Terms and Conditions

1. Parties, effective date and acceptance

These Terms were published and become effective on August 10, 2026. They govern access to and use of the Cebric SaaS platform available at app.cebric.cl and related services (the "Service").

The provider is Cebric Ingeniería SpA, Chilean RUT 78.490.233-1, domiciled at Av. Los Jardines 932, Huechuraba, Metropolitan Region, Chile ("Cebric"), legally represented by Sebastián Richards Carmona. The "Customer" is the individual or legal entity purchasing the Service; a "User" accesses it with the Customer's authorization. A person accepting on behalf of an entity represents that they have authority to bind it.

1.1 Formation of the electronic contract

Before acceptance, Cebric must make it possible to review, save and print these Terms, the Privacy Policy, the plan, total price, taxes, renewal, duration and relevant restrictions. Acceptance is recorded through a separate affirmative action together with the version, date, time and technical evidence.

For a consumer, the electronic contract is formed only after Cebric sends written confirmation and a complete, clear and accessible copy of the accepted terms, under Article 12 A of Law No. 19,496. An interface that prevents saving or printing, or does not allow the terms to be known unequivocally before purchase, does not satisfy this clause.

1.2 Contract documents

The contract consists of the order, quote or checkout screen; these Terms; the Data Processing Addendum; the Privacy Policy; and any service level or special condition expressly accepted. For a specific conflict, the order of precedence is: signed special condition, Data Processing Addendum, these Terms and general documentation. No document limits non-waivable rights.

2. Service, license and feature changes

Cebric provides document management, human resources, expense reporting, document generation, simple electronic signature, integrations and other features included in the plan. The specific scope, quotas, users and modules are those shown before purchase or stated in the order.

During the subscription, Cebric grants the Customer a limited, non-exclusive, non-transferable and non-sublicensable right to use the Service for lawful internal purposes. The software and source code are not transferred.

Cebric may improve or replace features without materially reducing paid functionality during the current period. If a material change removes an essential feature without a reasonable equivalent, the Customer may terminate the affected module and receive a pro-rata refund for the unused paid period. This does not limit consumer rights.

3. Accounts, permitted use and obligations

The Customer must provide accurate information, appoint administrators, review permissions, protect credentials, remove access promptly and immediately report unauthorized use to contacto@cebric.cl. Each account is personal unless a technical account feature is expressly enabled.

The Customer and Users must not:

• use the Service to violate law, third-party rights, employment duties, privacy or intellectual property;
• introduce malware, bypass controls, test vulnerabilities without written authorization or interfere with availability;
• resell, sublicense or make the Service available outside the organization and purchased plan;
• reverse engineer except to the non-waivable extent allowed by law;
• use AI outputs without human review where they may affect employment, financial, legal or safety outcomes;
• upload unnecessary personal data or sensitive data without a legal basis, notice and appropriate controls.

The Customer is responsible for the lawfulness of its instructions, Customer Data, templates, recipients, approval flows and signature processes. Cebric remains responsible for its own legal and security duties; this allocation does not release it.

4. Plans, charges, renewal and price changes

• Price: disclosed before payment, including currency, cycle, taxes, recurring charges and total. A quote or order prevails over a general price reference.
• Payment: processed through Transbank or another method identified before purchase. Cebric does not store the full card number or security code.
• Trial: if offered, duration, limits and conversion to a paid plan are displayed before it begins. There is no automatic charge without prior information and valid authorization.
• Renewal: applies only if disclosed and accepted. The Customer may disable it before the next charge through the available control or by emailing contacto@cebric.cl. Cancellation applies to the next cycle and does not remove statutory remedies.
• Future pricing: a change is disclosed at least 30 days in advance and applies only at the next renewal. The Customer may cancel before it applies. Automatic CPI or Chilean UF adjustments apply only if specifically stated in the order.
• Late payment: Cebric may suspend paid features after notice and a reasonable opportunity to cure. It will not arbitrarily block access to data the Customer has a right to export.

5. Consumers, withdrawal and remedies

This section applies when the Customer is a consumer under Law No. 19,496. Consumer rights are non-waivable and prevail over incompatible terms.

For distance contracts, the consumer has the withdrawal right and period in Article 3 bis. For services, Cebric may exclude it only if the exclusion is disclosed before purchase in an unequivocal, prominent and accessible manner. Merely including an exclusion in these Terms is insufficient. Without that prior disclosure, Cebric will not treat withdrawal as excluded. Failure to provide contract confirmation triggers the applicable statutory extension.

