Customer Terms & Conditions

1. About DREVORA and these Terms

1.1 These Terms & Conditions govern access to and use of the DREVORA fleet, workforce and operations management platform, including the web application, progressive web application, Android application, APIs, storage, support and related services (the Service).

1.2 DREVORA is a trading name operated by Aurimas Jokubaitis, a sole trader based in England, United Kingdom.

1.3 These Terms form the main commercial agreement between DREVORA and the organisation purchasing or receiving the Service (the Customer). An order form, pricing page, accepted proposal, subscription record, Data Processing Agreement (DPA) or other written agreement may form part of the same agreement.

1.4 If there is a conflict:

• the DPA prevails for processor obligations and Customer-controlled personal data;
• an agreed order form prevails for the subscribed plan, price and specific commercial terms; and
• these Terms prevail for all other matters, unless the parties expressly agree otherwise in writing.

2. Definitions

• Authorised User means a director, office user, manager, Worker or other person whom the Customer permits to use the Service.
• Customer Data means information entered, uploaded, generated or stored in the Service for the Customer, including Worker and operational records.
• Worker or Worker User means an employee, driver, agency worker, contractor or other operational user invited by the Customer.
• Subscription Fees means the fees payable for the Service, excluding VAT and pass-through charges.
• Applicable Law includes laws and regulations applying to the Customer, DREVORA, the Service or the relevant records.
• Business Day means a day other than Saturday, Sunday or a public holiday in England, used for DREVORA's commercial and support calendar. This definition does not restrict the jurisdictions in which the Customer may operate.

3. Business-to-business status and authority

3.1 The Service is supplied only for business and professional use. The Customer confirms that it acts in the course of a trade, business or profession and not as a consumer.

3.2 The person accepting these Terms confirms that they have authority to bind the Customer.

3.3 A Worker User is an Authorised User of the Customer and is not normally the purchasing Customer. Worker Users may have separate rights as data subjects and under employment, road-safety or other law. Nothing in these Terms removes those statutory rights.

3.4 The Customer must ensure that its Authorised Users comply with the parts of these Terms and any Worker Terms of Use that apply to them.

4. The Service

4.1 DREVORA provides business management and record-keeping tools which may include:

• Workers and compliance records;
• Vehicles and vehicle records;
• Timesheets and approvals;
• Holiday Requests;
• Vehicle Checks and Tyre Checks;
• Driver Reports;
• Documents, CMR, POD and related submissions;
• Contacts and Consumables;
• dashboards, reminders, notifications, offline workflows and related records.

4.2 DREVORA is an actively developed service. Features, interfaces and workflows may be updated, corrected, improved, replaced or removed where reasonably necessary to maintain security, legal compliance, reliability or product development.

4.3 DREVORA will not materially remove paid core functionality during an active paid period without reasonable notice, except where required for security, law, third-party dependency failure or prevention of harm.

4.4 The Service supports compliance and record-keeping but does not replace the Customer's legal or regulatory obligations. The Customer remains responsible for compliance with Applicable Law, including (as applicable) employment, tax and payroll, working time, roadworthiness, operator licensing, driver licensing, tachograph and drivers' hours, health and safety, data protection, record retention, other regulatory obligations, and the requirements of competent authorities. DREVORA does not provide legal advice or regulatory certification.

4.5 Regional availability. DREVORA may make the Service available to business customers in the United Kingdom and other jurisdictions approved by DREVORA. Availability of the Service does not mean that every feature is configured for every jurisdiction. Certain features may depend on local employment, road transport, licensing, roadworthiness, tax, public-holiday, data-protection or other regulatory rules. The Customer remains responsible for ensuring that its use of the Service complies with Applicable Law in each jurisdiction in which it operates.

5. Authorised Users and Worker Users

5.1 The Customer controls who is invited, which role is assigned and which information each Authorised User may access.

5.2 The Customer must promptly remove or restrict access when a person changes role, leaves the organisation or no longer requires access.

