; Customer accepts that the gate is conservative by design.
• The audit trail, an append-only immutable log of every authenticated action against Customer’s tenant, exportable to Customer in machine-readable form on request as described in §3.
• Such other features as we make generally available during the Subscription Term and announce in the release notes / Documentation. New features are available to Customer at no additional Fee unless we designate them as a separately-priced add-on at general-availability launch.

The Service is hosted in the AWS Middle East (Bahrain) region by default, with limited supporting plane workloads in the AWS Europe (Frankfurt) region as disclosed in the DPA. Customer may elect a DIFC-resident or ADGM-resident processing region on a Tier 3 or Tier 4 Order Form, in which case OperaFO will pin the relevant tenant data plane accordingly.

We may, in our sole discretion, modify, suspend, or discontinue any part of the Service at any time. We will use commercially reasonable efforts to provide at least thirty (30) days’ advance notice before we permanently discontinue a feature on which Customer materially relies, and will offer a comparable substitute where one exists. For an emergency change required by law, regulator order, or to protect the Service from an imminent security threat, we may act without prior notice and will inform Customer as soon as reasonably practicable thereafter.

The Service is delivered as a multi-tenant SaaS with per-tenant row-level security (RLS) isolation in the application database. OperaFO operates a continuous integrity verifier on a fixed schedule; its results feed the security telemetry referenced in the DPA.

Customer is solely responsible for the security and confidentiality of its account credentials and for all activity that occurs under its account, whether or not that activity was authorised in fact. Customer agrees to:

• require each Authorised User to keep credentials confidential and to use a unique strong password (or passkey) per individual;
• prohibit credential sharing across individuals, including between principals and their staff, and prohibit the use of generic mailbox accounts (e.g. “ops@”) as login identities;
• enforce multi-factor authentication for every Authorised User where the Tier in question makes MFA available, and accept OperaFO’s default enforcement on Tier 3 and Tier 4 tenants;
• notify OperaFO promptly (and in any event within twenty-four (24) hours of becoming aware) of any suspected unauthorised access or credential compromise at security@operafo.ae;
• promptly de-provision any Authorised User who leaves Customer’s organisation, changes role such that they no longer require access, or who Customer reasonably believes may have compromised credentials;
• ensure each Authorised User complies with these Terms, the Documentation, and the in-product acceptable-use prompts surfaced at sign-in;
• maintain accurate Authorised User records (legal name, business email, role) within the Service so the audit trail attributes actions to a real person.

Customer is fully liable for the acts and omissions of its Authorised Users in connection with the Service, including any breach of these Terms by an Authorised User and including any consequences of an Authorised User retaining access after they should have been de-provisioned.

Authorised Users must be at least eighteen (18) years old. The Service is not directed at minors and OperaFO does not knowingly collect personal data of minors except where Customer (in its capacity as Controller) has chosen to record beneficiary data of minor family members in the Faraid or Goals surfaces; in that case Customer warrants that all required parental or guardian authorisations have been obtained under the applicable jurisdiction (PDPL, DIFC DP Law, or ADGM DP Regulations as relevant). Customer represents and warrants that no Authorised User is a Sanctioned Person and that Customer is not located in, or organised under the laws of, a sanctioned jurisdiction.

We log every authenticated action against Customer’s tenant in an immutable audit trail. The audit trail captures actor identity, timestamp (UTC and local), IP address, the API or UI surface invoked, and a deterministic hash of the payload where the action writes to Customer Data. The audit trail is Customer’s data and is exportable to Customer on written request to support@operafo.ae within five (5) business days; an in-product self-service export is available on Tier 3 and above.

If Customer is acquired, undergoes a change of control, or restructures, Customer must promptly notify OperaFO via legal@operafo.ae and review the Authorised User roster within fourteen (14) days of the closing date. OperaFO reserves the right to require re-attestation of these Terms by the successor entity before continuing to make the Service available.

Customer shall not, and shall not permit any Authorised User or third party to:

