Effective Date: 20 Oct 2026

1. Compliance with Laws and Regulations
   Users of Cedur software must comply with all applicable laws, regulations, and industry standards related to payroll processing, tax reporting, labour laws, and data privacy. This includes but is not limited to statutory compliance, tax laws, and data protection regulations applicable in their jurisdiction.
2. Data Privacy and Confidentiality
   Users must ensure the privacy and confidentiality of employee data and protect sensitive information from unauthorized access, use, alteration, or disclosure. Strong passwords, encryption, secure storage, and access controls must be implemented at all times.
3. Accurate and Timely Data Entry
   Users are solely responsible for providing accurate, complete, and up-to-date employee, attendance, and payroll information. All data must be verified before processing to avoid errors in salary calculations, statutory filings, or reports.
4. Use of Authorized Data
   Users must only upload and process data for which they have lawful rights, authorization, and employee consent wherever required by applicable laws.
5. Non-Disclosure of Credentials
   Login credentials must remain confidential at all times. Sharing, transferring, or misusing access credentials is strictly prohibited. Each authorized user must have a unique login account.
6. User Access Controls
   Access permissions must be role-based and regularly reviewed. Users must immediately revoke or update access rights upon employee termination, resignation, or role changes.
7. Backup and Disaster Recovery
   Users are responsible for maintaining appropriate backups of payroll and HR data and implementing reasonable disaster recovery measures on their end.
8. Disaster Recovery and Business Continuity
   Users should maintain a tested business continuity plan to ensure payroll operations can continue in case of system failures, cyber incidents, or operational disruptions.
9. Training and Competence
   Users must ensure that personnel operating the Cedur platform are adequately trained and competent to use payroll and HR automation tools correctly.
10. Training and Awareness
    Users should stay updated on regulatory changes, payroll best practices, and compliance requirements relevant to their organization.
11. Support and Updates
    Users must maintain an active Cedur subscription to receive software updates, security patches, bug fixes, and technical support. Using outdated versions may lead to functionality or compliance risks.
12. Prohibited Activities
    Users must not use Cedur for any illegal, fraudulent, unethical, or non-business purposes. The platform must only be used for legitimate HR, payroll, and workforce management activities.
13. Prohibited Software Modifications
    Unauthorized modification, reverse engineering, database tampering, or interference with Cedur's software, APIs, or infrastructure is strictly prohibited.
14. Third-Party Service Providers
    If users engage third-party vendors such as accountants, consultants, or IT providers, they must ensure such parties comply with applicable laws and maintain strict data confidentiality and security standards.
15. Third-Party Integrations
    Users are responsible for the security, legality, and compatibility of any third-party integrations connected to Cedur.
16. Record Retention and Disposal
    Users must comply with all applicable legal requirements regarding payroll record retention, archival, and secure disposal of employee data.
17. Change Management
    Any payroll structure, compliance settings, or system configuration changes must follow a structured and documented internal process to ensure accuracy and audit readiness.
18. Reporting and Documentation
    Users should generate, maintain, and securely store accurate payroll reports, audit trails, and statutory records for legal, financial, and compliance purposes.
19. Monitoring and Auditing
    Cedur reserves the right to monitor system usage, logs, and activity for security, compliance, and service quality purposes, in accordance with applicable laws.
20. Communication and Transparency
    Users must promptly report discrepancies, technical issues, suspected security incidents, or payroll errors to Cedur support for timely resolution.
21. Social Engineering Awareness
    Users must remain vigilant against phishing, social engineering, and unauthorized access attempts and must not disclose credentials or sensitive data to unverified sources.
22. Non-Discrimination and Equal Opportunity
    Payroll must be processed fairly and in compliance with applicable anti-discrimination and employment laws.
23. Conflict of Interest
    Users must avoid any actions or conflicts of interest that may compromise payroll integrity, data accuracy, or ethical use of the platform.
24. Continuous Improvement
    Users are encouraged to provide feedback, suggestions, and feature requests to improve the Cedur platform and services.
25. Shipping Policy
    Cedur is a Software-as-a-Service (SaaS) platform and does not ship any physical products.
    All service access, login credentials, onboarding details, and activation information are delivered electronically via email or secure digital channels after successful payment confirmation.
    Delivery is deemed complete once system access credentials have been provisioned.
26. Refund & Exchange Policy
    Cedur operates on a subscription-based billing model with two plan types: Annual (upfront) and Monthly (recurring).
    Annual Subscription (Upfront Payment)
    For customers who choose to pay the full annual subscription fee in a single transaction covering twelve (12) months of service:
    - A thirty (30) day money-back guarantee applies from the date of account activation or service provisioning.
    - Refund requests must be submitted in writing within the 30-day period.
    - Approved refunds may be processed after deducting applicable taxes, payment gateway fees, and costs of services already rendered, if any.
    - No refunds shall be issued after the 30-day period, regardless of platform usage, onboarding completion, or partial service utilization.
    Monthly Subscription (Pay-As-You-Go)
    For customers billed on a monthly recurring basis:
    - All monthly payments are final and non-refundable once the payment for that billing cycle has been successfully processed.
    - No money-back period, prorated refund, or partial refund will be provided for any active or completed monthly billing cycle.
    - Cancellation of a monthly subscription will only prevent future charges and will not entitle the user to any refund for the current or past billing periods.
    Exception Cases (Applicable to All Plans)
    Refunds may only be considered in the following limited situations:
    - Duplicate charge for the same billing cycle.
    - Failed activation where Cedur is unable to provision access due to a verified technical error attributable solely to Cedur.
    No refunds will be made for:
    - Change of mind.
    - Non-usage of the platform.
    - Discontinuation during an active billing cycle.
    - Services already accessed, payroll processed, or reports generated.
27. Liability and Indemnification
    Users are solely responsible for their use of Cedur software, including data entry accuracy, legal compliance, and payroll decisions. Cedur shall not be liable for any losses, damages, penalties, or disputes arising from user actions, incorrect inputs, miscalculations due to user-provided data, or legal non-compliance.
    Cedur's total liability, including any refund, credit, or claim, shall be strictly limited to a maximum of six (6) months of subscription fees paid by the customer.
28. Dispute Resolution
    Any disputes arising out of service usage, billing, or platform access shall be resolved through mediation or arbitration as outlined in the Terms of Service and applicable governing laws.
29. Vendor Support and Maintenance
    Active subscription is mandatory to receive continued access to updates, maintenance, security patches, and customer support services.
30. Termination or Change of Employment
    Users must ensure immediate deactivation or modification of system access when an employee leaves the organization or changes roles to prevent unauthorized usage.