Terms of Use

1. This agreement

These Terms of Use (the "Terms") are an agreement between Inova Studio LLC ("Inova Studio", "we", "us"), an Oregon limited liability company, and you — the individual or organization using BuildGate (the "Service"): the buildgate.dev website, the BuildGate Chrome extension, and the hosted service behind them.

By installing the extension, creating an account, or using the Service, you accept these Terms. If you are accepting them for a company, you confirm you have authority to bind it, and "you" means that company. If you do not accept them, do not use the Service.

A separate signed agreement between us and your organization takes precedence over these Terms wherever the two conflict.

2. What BuildGate is, and what it is not

BuildGate holds Bubble's Deploy button until the change has a linked issue and an approval from somebody other than the requester, and records what happened in an append-only audit trail. It is a change-management control, and we would rather you understood its limits before you rely on it than after.

• A browser extension can be removed. Anyone with control of their own browser can disable BuildGate there. Chrome Enterprise policy can force-install it and prevent that; reconciliation against Bubble's version history catches what slips through, after the fact. Neither is the same as a control that cannot be circumvented, and we do not claim one.
• Detection is not prevention. An unapproved deploy that dodges the gate becomes a dated exception in your queue. It does not become an undeployed change.
• BuildGate does not review your code or your changes. It records that a human said yes. Whether that yes was a good idea is between you and them.
• It depends on Bubble's editor. Bubble provides no deploy API and no deploy webhook, so the Service works against the editor's own interface and undocumented endpoints. Bubble may change these at any time, without notice, and the Service may stop working until we adapt.

3. Accounts and organizations

You sign in with Google. You must give accurate information, keep your Google account secure, and not share it. You are responsible for what happens under your account.

Everything in BuildGate belongs to an organization. Whoever creates one, or is given the owner or admin role in it, controls its apps, members, roles, integrations and settings — including whether the gate is enforcing, who may approve, and what happens to the organization's data. If you joined an organization you did not create, that Customer, not Inova Studio, decides those things.

Tell us promptly at [email protected] if you believe an account or an organization has been accessed without authorisation.

4. Your responsibilities

Because BuildGate is a control you are running, some of it is your job:

• Making sure your organization has enough approvers that separation of duties is real. A rule that one person satisfies is a formality.
• Deciding which apps are gated, and reviewing observation-mode apps — where deploys are recorded but nothing is blocked — rather than assuming they are protected.
• Reviewing and closing compliance exceptions. We raise them; nobody but you can act on them.
• Handling break-glass codes responsibly, and treating each use as the incident it is recorded as.
• Making sure you have the right to connect the Bubble applications and third-party accounts you connect, and to put the data you put into the Service.
• Complying with the law that applies to you, including telling your own people that their deploy activity is recorded.

5. Acceptable use

You will not:

• use the Service to access Bubble applications or third-party accounts you are not authorised to access;
• attempt to falsify, tamper with, or fabricate entries in the audit record — the record exists to be trustworthy, and attacking that is attacking the product;
• probe, scan or test the security of the Service other than as described in our security-reporting invitation, or interfere with its operation;
• reverse engineer, decompile or attempt to derive the source of the hosted service, except to the extent that restriction is unenforceable where you live;
• resell, sublicense or provide the Service to a third party as your own;
• use it to store or transmit unlawful, infringing or malicious content;
• circumvent rate limits, quotas or access controls, or use the Service in a way that degrades it for anyone else.

6. Third-party services

BuildGate is not affiliated with, endorsed by, or sponsored by Bubble Group, Inc. "Bubble" is used only to identify the platform the Service works with. Your use of Bubble is governed by Bubble's own terms, and nothing here changes them — including your obligations to Bubble about how you use its editor.

The same applies to Google, Linear, Slack, GitHub, BuildPrint and any other service you connect: they are yours, you connect them, and their terms govern them. If one of them changes, breaks, rate-limits us, or revokes access, the features that depend on it stop working, and that is not a breach of these Terms by us.

7. Your data

Everything you put into the Service, and everything the Service records about your deploys and applications ("Customer Data"), remains yours. We claim no ownership of it.

You grant us a limited, worldwide, non-exclusive licence to host, copy, transmit, display and process Customer Data solely to provide, secure and support the Service. That licence exists so we can run the product and for no other reason. We do not use Customer Data to train machine-learning models, and we do not sell it. Our Privacy Policy describes how we handle personal data within it, and forms part of these Terms.

We may produce and publish aggregated, anonymised statistics about how the Service is used, provided they identify neither you nor any individual and cannot reasonably be reversed to do so.

8. Audit records, evidence and backups

The audit record is append-only by design: entries cannot be edited or deleted, by you or by us. Corrections are appended. Please read section 8 of the Privacy Policy before you decide what to put in a free-text field, because you will not be able to take it out again.

BuildGate's exports and chain verification are intended as evidence for your own audits. They are not a certification, an audit opinion, or legal or compliance advice. Whether your controls satisfy SOC 2, ISO 27001 or anything else is a judgement for you and your auditor. We make no representation that using BuildGate will result in a passed audit.

Backups are best-effort and are not a restore service. What lands in your repository is the application with its credentials removed, so rebuilding from it means re-entering those credentials. We do not guarantee that a backup will run, that it will be complete, or that it can be used to recover an application. Keep whatever independent backups your risk appetite requires.