• reverse-engineer, decompile, disassemble, or otherwise attempt to derive the source code, underlying ideas, algorithms, file formats, prompt templates, retrieval rankings, or non-public APIs of the Service, except to the extent expressly permitted by applicable law notwithstanding this restriction;
• use the Service to provide services to third parties on a service-bureau, time-share, white-label, or rental basis without a separately executed agreement authorising such use;
• resell, sublicense, lease, or otherwise transfer Customer’s right to access the Service, or permit any person other than an Authorised User occupying a paid seat to log in on Customer’s behalf;
• upload Customer Data Customer does not have the right to process, including any personal data Customer has not lawfully obtained under PDPL, DIFC DP Law, ADGM DP Regulations, or the equivalent law of a data-subject’s home jurisdiction;
• upload code, files, or content that contain malware, viruses, time bombs, worms, trojans, ransomware payloads, or any code or executable artefact intended to disrupt, damage, exfiltrate, or limit the functioning of the Service or any system connected to it;
• attempt to gain unauthorised access to any account, computer system, network, model weight, vector index, or storage bucket connected to the Service, including by probing, scanning, fuzzing, or testing the Service’s vulnerability without our prior written consent (a coordinated-disclosure programme is available; see §3 for the security mailbox);
• use the Service in a way that interferes with the performance, integrity, or availability of the Service for other tenants, including by submitting unreasonably high-volume API requests, attempting to bypass rate limits, parallelising the Document RAG ingestion endpoint beyond the published per-tenant ceiling, or running the AI Analyst in tight loops without backoff;
• scrape, crawl, or otherwise systematically extract content from the Service in a manner that exceeds ordinary use; for clarity, programmatic export of Customer’s own data via the documented API is permitted, but harvesting market data, computed analytics, or third-party content from rendered pages is not;
• use the Service to generate or train any competing analytical, AI, or wealth-planning product, including by using AI Analyst output as labelled training data for a competing model;
• use the Service for any unlawful purpose, including for the avoidance of doubt sanctions evasion, money laundering, terrorism financing, market manipulation, insider dealing, tax evasion, or fraudulent activity;
• use the Service to defame, harass, threaten, or invade the privacy of any person, or to send unsolicited communications;
• represent any AI Analyst output, Faraid computation, or Sharia computation to a third party as a fatwa, a religious ruling, a regulated investment recommendation under DFSA, FSRA, or SCA rules, or as legal or tax advice;
• use the Service to make automated decisions about natural persons that produce legal effects or similarly significant effects, except in compliance with PDPL Article 22 and the equivalent provisions of the DIFC DP Law and ADGM DP Regulations and where Customer has obtained the requisite legal basis;
• bypass, disable, or interfere with the SuitabilityChecker trust gate, the AI quota enforcement, the Tier feature gating, or any other technical control that limits feature access by Tier or by user role;
• remove, obscure, or alter any proprietary notices on the Service, the Documentation, or any output of the Service (including any “Generated by OperaFO” watermark on PDF reports, except where Customer has purchased a white-label add-on entitling it to do so);
• publish or share screenshots that expose another tenant’s data or any non-public Service internals; ordinary screenshots of Customer’s own tenant for Customer’s own reporting are permitted.

For illustrative clarity (and without limiting the foregoing): exporting Customer’s own holdings ledger via the documented /api/holdings endpoint, downloading Customer’s own audit log, or printing a Reports PDF for an internal investment committee are permitted uses; building a headless browser that logs in nightly to scrape the Predictor surface, concatenating AI Analyst outputs across many fictitious tenants to bootstrap a competitor model, or sharing a single Authorised User credential across an entire advisory team are not.

Violation of this §4 (Acceptable Use) is a material breach. We may suspend Customer’s access to the Service immediately upon a reasonable suspicion of such a violation under §17 (Suspension); we will give written notice to Customer’s designated billing contact within twenty-four (24) hours of suspension and a meaningful opportunity to cure where the breach is curable. Where the breach cannot be cured (for example, exfiltration of model internals or use of the Service in a sanctions-evasion scheme), OperaFO may terminate immediately under §15 and pursue all remedies available at law and in equity, including the indemnity in §13.2.

As between Customer and OperaFO, Customer retains all right, title, and interest in and to Customer Data, including all intellectual-property rights therein. OperaFO claims no ownership of Customer Data and acquires no licence to it beyond the limited operational licence granted in this §5.

Customer hereby grants OperaFO a non-exclusive, world-wide, royalty-free licence during the Subscription Term to host, copy, transmit, display, index, embed (for retrieval purposes within Customer’s tenant only), and process Customer Data solely as necessary to (a) provide and support the Service, (b) perform Customer’s instructions including AI Analyst queries, (c) maintain backups and disaster-recovery copies, (d) generate the audit trail, (e) comply with applicable law including PDPL, DIFC DP Law, and ADGM DP Regulations as relevant, and (f) as otherwise permitted by these Terms and the DPA. We will not (i) sell Customer Data, (ii) use Customer Data to train shared AI models or any model whose weights are exposed outside Customer’s tenant boundary, (iii) make Customer Data available to other tenants or to any third party except as set forth in the Privacy Policy and the DPA, or (iv) access Customer Data for any purpose other than those listed above without Customer’s prior written consent (an authenticated in-product approval counts as written consent for this purpose).

Customer is solely responsible for the accuracy, quality, integrity, legality, reliability, and appropriateness of Customer Data, and for ensuring all disclosures and consents required of a data Controller have been obtained, including any disclosures required by Article 14 PDPL or the equivalent provisions of the DIFC DP Law and ADGM DP Regulations. Where Customer Data includes personal data of beneficiaries, family members, or third-party clients, Customer warrants that its own privacy notice discloses OperaFO’s role as Processor and references the categories of processing described in the DPA.

Customer must not upload “Special Categories” of personal data (health, biometric, genetic, religious belief, political opinion, criminal-conviction data) or “Sensitive Personal Data” under PDPL into surfaces not designed for it. The Faraid surface is designed to accept religious-school-of-jurisprudence inputs in the context of succession planning and that limited use is permitted. Payment-card data must not be uploaded into Customer Data fields; payment-card data is handled exclusively through Stripe and never traverses OperaFO infrastructure.

Customer may export Customer Data at any time during the Subscription Term using the in-product export tools (CSV, JSON, and PDF as applicable per surface) or by written request to support@operafo.ae. OperaFO will service such written requests within seven (7) business days. Following termination, Customer has thirty (30) days to export Customer Data; after that period we will delete Customer Data in the manner described in §16 (Effect of Termination), subject to retention required by applicable law (including audit-log retention obligations under PDPL implementing regulations and any DFSA, FSRA, or SCA record-keeping obligation that applies to Customer and is contractually referenced in the Order Form).

