Terms of Service - SymbolFlow

SymbolFlow Terms of Service

Updated Date: July 21, 2026

Introduction
Acceptance of Terms
Changes to Terms
Your Account
Use of the Services
Publishing and Using Plugins
Our Rights in the Services
Your Content
Intelligent Workflows Created by You
Your Responsibility to End Users
Third-Party Services
Intellectual Property Rights
Feedback
Breach of Terms
Disclaimers
Minors Usage Terms
Changes, Interruption and Termination of Services
Miscellaneous
Annex A: EU/EEA and UK Special Provisions Addendum
Annex B: Data Processing Addendum (DPA) & Standard Contractual Clauses

1. Introduction

Welcome to "SymbolFlow"! The "SymbolFlow" software and related services (the "Platform") refer to services provided to you by SymbolFlow Team(Operating as Individual Provider) via web pages, applications (which may include different versions), Software Development Kits (SDKs) and Application Programming Interfaces (APIs) provided for third-party websites and applications, as well as innovative forms arising with technical development. For users residing or located in the European Union (EU), European Economic Area (EEA), or United Kingdom (UK), services may also be contracted through our designated EU entity or subject to the EU/EEA Special Provisions set forth in Annex A and the Data Processing Addendum in Annex B.

You may use the services provided by SymbolFlow to create intelligent workflows or related applications and software, and you may also use official SymbolFlow intelligent workflows, templates, workflows, and other platform products to experience platform services.

This User Agreement is an agreement entered into between you and us regarding registration, login, and use (hereinafter collectively referred to as "use") of the Services (hereinafter referred to as "this Agreement"), agreeing upon the terms and conditions for your access to and use of the Platform as well as our related websites, applications, products, models, services, software, tools, setting techniques, content, and documentation (collectively, the "Services").

In order to better provide services to you, please read carefully and fully understand this Agreement before using the Services, especially terms involving exemption from or limitation of liability, license of rights, governing law, and dispute resolution. In particular, important content such as exemption or limitation of liability will be highlighted in bold to bring your attention; you should read it carefully.

If you do not agree to this Agreement, it will render us unable to provide complete services to you, and you may choose to stop using the Services. If you voluntarily choose to agree to or use the Services, you shall be deemed to have fully understood this Agreement and agreed to accept and be bound by this Agreement and other related agreements and rules as a party hereto. In addition, we may issue operating rules, policies, guidelines, and procedures from time to time, which shall form an integral part of this Agreement. If you do not agree to this Agreement and other related agreements and rules, you may not access or use the Services.

If you have any questions, comments, or suggestions regarding this Agreement, you may contact us via the feedback and complaint entry point of the Services.

To better improve experience and service, or for security assurance, we will update or change parts of or all of the Services from time to time (including but not limited to software/service modification, upgrade, replacement, function enhancement, development of new services, etc.). We will notify you in an appropriate manner where feasible.

You may stop using the Services at any time. We may also suspend, modify, or stop providing services to you in accordance with the objective criteria and procedures set forth in Section 17.

You understand and agree that using the Services requires you to prepare relevant terminal devices (such as computers, mobile phones, etc.). Once you access the Services on terminal devices, you are deemed to be using the Services. In order to fully realize all functions of the Services, you may need to connect your terminal devices to the Internet, and you understand that you shall bear all necessary expenses (such as data fees, Internet access fees, etc.).

2. Acceptance of Terms

By accessing or using the Services, you confirm that you have the legal capacity to enter into a legally binding contract with SymbolFlow team (or our relevant EU entity, as applicable) and that you agree to abide by and comply with this Agreement.