5.3 The Customer is responsible for activity performed through its accounts, except to the extent caused by DREVORA's breach, security failure or unauthorised action.

5.4 Authorised Users must not share accounts, impersonate another person, submit knowingly false records or access another organisation's information.

5.5 The Customer is responsible for ensuring that its Worker Users receive appropriate training and instructions for using the Service safely and lawfully.

6. Accounts, authentication and security

6.1 The Customer must provide accurate company and account information and keep it current.

6.2 Credentials, devices, recovery methods and multi-factor authentication must be protected. The Customer must notify DREVORA promptly of suspected unauthorised access.

6.3 DREVORA may require password resets, session revocation, additional verification or temporary access restrictions where reasonably necessary to protect the Service or Customer Data.

6.4 Biometric app lock, where enabled on a supported device, is a local device-security feature. DREVORA does not receive or store the device's biometric template.

7. Customer responsibilities and verification

7.1 The Customer is responsible for the accuracy, legality, necessity and relevance of Customer Data.

7.2 DREVORA does not independently verify:

• working hours, overtime or holiday entitlement;
• vehicle condition, roadworthiness or defect rectification;
• completed walkaround, Vehicle Check or Tyre Check records;
• licence, CPC, tachograph, Right to Work or qualification information;
• uploaded documents, receipts, CMR, POD or delivery evidence;
• payroll, tax, employment, safety or regulatory decisions.

7.3 The Customer must independently review information before relying on it for payroll, dispatch, road safety, employment, disciplinary, legal or regulatory purposes.

7.4 The Customer remains responsible for vehicle roadworthiness, defect escalation, Driver and Worker competence, legal submissions, retention requirements and decisions made from the Service.

8. Safety-critical use, dispatch and business continuity

8.1 DREVORA is a record-keeping and workflow tool. It is not an emergency service, dispatch control system, telematics platform, payroll engine, legal compliance certification service or safety-critical control system.

8.2 The Customer must not use the Service as the sole basis for releasing a vehicle, dispatching a load, deciding that a vehicle is roadworthy, calculating final payroll, meeting a statutory deadline or responding to an emergency.

8.3 The Customer must maintain proportionate contingency procedures for internet failure, device failure, power loss, Service outage, delayed synchronisation and loss of access. These may include paper forms, local procedures, alternative communication channels and independent copies of critical records.

8.4 To the extent permitted by law and subject to clause 27, DREVORA is not responsible for missed deliveries, demurrage, fleet delay, substitute transport, downtime or similar operational loss caused or materially increased by the Customer's failure to maintain a reasonable contingency process.

8.5 The Customer must ensure that Workers do not use the Service while driving or while doing so would be unsafe or unlawful.

9. Customer Data and data protection

9.1 The Customer retains ownership of Customer Data.

9.2 The Customer grants DREVORA a limited right to host, copy, transmit, display, secure, support and otherwise process Customer Data only as necessary to provide the Service, comply with lawful instructions and meet legal obligations.

9.3 For Customer-controlled Worker and operational data, the Customer normally acts as controller and DREVORA normally acts as processor. The DPA applies to that processing.

9.4 DREVORA may act as an independent controller for its own account administration, billing, direct support, security, fraud and abuse prevention, legal claims and statutory records, as explained in the Privacy Policy.

9.5 The Customer is responsible for:

• having an appropriate lawful basis and any required special-category condition;
• providing privacy information to Workers and other individuals;
• collecting only necessary information;
• setting lawful access and retention rules;
• responding to data-subject requests for Customer-controlled data; and
• deleting or anonymising data that is no longer required.

10. Medical and other sensitive information

10.1 Medical document uploads and other special-category features are optional and should remain disabled unless the Customer has identified a lawful and necessary purpose.

10.2 DREVORA does not require diagnoses, medication details, full medical histories, detailed examination answers or unnecessary doctor's notes.

