CAYDA Finance Suite - Terms of Service

Provider: CAYDA Consulting & Solutions Inc.

Last updated: 8 October 2026

Effective date: 8 October 2026

These Terms govern access to and use of CAYDA Finance Suite and related services supplied by CAYDA. The Customer identified in the accepted quotation, proposal, order form, or subscription accepts these Terms. The person accepting on its behalf confirms authority to bind it.

These Terms and the accepted customer documents form the agreement. An applicable signed order form, service schedule, or service/enterprise agreement controls to the extent of an express conflict with these Terms. The Data Processing Schedule forms part of the agreement and controls conflicts concerning Customer-controlled personal data, subject to applicable law. The Privacy Policy does not amend agreed contractual obligations.

1. The service

Finance Suite provides configurable software for finance and business administration. The Customer’s subscription includes only the modules and services identified in the applicable order form or service schedule.

2. Software only; professional review remains required

Finance Suite is software and does not replace professional advice. The Customer and its advisers must review accounting, tax, payroll, statutory and management outputs before use, submission, payment or filing. CAYDA does not warrant government acceptance of outputs or that the software alone satisfies the Customer’s compliance obligations. This does not limit CAYDA’s express obligations under the applicable agreement or applicable law.

3. Customer accounts and acceptable use

The Customer is responsible for accurate accountinformation, authorized users, access permissions, approval controls and credential security, including prompt removal of unnecessary access. It must promptly report suspected unauthorized access or credential compromise using Section 15.

• Do not share credentials or bypass role, approval or security controls.
• Do not upload unlawful, malicious or unnecessary personal data.
• Do not test or probe the service without authorization, interfere with its operation, or reverse engineer it except where applicable law does not permit the restriction.
• Do not use the service to infringe another person’s rights or violate applicable law.

4. Customer data and privacy

The Customer retains its rights in data, records, files and materials submitted to the service (Customer Data). It grants CAYDA and its authorized subprocessors only the rights needed to process Customer Data to provide, support and protect the service and comply with the applicable agreement and law. CAYDA will process Customer-controlled personal data only on documented Customer instructions, including the agreement, unless required by law, and will notify the Customer of that requirement before processing unless legally prohibited.

The Customer is responsible for the accuracy, completeness and lawfulness of Customer Data and for required notices, legal bases, retention decisions and instructions. For Customer-controlled personal data, the Customer is the personal information controller (PIC) and CAYDA is the personal information processor (PIP). CAYDA is PIC for its own business contact, billing and service-administration data, as explained in the Finance Suite Privacy Policy.

The Data Processing Schedule forms part of the agreement and governs processing on the Customer’s behalf. It must set out the processing details and safeguards required by applicable data-protection law. Each party must comply with the Data Privacy Act of 2012 and applicable data-protection requirements. Acceptance of these Terms is not blanket consent to processing.

CAYDA will immediately inform the Customer if, in its opinion, an instruction infringes applicable data-protection law.

The Finance Suite Privacy Policy explains how personal data is handled and how individuals may exercise their rights.

The Customer must ensure that sensitive personal information is processed only where a condition under Section 13 of the Data Privacy Act applies. Where processing relies on consent, the responsible PIC must obtain valid consent and provide a way to withdraw it. CAYDA will not use Customer-controlled personal data for unrelated advertising or general AI model training under the service-processing permission in these Terms.

Requests concerning Customer-controlled personal data should be directed to the Customer; CAYDA will forward requests it receives and assist under the Data Processing Schedule. Requests concerning CAYDA’s own processing may be sent to the privacy contact in Section 15.

CAYDA will maintain appropriate organizational, physical and technical safeguards for personal data and restrict access to authorized personnel subject to confidentiality duties, as further described in the Data Processing Schedule.

CAYDA will notify the Customer without undue delay upon knowledge of, or reasonable belief in, a personal data breach affecting Customer-controlled data, provide available information and updates, and assist with investigation, containment and required notices. Each party remains responsible for the notifications required of it by law.