If you voluntarily choose to agree to this Agreement or use the Services on behalf of a business or other entity, then (1) "you" includes you and that business or entity, (2) you represent and warrant that you are an authorized representative of that business or entity with the authority to bind that business or entity to these terms, and you agree to these terms on behalf of that entity, (3) your business or entity is legally and financially responsible for your voluntary agreement to this Agreement or use of the Services, as well as access or use of your account by others associated with your entity (including but not limited to any employees, agents, or contractors). You may accept this Agreement by voluntarily choosing to agree to this Agreement or by using the Services. You understand and agree that from that point onward, we will treat your access to or use of the Services as acceptance of this Agreement. Acceptance of this Agreement is distinct and unbundled from your acknowledgment of our Privacy Policy.

3. Changes to Terms

In order to provide you with better services or due to changes in applicable laws and regulations, policies, technical conditions, product features, etc., we reserve the right to modify the terms of the Services from time to time. We will make commercially reasonable efforts, such as through platform notifications or email, to inform you of any material changes to the terms of this Agreement in advance. However, you should still check these terms regularly to stay informed of such changes. We will also update the "Last Updated" date at the top of the terms to reflect the effective date of the terms. Your continued access to or use of the Services after the effective date of the new terms constitutes your acceptance of the new terms. If you do not agree to the new terms, you must stop accessing or using the Services and may export your data in accordance with Section 4.7. For your convenience, you may review the latest version on the relevant pages of the Services.

4. Your Account

4.1 To use this Platform and Services, you must register and log in to a SymbolFlow account ("Account").
4.2 Account registration and management shall be handled by SymbolFlow, and rules related to Account operation, security, and cancellation shall be governed by the relevant provisions of the SymbolFlow Terms of Service and SymbolFlow Privacy Policy. For references to the "Official Website" in the SymbolFlow Terms of Service and SymbolFlow Privacy Policy, it shall be interpreted to include this "Platform" as defined herein, and references to "Services" shall also be interpreted to include the "Services" defined herein. Your access to this Platform depends on a valid Account status. If your Account is suspended or terminated, your access to this Platform and Services may also be restricted or terminated in accordance with Section 4.5 and Section 17.
4.3 Despite using a SymbolFlow Account, this Platform is operated by us. When you access and use this Platform and Services through an Account, you are required to comply with this Agreement and other relevant agreements and rules. If you wish to cancel your services on this Platform only (i.e., delete all your developer data and user data under this Platform and deactivate this Platform and Services), you may submit a corresponding application and complete the relevant process in accordance with the account cancellation terms in the Privacy Policy.
4.4 Account registration data and personal information processing are governed independently by the SymbolFlow Privacy Policy, which specifies our legal bases (such as performance of contract under GDPR Article 6(1)(b) or legitimate interests) and your statutory privacy rights. Agreement to these Terms of Service constitutes a contractual agreement for software usage and does not serve as bundled consent for personal data processing. All personal data collection, legal bases, and user privacy rights (Access, Erasure, Data Portability under GDPR Articles 15–22) are handled separately via the SymbolFlow Privacy Policy.
4.5 Objective Suspension & Restriction Grounds. We reserve the right to disable or suspend your Account, restrict intelligent workflows created by you, or block their distribution if: (1) you materially breach any provision of this Agreement; (2) your use poses a cybersecurity threat, causes harm to us, other users, or third parties, or violates applicable laws or regulations; or (3) required by applicable law or competent government/regulatory authorities. Except in emergency security situations, severe illegal acts, or where prohibited by law, we will provide you with reasonable prior written notice stating the specific objective grounds for such restriction or suspension.
4.6 You may use certain features of this Platform without logging in or registering an account, but you will not be able to experience all services or features.
4.7 Data Export and Access Rights. Prior to any account suspension, termination, or cancellation taking effect, you shall be provided a reasonable window (not less than 30 days, where technically and legally feasible) to access and export your user content, account data, and created workflows (in accordance with Data Portability principles under GDPR Article 20), except where immediate data deletion is mandated by court order, security emergency, or law enforcement authority.

