Legal

Terms of Service

This is the agreement between you and Assessly Pte. Ltd., trading as Forculus, for using our platform. We wrote it to be read. If any part is unclear, ask us and we will fix the wording.

Last updated 21 October 2026

These are our first terms. They take effect on 21 October 2026.

1. Who we are, and what these terms cover

The platform at forculuslabs.tech is provided by Assessly Pte. Ltd., a Singapore private company limited by shares (UEN 202613864N), trading as Forculus. In these terms the company is we or us. The Service means these parts of the platform together: the dashboard at app.forculuslabs.tech, the API, the command-line tool, the SDKs, and the apps our customers deploy, which are served under forculuslabs-apps.tech.

Assessly Pte. Ltd. UEN 202613864N 31 Pasir Ris Drive 3, #11-06 Eastvale, Singapore 519491 Contact: legal@forculuslabs.tech

These terms apply to you if you create an account, own or belong to a workspace, deploy an app, or use a bearer token the Service issued. In these terms that person is you. If you use the Service for a company or another organisation, you confirm that you can bind it to these terms, and you then means that organisation.

People who only visit an app someone deployed on the Service are governed by that app owner's own terms. Our Privacy Policy says what we process about them at the door.

The Privacy Policy, the Data Processing Addendum, the Refund Policy and the plan table are part of these terms. Where they conflict, the DPA wins for personal data and these terms win for everything else.

2. Your account

You sign in with a code we email you. There is no password. So:

You must be at least 18 and able to enter a contract. The Service is built for businesses and professional use. It is not for children.

A person may have only one account. You may not sign up on behalf of someone who isn't allowed to use the Service, and you may not use the Service after we have closed your account.

3. Workspaces, members and sharing

Everything on the Service lives in a workspace. A workspace has an owner and may have other members. Each plan applies to one workspace.

4. Acceptable use

You may use the Service to build, deploy and share software that is yours to run. You may not use it, or let anyone use it through you, to:

We may refuse a workspace or app name that impersonates or misleads in this way, or suspend or remove an app or workspace that uses one.

The Service isn't built for protected health information, and we sign no business associate agreement. To take card payments, use a payment provider's hosted page or fields.

We report child sexual abuse material to the Singapore Police Force and to the National Center for Missing & Exploited Children (NCMEC), and keep what the law says we must keep.

You confirm that neither you nor any organisation you act for is a sanctioned person, is owned or controlled by one, or is based in a sanctioned country or region.

Security research on the Service itself is welcome within the rules on the Security page.

If we believe an app or a workspace breaks this section, we may take it offline first and tell you afterwards. Some of these cause harm by the minute. See section 9.

These rules are also on a page of their own, our Acceptable Use Policy.

5. Your apps and your content

Everything you deploy, store or send through the Service is yours. That includes code, files, databases, environment values and the data your apps hold. We call it your content, and we claim no rights in it.

You give us permission to host, copy, run, transmit and back up your content, and to show it to the people you have shared it with, as far as needed to provide the Service. That permission ends when the content is deleted, except that it goes on covering copies in backups for the backup periods in the Privacy Policy.

You are responsible for your content: for having the right to use it, for its complying with section 4, and for your apps doing what you tell their users they do. We don't review apps before they go live, and we don't read what they store unless we are looking into a report about an app. What the platform records about each request is its entry in the audit log, which the Privacy Policy describes. Where a webhook provider signs the time it sent a delivery to a verified public path, the platform also keeps a hash of that delivery's signature, so that a replayed copy can be refused. The hash is deleted within an hour.

If your app relies on knowing who is calling, it must verify the signed identity the edge passes it. Trusting an unsigned header is a defect in the app, not in the Service.

6. Plans, payment and billing

The plans, their prices and their limits are on the pricing page, which is part of these terms. The prices there are: Free costs nothing, Team is US$49 per workspace per month and Business is US$215 per workspace per month.