If a regulator, court, or law-enforcement authority serves OperaFO with a subpoena, production order, or equivalent demand for Customer Data, OperaFO will, where lawful, give Customer prompt written notice so Customer may seek a protective order or otherwise challenge the demand. OperaFO will produce only the portion of Customer Data that is legally required and will narrowly construe the scope of the demand. The cost of compliance with regulator or court demands is addressed in §22.

We may collect, derive, and use anonymised, aggregated statistics that do not identify Customer or any individual (such as the total number of holdings under management across the platform, average response times, feature usage in aggregate, or model-performance benchmarks) for our legitimate business purposes including improving the Service, generating product analytics, and publishing industry research. These aggregated insights are not Customer Data and are not subject to the use restrictions in §5.

Anonymisation is performed such that re-identification is not reasonably possible by reference to other data lawfully available to OperaFO, consistent with the anonymisation standard recognised under PDPL, DIFC DP Law, and ADGM DP Regulations. Cohort sizes for any published statistic are no smaller than ten (10) tenants or one hundred (100) underlying records, whichever is larger. We do not publish per-customer figures or any figure that, in combination with publicly known facts about Customer, could identify Customer.

As between OperaFO and Customer, OperaFO and its licensors own all right, title, and interest in and to the Service, the Documentation, the underlying algorithms, the model fine-tunes and prompt templates, the retrieval indices and ranking pipelines, the visual design and design system, the trademarks “OperaFO” and any associated logos, the names of in-product surfaces (Daily Brief, PortfolioConcierge, Morning Brief, SuitabilityChecker, Digital Wealth Vault, Predictor), and any feedback, suggestions, feature requests, or contributions Customer or its Authorised Users provide about the Service (which Customer hereby irrevocably assigns to OperaFO without any compensation or attribution, save that nothing in this clause obliges OperaFO to implement any such suggestion).

These Terms grant Customer a limited right to use the Service; no other rights are granted, expressly or by implication, estoppel, or otherwise. Nothing in these Terms transfers ownership of the Service or the Documentation to Customer. All rights not expressly granted to Customer are reserved by OperaFO and its licensors.

Customer outputs. Outputs generated by the Service specifically for Customer’s tenant from Customer Data (including AI Analyst narratives, Reports module PDFs, Faraid distribution tables, and Zakat computations) are licensed to Customer on a world-wide, perpetual, royalty-free basis for Customer’s internal business purposes and for onward sharing with Customer’s principals, advisors, regulators, auditors, and beneficiaries to whom Customer owes a fiduciary or professional duty. The underlying models, retrieval pipelines, and prompt infrastructure that produced the output remain OperaFO’s.

Customer may use OperaFO’s name and logo solely to identify Customer as a customer of the Service in Customer’s investor reports, regulatory filings, and ordinary-course business communications, in each case subject to OperaFO’s brand guidelines made available on request. Use of the OperaFO name in a manner that suggests a partnership, endorsement, or regulatory authorisation that does not exist is not permitted. We may identify Customer as a customer (by name and logo) on our website and customer lists; Customer may opt out of this with written notice to legal@operafo.ae and we will action the request within thirty (30) days.

Confidential Information means any non-public information disclosed by one party (the “Discloser”) to the other (the “Recipient”) that is identified as confidential at the time of disclosure or that should reasonably be understood as confidential given its nature and the circumstances of disclosure. Customer’s Confidential Information includes Customer Data, Customer’s business strategies, Customer’s beneficiary registers, the contents of the Document RAG corpus, and any non-public information about Customer’s principals or family. OperaFO’s Confidential Information includes the Service code, security architecture, the contents of the security whitepaper marked as “OperaFO Confidential”, the SuitabilityChecker rule set, the AI prompt templates, pricing not publicly listed, the product roadmap, and the contents of this agreement, any Order Form, and the DPA.

The Recipient shall:

• protect the Discloser’s Confidential Information using at least the same degree of care it uses to protect its own Confidential Information of like importance, but in no event less than reasonable care;
• use the Confidential Information only as necessary to exercise rights or perform obligations under these Terms;
• limit access to those of its employees, contractors, professional advisors, and (in OperaFO’s case) approved Sub-processors who have a genuine need to know and who are bound by confidentiality obligations no less protective than this §8;
• not disclose the Confidential Information to any other person without the Discloser’s prior written consent;
• promptly notify the Discloser of any actual or reasonably suspected unauthorised use or disclosure and cooperate with the Discloser to mitigate the consequences thereof.

Confidential Information does not include information that the Recipient can demonstrate (i) was publicly known at the time of disclosure or has become publicly known through no breach of this agreement, (ii) was rightfully in the Recipient’s possession prior to disclosure, (iii) was independently developed by the Recipient without reference to or use of the Discloser’s Confidential Information (a contemporaneous written record of such independent development is required to invoke this carve-out), or (iv) was rightfully obtained from a third party not under a duty of confidentiality.

If the Recipient is required by law, regulator order, or court order to disclose Confidential Information, the Recipient will give the Discloser prompt written notice (where lawful, and where the order does not contain a non-disclosure direction that prohibits such notice) so the Discloser may seek a protective order or other appropriate remedy, and will disclose only the portion of Confidential Information that is legally required and will use reasonable efforts to obtain confidential treatment of the disclosed material.

The obligations of this §8 survive termination for a period of five (5) years for information not constituting trade secrets, and indefinitely (for as long as the information remains a trade secret under applicable law) for information that constitutes a trade secret. The remedies for breach of this §8 are not subject to the liability cap in §14, as expressly provided in §14.3.

