--- title: "Terms of Service" description: "Terms of Service for the current Daaam digital-asset-management platform." lastUpdated: "July 17, 2026" url: "https://daaam.app/legal/terms" --- These Terms are between you and **We Are Singular, Lda**, a company incorporated in Portugal (NIPC: PT513858512), operating Daaam. By creating an account or using the Service, you agree to these Terms, our [Privacy Policy](https://daaam.app/legal/privacy), [Cookie Policy](https://daaam.app/legal/cookies), and [GDPR & Data Processing page](https://daaam.app/legal/gdpr) (together, the **Agreement**). If you do not agree, do not use the Service. Contact [humans@daaam.app](mailto:humans@daaam.app) with questions. --- ## Definitions - **"We"**, **"us"**, and **"our"** mean We Are Singular, Lda. - **"You"** means the individual using Daaam and, where that individual acts for an organisation, that organisation. - **"Service"** means the current Daaam web application, API, documentation, media-processing pipeline, sharing features, and supporting infrastructure. - **"Content"** means files, metadata, comments, settings, and other data submitted to or generated through the Service. - **"Workspace"** means the Daaam space in which users, Content, permissions, shares, and integrations are organised. - **"Workspace Customer"** means the individual or organisation that controls a Workspace. ## 1. The current Service Daaam is a digital-asset-management service for uploading, transforming, organising, searching, reviewing, downloading, and sharing images, videos, documents, and related metadata. Current features include Workspaces, roles and permissions, folders, boards, tags, comments, watermarks, public or protected share links, API keys, webhooks, WordPress/API access, and automated media and ZIP processing. The Service is not a general-purpose public file host or a high-traffic CDN for unrelated websites. It is also not designed or contractually approved for payment-card data, health records, biometric-identification templates, government identity databases, or other specially regulated data. Contact us before using Daaam for a category that requires a specific security, localisation, or processing agreement. ## 2. Eligibility and authority You must be at least 16 years old to create an account. If you use Daaam for an organisation, you confirm that you have authority to accept this Agreement and to act on that organisation's behalf. ## 3. Acceptable use You must not: - Upload, store, share, or distribute illegal, infringing, deceptive, or unlawfully obtained Content - Use Content in a way that violates another person's privacy, publicity, intellectual-property, contractual, or other rights - Harass, impersonate, defraud, or abuse another person or organisation - Attempt to access another account, Workspace, file, credential, or system without authorisation - Probe, bypass, disable, or interfere with security, permissions, service limits, rate limits, or abuse controls - Conduct denial-of-service attacks, credential stuffing, brute-force attacks, malicious automation, or similar abuse - Distribute malware or use the Service to facilitate unlawful surveillance or serious harm - Use public shares, downloads, webhooks, or the API in a way that creates excessive traffic or degrades the Service for others - Create multiple accounts to evade a suspension, restriction, or service limit We may rate-limit, restrict, suspend, or terminate abusive activity and may preserve or report relevant evidence where required or permitted by law. ## 4. Accounts, Workspaces, and roles An account identifies an individual user. Do not share a personal login. A Workspace has one or more owners who control membership, roles, permissions, shares, API keys, and integrations. Admins and other members have the capabilities granted by the Workspace's current role and resource-permission configuration. Where an account is supplied or managed by an employer, client, or other organisation, that organisation may control the Workspace and its Content. Leaving an organisation does not give a user the right to delete Content that the organisation controls. Automated services may access Daaam through properly scoped API keys. The Workspace Customer is responsible for every API client, webhook, WordPress installation, or other integration it authorises. ## 5. Account and credential security You are responsible for protecting passwords, sessions, API keys, webhook secrets, and other credentials. Use only the minimum access needed, revoke credentials that are no longer required, and notify [humans@daaam.app](mailto:humans@daaam.app) promptly if you suspect compromise. You are responsible for authorised activity performed with your credentials. This does not exclude responsibility we have under mandatory law or for loss caused by our own breach, negligence, or misconduct. ## 6. Your Content and data-protection responsibilities You retain ownership of your Content. You are responsible for its legality, accuracy, and your right to process it. Files may contain embedded EXIF, IPTC, XMP, document, image, or video metadata, including names, dates, copyright details, and location information. Daaam extracts and stores supported metadata as part of media processing. You must review source files, obtain any required notices or permissions, and configure Workspace and share access appropriately. When Daaam processes personal data in Content on a Workspace Customer's instructions, the Workspace Customer is normally the controller and We Are Singular is the processor. The Workspace Customer must have a lawful basis for the processing, respond to people whose data it controls, and enter a DPA with us where required. ## 7. Licence needed to provide the Service You grant us a limited, non-exclusive, worldwide licence to receive, store, copy, transform, cache, transmit, and display Content only as needed to provide, secure, troubleshoot, recover, and maintain the Service and to follow your authorised sharing and integration instructions. This licence ends when the relevant Content is deleted from live systems, subject to the retention and backup limits in the [Privacy Policy](https://daaam.app/legal/privacy#retention). We do not use Workspace Content to train AI or machine-learning models, and we do not sell or monetise it. Authorised personnel may access Content only for support requested by a customer, security or incident response, service recovery, or a binding legal obligation. ## 8. Sharing, direct URLs, and integrations The Workspace Customer decides who can access a Workspace and when to create a share link. A recipient may forward a share link, download a file, or copy data outside Daaam. Password and expiry controls reduce risk but cannot control a copy already made by an authorised recipient. Current media delivery uses a public-read object store behind Daaam's proxy/CDN. Object keys are difficult to guess, but a valid direct object URL may retrieve an object without a Workspace permission check. Treat direct object URLs as bearer links and do not rely on them as a private authorisation boundary. If a customer registers a webhook, WordPress site, API client, or other external destination, Daaam sends the data requested by that configuration to the selected destination. Those customer-selected recipients are not our sub-processors. The customer is responsible for their security, terms, lawful basis, and international