5. Use of the Services

5.1 The Services rely on generative artificial intelligence models, and may simultaneously rely on other models and services, to provide you with AI-generated technology services and other technical services.
Artificial intelligence and machine learning are dynamic and continuously evolving. You agree and recognize that outputs generated by AI have inherent limitations. We are committed to continuously improving our services and enhancing their accuracy, reliability, security, and overall value. However, due to the inherent probabilistic nature of machine learning algorithms, our services may occasionally generate inaccurate information.
By using our services, you acknowledge and agree to the following:
(1) For scenarios where you use the output of AI models that may have a material impact on you or your end users, including but not limited to medical, financial, investment, insurance, credit, education, employment, housing, legal affairs, medical decisions, or other major decisions, it is recommended that you consult relevant professionals.
(2) You are responsible for evaluating the accuracy and appropriateness of AI model outputs based on your specific needs, including conducting human review where appropriate prior to applying or disseminating outputs of the Services.
(3) Outputs of AI models should not serve as the basis for further action or inaction by you and your end users. Any judgment you make based on the output content, or any subsequent related actions taken accordingly, shall be borne solely by you, including risks arising from reliance on the authenticity, accuracy, reliability, non-infringement, or fitness for a particular purpose of the output content. You should understand and legally use generative AI technology scientifically and rationally.
(4) The Services may occasionally generate incomplete, incorrect, or potentially offensive outputs, which should not be construed as reflecting our views or positions. Furthermore, any reference to third-party products or services in the output does not imply our endorsement or affiliation with us.

5.2 Code of Conduct
We are committed to civilized, rational, friendly, and high-quality communication. While driving business development, we continuously strengthen information security management capabilities, earnestly fulfill social responsibilities, abide by applicable laws and regulations, respect the legitimate rights and interests of citizens, and respect public order and good customs.
When using the Services, creating and using intelligent workflows, creating and using APIs and plugins, any information and software you input, output/generate, create, comment on, upload, publish, or disseminate shall consciously comply with applicable laws and administrative regulations, respect public order, social morality and ethics, national interests, legitimate rights and interests of others, moral style, and information authenticity under applicable legal standards; otherwise, the company has the right to take corresponding measures in accordance with Section 4.5 and Section 14. You shall not engage in, or allow/assist anyone else to utilize the Services to engage in, the following conduct:
(1) Opposing mandatory legal principles established by applicable constitutional and administrative laws;
(2) Endangering national security and public interests, or leaking confidential state secrets;
(3) Subverting state power, damaging national image, inciting secession, or undermining social stability;
(4) Damaging public honor and legitimate societal interests;
5) Promoting terrorism or extremism;
(6) Inciting ethnic hatred or undermining ethnic unity;
(7) Promoting discrimination or hatred, or utilizing any vulnerability of specific groups based on age, social, physical, or mental characteristics to substantially distort the behavior of persons belonging to that group, causing or likely to cause physical or psychological harm to that person or another person, including but not limited to ethnic discrimination, racial discrimination, religious discrimination, nationality discrimination, gender discrimination, sexual orientation discrimination, age discrimination, occupational discrimination, health discrimination, and regional discrimination;
(8) Engaging in or assisting illegal or high-risk activities, such as: military and warfare, weapon development, explosives or hazardous materials, management or operation of critical infrastructure (such as transportation, energy), creation or distribution of controlled substances or services, generation or dissemination of self-harm-related information, activities with high financial harm risks including gambling, automated credit eligibility determination, employment and education decisions, or making high-risk government decisions (e.g., law enforcement);
(9) Undermining religious policies, promoting illegal cults or unlawful superstitions;
(10) Fabricating or spreading rumors or false information, disrupting economic and social order, or undermining social stability; for example, using or targeting the Services to engage in fraud, deceptive, misleading, or deceptive activities, including but not limited to impersonating or representing answers generated by intelligent workflows as human-generated, plagiarism, or academic dishonesty;
(11) Disseminating, spreading, or promoting violence, obscenity, pornography, sexually explicit content, gambling, murder, terror, or instigating crimes;
(12) Exploiting, harming, or attempting to exploit or harm minors, damaging physical or mental health of minors, or infringing upon legitimate rights and interests of minors;
(13) Insulting, defaming, offending, harassing, abusing, provoking, bullying, controlling, intimidating, threatening, harming, scaring, distressing, embarrassing, or upsetting others;
(14) Carrying out violent intimidation or threats against others, or conducting doxxing ("human flesh search");
(15) Involving others' privacy, personal information, or data, e.g., illegally collecting or disclosing personally identifiable information, or educational, financial, or other protected records such as addresses, phone numbers, email addresses, numbers and characteristics in personal identification documents (e.g., social security numbers, passport numbers, ID card numbers), or credit card numbers;
(16) Spreading vulgar language or damaging public order and good customs;
(17) Violating business ethics, infringing commercial secrets, or infringing legitimate rights and interests of others such as privacy rights, reputation rights, honor rights, portrait rights, intellectual property rights, and trade controls;
(18) Spreading advertisements, or similar commercial solicitations, excessive marketing information, spam, promotional materials, or other unauthorized or unsolicited messages;
(19) Processing or using sensitive data in violation of applicable data protection laws;
(20) Content irrelevant to the commented information;
(21) Publishing meaningless information, or deliberately using character combinations to evade technical reviews;
(22) Secretly photographing or recording others without permission, infringing upon others' legitimate rights;
(23) Containing terror, blood/violence, high-danger content, or content endangering the physical or mental health of performers or others, including but not limited to:
i. Any violence and/or self-harm content;
ii. Any content threatening life/health or using dangerous instruments such as knives to perform acts endangering personal and/or property rights of oneself or others;
iii. Encouraging or inducing others to participate in dangerous or illegal activities that may cause personal injury or death;
(24) Providing targeted professional advice without review by professionals: including legal, financial, medical/health, investment, insurance, credit, education, employment, housing, and other professional advice;
(25) Using the Services in a manner that may create conflicts of interest or undermine the purpose of the Services;
(26) Developing or serving applications, products, services, or models that compete with the company and/or its affiliates in violation of proprietary rights;
(27) Other information that violates laws, regulations, policies, public order, good customs, interferes with normal operation of this software and related services, or infringes upon legitimate rights and interests of other users or third parties.