Subscription Tiers and Fees are listed on the Pricing page or in the applicable Order Form. Fees are charged in advance via Stripe in the cycle Customer selects (monthly or annual). Annual cycles are non-refundable except as required by law. Stripe is a third-party payment processor; payment is subject to Stripe’s applicable terms and Customer’s relationship with Stripe is direct.

Tier mechanics. Each Tier carries a seat count, an AI quota expressed in tokens or queries per cycle (per the Documentation), and a feature set. If Customer’s usage exceeds the seat count or AI quota mid-cycle, OperaFO may either (a) prompt Customer to upgrade to the next Tier or to add seats / quota packs at the published rate, or (b) throttle the relevant feature for the remainder of the cycle while preserving Customer’s read access. Tier 1 (Free) is provided as-is with no payment due; Tier 2 (Starter), Tier 3 (Professional), and Tier 4 (Agentic) carry the Fees shown on the Pricing page in effect at the time of purchase.

Fees exclude all taxes, levies, or duties imposed by taxing authorities. Where applicable, VAT (UAE 5% as of the Effective Date) is added at checkout via Stripe Tax. If the applicable VAT rate changes during the Subscription Term, the new rate applies to invoices issued after the change takes effect. Customer is responsible for paying all such taxes associated with its purchases except for taxes based on OperaFO’s net income. Where Customer is required by law to deduct withholding tax on payments to OperaFO, Customer shall gross up the payment so OperaFO receives the agreed Fee net of withholding.

Subscriptions auto-renew at the end of each cycle at the then-current published price for the same Tier unless Customer cancels at least one (1) day prior to the renewal date via the in-product Billing surface or in writing to billing@operafo.ae. If Customer cancels mid-cycle, Customer’s access continues until the end of the prepaid cycle; we do not pro-rate refunds.

Failed payments and dunning. If Customer’s payment fails, we will retry per the Stripe dunning policy and will surface a billing-issue banner inside the Service. If payment is not received within fourteen (14) days of the original due date, we may suspend the Service under §17 until payment is made; if not made within thirty (30) days, we may terminate Customer’s subscription for cause under §15. During a payment-related suspension Customer Data is retained and remains exportable on written request to billing@operafo.ae subject to settlement of past-due amounts.

Disputed charges. Customer must notify OperaFO in writing of any good-faith dispute over an invoice within thirty (30) days of the invoice date or the right to dispute that invoice is waived. Undisputed amounts remain payable on the original due date.

We may change Fees with sixty (60) days’ advance notice. The new Fees apply to renewals occurring on or after the effective date of the change. Annual customers locked into a multi-cycle Order Form keep their negotiated rate for the term of that Order Form. Notice of a Fee change will be sent to the designated billing contact under §21.

Where we make a free trial or beta feature available, Customer’s use is at Customer’s own risk and is provided “as is” without any warranty or support obligation. We may discontinue any free trial or beta feature at any time with no liability and without prior notice. Beta features are clearly labelled in the Service (e.g. with a “NEW”, “Beta”, or “Preview” badge) so Customer can identify them.

Aggregate analytics generated by beta features should not be relied upon for compliance-grade decisions, regulator filings, fiduciary reports to beneficiaries, or external advisor recommendations. Customer is responsible for re-validating any output that influences a real-world decision against a generally-available equivalent or against Customer’s own ground-truth records.

Free trials convert to paid subscriptions at the end of the trial period only if Customer has provided a payment method and has not cancelled. AI quotas during a free trial are typically a fraction of the corresponding paid Tier; the exact ratio is published in the Documentation. Customer Data created during a free trial is retained on conversion to a paid Tier; if Customer does not convert, Customer Data is deleted in accordance with §16 thirty (30) days after trial expiry.

Use of beta features may be subject to additional terms displayed in-product at the time of opt-in (for example, an enhanced telemetry consent for new AI Analyst variants). Such additional terms are layered on top of these Terms and survive opt-out only with respect to data already processed.

We aim to make the Service available 99.5% of the time in any calendar month, excluding scheduled maintenance (notified at least forty-eight (48) hours in advance via the in-product banner and the status page) and Force Majeure events (§19). The current uptime window and recent incident history are published at webapp.operafo.ae/status. The 99.5% target is a service objective and not a contractual SLA except where the Order Form expressly upgrades it to one.

Tier-specific support. Tier-specific support response targets are published in the Documentation and summarised here:

• Tier 1 (Free): best-effort community support via the public help centre. No individual response SLA.
• Tier 2 (Starter): email support via support@operafo.ae with a two-business-day initial response target.
• Tier 3 (Professional): priority email with a one-business-day initial response target and a named customer-success contact for onboarding.
• Tier 4 (Agentic): priority email with a four-business-hour initial response target during UAE business hours (Sunday-Thursday, 09:00-18:00 GST), plus quarterly review calls and a dedicated incident pager for P1.

Incident severity. Critical incidents (P1 — Service unavailable, data integrity at risk, actively-exploited vulnerability) are responded to within two (2) business hours regardless of Tier and notified to tenant owners via email. P2 (significant degradation affecting a feature) is responded to within eight (8) business hours. P3/P4 (cosmetic or minor) follow the Tier’s standard response target. Customer may report a P1 incident at any time via incidents@operafo.ae; that mailbox is monitored 24/7.