5. Third-party services

CAYDA may use service providers to operate the service. Providers processing Customer-controlled personal data for CAYDA are subprocessors. CAYDA remains responsible for their performance of applicable data-protection obligations.

The Customer authorizes the subprocessors identified in the accepted Data Processing Schedule. CAYDA will obtain specific written authorization for another subprocessor or follow the Schedule’s general written authorization procedure, including prior notice and an opportunity to object. CAYDA will impose appropriate written data-protection obligations on each subprocessor.

The Customer must not connect, integrate or link any third-party account, application or service to Finance Suite, or allow such a third party to access Finance Suite through the Customer’s account or credentials, except where the applicable agreement or CAYDA expressly permits the integration. This does not restrict CAYDA’s use of service providers to operate Finance Suite under this Section and the Data Processing Schedule.

The Privacy Policy or linked subprocessor list identifies relevant providers, their functions and processing locations. CAYDA will apply appropriate safeguards to overseas transfers or access and remain accountable for its applicable obligations. Disclosures to public authorities will be limited to what law requires, with notice where permitted.

6. Fees, taxes and commercial terms

The Customer will pay the fees and applicable taxes stated in the accepted quotation, order form, service schedule, or service/enterprise agreement. The applicable customer documents set out the commercial and service terms.

Any price change will apply prospectively, subject to the notice requirements and conditions in the applicable agreement. Automatic renewal or automatic payment collection applies only where expressly agreed by the Customer.

Professional services, trials, additional paid services and cancellation refunds apply only where expressly agreed or required by law. Additional charges require the Customer’s prior agreement.

7. Suspension

CAYDA may suspend access for overdue undisputed fees or a material breach of these Terms that remains unresolved 30 calendar days after receipt of written notice identifying the issue and required remedy, or after any longer period in the agreement.

CAYDA may suspend access immediately where reasonably necessary to address a security, legal, privacy or service-integrity risk. Any suspension will be limited in scope and duration to what is reasonably necessary. CAYDA will give notice, reasons and available remediation steps as soon as reasonably practicable where legally permitted.

The Customer may request review using the general contact in Section 15. CAYDA will promptly assess the request, explain the outcome and restore access once the grounds for suspension are resolved. Where safe and lawful, CAYDA will provide a secure alternative for export requests and necessary privacy communications.

Suspension does not remove accrued payment obligations, terminate the agreement or itself trigger deletion of Customer Data. Section 8 governs retention, export and deletion. Both parties’ data-protection obligations continue.

8. Termination, export and deletion

Either party may terminate the agreement for a material breach that remains uncured for 30 calendar days after written notice, or immediately where termination is required by law or the breach cannot reasonably be cured. A subscription also ends in accordance with its stated term and renewal provisions.

For 30 days after termination, CAYDA will make Customer Data available for export by the method and in the formats stated in the Data Processing Schedule. The Customer is responsible for obtaining and retaining any records needed for legal or business purposes. Additional offboarding assistance and fees require prior agreement.

CAYDA will delete Customer Data from active systems by day 60 after termination, unless limited retention is lawfully necessary for statutory requirements, legal holds, security matters or disputes. CAYDA will document the basis, restrict retained data to the necessary records and period, and delete it when that basis ends. The Customer may instead instruct deletion, subject to lawful retention exceptions. Export requests after access ends may be made by an authorized contact using Section 15; delivery will be secure and subject to verification of authority.

Deleted data may remain in restricted backup copies until expiry within the period specified in the Data Processing Schedule. Backups will not be used for ordinary business processing. Applicable deletion instructions will be reapplied before restored data returns to ordinary use.

Personal data will be retained only for its applicable purpose or a lawful retention requirement. Customer-controlled data, including provider-held copies, follows documented Customer instructions and the agreed retention schedule; CAYDA’s own processing follows the Privacy Policy.