To exercise withdrawal, the consumer may email contacto@cebric.cl and identify the purchase. Cebric will confirm receipt and provide the refund through the legally required method and period.

Faults, attributable downtime, improper charges, unmet advertising claims or defective performance are governed by Law No. 19,496 remedies. Nothing in these Terms removes repair, refund, performance, damages or legally applicable jurisdiction.

6. Suspension, termination and data exit

The Customer may terminate according to the purchased cycle. Cebric may immediately suspend only when reasonably necessary to contain a security threat, unlawful use, risk to third parties or a valid order; it will explain the reason and restore access when the reason ends. For other material breaches, Cebric will provide notice and, where curable, at least 10 calendar days to cure.

Either party may terminate for an uncured material breach. Cebric will not terminate a paid subscription for convenience during its cycle without a pro-rata refund and without affecting statutory rights.

On termination, the Customer normally has 30 days to export Customer Data in available formats. Cebric deletes active systems within 90 days and backups under their cycle, unless a valid instruction, restriction, legal duty or dispute applies. The Customer must plan and verify its export.

7. Data, intellectual property and confidentiality

The Customer retains its rights in Customer Data. It grants Cebric a limited, worldwide authorization for the necessary duration to host, copy, transmit, back up and transform that data solely to provide, secure and support the Service under the contract.

Cebric and its licensors retain rights in the Service, design, software, documentation and improvements. Voluntary feedback may be used to improve the Service without disclosing confidential information or Customer Data.

Each party will protect the other's non-public information with reasonable care and use it only for the contract. It may disclose it to personnel, advisers and providers who need to know and are bound by confidentiality, or under a valid order, with notice where legally permitted.

Cebric may publish the Customer's name, trademark, logo or case study only with prior written authorization. Being a customer is not authorization.

8. Simple electronic signature

The module supports simple electronic signatures under Law No. 19,799 and its Regulations, Ministry of Economy Supreme Decree No. 181 of 2002. A flow may record identity, authentication, acceptance, date, time, IP address, user agent, hash, document and audit evidence.

A simple electronic signature is not automatically an advanced electronic signature, a notarized signature or identity certification by an accredited provider. Its value and sufficiency depend on the act, formalities, evidence and attribution. The Customer must determine whether a document requires an advanced signature, public deed, personal presence, authorization or another formality.

The verification code or link and hash help access evidence and integrity; they do not independently make a document immutable or guarantee that a court will treat it as authentic. Cebric does not claim automatic equivalence with foreign regimes. The Customer must review local law for use outside Chile.

The Customer must have a legal basis for signer data, use accurate data, select a method proportionate to risk, provide the complete document before signature, preserve evidence and refrain from impersonation or coercion.

9. Availability, support and third-party services

Cebric operates the Service with professional diligence and reasonable continuity measures. No online service is uninterrupted. An uptime, support response, credit or recovery commitment exists only if stated in the applicable plan, order or service level agreement.

There may be scheduled maintenance, emergencies, Internet failures, provider failures and events outside reasonable control. Cebric will disclose material maintenance when practicable and will not use this clause to exclude liability for its own lack of diligence.

Third-party integrations are also governed by their terms. Cebric is responsible for selection and configuration where it acts as processor, but does not control unilateral changes or downtime in an external system. It will disclose known material impacts.

10. Liability

10.1 Business customers (B2B)

Subject to the exclusions below, each party's aggregate contractual liability for events related to the Service will not exceed amounts paid or payable by the Customer in the 12 months before the event. For a free service, the maximum is 10 UF. To the maximum extent permitted, neither party is liable for indirect or consequential loss that was not reasonably foreseeable when contracting.

The limitation and exclusion do not apply to willful misconduct or gross negligence; injury or death; breach of confidentiality or intellectual property; payment obligations; unlawful processing or data protection breach attributable to that party; or liability the law prohibits limiting. The parties must reasonably mitigate loss.

10.2 Consumers (B2C)

The B2B limitations do not restrict non-waivable rights or liability under Law No. 19,496 or another mandatory rule. Cebric is liable to the extent provided by law for breach, negligence, inaccurate information, security and service quality.

10.3 Customer data and actions

The Customer is responsible for unlawful instructions, infringing content, lack of authority and decisions made against clear warnings. Cebric is not released from liability for its own act, omission or legal duty.