Maintenance windows. Standard maintenance is performed on Saturday 02:00-06:00 GST. We avoid maintenance during the last business day of a Hijri month (a peak Zakat-calculation window) and during the GCC equity-market open on the first business day of a Gregorian month.

Service credits. Where an Order Form stipulates a binding SLA, the sole and exclusive remedy for missed targets is the service credit schedule set out in that Order Form, calculated as a percentage of the monthly Fee for the affected month. In the absence of an Order Form SLA, no service credits are payable.

THE SERVICE AND ALL CONTENT IN IT IS PROVIDED “AS IS” AND “AS AVAILABLE”, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. TO THE MAXIMUM EXTENT PERMITTED BY LAW, OPERAFO DISCLAIMS ALL WARRANTIES NOT EXPLICITLY GRANTED IN WRITING, INCLUDING ANY IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, TITLE, AND NON-INTERRUPTED OPERATION.

Without limiting the foregoing, OperaFO makes no warranty that:

• the analytics generated by the Service will be accurate, error-free, complete, current at the moment of display, or fit for any particular purpose;
• the Service will meet Customer’s requirements or operate in combination with any specific hardware, software, system, browser version, brokerage feed, or data source;
• the Service will be available without interruption, free of defects, or that defects will be corrected within any specific timeframe;
• any specific output of the AI Analyst (the Daily Brief, PortfolioConcierge, the Morning Brief autopilot, per-surface AI summary cards) will be free of hallucination, factual error, or model drift;
• the Document RAG retrieval index will surface every relevant passage in Customer’s uploaded corpus, or that retrieval rankings will be stable across model upgrades;
• the SuitabilityChecker trust gate will catch every unsuitable proposal or that its conservative-by-design refusals are calibrated to Customer’s precise risk appetite.

Specific acknowledgements. Customer expressly acknowledges that:

• the Service does not constitute investment advice, trade execution, custody, or portfolio management, and OperaFO is not authorised by DFSA, FSRA, SCA, or any other financial-services regulator to provide such services;
• Sharia computations are analytical outputs and not religious rulings; Customer’s qualified Shariah scholar or Shariah board is the final authority and OperaFO does not represent that any output is fatwa-grade;
• Faraid computations are based on the school of jurisprudence Customer selects (Hanafi, Maliki, Shafi’i, Hanbali, or Ja’fari) and may differ from the determination of a qualified jurisconsult applying the same school to particular facts;
• Zakat calculations rely on the nisab method and asset valuations selected by Customer and on external price feeds whose accuracy OperaFO does not warrant;
• any AI-generated narratives may contain errors, outdated facts, or model drift, and are not a substitute for human professional judgement; the Daily Brief, the Morning Brief autopilot, and PortfolioConcierge outputs are generated from a retrieval-augmented foundation model and inherit the limitations of that class of system;
• market data, benchmark constituents, and reference rates surfaced inside the Service are sourced from third-party providers, may be delayed, and may contain errors that OperaFO does not have a contractual right to correct in real time.

Some jurisdictions do not allow the exclusion of certain warranties, so some of the above exclusions may not apply to Customer to that limited extent. The disclaimers in this §12 do not affect any non-excludable consumer rights Customer may have under applicable law.

13.1 By OperaFO. OperaFO will defend Customer against any third-party claim alleging that the Service, used in accordance with these Terms, infringes a registered patent, copyright, or trademark of that third party (an “IP Claim”), and will pay damages and costs finally awarded against Customer or agreed in settlement of such IP Claim. If we believe an IP Claim is likely to succeed, or if the Service is held in a final non-appealable judgement to infringe, we may (at our option and expense) (a) procure for Customer the right to continue using the Service, (b) modify the Service so it is non-infringing while substantially preserving its functionality, or (c) terminate the Subscription and refund any prepaid Fees for the remaining unused term. We have no obligation under this §13.1 for an IP Claim to the extent it arises from (i) modification of the Service by anyone other than OperaFO, (ii) combination of the Service with software, hardware, or data not provided by us where the infringement would not have arisen without that combination, (iii) Customer’s use of the Service after we notify Customer to discontinue such use, (iv) Customer Data, or (v) compliance with Customer’s specifications or instructions.

13.2 By Customer. Customer will defend OperaFO and its Affiliates against any third-party claim arising from (a) Customer Data, including any claim that Customer Data, or our processing of Customer Data on Customer’s instructions, infringes the rights of, or has caused harm to, a third party (including any claim by a beneficiary, family member, or external advisor whose personal data Customer uploaded), (b) Customer’s breach of §4 (Acceptable Use), (c) Customer’s breach of applicable law in connection with use of the Service (including PDPL, DIFC DP Law, ADGM DP Regulations, sanctions regimes, and AML/CFT obligations), (d) any onward distribution by Customer of an AI Analyst output, Faraid computation, or Sharia computation in a manner inconsistent with the acknowledgements in §12, and (e) any claim by a regulator or licensed financial-services firm to which Customer has on-shared Service output that the output was relied upon as regulated investment advice.

13.3 Procedure. The indemnified party will (a) promptly notify the indemnifying party in writing of the claim (delay in notice excuses indemnification only to the extent the indemnifying party is materially prejudiced by the delay), (b) give the indemnifying party sole control of the defence and settlement of the claim (provided the indemnifying party may not settle a claim that imposes liability, admission of fault, or non-monetary obligation on the indemnified party without the indemnified party’s prior written consent, not to be unreasonably withheld), and (c) provide reasonable cooperation at the indemnifying party’s expense, including preserving relevant records and making knowledgeable personnel available.