10.3 If the Customer enables sensitive-data functionality, it is responsible for necessity, lawful basis, special-category conditions, access restrictions, retention and deletion.

11. Subscription and billing

11.1 Subscriptions are offered on the billing cycle shown at checkout, in an order form or on the applicable pricing page.

11.2 Subscription Fees are charged in advance unless agreed otherwise in writing.

11.3 Unless cancelled, a recurring paid subscription renews for the next billing period in accordance with the agreed plan and payment arrangements then in force.

11.4 Where an online payment provider is enabled for the Customer's account, payments may be processed by that provider (which may include Stripe or another identified provider). DREVORA does not store complete payment card numbers. Online payment processing is not assumed to be enabled for every Customer.

11.5 Prices exclude VAT unless expressly stated otherwise. VAT will be added where legally required.

11.6 DREVORA may change prices by giving reasonable notice before the new price applies to a future billing period.

12. Trials and early access

12.1 DREVORA may offer free trials, promotional access, pilot programmes or early-access functionality.

12.2 Trial scope, duration and payment requirements will be explained when the Customer joins.

12.3 Trial and early-access functionality may be incomplete, changed or withdrawn. It must not be used as the sole system for critical legal, payroll, safety or operational records.

12.4 A free trial will not convert to a paid subscription unless the sign-up process clearly explains the conversion and the Customer provides the required payment authorisation.

13. Cancellation and refunds

13.1 The Customer may cancel a subscription by contacting DREVORA at admin@drevora.uk or through any cancellation method DREVORA makes available for that plan. Cancellation stops the next renewal once processed.

13.2 Access normally continues until the end of the paid billing period then in force.

13.3 Fees already paid for the current billing period are non-refundable, except where required by law or expressly agreed by DREVORA.

13.4 No partial credit is provided for unused days, unused users or unused vehicle capacity unless agreed otherwise.

14. Failed payments and taxes

14.1 If a due payment fails, DREVORA may notify the Customer, request another payment method, restrict functionality, suspend access or prevent a new billing period from starting, and may retry payment where an online payment method is connected.

14.2 The Customer remains responsible for properly due unpaid fees and any VAT or other applicable taxes that become legally due.

15. Data retention

15.1 Different records require different retention periods. Unless the Customer selects another lawful period, deletes the record earlier, or Applicable Law requires otherwise, DREVORA's standard operational framework is:

15.2 Medical documents and other special-category data are not subject to a general 24-month or 6-year default. The Customer must select the shortest lawful and necessary period.

15.3 Archiving a Worker or Vehicle does not restart the retention period for linked records. Each record may have its own deadline based on its event date.

15.4 Expiry makes a record eligible for deletion or anonymisation. It does not guarantee immediate automated deletion. Until automated controls are implemented for a category, deletion may require review or a controlled process.

15.5 Retention may be extended for a legal hold, claim, dispute, investigation, fraud prevention, regulator request or binding legal obligation.

16. Exports and independent copies

16.1 Export functions and available formats vary by module.

16.2 The Customer must maintain independent copies of records that are critical to payroll, tax, safety, regulatory, contractual or legal obligations.

16.3 The Customer must not rely on DREVORA as the only permanent copy of records it is legally required to retain.

16.4 Before cancellation or account closure, the Customer should export all records it wishes to keep.

17. Security and data loss

17.1 DREVORA uses reasonable technical and organisational measures designed to protect Customer Data, including authentication, role-based access, encrypted communications, organisation-level controls and private storage where appropriate.

17.2 No online service, device, storage provider or transmission method can guarantee absolute security, uninterrupted access or complete recovery.

17.3 The Customer is responsible for its devices, networks, user permissions, credentials, exports and independent backups.

17.4 Subject to clause 27, DREVORA is not responsible for loss caused by Customer deletion, incorrect input, shared credentials, unauthorised access resulting from Customer security failures, unsupported devices, third-party outages outside DREVORA's reasonable control or failure to retain independent copies.