You are responsible for the fees of every workspace you own, whether or not you used it that month.

7. Cancellation and refunds

You can cancel a paid plan at any time in Stripe's customer portal, which you open from the workspace's Billing tab. Cancellation takes effect at the end of the billing month you've paid for, and until then the plan stays as it is. The workspace then goes back to Free. Container apps stop, and everything else keeps running within Free's limits. Nothing is deleted except audit events older than Free's retention, which are deleted 30 days after the change. Export first. There is no further monthly charge. Usage past the allowances in the final billing month is billed on that month's invoice, which Stripe keeps open for a day after the billing month ends so late measurements reach it.

Deleting a workspace on a paid plan (section 10) cancels its subscription at once, and the rest of the billing month is not refunded. There is no further monthly charge. The workspace's apps stop at once, and usage up to the deletion is billed on a final invoice within two hours, once we have measured it. Usage we can't measure by then is not billed.

Fees are not refunded for part of a billing month, an unused billing month, or a workspace you forgot about. There are two exceptions. The first is where the law where you live gives you a right to a refund that can't be excluded. The second is our own billing mistakes, which we always correct. The Refund Policy has the detail.

8. Availability and support

We aim to keep the Service running all the time, and we publish incidents at forculuslabs.tech/status. But:

Support is by email. The Support page says what each plan gets.

9. Suspension and termination

By you. You can delete an app, a workspace or your account at any time from the dashboard, unless the law requires us to keep the data (section 10). Deleting a workspace on a paid plan cancels its subscription at once, with no refund for the rest of the billing month, and then deletes the workspace. The confirmation dialog says so. Section 10 says what happens to what you delete.

By us. We may suspend a workspace, an app or an account, or end this agreement, if:

Where it is safe to, we contact you first and give you a chance to fix the problem. Where it isn't, for example during an active attack, or for illegal content or a compromised token, we act first and tell you as soon as we can. Whatever the reason, the platform emails the workspace's owners when it is suspended.

While a workspace is suspended, its apps answer 403 and the third-party credentials it holds are not attached to any request. Nothing can be deployed or changed in it: no new apps, deploys, rollbacks, tokens, environment variables, secrets, public paths or uploads. The dashboard, billing and the workspace export stay available so that the matter can be resolved. The workspace can still be deleted, unless the law requires us to keep it. Its data stays where it is until the matter is resolved or the workspace is deleted under section 10.

We report child sexual abuse material to the Singapore Police Force and to NCMEC (section 4), and may report other illegal content to the authorities.

By our providers. The providers we run on, including Cloudflare, may block or remove content or suspend service under their own policies, sometimes without notice to us or to you. When that happens we tell you what we know.

10. Your data when it ends

Before deleting anything, export it. On every plan, the workspace export is one JSON document. It holds the workspace's configuration, its members, its sharing grants, the names of its tokens, secrets and environment variables but never their values, and the audit log the plan retains. Each app's database can be exported on its own, as SQL, from the dashboard or with the CLI's forculus db export. A static site is the files you uploaded. Databases over a Free workspace's limit, and apps' files over a workspace's storage, may be deleted as section 6 describes.

Deleting an app or a workspace takes it offline and revokes its tokens at once. We may keep a deleted app or workspace, with its data, for up to 30 days so that it can be restored, and then delete it for good. When you delete one, the dashboard or the CLI says until when it can be restored, if it can. A workspace keeps at most as many deleted apps as its plan allows apps. Past that, an app can only be deleted for good. You can also delete a deleted app or workspace for good sooner. A workspace we close under section 9 is not kept.

Deleting for good is immediate and permanent. The app's or the workspace's scripts, databases, containers and files are removed from Cloudflare right away. A deleted app's configuration, versions, sharing grants, tokens, secrets and environment variables go at once. Its entries in the workspace's audit log, including the one that records the deletion, stay for the plan's audit retention like any other entry, and go with the workspace. Only the control plane's own records of a deleted workspace linger, for 30 days, for accounting. They are never restorable. We cannot undo a deletion for good, whether or not it was a mistake. Backups of the control-plane database age out on the schedule in the Privacy Policy, and are not used to restore deleted workspaces.