13.4 Sole remedy. The remedies set out in this §13 are the indemnified party’s sole and exclusive remedy, and the indemnifying party’s sole and exclusive liability, with respect to any third-party IP claim against Customer covered by §13.1. The Customer indemnity in §13.2 is not subject to the liability cap in §14, as expressly carved out in §14.3.

14.1 Exclusion of indirect damages. TO THE MAXIMUM EXTENT PERMITTED BY LAW, IN NO EVENT WILL EITHER PARTY BE LIABLE TO THE OTHER FOR ANY INDIRECT, INCIDENTAL, SPECIAL, PUNITIVE, EXEMPLARY, CONSEQUENTIAL, OR LOST-PROFITS DAMAGES, OR FOR ANY LOSS OF DATA, BUSINESS INTERRUPTION, LOSS OF ANTICIPATED SAVINGS, LOSS OF GOODWILL, OR LOSS OF INVESTMENT OPPORTUNITY, ARISING OUT OF OR RELATED TO THESE TERMS OR THE SERVICE, REGARDLESS OF THE LEGAL OR EQUITABLE THEORY (CONTRACT, TORT, NEGLIGENCE, STRICT LIABILITY, OR OTHERWISE) AND WHETHER OR NOT THE PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

14.2 Aggregate cap. EACH PARTY’S TOTAL AGGREGATE LIABILITY FOR ALL CLAIMS ARISING OUT OF OR RELATED TO THESE TERMS WILL NOT EXCEED THE AMOUNTS PAID OR PAYABLE BY CUSTOMER TO OPERAFO IN THE TWELVE (12) MONTHS PRECEDING THE EVENT GIVING RISE TO THE FIRST CLAIM. WHERE CUSTOMER IS ON TIER 1 (FREE) AND HAS NOT PAID ANY FEES, THE AGGREGATE CAP IS ONE HUNDRED UNITED STATES DOLLARS (USD 100). MULTIPLE CLAIMS DO NOT ENLARGE THE CAP.

14.3 Carve-outs. The limitations in this §14 do not apply to (a) a party’s indemnification obligations under §13, (b) breach of confidentiality under §8, (c) a party’s breach of its data-protection obligations under the DPA where such breach gives rise to administrative fines under PDPL, DIFC DP Law, or ADGM DP Regulations, (d) Customer’s payment obligations under §9, (e) infringement of the other party’s intellectual-property rights, or (f) any liability that cannot be excluded by applicable law (including liability for fraud, fraudulent misrepresentation, gross negligence, wilful misconduct, or death or personal injury caused by negligence).

14.4 Allocation of risk. The parties acknowledge that the limitations in this §14 form an essential basis of the bargain between them, that the Fees reflect this allocation of risk, and that the limitations would not have been agreed at the same Fees without these limitations. The limitations apply notwithstanding any failure of essential purpose of any limited remedy.

14.5 No claims by Authorised Users. Authorised Users have no direct claim against OperaFO under these Terms. Any claim arising out of an Authorised User’s use of the Service must be brought, if at all, by Customer as the contracting party.

These Terms apply for as long as Customer has an account or an active Subscription. The initial Subscription Term is the period stated in the Order Form, or, if no Order Form is in place, the cycle Customer selected at sign-up.

Termination for material breach. Either party may terminate for material breach with thirty (30) days’ written notice to the other, provided the breaching party fails to cure the breach within that notice period. Where a breach is by its nature incurable (for example, an unauthorised disclosure of trade-secret Confidential Information), the cure period does not apply and the non-breaching party may terminate immediately on written notice.

Termination by OperaFO for cause. We may terminate immediately for cause if Customer:

• breaches §4 (Acceptable Use) in a manner that cannot be cured, including any unlawful use, any attempt to extract Service internals, or any use that exposes another tenant to risk;
• fails to pay Fees within thirty (30) days of the due date despite the dunning process described in §9;
• becomes insolvent, files for bankruptcy, has a receiver, liquidator, or administrator appointed over a material portion of its assets, makes a general assignment for the benefit of creditors, or ceases to carry on business as a going concern;
• is determined by us in good faith to be a Sanctioned Person, to be controlled by a Sanctioned Person, or to be operating in a sanctioned manner;
• is the subject of a regulator order requiring OperaFO to cease providing services to Customer.

Termination for convenience. Customer may terminate for convenience at any time via the Billing surface. Termination for convenience does not entitle Customer to a refund of Fees already paid, except where Customer is on a monthly cycle, in which case access continues to the end of the prepaid cycle. OperaFO may terminate a Tier 1 (Free) tenancy for convenience on thirty (30) days’ notice. OperaFO may not terminate a paid Subscription for convenience during the prepaid term except as part of a global discontinuation of the Service, in which case Customer receives a pro-rata refund of unused Fees.

Effect of pending termination. During a notice period preceding termination, both parties continue to perform all obligations under these Terms, including payment of Fees and adherence to acceptable-use rules. The Subscription remains in force until termination is effective.