17.5 Nothing in this clause excludes responsibility for DREVORA's own breach, negligence, unauthorised processing or security failure to the extent such responsibility cannot lawfully be excluded or is allocated to DREVORA under clause 27 or the DPA.

18. Mobile, PWA, offline and synchronisation

18.1 Some Worker workflows may support offline entry, local storage and later synchronisation on Android or supported web/PWA environments.

18.2 Offline functionality reduces disruption but does not guarantee that every action, attachment or record will synchronise immediately or successfully.

18.3 The Customer and Worker must keep the app open or reconnect as reasonably required, review sync status and report unresolved failures.

18.4 Local offline data may be affected by device loss, browser clearing, operating-system cleanup, insufficient storage, app removal, unsupported settings or device damage.

18.5 DREVORA is not responsible for failure caused solely by those device-side events, except to the extent caused by DREVORA's breach or defective implementation and subject to clause 27.

19. Service availability, maintenance and support

19.1 DREVORA aims to provide a reliable Service but does not guarantee uninterrupted, delay-free or error-free availability.

19.2 The Service may be unavailable because of maintenance, updates, security work, internet failure, third-party outage, emergency remediation, legal requirements or events outside reasonable control.

19.3 DREVORA will use reasonable efforts to minimise disruption and communicate significant planned maintenance where practicable.

19.4 No service-level agreement, guaranteed uptime, recovery time, response time or service credit applies unless agreed separately in writing.

19.5 Support requests are handled on a reasonable-efforts basis. A displayed status or estimated response time is not a contractual guarantee.

20. Third-party services

20.1 DREVORA may use third-party providers for hosting, database, authentication, storage, deployment, email, payments, DNS, security and related infrastructure.

20.2 Providers may include Supabase, Vercel, Resend, Cloudflare and, where online billing is enabled, Stripe or another identified payment provider.

20.3 DREVORA remains responsible for Sub-processors as required by the DPA and Applicable Data Protection Law.

20.4 DREVORA is not responsible for an independent third party's failure outside DREVORA's reasonable control, but will take reasonable steps to restore or replace affected functionality.

21. Acceptable use

21.1 The Customer and Authorised Users must not:

• use the Service unlawfully, fraudulently or harmfully;
• access or attempt to access another organisation's data;
• bypass security, permissions, limits or subscription controls;
• upload malware, unlawful content or information they have no right to process;
• interfere with, overload, scrape or probe the Service without written permission;
• reverse engineer except where that right cannot lawfully be restricted;
• resell, sublicense or provide unauthorised third-party access;
• use DREVORA to discriminate, harass or unlawfully monitor Workers;
• use the Service while driving or in another unsafe situation;
• knowingly falsify Timesheets, checks, signatures, defects or supporting documents.

22. Intellectual property

22.1 DREVORA software, source code, interfaces, designs, documentation, branding and platform content belong to Aurimas Jokubaitis or the applicable licensors.

22.2 During an active subscription, the Customer receives a limited, non-exclusive, non-transferable and revocable right to use the Service for its internal business operations.

22.3 Customer Data remains owned by the Customer or its licensors.

23. Confidentiality

23.1 Each party must protect confidential information received from the other and use it only for providing or using the Service.

23.2 Confidentiality does not apply to information that is lawfully public, already lawfully known, lawfully received from another source, independently developed or required to be disclosed by law.

23.3 A party required to disclose confidential information must, where lawful, give reasonable notice and disclose only what is required.

24. Suspension

24.1 DREVORA may suspend access where fees remain unpaid, the Customer materially breaches the agreement, use creates a security or legal risk, fraud or unlawful activity is suspected, or continued access could materially harm DREVORA, another customer or a third party.

24.2 Where reasonably possible, DREVORA will give notice and an opportunity to correct the issue.

24.3 Emergency suspension may occur without advance notice where necessary to contain a security incident or prevent immediate harm.