Deleting your account removes the account, your memberships and your sessions. It is refused while you are the only owner of a workspace or of an app. Delete that workspace or app first, or make someone else an owner. It is also refused while the law requires us to keep the data of a workspace you are in, of one that shares an app with you, or of one you left or lost access to while we had to keep its data. Once your account is deleted, a deleted workspace kept for restoring that has no other owner is deleted for good.

When the law requires us to keep data. The law can require us to keep a workspace's data for a time, for example after a report to the police or NCMEC, or a request from the authorities to preserve it. While it does, and whatever else these terms say, the workspace and its apps can't be deleted, changes that would remove data from it may be refused, and we keep its data past the times these terms and its plan would otherwise delete it. The dashboard or the CLI asks you to contact support.

When this agreement ends, these sections still apply: section 5, for the licence to keep backups, and sections 6, 10, 11, 13, 15, 16, 17, 19 and 20.

11. Privacy and data protection

The Privacy Policy says how we handle personal data. When you use the Service to process personal data about other people, you decide what is collected and why, and we process it for you on the terms of the Data Processing Addendum. Under Singapore's Personal Data Protection Act 2012 you are the organisation responsible for that data and we are your data intermediary. Under the GDPR and laws like it you are the controller and we are your processor. You take on that role the moment you share an app with someone, and whenever an app stores data about its users. The DPA applies automatically to every workspace.

The providers we rely on, and where they run, are on the Subprocessors page. We tell workspace owners 30 days before we add one.

12. Third-party services

Your apps may call other services. The Service can hold those services' credentials for you and add them to your app's outgoing requests. Those services have their own terms. We are not a party to them, and we are not responsible for what those services do with your requests. Use the credentials you give us only as those services allow.

Where we publish an SDK or a tool under an open-source licence, that licence, not these terms, governs your use of it.

13. Intellectual property

The Service's software, design, documentation and name belong to us and our licensors. These terms give you the right to use it while the agreement lasts, and nothing more. You may not copy it, reverse engineer it except where the law allows, or use our name or logo to suggest we endorse your apps.

If you send us ideas or feedback, we may use them without owing you anything. We won't say they came from you unless you ask.

We handle notices of claimed copyright infringement under the network service provider provisions of Singapore's Copyright Act 2021, for anything on the Service, including the apps our customers deploy. Send them to us at:

Copyright notices Assessly Pte. Ltd. 31 Pasir Ris Drive 3, #11-06 Eastvale, Singapore 519491 Email: legal@forculuslabs.tech

In this part, you means whoever sends the notice or counter-notice.

A notice must be in writing and include:

  1. the physical or electronic signature of the owner of the copyright you say is infringed, or of someone authorised to act for them
  2. the work you say is infringed or, if one notice covers several works on one site, a representative list of them
  3. the material you say infringes, and that you want removed or disabled, with enough detail for us to find it, such as its full address
  4. how to reach you, such as your postal address, phone number and email address
  5. a statement that you believe in good faith that the material infringes the copyright, and that its use isn't authorised by the owner, its agent or the law
  6. a statement that the information in the notice is accurate, and that you own the copyright or are authorised to act for its owner

When we get a valid notice, we promptly remove the material or disable access to it, which can mean taking the app offline. We send the workspace's owners a copy of the notice, including its contact details. If a notice is missing something the list asks for, we write back and say what.