Upon termination or expiration of the Subscription:

• Customer’s right to access and use the Service ends. Authorised Users will be unable to log in, the API will return 401 / 403, and outbound webhooks will cease.
• Customer has thirty (30) days from the effective termination date to export Customer Data using the in-product tools (where Customer’s read-only access is preserved for the export window) or via written request to support@operafo.ae. After that period, we will delete Customer Data within an additional thirty (30) days, except for (a) audit-log entries retained per applicable law (including any DFSA, FSRA, or SCA record-keeping obligation that applies to Customer and is contractually referenced in the Order Form) and (b) backups in the ordinary cycle that will age out within ninety (90) days.
• Where Customer is on a tenancy with an elected data-residency region (DIFC or ADGM), deletion is performed within the same region; cross-border deletion is not used to circumvent residency elections.
• Each party will return or destroy the other’s Confidential Information in its possession on written request, except for copies retained in routine electronic backups (which remain subject to §8 until aged out) and except where retention is required by law.
• OperaFO will, on Customer’s written request made within thirty (30) days of termination, provide a one-time deletion certificate confirming the date and scope of deletion.
• Customer remains liable for all Fees accrued before the effective termination date and for any termination-related charges set out in the Order Form (for example, an early-termination fee for a multi-cycle prepaid contract terminated for convenience).
• Provisions which by their nature should survive (including §1 Definitions, §5 Customer Data ownership and the export window, §6 Aggregated Insights, §7 IP, §8 Confidentiality, §13 Indemnification, §14 Limitation of Liability, §16 Effect of Termination, §18 Governing Law, and §22 General) survive termination.

Termination does not relieve either party of any obligation that accrued prior to termination, and is without prejudice to any other right or remedy that either party may have at law or in equity.

We may suspend Customer’s access to the Service if we reasonably believe that:

• Customer is in material breach of these Terms, including a violation of §4 (Acceptable Use) or non-payment under §9;
• Customer’s use is causing imminent harm to the Service, to other tenants, or to the integrity of the AI Analyst infrastructure (for example, prompt-injection attempts directed at shared components);
• we are required by law, regulator order, or court order to suspend access, including a sanctions designation that takes effect mid-cycle;
• a Force Majeure event prevents continued operation;
• a credible security threat (active credential abuse, detected exfiltration attempt, suspected tenant compromise) requires temporary lockout pending investigation.

We will notify Customer’s designated contact promptly (in any event within twenty-four (24) hours of suspension, except where prior notice would undermine the purpose of the suspension or is prohibited by law) and, where reasonably possible, will give Customer a meaningful opportunity to cure before suspension. The scope of suspension will be tailored to the cause; where possible, OperaFO will preserve Customer’s read-only access to enable Customer Data export under §5 even when write access is suspended.

Suspension is not termination; the Subscription continues and Fees remain payable for the full Subscription Term. Where the suspension is not attributable to Customer’s breach (for example, a Force Majeure event), Fees for the affected period will be credited or refunded on a pro-rata basis on written request.

These Terms are governed by the laws of [counsel to confirm: the United Arab Emirates / DIFC / ADGM], without regard to conflict-of-law rules that would cause the laws of any other jurisdiction to apply. The United Nations Convention on Contracts for the International Sale of Goods does not apply.

Disputes. Any dispute arising out of or in connection with these Terms, including any question regarding existence, validity, or termination, will be resolved by [counsel to confirm: arbitration administered by the DIFC-LCIA Arbitration Centre under its Rules / arbitration administered by the DIAC under its Rules / the courts of Dubai International Financial Centre (DIFC) / Abu Dhabi Global Market (ADGM) Courts]. The seat of arbitration shall be [counsel to confirm], the language English, and the tribunal shall consist of one (1) arbitrator unless the value in dispute exceeds AED 1,000,000 in which case three (3) arbitrators shall sit, one appointed by each party and the third (presiding) appointed jointly by the party-appointed arbitrators.

Pre-arbitration negotiation. Before commencing arbitration, the parties will use commercially reasonable efforts to resolve the dispute by good-faith negotiation between senior executives for a period of thirty (30) days starting from a written escalation notice from one party to the other. The pre-arbitration negotiation requirement does not bar interim or injunctive relief.

Equitable relief. Notwithstanding the foregoing, either party may seek injunctive or other equitable relief in any court of competent jurisdiction to protect its intellectual-property rights, Confidential Information, or to enforce its indemnity rights, without first exhausting the pre-arbitration negotiation requirement.

Confidential proceedings. Any arbitration under this §18 shall be confidential. The parties, the tribunal, and the arbitral institution shall treat the existence, conduct, and outcome of the arbitration as Confidential Information under §8, except where disclosure is required by law or to enforce an award.

Class-action waiver. Each party agrees that any dispute will be resolved on an individual basis only. Neither party may bring or participate in any class, collective, or representative action against the other.

Neither party will be liable for any delay or failure to perform (other than payment obligations) caused by circumstances beyond its reasonable control, including acts of God, war, armed conflict, terrorism, civil unrest, government actions, sanctions imposed after the Effective Date, pandemic or epidemic, quarantine restrictions, internet or telecommunications failures of upstream providers, cloud-provider region outages, denial-of-service attacks of significant scale, supply-chain compromise of an upstream model or library, or major regional power outages (a “Force Majeure Event”).

The affected party will give written notice to the other within five (5) business days of becoming aware of the Force Majeure Event, describe the nature and expected duration of the impediment, and use commercially reasonable efforts to resume performance. The affected party will keep the other reasonably updated on mitigation progress.

If a Force Majeure Event continues for more than thirty (30) consecutive days and materially impairs Customer’s ability to use the Service for its intended purpose, either party may terminate the Subscription with no further liability for refunds beyond prepaid-but-unused Fees attributable to the period of non-performance. For clarity, payment obligations for periods preceding the Force Majeure Event are not excused by this §19.