5.3 You shall not, on your own or by allowing/assisting anyone else, use plugins, cheats, systems, or third-party tools to interfere with, disrupt, modify, or exert other influences on the normal operation of the Services, including but not limited to using any automated programs, software, or similar tools to access the Services or collect and process information and content therein.
5.4 You shall not, on your own or by allowing/assisting anyone else, engage in any act that endangers system security of the Services, nor utilize the Services to engage in any act that endangers computer network security. Such acts include but are not limited to:
(1) Illegally intruding into networks, interfering with normal network functions, stealing network data, or other activities endangering network security;
(2) Providing programs or tools specifically used for intruding into networks, interfering with normal network functions and protection measures, stealing network data, or other activities endangering network security;
(3) Providing technical support, advertising promotion, payment settlement, or other assistance while knowing that others are engaging in activities endangering network security;
(4) Using unauthorized data or entering unauthorized servers/accounts;
(5) Entering public computer networks or others' computer systems without permission to delete, modify, or add stored information;
(6) Attempting to probe, scan, or test system/network vulnerabilities of the Services without permission, or implementing other acts that disrupt network security;
(7) Attempting to interfere with or disrupt normal operations of the Services system or website, intentionally spreading malicious programs or viruses, or other acts disrupting or interfering with normal network information services;
(8) Forging TCP/IP packet names or partial names;
(9) Reverse engineering, disassembling, reverse assembling, decompiling, compiling, or otherwise attempting to discover source code, system source code, underlying components, underlying technology, algorithms, or models of the Services or third-party services, except as permitted by non-waivable applicable laws;
(10) Maliciously registering accounts of the Services, including but not limited to frequent or bulk account registrations;
(11) Renting, leasing, distributing, licensing, transferring, selling, adapting, copying, disseminating, vertical searching, mirroring, or trading access to or use of the Services or any part thereof;
(12) Impersonating others without authorization or gaining unauthorized access to this software and related services;
(13) Impersonating or attempting to impersonate us, another user, or any other person (living or deceased) or entity;
(14) Providing content containing viruses, Trojans, worms, logic bombs, or other malicious or harmful materials, or generating such malicious or harmful materials using intelligent workflows created by you;
(15) Using the Services or accessing third-party services through the Services in an automated manner, especially actions that may impose an unreasonable or disproportionately large load on our infrastructure, or exceed any of our rate limits;
(16) Using any "deep-link", "page-scrape", "intelligent workflow", "spider", or other automatic device, program, algorithm, or methodology, or any manual process to access, acquire, copy, or monitor any portion of the Services, or obtaining or attempting to obtain any materials, documents, or information through any means;
(17) Interfering with or attempting to interfere with any network, server, computer, or database connected to the Services, or violating any of their terms, policies, or procedures.
5.5 Your access to and use of the Services (including but not limited to intelligent workflows or plugins or APIs created, published, distributed, operated, or used by you) must at all times comply with all applicable legal and regulatory requirements. If we determine on objective grounds that you have violated this Agreement or any applicable laws or regulations, we may take appropriate, proportionate measures in accordance with Section 4.5 and Section 14, providing prior notice where feasible and required by law.
5.6 You shall not use deep learning or other new technologies/applications to create, publish, or disseminate false information. When you publish or disseminate information generated using deep learning, virtual reality, or other new technologies/applications, you shall prominently label or prompt such content. You should not delete or misleadingly modify labels added by this software based on deep learning, virtual reality, or other new technologies/applications.

