Terms of Service

Version: 1.5-draft · Last reviewed: 2026-05-12

These terms govern the contractual relationship between the Nodex operator and you, as a B2B user (company, sole-trader / PFA, or accounting practice).

Operator

The current operator of the Nodex service is Andrei Buliga PFA, tax ID (CUI) 54243750, Strada General Petre Popovăț 57, et. 1, ap. 11, Sector 6, Bucharest, Romania. Upon incorporation of Nodex SRL (planned mid-2026), the operator will transfer to the new legal entity with 30 days' prior notice to all active users, pursuant to GDPR Art. 13 and the terms below.

Definitions

• Nodex — the SaaS service provided via nodex.nodera.ro and app.nodex.nodera.ro.
• User — legal entity, sole-trader (PFA), or accounting practice using Nodex.
• Subscription — monthly or annual recurring plan.
• Plan — Starter, Pro, Business, or Accountant.
• Instant Pack — non-recurring micro-payment for OCR packs (EUR 1.99 / 4.99 / 9.99).
• Account — individual user with unique credentials.

Service description

Nodex is a business management platform for Romanian SMBs offering: e-Factura (B2B and B2C per GEO 89/2025, effective 1 January 2026), SAGA export, accountant collaboration, invoicing, and expense OCR. The Compliance Warranty feature is in planning for V2 GA (Q1 2027); the Compliance Warranty page sets out the informational framework, with no active contractual liability in V1/V1.5.

Beta status

V1.5 is closed-beta software. By using Nodex during this phase, you acknowledge and accept that:

• bugs, regressions, and unexpected behavior may occur;
• there may be unplanned periods of unavailability (downtime);
• a residual risk of data loss exists despite our technical measures (Supabase native backups, R2 replication);
• there is no contractual SLA in V1.5 — our commitment is "best-effort uptime".

We recommend keeping a periodic local export of critical data.

Eligibility

Nodex is a B2B service. The user represents that: (i) it is a legal entity, PFA, or accounting practice legally registered in Romania; (ii) the signatory is at least 18 and has full legal capacity; (iii) the service is used exclusively for lawful business activity.

Account creation

Account via email + password or magic link (Supabase Auth). The user is responsible for credential confidentiality.

Subscriptions and payments

| Plan | Monthly price | EUR equivalent (at official BNR rate, 5.20 RON / EUR) | | ---------- | ------------------- | -------------------------------------------------------- | | Starter | 49 RON/month | ~NaN EUR | | Pro | 199 RON/month | ~NaN EUR | | Business | 699 RON/month | ~NaN EUR | | Accountant | 29 RON/client/month | ~NaN EUR/client |

Billing monthly or annually; the annual plan offers a 16% discount. The EUR/RON rate is indicative; primary billing is in RON. 30-day no-card trial, no commitment. Instant OCR packs: EUR 1.99 / 4.99 / 9.99 (Test Mode in V1).

Stripe Mode Disclosure. In V1 (closed beta, May–June 2026), payments run in Stripe Test Mode — no real money is processed. At V1.5 public launch (Q3 2026) the mode flips to Stripe Live and real payments begin. For EU customers, the processor is Stripe Payments Europe Ltd. (Ireland) (source: stripe.com/legal/dpa); for non-EU customers, processing occurs via Stripe, Inc. (USA) — see Privacy Policy.

Cancellation and refunds

You may cancel anytime from your account. The service remains active until the end of the current billing period; no pro-rata refunds for unused periods (Romanian B2B SaaS norm). For Instant OCR packs, no refunds once the pack is partially or fully used.

User obligations

• Lawful use, in compliance with Romanian law.
• Accuracy of fiscal data entered (CUI, IBAN, amounts, VAT rates). Nodex processes data as entered.
• No abuse, scraping, reverse engineering, or resale.
• No upload of illegal content or content infringing third-party rights.

Nodex obligations

• Best-effort uptime (no SLA in V1.5; contractual SLA possible from V2).
• Reasonable security measures (see DPA).
• Sub-processor disclosure with 14 days' notice of changes.
• Logical data isolation between organizations via Postgres Row-Level Security (RLS).