transfers. ## 9. Current access, future plans, and billing Daaam does not currently offer paid plans, subscriptions, checkout, invoices, payment processing, renewals, or refunds. No billing provider is wired into the current Service. Existing feature flags, quotas, or limits are operational controls, not purchased entitlements. Commercial plans and billing terms are pending. Before accepting a payment, we will publish the applicable pricing, features, renewal, tax, cancellation, refund, and payment-processor terms and update the Privacy Policy to describe the new processing. Where required, we will give advance notice or obtain agreement to those updated terms. ## 10. Inactive accounts Daaam does not currently run an automatic inactive-account suspension or deletion policy. We may contact an account owner about prolonged inactivity, capacity, security, or a planned service change, but inactivity alone does not currently start a six-month or 30-day deletion timer. If an automatic inactivity policy is introduced, we will update these Terms and describe the notice and deletion process before applying it. ## 11. Service limits, availability, and changes We provide the Service on a best-effort basis and do not currently offer an SLA. Features, supported formats, quotas, processing capacity, and rate limits are those shown in the current product or documentation; they may change as the product develops. We may apply reasonable limits to protect security, reliability, and other users. Maintenance, incidents, upstream-provider failures, internet outages, government action, natural disasters, and other events outside reasonable control may interrupt the Service. We will make reasonable efforts to restore it and to communicate material incidents. We may add, modify, or remove features. If a change materially affects rights, obligations, data handling, or the fundamental scope of the Service, the [Changes to this Agreement](#18-changes-to-this-agreement) section applies. ## 12. Third-party infrastructure and links The Service depends on the infrastructure and communications providers listed in the [Privacy Policy](https://daaam.app/legal/privacy#current-service-providers). Their availability and security can affect Daaam. We may replace a provider where reasonably necessary, but we will update our public provider disclosures before a replacement materially changes personal-data processing. External links and customer-selected integrations are governed by their own operators. We are not responsible for the content, terms, privacy practices, or availability of a destination that we do not operate. ## 13. Suspension, termination, and deletion **By you:** You may stop using Daaam at any time. To delete an account or Workspace, follow the current [manual deletion procedure](https://daaam.app/legal/gdpr#account-deletion-procedure). There is no self-service account-deletion control. **By us:** We may suspend or terminate access for a material breach, security risk, legal requirement, or serious abuse. Where the risk does not require immediate action, we will make reasonable efforts to give notice and an opportunity to remedy the issue. **Service discontinuation:** If we decide to discontinue the Service, we will provide reasonable notice and an export window where practicable. An emergency, security incident, binding legal order, or upstream failure may require faster action. Remaining data will then be handled under the published deletion procedure. Termination does not remove provisions that by their nature continue, including ownership, confidentiality, responsibility for prior conduct, liability limits, and dispute terms. ## 14. Our intellectual property We retain all rights in the Daaam software, API, documentation, design, infrastructure, and branding. Except for the limited rights needed to use the Service under this Agreement, no rights in our intellectual property are transferred to you. Feedback may be used to improve Daaam without restriction or compensation, provided that we do not identify you publicly as its source without permission. ## 15. Warranties To the extent permitted by law, Daaam is provided **"as is"** and **"as available."** We do not promise uninterrupted, error-free, or loss-free operation, or that the Service will meet every specialised requirement. Nothing in this Agreement excludes a warranty, consumer right, or other protection that cannot be excluded under applicable Portuguese or EU law. ## 16. Liability To the maximum extent permitted by law, each party is liable only for direct loss that was a reasonably foreseeable result of its breach. We are not liable for indirect, incidental, special, consequential, or punitive loss, including lost profit, opportunity, or business, except where that exclusion is prohibited. Because the current Service does not accept fees, these Terms do not use a fee-based liability cap. Any liability cap associated with a future paid plan must appear in the updated commercial terms before that plan is sold. Nothing limits liability that cannot lawfully be limited, including liability for death or personal injury caused by negligence, fraud, wilful misconduct, or other mandatory liability under applicable law. ## 17. Indemnification To the extent permitted by law, an organisation using Daaam will defend and indemnify We Are Singular against third-party claims caused by that organisation's unlawful Content, unlawful processing instructions, customer-selected integration, or material breach of this Agreement. This section does not apply to an individual consumer where such an obligation would be prohibited or unfair under mandatory consumer law, and it does not cover loss caused by our breach or misconduct. ## 18. Changes to this Agreement We may update this Agreement as the Service changes. - **Material changes**, including a future billing model, materially different data processing, or a significant change to user rights, will receive the advance notice and renewed agreement required by applicable law. - **Non-material changes**, including factual corrections, provider-list updates that do not materially increase risk, and formatting changes, may take effect when posted with a refreshed update date. If you do not accept a material change, you may stop using the Service and request deletion before it takes effect. Continued use after the effective date constitutes acceptance only to the extent permitted by law. ## 19. Governing law, disputes, and general terms This Agreement is governed by Portuguese law and applicable EU law. A consumer habitually resident in another EU member state retains mandatory protections of that country. Before starting proceedings, each party should notify the other and make a reasonable good-faith effort to resolve the dispute. This does not restrict a consumer's mandatory right to use competent courts or an available statutory alternative-dispute mechanism. If a provision is unenforceable, it will be adjusted only as much as needed and the remainder will continue. A failure to enforce a provision is not a waiver. You may not assign this Agreement without our consent. We may assign it as part of a reorganisation, merger, acquisition, or asset transfer, with notice where required and continued protection for personal data. These Terms and the documents linked in the opening paragraph are the entire agreement about the current Service and replace prior statements on the same subject.