6. Publishing and Using Plugins

6.1 Plugin Review. Although we are under no obligation to review plugins or their content, we reserve the right to: (1) review or test your plugins to ensure quality and compliance with this Agreement; (2) remove or refuse to display any plugin and/or content that violates this Agreement or applicable laws. We have the right to exclude any plugin from our Services or delete such plugin for objective compliance or security reasons. You must ensure the accuracy, timeliness, and completeness of all information provided to us.
6.2 API Requests. When our Services interact with your API, plugin requests containing user information may be transmitted. If you have a separate agreement with the user governing the processing of their information in plugin requests, the terms of that agreement shall prevail. In the absence of such an agreement, plugin requests may only be processed as follows: (1) complying with all relevant laws and regulations (including applicable data protection laws); (2) responding to or executing instructions in the request strictly to the necessary extent. Processing of personal data contained in API requests is governed by the Data Processing Addendum (DPA) in Annex B where applicable.

7. Our Rights in the Services

We own all rights in "the Services", including copyrights, patent rights, and other intellectual property rights (excluding intellectual property rights in outputs generated by your use of "the Services"), and enjoy all rights permitted by laws and regulations to all data and information generated during the development and operation of the Services. We and our licensors own and retain all right, title, and interest in and to the Services.
Subject to your compliance with this Agreement, we grant you a non-exclusive, limited, non-transferable, non-sublicensable, revocable right to access and use the Services for your personal or commercial use in accordance with your subscription plan. Termination of this license shall strictly follow the objective criteria and procedures set out in Section 4.5 and Section 17.
All other rights not expressly granted in this Agreement remain reserved by us. You must obtain separate written permission from us before exercising such rights, and our failure to exercise any of the foregoing rights shall not constitute a waiver of such rights.
You understand and acknowledge that we do not claim ownership rights to the outputs generated by AI models based on your inputs.

