Terms of service

These terms are an agreement between Tinilab Limited Company (“Tinilab”, “we”, “us”), of 39 Le Hien Mai, Phuong Cat Lai, Ho Chi Minh City, Vietnam, and the organization that uses Orcabase (“you”). They cover the Orcabase app, API, AI connectors and website (together, the “service”).

By creating an account, accepting an invitation or using the service, you agree to these terms and to our Privacy policy. If you accept them for a company, you confirm you’re allowed to agree on its behalf. If you don’t agree, please don’t use Orcabase.

If you’ve signed a separate written agreement with us, it wins wherever it differs from these terms.

• You must be at least 16, and use Orcabase for your work or business.
• You sign in with Google. Keep that account secure: what happens under your sign-in is your responsibility.
• Your organization’s admins decide who joins, what role each person has, and which data sources, AI keys and sharing settings are used. You’re responsible for everyone you invite.
• Keep API tokens as safe as passwords, and turn off any you no longer need.
• Tell us straight away if you think someone has got into your account.

Your data stays yours. Everything you connect, upload or create in Orcabase (“your data”) belongs to you. We claim no ownership of it.

You give us permission to store, process, copy and display your data only as needed to run the service for you: to run your queries, draw your dashboards, answer your questions, keep backups and keep the service secure. That includes sending parts of it to the AI providers that run the Data Agent, as described in our Privacy policy. This permission ends when your data is deleted.

You’re responsible for your data, and you confirm that:

• You have the right to connect it and to use it in Orcabase.
• Where it includes personal information about others, such as your customers, you have a lawful basis to process it and have told them what they need to know.
• You won’t send us special categories of data (like health records or payment card numbers) unless we’ve agreed to it in writing.

We recommend connecting your own databases with a read-only login. With one, nothing in Orcabase can change them. See Security.

The Data Agent and AI assistants connected to Orcabase write SQL, build charts and explain results using AI models. AI can be wrong. Answers can misread a question, pick the wrong table or leave something out. Check anything important, especially before you share it or make a decision on it. Certified metrics make answers more reliable, but you remain responsible for the decisions you make.

What the agent produces for you (queries, charts, dashboards, summaries) is yours to use, as far as we have any rights in it.

If your organization uses its own AI key, you have your own agreement with that AI gateway and you pay it directly. If it uses Orcabase AI, your usage is subject to your plan’s credit limits.

Please use Orcabase for what it’s for. You agree not to:

• Break the law, or infringe anyone’s rights, privacy or intellectual property.
• Connect data you don’t have the right to use, or use Orcabase to harass, deceive or harm anyone.
• Try to reach data that isn’t yours, get around limits or security, or probe or scan Orcabase without our permission.
• Upload malware, or put an unreasonable load on the service or the databases it connects to.
• Resell Orcabase, or copy it to build a competing product.
• Reverse engineer the service, except where the law allows it regardless of this term.

Found a security problem? Please email hello@tinilab.com privately before sharing it anywhere else. Good-faith research reported to us first is welcome.

Orcabase works with services run by other companies: Google sign-in and BigQuery, Fivetran, AI gateways and model makers, Claude, ChatGPT and the databases you connect. Your use of those services is governed by their own terms. We’re not responsible for them, and if one changes or stops working, the parts of Orcabase that depend on it may change too.

• Plans are priced by team size, with add-ons like data hosting, as listed on our Pricing page or in a quote we send you.
• Fees are charged monthly in advance, in US dollars, and don’t include taxes, which you pay where they apply.
• AI used through your own key is billed by your AI provider, not by us.
• You can move between plans at any time. A plan change takes effect from your next billing period unless we agree otherwise.
• If a payment is more than 14 days late, we may pause your organization’s access after telling you. We won’t delete your data for non-payment without at least 30 days’ notice.
• We may change our prices. We’ll tell you at least 30 days before a change applies to you, and you can cancel before it does.
• Fees already paid aren’t refundable, except where the law or these terms say otherwise.

We’ll run Orcabase with reasonable care and skill, keep your data secure, and fix problems as fast as we can.

Beyond that, the service is provided “as is” and “as available”. We don’t promise it will be uninterrupted or error-free, that AI answers will be accurate, or that it will meet every need you have. To the extent the law allows, we disclaim all other warranties, including merchantability, fitness for a particular purpose and non-infringement.

We improve Orcabase all the time. We may add, change or remove features, but we won’t take away something essential to your plan without telling you in advance.

To the extent the law allows:

• Neither of us is liable to the other for indirect or consequential losses, or for lost profits, revenue or data, even if warned they might happen.
• Each side’s total liability under these terms is limited to the fees you paid us in the 12 months before the claim arose, or US$100 if that’s more.

These limits don’t apply to your obligation to pay fees, to breaches of the Acceptable use section, or to anything the law doesn’t allow to be limited, such as fraud.

If someone brings a claim against us because of your data or your use of Orcabase in breach of these terms, you’ll cover the reasonable costs of defending it and any damages awarded. We’ll tell you about the claim promptly and let you control its defense.

• You can stop using Orcabase at any time. Tell us and we’ll close your organization at the end of the billing period.
• We can suspend or end your access if you seriously or repeatedly break these terms, or if we must by law. Unless the problem is urgent, we’ll warn you first and give you a chance to fix it.
• If we ever shut Orcabase down, we’ll give you at least 60 days’ notice and refund any fees paid for time after the shutdown.
• You can take your data with you. After the agreement ends, we keep your organization’s data for 30 days so you can export it, then delete it, as described in our Privacy policy.

Sections that by their nature should last, like Your data, Limits on liability and payment of fees already due, survive the end of the agreement.

We may update these terms as Orcabase grows. We’ll change the date at the top, and if a change matters, we’ll tell you in the app or by email at least 30 days before it takes effect. If you keep using Orcabase after that, the new terms apply. If you don’t agree to them, you can stop using Orcabase before they do.

• Disputes. These terms are governed by the laws of Vietnam, and the competent courts of Ho Chi Minh City decide any dispute, unless the law where you are says otherwise. Before going to court, let’s try to sort it out together: email hello@tinilab.com and give us 30 days.
• Things beyond our control. Neither of us is responsible for delays caused by events outside reasonable control, like outages at a provider, natural disasters or war.
• Moving the agreement. Neither of us can hand this agreement to someone else without the other’s consent, except as part of a merger or sale of the business.
• Feedback. If you suggest an improvement, we may use it freely, without owing you anything.
• The whole agreement. These terms, the Privacy policy and any order or written agreement with us are the whole agreement between us. If one part turns out to be unenforceable, the rest still applies. Not enforcing a term right away doesn’t mean we’ve given it up.