11. Changes and communications

Each version is published with an effective date and hash. A material change is notified at least 30 days in advance by email, in-Service notice or another durable channel. It is not retroactive. If it materially changes price, data purpose, liability or functionality, the Customer may terminate before it takes effect without a penalty for the future period.

A version requiring acceptance is not accepted by silence. Operational notices are sent to the account or administrator email. The Customer must keep it current.

12. Governing law, claims and disputes

Chilean law governs. Before litigation, the parties will attempt good-faith resolution through contacto@cebric.cl for 30 days, except for urgent relief or a non-waivable right.

B2B: unless a special condition provides otherwise, disputes are submitted to arbitration under the Rules of the Santiago Arbitration and Mediation Center by an arbitrator acting both in law and equity and appointed under those Rules. Either party may request interim measures from a competent court.

B2C: the consumer may contact SERNAC, a competent Local Police Court or another competent court under Law No. 19,496. No mandatory prior arbitration or unlawful venue is imposed.

If a clause is invalid, it will be adjusted only as necessary without affecting the remainder. Failure to exercise a right is not a waiver. The Customer may not assign without reasonable consent; Cebric may assign in a reorganization or sale after notice and while maintaining applicable protections.

13. Data Processing Addendum

This Addendum forms part of the contract where Cebric processes Customer Personal Data as a processor under Article 15 bis of Law No. 19,628 as amended by Law No. 21,719. "Processed Data" means personal data included in Customer Data.

13.1 Processing details

13.2 Cebric obligations

• process only under documented instructions and notify the Customer where an instruction appears unlawful, suspending it where necessary;
• restrict access to authorized personnel subject to confidentiality and appropriate training;
• maintain proportionate technical and organizational safeguards, logical separation, access management, backups, logging and incident response;
• reasonably assist the Customer with rights, security, impact assessments, authority consultation and demonstrable compliance;
• not sell, exploit for advertising or use Processed Data to train general-purpose models;
• maintain processing records and provide information necessary to demonstrate compliance.

13.3 Customer obligations

• be responsible for lawfulness, accuracy, transparency, minimization, retention and rights handling for its Processed Data;
• configure roles and permissions, control Users and provide lawful instructions;
• not upload sensitive or minor data without the required basis, information, authorization and risk assessment;
• promptly inform Cebric when a request, order or incident requires cooperation.

13.4 Authorized subprocessors

The Customer specifically authorizes the following subprocessors as necessary for the modules used:

Before processing Processed Data in production, Cebric will add the identity and location of the application server hosting provider. A new material subprocessor is notified at least 15 days in advance. The Customer may object on substantiated data protection grounds. The parties will seek an alternative; if none exists, the Customer may terminate the affected module without future penalty. Cebric will enter an equivalent contract and remains responsible for the subprocessor as required by law.

13.5 International transfers

Where a subprocessor operates outside Chile, Cebric will use a mechanism permitted by Articles 27 and 28: adequacy, contractual clauses, another safeguard or a valid exception. On request it will disclose destination and mechanism while protecting security information and trade secrets.

13.6 Rights and incidents

If Cebric receives a request about Processed Data, it will forward it to the Customer without responding on the merits unless instructed or legally required. It will provide reasonable tools and assistance to locate, export, rectify, restrict or delete data.

Cebric will notify the Customer of a Processed Data breach without undue delay after confirmation. It will include available information on nature, categories, approximate volume, consequences, measures and contact, and update it as facts develop. It will not notify data subjects or authorities for the Customer unless instructed or directly required.

13.7 Audit and evidence

Once each year, and additionally after a material incident or authority request, the Customer may request reasonable compliance evidence. Reports, questionnaires and remote review take priority. An on-site inspection requires notice, proportionate scope, confidentiality and controls preventing exposure of other customers' data. The Customer pays extraordinary costs unless Cebric has materially breached.

13.8 Return and deletion

At the end of processing, Cebric will permit export and, at the Customer's documented choice, return or delete Processed Data unless legally required to retain it. The ordinary periods are in section 6. Cebric will confirm deletion on reasonable request after the applicable cycle is complete.

13.9 Precedence

For Processed Data protection, this Addendum prevails over an incompatible general term. It does not reduce either party's statutory duties. An instruction expanding categories, purposes, countries or risk may require assessment and written agreement before execution.

14. Contact

Contracts, security, billing and withdrawal: contacto@cebric.cl
Privacy: privacidad@cebric.cl
Postal address: Av. Los Jardines 932, Huechuraba, Metropolitan Region, Chile