8. Your Content

Content that you input, upload, import, submit, publish, display, create, or otherwise provide (collectively referred to in this section as "Provide") in the Services, including but not limited to intelligent workflows, text, URLs, code, or other information, data, datasets, content, documentation, or materials provided by you in or through the Services, shall be referred to as "Your Content".
You confirm and promise that Your Content is original to you or has been legally authorized (including sublicensing). Without violating laws and regulations, intellectual property rights in Your Content belong to you or the original rights holder, subject to the non-exclusive license you grant us in this Agreement solely to operate, provide, and maintain the Services.
We may use Your Content to provide and maintain the Services, including troubleshooting, diagnostics, security reviews, and handling customer support requests. We do not use your proprietary content or personal data to train publicly accessible AI models without your explicit consent.
To encourage more people to use the Services, we may use your trademarks and other commercial identifiers within a reasonably necessary scope and with your permission.
You understand and promise that Your Content provided in the Services is original to you or legally authorized. You warrant that Your Content does not infringe upon third-party rights and complies with laws, regulations, and this Agreement. You shall bear legal liability incurred by or related to Symbolflow Team due to Your Content.
Where Your Content contains personal data of third parties or your End Users, you act as the Data Controller and SymbolFlow acts as the Data Processor under GDPR Article 28 (and applicable data protection laws). In all such cases, the Data Processing Addendum (DPA) set forth in Annex B automatically applies and forms an integral, legally binding part of this Agreement.

9. Intelligent Workflows Created by You

Intelligent workflows and other software created by you using the Services (collectively "Your Intelligent Workflows") belong to you, but the Services and all rights, titles, and interests related to the Services remain with us.
You may distribute or publish Your Intelligent Workflows on third-party platforms. Once you distribute or publish Your Intelligent Workflows, you license us and other users of the Services to use such Intelligent Workflows within the Platform, and you must ensure that your use of Intelligent Workflows complies with this Agreement, third-party platform agreements and conditions, and all applicable laws (including but not limited to all transparency, disclosure, and AI compliance requirements applicable to generative AI products or requirements applicable to Your Intelligent Workflows).

10. Your Responsibility to End Users

10.1 Anyone who accesses, interacts with, or uses Your Intelligent Workflows or websites built via the Platform is considered your "End User". In a SaaS context where you build workflows or applications on our Platform that collect or process personal data of End Users, you act as the Data Controller and SymbolFlow acts as the Data Processor under GDPR Article 28 and applicable data protection laws.
10.2 The Data Processing Agreement (DPA) set forth in Annex B automatically governs all processing of End User personal data by SymbolFlow on your behalf. SymbolFlow shall implement technical and organizational security measures, assist with Data Subject Access Requests (DSARs), manage sub-processors, and provide breach notifications in accordance with Annex B.
10.3 You are fully responsible for your relationship with End Users and bear legal obligations to notify and obtain appropriate legal bases or consents from End Users. Before collecting or processing any End User personal data, you must provide a clear, accessible privacy policy that accurately describes how data is collected, used, and shared with SymbolFlow and third-party sub-processors, in full compliance with GDPR and applicable privacy legislation.
10.4 You must ensure that Intelligent Workflows created by you are appropriate for the age of your End Users; if you are unsure of the age of your End Users, Intelligent Workflows created by you must be suitable for all age groups.
10.5 Intelligent Workflows created by you should not be directed to children under 13 years of age (or the legal age of digital consent in the relevant jurisdiction).
10.6 You must respond promptly to End Users exercising their privacy rights (including Access, Rectification, Erasure, and Data Portability under GDPR Articles 15–22). SymbolFlow will provide reasonable assistance as outlined in Annex B.
10.7 You shall indemnify, defend, and hold harmless SymbolFlow team and its affiliates against third-party claims arising from: (1) your breach of applicable data protection laws as Data Controller; (2) your development, deployment, or operation of plugins; and (3) your End Users' claims resulting from your unlawful instructions or lack of valid privacy disclosures.