25. Termination and account closure

25.1 Either party may terminate for a material breach that is not corrected within a reasonable written cure period, normally 14 days, where the breach can be corrected.

25.2 DREVORA may terminate immediately for fraud, deliberate unlawful use, serious security abuse or a breach that cannot reasonably be remedied.

25.3 After paid access ends, DREVORA may provide a reasonable final export opportunity on account closure where technically and operationally available, with the applicable period communicated as part of the closure process.

25.4 The Customer must not assume that access or export will remain available indefinitely after termination.

25.5 Customer Data may later be returned, deleted or anonymised under the DPA, Privacy Policy, retention framework and legal requirements.

25.6 Individual account deletion may be requested inside DREVORA by an authorised Admin or Worker using the in-app deletion controls. Support for cancellation or assistance is available at admin@drevora.uk.

25.7 When a deletion request is submitted, access for that user account is disabled immediately. Final deletion or anonymisation of personal account data is completed within 30 days, unless the request is cancelled before the scheduled date by an organisation Admin or DREVORA support.

25.8 Operational, compliance and legal records may remain for applicable retention periods. Worker workforce records remain controlled by the Customer organisation. For Customer Data processed on the Customer's behalf, DREVORA acts as Processor and the Customer organisation as Controller, as set out in the DPA.

25.9 A sole Admin must appoint another Admin before deleting their own Admin account. Company closure is a separate process from individual account deletion.

26. Warranties and disclaimers

26.1 DREVORA will provide the Service with reasonable care and skill appropriate to an actively developed B2B SaaS product.

26.2 Except as expressly stated and to the maximum extent permitted by law, DREVORA does not warrant that the Service will be uninterrupted, error-free, suitable for every Customer process, accepted by a regulator or capable of replacing professional, legal, payroll, safety or compliance advice.

26.3 The Customer is responsible for evaluating whether the Service is suitable for its use, configuration, risks and legal obligations.

27. Limitation of liability

27.1 Nothing in the agreement excludes or limits liability for:

• death or personal injury caused by negligence;
• fraud or fraudulent misrepresentation;
• deliberate misconduct; or
• any liability that cannot lawfully be excluded or limited.

27.2 Subject to clause 27.1, DREVORA's total aggregate liability arising out of or connected with the Service, agreement and all claims in any rolling 12-month period will not exceed the Subscription Fees paid or payable by the Customer for the Service during the 12 months immediately preceding the event giving rise to the first claim.

27.3 Subject to clause 27.1, liability for breach of confidentiality, DREVORA's processor obligations, unauthorised processing or a security breach caused by DREVORA is subject to a separate aggregate cap equal to 200% of the amount calculated under clause 27.2. This separate cap does not apply to the extent a limit would be unlawful.

27.4 Subject to clause 27.1, neither party is liable for indirect or consequential loss. DREVORA is not liable for loss of profit, revenue, anticipated savings, goodwill, contracts, business opportunity, missed delivery, demurrage, fleet downtime, substitute transport, operational interruption or regulatory penalties attributable to the Customer's acts or omissions, whether direct or indirect, to the extent exclusion is reasonable and lawful.

27.5 DREVORA is not liable for decisions made solely from reminders, dashboard indicators, unverified Customer Data or automated calculations where the Customer failed to carry out the independent review required by these Terms.

27.6 DREVORA is not liable for loss or corruption of data to the extent the loss could reasonably have been avoided by the Customer maintaining the independent copies required by clause 16, except where the loss was caused by DREVORA's breach and the exclusion would be unreasonable or unlawful.

27.7 Each exclusion and limitation is separate, applies to contract, tort (including negligence), misrepresentation, restitution, breach of statutory duty and other legal causes, and applies only to the extent permitted by law.

27.8 The parties agree that the Fees reflect the allocation of risk in these Terms. If the Customer requires a higher liability cap, service level, insurance-backed commitment or bespoke continuity obligation, it may request a separately priced written agreement.