Counter-notice. If material of yours was removed or disabled and you believe that was a mistake, that the material was misidentified, or that it doesn't infringe, you can send us a counter-notice at the same addresses. It must be in writing and include:

  1. your physical or electronic signature
  2. the material that was removed or disabled, and where it appeared before that
  3. a statement that you believe in good faith the material was removed or disabled by mistake or misidentification, or that it doesn't infringe
  4. your name, address, phone number and email address, and a statement that the information in the counter-notice is accurate

We send a copy of a valid counter-notice to the person who sent the notice and tell them we will put the material back in 10 business days. We put it back no sooner than 10 and no later than 14 business days after we receive the counter-notice, unless the person who sent the notice first tells us they have started court proceedings to stop the material being put back.

False notices. Anyone who makes a false statement in a notice or a counter-notice can be liable under the Copyright Act 2021, including for the loss it causes. If you aren't sure, ask a lawyer first.

Repeat infringers. In appropriate circumstances we end the accounts and workspaces of repeat infringers, under section 9.

14. Early and experimental features

A feature we label as early, beta, preview or experimental may change or disappear without notice, and may have bugs. None of the commitments in section 8 apply to it. Use it on that understanding.

15. Warranties and disclaimers

We warrant that we will provide the Service with reasonable skill and care. Beyond that, and as far as the law allows, the Service is provided as is. We don't promise it will be uninterrupted, error-free, or suitable for a particular purpose, or that it will keep your content safe from every possible loss. Keep your own copies of anything you can't afford to lose.

Nothing in these terms limits a right you have as a consumer that can't be limited by contract, including your rights in Singapore under the Consumer Protection (Fair Trading) Act 2003.

16. Limitation of liability

Neither of us excludes or limits liability for death or personal injury caused by negligence, for fraud, or for anything else the law says can't be excluded or limited.

Otherwise, and as far as the law allows, including Singapore's Unfair Contract Terms Act 1977 and its test of reasonableness:

Nothing in this section limits your duty to pay fees and usage charges, or your indemnity in section 17.

These limits reflect the price of the Service. They are the reason we can offer a Free plan at all.

17. Indemnity

You will cover us against claims, damages and reasonable costs that arise from your content, your apps, the people you shared them with, or your breach of section 4. Examples are a copyright claim over something an app of yours served, or a complaint from someone whose data an app of yours mishandled. We will tell you about any such claim promptly, let you run the defence if you want to, and not settle it without your agreement unless you stop responding.

18. Changes

To the Service. We change the Service all the time. We won't remove a capability your paid plan depends on without at least 30 days' notice, unless we have to for security or legal reasons.

To these terms. When we change these terms in a way that matters, we email workspace owners about the change, and the dashboard asks you to accept the new version the next time you open it. It applies to you when you accept it, or 30 days after that email, whichever comes first. Until then the version you accepted before still applies to you, and you can choose Not now and go on using the Service. After those 30 days the dashboard asks you to confirm it before you go on. Without confirming it you can still cancel a paid plan or move to a smaller one, export a workspace, and delete a workspace or your account. Corrections and clarifications that don't change your rights take effect when published. The date at the top is the version, and the current version is always at forculuslabs.tech/terms. If you don't accept a change, write to legal@forculuslabs.tech before it takes effect. We will then cancel any paid plan, and refund any month you paid for and can no longer use.

19. Governing law and disputes

These terms are governed by the laws of Singapore, with the courts of Singapore having exclusive jurisdiction over any dispute, without regard to conflict-of-law rules. There are two exceptions. Either of us may seek an injunction anywhere to protect intellectual property or confidential information. And a consumer keeps the protection of the mandatory law where they live.

Before either of us starts proceedings, we agree to try to resolve the dispute by writing to the other and talking it through for at least 30 days. This doesn't stop either of us seeking urgent relief from a court.

20. General

21. Contact

Questions about these terms: legal@forculuslabs.tech. Help with the Service: support@forculuslabs.tech. Data protection: privacy@forculuslabs.tech. Data Protection Officer: dpo@forculuslabs.tech. Security reports: security@forculuslabs.tech. Abuse on an app we host: abuse@forculuslabs.tech. Copyright complaints: legal@forculuslabs.tech, as section 13 says.