11. Third-Party Services

11.1 The Services may include third-party services, including but not limited to third-party plugins and third-party APIs. You acknowledge and agree that third-party services are provided to you by independent third-party service providers. You shall comply with agreements and other terms and conditions published or provided by third parties (e.g., user agreements, usage policies, content policies).
11.2 Where third-party services process personal data, such processing will be carried out in accordance with applicable data protection agreements between you, SymbolFlow, and the respective third-party provider. Sub-processors engaged by SymbolFlow for providing third-party integrations are listed and managed under Annex B (Data Processing Addendum). In the event of a conflict between third-party terms and mandatory EU data protection rights, mandatory EU laws and Annex B shall prevail for EU/EEA users.

12. Intellectual Property Rights

If you find any content on our platform that infringes upon your rights, please contact us at: [[email protected]]. Your written notice must include the following information:
Main identity information of the rights holder and relevant supporting materials;
A description of the infringing material and its location on the platform sufficient to allow us to locate the complained content;
The type of rights infringed by the complained content;
Preliminary supporting evidence constituting infringement;
Your address, telephone number, email address, and supporting materials as the rights holder or agent;
You shall guarantee the authenticity, validity, and legality of the statements and materials provided in the complaint, and guarantee to bear all losses and legal liabilities resulting from handling or penalizing the complained content for the complained party and the Services.

13. Feedback

13.1 We pay close attention to user interests, feedback, and suggestions. If you send us or our employees any ideas regarding products, services, features, modifications, improvements, technologies, strategies, or product/feature names, or any related documentation, artwork, computer code, diagrams, or other materials (collectively, "Feedback"), regardless of your expressed intent during the feedback process, by sending feedback to us you agree to the following:
We have no obligation to respond to your feedback, nor obligation to return all or part of your feedback for any reason;
(1) Feedback is provided on a non-confidential basis, and we have no obligation to keep confidential any feedback or part thereof sent by you, nor any obligation to use or disclose it in any specific way;
(2) You agree to grant us a non-exclusive, perpetual, worldwide license to reproduce, distribute, create derivative works from, modify, publicly perform, publicly communicate, and use your feedback for product enhancement.
13.2 We attach great importance to the quality of content generated by AI models and will strive to take reasonable security measures to filter inappropriate content. If you find that output content or returned processing results of the Services are unreasonable, flawed, or have other issues, you may provide feedback at any time via the feedback entry point [[email protected]].

14. Breach of Terms

14.1 If you violate any provision of this Agreement, we have the right to take proportionate measures based on objective findings, including advance warning, refusal to publish, immediate cessation of information transmission, deletion of offending content, temporary prohibition from publishing, restriction of partial or full Account functionality, up to suspension or termination of services in accordance with Section 4.5 and Section 17. Any decision to restrict or terminate access will be communicated with specific reasons except where prohibited by law or security concerns.
14.2 If you use improper or cheating methods to participate in promotional activities organized by us, we have the right to restrict or disqualify your participation, and cancel or withdraw rewards.
14.3 We have the right to announce handling results, and decide whether to restore relevant accounts based on actual situations. For suspected illegal or criminal behavior, we will keep relevant records and report to competent departments and cooperate with investigations according to law.
14.4 We respect and protect legitimate rights and interests such as intellectual property rights, reputation rights, name rights, and privacy rights. If your unlawful conduct causes third-party complaints, reports, or litigation claims, you shall handle and assume legal liabilities arising therefrom.