We may update these Terms periodically to reflect changes in the Service, in applicable law, or in industry practice. The current version is dated at the top of this page and a version history is maintained at operafo.ae/legal/terms/history.

Material changes. Material changes (those that adversely affect Customer’s rights or obligations in a substantive way, including changes that increase Fees mid-term outside the §9 mechanism, narrow Customer’s data-protection guarantees under the DPA, or limit OperaFO’s liability beyond the existing §14 envelope) will be notified to Customer’s designated billing contact at least thirty (30) days before they take effect, with a clear summary of what is changing and the rationale.

Non-material changes. Non-material changes (clarifications, typographical corrections, expansion of definitions that do not narrow Customer’s rights, addition of carve-outs that are favourable to Customer, or alignment with regulator guidance issued after the Effective Date) may take effect upon publication, with a note in the version history.

If Customer continues to use the Service after the change takes effect, Customer is deemed to accept the updated Terms. If Customer does not accept the updated Terms, Customer’s sole remedy is to cancel the Subscription before the change takes effect, in which case Customer is entitled to a pro-rata refund of Fees prepaid in respect of the period after the change date if (and only if) the change is a material change as defined above.

Notices to OperaFO must be sent to legal@operafo.ae (with a copy to billing@operafo.ae for billing matters and to security@operafo.ae for security disclosures). For notices that must be served formally (for example, a notice of material breach under §15 or an indemnification claim under §13), Customer must additionally send a copy by reputable international courier to OperaFO Technology Services LLC at the registered address published in OperaFO’s commercial licence, which OperaFO will provide on request.

Notices to Customer will be sent to the email associated with the tenant’s designated billing contact (or any successor address Customer designates in writing via the in-product Billing surface or via billing@operafo.ae). Customer is responsible for keeping the designated billing contact current. Where Customer has appointed a separate legal contact in the Order Form, formal legal notices will be copied to that contact.

Notices are deemed received on the day of email delivery in the recipient’s local time, or on the next business day if delivered after 17:00 local time, on a non-business day, or on a UAE public holiday. Where a courier copy is required, the notice is deemed received on the earlier of (a) signature on the courier’s proof of delivery and (b) three (3) business days after dispatch.

• Assignment. Customer may not assign these Terms or any rights under them, by operation of law or otherwise, without our prior written consent (not to be unreasonably withheld for an assignment to an Affiliate or to a successor in connection with a merger, acquisition, or sale of all or substantially all of Customer’s assets, provided the assignee is not a competitor of OperaFO and is not a Sanctioned Person). We may assign these Terms in connection with a merger, acquisition, reorganisation, or sale of all or substantially all of our assets, provided that the successor assumes our obligations in writing. Any non-permitted assignment is void.
• Severability. If any provision of these Terms is found by a court or arbitral tribunal of competent jurisdiction to be invalid or unenforceable, that provision will be modified to the minimum extent necessary to make it enforceable while preserving the parties’ original commercial intent, and the remaining provisions remain in full force and effect.
• Waiver. No failure or delay by either party to exercise any right under these Terms operates as a waiver of that right, and no single or partial exercise precludes any further exercise. A waiver is effective only if in writing and signed by the waiving party, and is effective only in the specific instance and for the specific purpose given.
• No Third-Party Beneficiaries. These Terms are for the exclusive benefit of OperaFO and Customer; nothing in them confers rights on any third party (including Authorised Users, beneficiaries, or Customer’s clients) under any third-party rights statute, the Contracts (Rights of Third Parties) Act of any jurisdiction, or otherwise.
• Independent Contractors. The parties are independent contractors. These Terms do not establish a partnership, agency, joint venture, fiduciary relationship, or employment relationship between OperaFO and Customer or between OperaFO and any Authorised User.
• Entire Agreement. These Terms, the Privacy Policy, the DPA, and any executed Order Form together constitute the entire agreement between the parties regarding the Service and supersede all prior or contemporaneous communications, proposals, marketing materials, RFP responses, and agreements (whether oral or written) on the same subject. In the event of a conflict, the order of precedence is (1) executed Order Form, (2) DPA, (3) these Terms, (4) Privacy Policy, (5) Documentation. No Customer-issued purchase-order terms or boilerplate preprinted on Customer’s remittance documents modify these Terms, even if OperaFO accepts payment referencing such a document.
• Counterparts. Where these Terms are executed in counterparts (rather than click-through), each counterpart is deemed an original and all together constitute one agreement. Electronic signatures (including DocuSign, Adobe Sign, and the in-product click-through accept flow) are valid and binding under the UAE Federal Decree-Law No. 46 of 2021 on Electronic Transactions and Trust Services and the equivalent legislation of the DIFC and ADGM.
• Cost of regulator demands. Where a regulator, court, or law-enforcement authority serves a demand for Customer Data or Customer-related records, OperaFO will bear its own ordinary compliance costs. Where the demand is voluminous or requires extensive forensic effort, OperaFO may charge Customer at OperaFO’s then-current professional-services rate for the additional effort, with prior notice and Customer’s approval (not to be unreasonably withheld where the demand concerns Customer Data).
• Headings. Section headings are for convenience only and do not affect interpretation. References to a number of days mean calendar days unless “business days” is specified. Business days are Sunday through Thursday excluding UAE public holidays.
• Language. The English-language version of these Terms is the controlling version. Any translation is provided for convenience only and does not modify rights or obligations.