The Customer may instruct CAYDA to correct, return or delete Customer-controlled personal data during the subscription, subject to lawful exceptions. CAYDA will assist under the Data Processing Schedule. Deactivation or archiving is not permanent deletion. Deleting an individual’s data does not end the subscription.

9. Intellectual property

CAYDA and its licensors retain all rights in the Finance Suite software, documentation, templates, interfaces, designs, know-how and improvements. The Customer receives a limited, non-exclusive and non-transferable right to use the service during the subscription term for its internal business purposes. This does not transfer ownership of Customer Data or Customer-specific records and reports to CAYDA. Feedback may be used by CAYDA provided it does not identify the Customer or disclose Customer Data.

10. Confidentiality

Each party will protect the other party’s non-public information using reasonable care and use it only to perform or receive the service. Confidentiality obligations do not apply to information that is public without breach, already lawfully known, independently developed or lawfully received from another source. Disclosure required by law is permitted, with notice where legally allowed. Access is limited to persons who need the information for those purposes and are subject to confidentiality duties. These obligations continue after termination for as long as the information remains confidential, and personal data remains protected as required by law.

11. Warranties and disclaimers

CAYDA will provide the service with reasonable care and skill and substantially in accordance with the applicable service description. Except for express commitments and to the extent permitted by law, the service is provided on an "as available" basis. CAYDA does not warrant uninterrupted or error-free operation or that Customer Data or software-generated outputs will be accurate without Customer review. These disclaimers do not limit CAYDA’s express confidentiality, security, data-protection or agreed service-level obligations.

12. Liability

To the extent permitted by law, neither party will be liable for indirect, incidental, special, consequential, exemplary or punitive losses, or for loss of profits, revenue, goodwill or anticipated savings arising from the service.

CAYDA’s total aggregate liability arising from the service will not exceed the fees paid or payable by the Customer for the service during the 12 months immediately preceding the event giving rise to the claim. If the subscription has lasted less than 12 months, the cap uses only fees paid or payable for the service from its start to that event.

These exclusions and limitations do not apply to fraud, willful misconduct, gross negligence or any liability that cannot lawfully be excluded or limited. Liability for breach of confidentiality or data-protection obligations remains subject to these exclusions and limitations only to the extent permitted by applicable law. Nothing in this Section limits an individual’s statutory rights or the powers of a competent regulator.

13. Changes

CAYDA may update these Terms prospectively. CAYDA will give at least 30 calendar days’ advance notice of a material change, stating its effective date and sending it to the Customer’s designated contact. A shorter period may be used where necessary to comply with law or address an urgent security risk, with notice as soon as reasonably practicable. Changes will not retroactively alter accrued rights or override a signed agreement without the required agreement.

If a material change adversely affects the Customer, the Customer may give notice before its effective date to terminate the affected service on that date without an early termination charge. Accrued fees remain payable; prepaid fees for the unused period of the affected service will be refunded. Section 8 governs export and deletion.

Changes to privacy practices will be explained in the Privacy Policy before they take effect, and legally required consent will be obtained separately. Subprocessor changes follow Section 5 and the Data Processing Schedule.

14. Governing law and disputes

These Terms are governed by the laws of the Republic of the Philippines. The parties will first attempt in good faith to resolve a dispute through direct discussion for 30 days. Unless a signed agreement provides otherwise, exclusive venue will be in the proper courts of Quezon City. This does not prevent urgent protective relief, required reporting or complaints to the National Privacy Commission or another competent regulator. It does not restrict statutory rights of individuals who are not parties to this agreement.

15. Contact

General enquiries: info@cayda.com. Privacy: dpo.cayda@protonmail.com. Formal legal notices: legal@cayda.com and CAYDA Consulting & Solutions Inc., 6th Floor, 1CISP Building, 11 Mapagbigay corner Maunlad, Pinyahan, Quezon City, NCR 1100, Philippines.

Privacy requests and suspected personal data breaches may be reported to the privacy contact above. Identify the relevant Customer for Customer-controlled records and do not send passwords or unnecessary personal data. The Customer must keep its designated contact details current.