Intellectual property

Nodex retains all IP rights in the software, design, brand, and documentation. The user retains rights in their fiscal data and uploaded content. Non-exclusive, non-transferable usage license for the duration of the subscription.

Compliance Warranty

The Compliance Warranty feature enters force at V2 GA (Q1 2027). In V1/V1.5 there is no active contractual liability on the part of the Nodex Operator. The Compliance Warranty page is informational.

Limitation of liability

To the maximum extent permitted by law, Nodex's total liability to the user for any claim arising out of or in connection with these terms is limited to the amount equivalent to fees actually paid by the user to Nodex in the 3 (three) months preceding the event giving rise to the claim.

Carve-outs (liability is NOT limited for): (i) gross negligence or willful misconduct by Nodex; (ii) fraud; (iii) infringement of third-party intellectual property rights (see below).

Nodex is not liable for indirect losses (lost profits, reputational loss, business interruption) except under the carve-outs above.

Indemnification

The user indemnifies Nodex for damages, costs, and fees arising from: (i) unlawful or non-compliant use of the service; (ii) entry of incorrect data causing damage to third parties; (iii) breach of these terms.

Nodex indemnifies the user exclusively for direct third-party claims alleging that Nodex's own software (the application code) infringes third-party IP rights in Romania. This indemnity is limited to software developed directly by Nodex and does not cover: open-source components, third-party API integrations (ANAF, SAGA, sub-processors), user-entered data, or user-generated content.

Force majeure

Neither party is liable for non-performance caused by force majeure events (war, natural disasters, pandemics, prolonged internet infrastructure outages, government actions prohibiting service provision).

Governing law and jurisdiction

These terms are governed by Romanian law. Disputes shall be resolved amicably; failing that, the courts at the operator's seat in Bucharest have jurisdiction. For consumers (PFA may qualify in some cases), the EU ODR platform is available at https://ec.europa.eu/consumers/odr/.

Changes to terms

Material changes (price, service scope, sub-processors, liability limitation) will be notified 45 days before they take effect — longer than the customary 30-day standard, owing to our conservative V1.5 posture. Continued use of the service after the effective date constitutes acceptance. Minor changes (corrections, clarifications) take effect upon publication.

Termination

Either party may terminate on 30 days' written notice. Immediate termination for material breach (non-payment beyond 14 days, breach of use obligations).

Article 13 — Customer Data Erasure

13.1 Right to erasure. The user acknowledges that natural persons whose personal data is processed through Nodex (customers entered into the platform) may exercise rights under GDPR Art. 17. Nodex provides a four-tier technical flow to honour such requests to the extent permitted by Romanian fiscal law.

13.2 Legal asymmetry. The fields notes, phone, email, and detailed address of a customer record may be permanently erased on request. The fields name, tax ID (CUI), and country are protected by Romanian Law 82/1991 Art. 25 read with GDPR Art. 17(3)(b) (legal obligation to retain accounting supporting documents) and cannot be erased, because they are denormalized onto already-issued invoices. Issued invoices, archived PDFs, and audit log records are not subject to the right to erasure during the applicable legal retention period (GDPR Art. 17(3)(b) and (e)).

13.3 User responsibility. The user is responsible for: (i) forwarding Art. 17 GDPR requests received from their end-customers to Nodex using the platform's built-in erasure tools; (ii) maintaining internal documentation of erasure actions taken; (iii) independently assessing compliance with any AMLR (EU 2024/1640) obligations applicable to their own business activity, which may impose extended retention requirements for certain customer records. Nodex does not provide legal advice.

13.4 Technical limits. Art. 17 erasure is architecturally irreversible. Restoration of a customer erased under Art. 17 is not possible. Hard purge (physical deletion) of the record is available only when the customer has no issued invoices.

13.5 Audit log. Audit log records relating to erasure actions are retained for 5 years per Romanian Law 82/1991 Art. 25 and contain no personal data by construction (UUIDs and public fiscal identifiers only — never names, emails, or addresses).

Contact

privacy@nodex.nodera.ro (data) · dpo@nodex.ro (GDPR requests) · andrei.buliga@nodera.studio (commercial).