9. Availability and changes to the Service

We aim to keep the Service available and will give notice of planned maintenance where we reasonably can, but the Service is provided without an uptime commitment unless your organization has a written agreement with us that includes one.

The gate fails closed. If the Service cannot be reached, deploys are blocked rather than allowed — that is the intended behaviour of a control, and an outage will therefore stop your team deploying until it is resolved or a break-glass code is used. Plan for it.

We may add, change or remove features. If we discontinue a material feature or the Service itself, we will give account owners at least 30 days' notice and a way to export their evidence first.

10. Fees

Where your organization is on a paid plan, the fees, billing period and any minimum term are those set out in the order or plan you agreed to. Fees are payable in advance, exclusive of taxes, and non-refundable except where the law requires otherwise or we have agreed otherwise in writing. We will give at least 30 days' notice before a price change takes effect for you, and you may cancel before it does.

Where the Service is offered free of charge, at no cost or during an evaluation, we may change or withdraw that offer on reasonable notice.

11. Our intellectual property, and your feedback

The Service, the extension, the BuildGate name and everything we have built into them belong to Inova Studio and our licensors. Subject to these Terms we grant you a limited, non-exclusive, non-transferable, revocable right to use the Service for your internal business purposes. No other rights are granted, by implication or otherwise.

If you send us feedback, ideas or suggestions, we may use them without restriction and without owing you anything. You keep whatever rights you already had in them; you are simply not giving us a bill for a feature request.

12. Term and termination

These Terms apply while you use the Service. You may stop at any time by removing the extension, and an organization's owner may close its account by writing to [email protected].

We may suspend or terminate access if you materially breach these Terms, if we are required to by law, or if your use puts the Service or other customers at risk. Except where the breach is serious or the law prevents it, we will tell you first and give you a reasonable chance to fix it.

On termination, your right to use the Service ends. Export your evidence before you close the account: the Privacy Policy's retention section explains what is kept, for how long, and how deletion works. Sections on your data, intellectual property, disclaimers, liability, indemnity and governing law survive.

13. Disclaimers

To the fullest extent permitted by law, the Service is provided "as is" and "as available", and we disclaim all warranties, express or implied, including merchantability, fitness for a particular purpose, title and non-infringement.

We do not warrant that the Service will be uninterrupted, error-free or secure; that it will prevent every unauthorised deploy; that it will detect every deploy that bypassed it; that Bubble's own interfaces will keep working as they do today; or that your use of it will satisfy any legal, regulatory or audit requirement.

Some jurisdictions do not allow certain disclaimers, in which case they apply to you only so far as the law allows.

14. Limitation of liability

To the fullest extent permitted by law, neither party is liable for indirect, incidental, special, consequential or punitive damages, or for lost profits, lost revenue, lost goodwill, or loss of or damage to data, however caused and under any theory of liability, even if advised of the possibility.

Our total aggregate liability arising out of or relating to the Service or these Terms will not exceed the greater of (a) the amount you paid us for the Service in the 12 months before the event giving rise to the claim, or (b) one hundred US dollars ($100).

Nothing in these Terms excludes or limits liability that cannot lawfully be excluded or limited, including for fraud, fraudulent misrepresentation, death or personal injury caused by negligence, or a party's wilful misconduct.

15. Indemnity

You will defend and indemnify Inova Studio against third-party claims, and the reasonable costs and damages awarded or agreed in settlement, arising from your Customer Data, your use of the Service in breach of these Terms or of the law, or your connection of a Bubble application or third-party account you were not authorised to connect. We will tell you about the claim promptly, let you control the defence of it, and give you reasonable cooperation at your expense.

16. Governing law and disputes

These Terms are governed by the laws of the State of Oregon, United States, without regard to its conflict-of-laws rules. The United Nations Convention on Contracts for the International Sale of Goods does not apply.

The state and federal courts located in Multnomah County, Oregon have exclusive jurisdiction over any dispute arising out of these Terms or the Service, and both parties consent to that jurisdiction and venue — except that either party may seek injunctive relief in any court of competent jurisdiction to protect its intellectual property or confidential information. If you are a consumer, this does not deprive you of the protection of the mandatory law of the country you live in.

Before filing anything, please write to [email protected]. Most disputes are a misunderstanding that an email resolves faster than a court will.

17. Changes to these Terms

We may update these Terms. The date at the top changes when we do. For a material change we will give account owners at least 30 days' notice, by email or in the console, before it takes effect. Continuing to use the Service after that means you accept the change; if you do not, stop using the Service and close your account before the date given, and we will refund any fees you have prepaid for the period after it.

18. General

• Entire agreement. These Terms and the Privacy Policy are the whole agreement between us about the Service, and replace anything said before, unless a signed agreement says otherwise.
• Severability. If a provision is unenforceable, the rest stays in force and that provision is limited to the minimum extent necessary.
• No waiver. Not enforcing something once does not mean giving it up.
• Assignment. You may not assign these Terms without our written consent; we may assign them to an affiliate or in connection with a merger, acquisition or sale of assets.
• Force majeure. Neither party is liable for a delay or failure caused by something genuinely outside its reasonable control.
• Independent contractors. These Terms create no partnership, agency, employment or joint venture.
• Notices. We will reach you at the email address on your account. Reach us at [email protected].

19. Contact us

Inova Studio LLC
Oregon, United States
inova.us
[email protected]