28. Data-protection complaints, claims and DPA interaction

28.1 Data-subject and regulator rights cannot be removed by contract.

28.2 For Customer-controlled Worker and operational data, the Customer is responsible for complaints, claims and regulatory matters to the extent caused by its lack of lawful basis, inadequate privacy information, excessive collection or retention, unlawful instructions, inaccurate data, access decisions or misuse by its Authorised Users.

28.3 DREVORA remains responsible to the extent a complaint, claim or regulatory matter is caused by DREVORA's breach of direct processor obligations, processing outside or against lawful instructions, unauthorised use, negligence or security failure.

28.4 The DPA governs cooperation, allocation of responsibility, contribution and handling of data-subject requests for Customer-controlled data.

28.5 Any contractual indemnity or contribution does not restrict a Data Subject's or regulator's rights. Administrative fines are borne by the party against whom they are imposed, except to the extent recovery from another party is legally permitted and reflects that party's responsibility.

29. Customer indemnity

29.1 The Customer will indemnify DREVORA against third-party claims, reasonable defence costs and direct losses to the extent caused by:

• the Customer's unlawful processing or lack of lawful basis;
• failure to provide legally required privacy information;
• unlawful or disproportionate instructions;
• Customer Data uploaded without lawful authority;
• deliberate misuse by the Customer or its Authorised Users;
• infringement of a third party's rights through Customer Data; or
• material breach of clauses 7, 8, 9, 10 or 21.

29.2 The indemnity does not cover loss caused by DREVORA's own breach, negligence, unauthorised processing or unlawful conduct.

29.3 DREVORA must give reasonable notice of an indemnified claim, permit the Customer to participate in the defence and take reasonable steps to mitigate loss. The Customer must not settle a claim in a way that admits fault by DREVORA or imposes a non-financial obligation on DREVORA without prior written consent.

30. Force majeure

30.1 Neither party is responsible for delay or failure caused by events outside its reasonable control, including major internet failure, natural disaster, war, government action, widespread cyberattack, utility failure or third-party infrastructure outage.

30.2 The affected party must take reasonable steps to reduce the effect and resume performance.

30.3 This clause does not excuse payment obligations that became due before the event.

31. Changes to the Service or Terms

31.1 DREVORA may update the Service or these Terms for product development, security, legal, regulatory, supplier, billing or operational reasons.

31.2 Material changes will be notified by email, in-app notice or another reasonable method before taking effect where practicable.

31.3 If a material change substantially disadvantages the Customer during an active paid period, the Customer may cancel before the change takes effect and request a pro-rata refund for the unused prepaid period, unless the change is required by law or security necessity.

32. General terms

32.1 These Terms, the Privacy Policy, applicable pricing, the DPA and any order form constitute the entire agreement for the Service.

32.2 If a provision is invalid or unenforceable, the remaining provisions continue. The invalid provision will be replaced by a lawful provision closest to its intended commercial effect.

32.3 A delay in enforcing a right is not a waiver.

32.4 The Customer may not assign the agreement without written consent. DREVORA may assign it as part of a business sale, restructuring or transfer of the Service, provided the Customer's material rights are not reduced.

32.5 Notices may be sent by email or through the Service. Formal legal notices must be clearly identified and sent to the contact details in clause 34.

32.6 No person other than the parties has a right to enforce these Terms under the Contracts (Rights of Third Parties) Act 1999, except where the agreement expressly states otherwise. This does not affect statutory rights of Data Subjects.

33. Governing law and courts

33.1 The agreement and any non-contractual dispute are governed by the laws of England and Wales.

33.2 The courts of England and Wales have exclusive jurisdiction, except where Applicable Law requires otherwise.

34. Contact

DREVORA Operated by Aurimas Jokubaitis, trading as DREVORA Business structure: Sole trader Business address: 11 Buckenham Way, Thetford, Norfolk, IP24 1ES, United Kingdom Email: admin@drevora.uk Website: drevora.app Effective date: 13 September 2026