15. Disclaimers

15.1 You understand and agree that this software and related services may be affected or interfered with by various factors, and the company does not guarantee (including but not limited to):
(1) That this software and related services fully meet user usage requirements;
(2) That this software and related services will be uninterrupted, timely, secure, reliable, or error-free; that any software, service, or other materials obtained by users through the company meet user expectations;
(3) That any errors in this software and related services will be corrected.
15.2 If there is information or account passwords, advertising, or promotional information involving suspected loans, investment/financing, wealth management, or other property matters, please treat it with caution and exercise independent judgment. The company shall not be liable for any direct, indirect, incidental, special, derivative, or punitive damages for loss of profits, commercial reputation, data, or other tangible or intangible losses suffered by you as a result.
15.3 You understand and agree that during the use of this software and related services, force majeure factors (objective events that are unforeseeable, insurmountable, and unavoidable) may be encountered, including but not limited to natural disasters (such as floods, earthquakes, typhoons), government actions, wars, strikes, riots, etc. Upon occurrence of force majeure, the company will make efforts to repair in a timely manner, but the company is exempt from liability for service suspension, disruption, termination, or any losses caused by force majeure.
15.4 The company's right to handle illegal/violating content under this Agreement does not constitute an obligation or commitment of the company, and the company does not guarantee timely discovery or handling of illegal behavior.
15.5 You understand and agree that regarding this software and related services, the company provides no express or implied warranties or conditions of any kind, including but not limited to merchantability or fitness for a particular purpose. You assume all risks associated with your use of this software and related services. Nothing in this Section 15 excludes or limits statutory guarantees that cannot be excluded under applicable mandatory consumer laws (including EU consumer rights).
15.6 Under no circumstances shall the company, its affiliates, or licensors be liable for any direct, indirect, consequential, punitive, incidental, special, or exemplary damages, including but not limited to loss of profits, goodwill, data, or other losses suffered by you from using this software and related services. Unless explicitly required by mandatory applicable laws, the total liability of the company to you, regardless of cause or form of action, shall not exceed fees (if any) paid by you to the company during your use of this software and related services in the 12 months preceding the event.

16. Minors Usage Terms

16.1 If you are a minor under 18 years of age (or the legal age of majority in your jurisdiction), you should carefully read and agree to this Agreement under the supervision, guidance, and consent of your legal guardian before using this software and related services.
16.2 The company attaches importance to protecting minors' personal information. Minor users filling in personal information should enhance self-protection awareness, exercise caution, and obtain guardian consent and guidance to properly use this software and related services.
16.3 Minor users and their guardians understand and confirm that if you violate laws, regulations, or this Agreement, you and your guardian shall bear legal liabilities resulting therefrom according to law.

17. Changes, Interruption and Termination of Services

17.1 Service Maintenance & Continuity. We will make reasonable commercial efforts to maintain continuous and secure operation of the Services. However, technical maintenance, system updates, network causes, or third-party service dependencies may occasionally require temporary service interruptions or modifications.
17.2 Termination Criteria & Notice. You may stop using the Services or terminate your Account at any time. We may suspend or terminate your access to the Services or terminate these terms based on objective grounds, such as: (1) material breach of this Agreement or related policies; (2) mandatory requirement by law enforcement or regulatory authorities; (3) security vulnerabilities or technical hazards threatening the Platform or other users; or (4) non-payment of applicable service fees. Except where immediate termination is required for emergency security or legal compliance, we will provide you with reasonable advance written notice (at least 30 days for routine service discontinuance) detailing the grounds for termination.
17.3 Data Export & Survival. Upon notice of termination, you shall have a 30-day data export window to download Your Content and created workflows in accordance with Section 4.7. Following the expiration of the export window, personal data and user content will be deleted or anonymized in accordance with the SymbolFlow Privacy Policy and Annex B (DPA), unless retention is required by applicable statutory record-keeping laws. Terms which by their nature should survive termination (including intellectual property provisions, liability limitations, dispute resolution, and DPA post-termination obligations) shall remain in full force.

18. Miscellaneous

18.1 Governing Law and Dispute Resolution. Except as explicitly modified for EU/EEA and UK residents under Annex A, the formation, validity, performance, interpretation, and dispute resolution of this Agreement shall be governed by the laws of the People's Republic of China. The place of execution of this Agreement is Haizhu District, Guangzhou City, People's Republic of China. If any dispute arises between you and the company, both parties shall attempt to resolve it through friendly negotiation; if negotiation fails, disputes shall be submitted to the People's Court with jurisdiction over the place of execution of this Agreement.
18.2 EU/EEA and UK Provisions. For users residing in the European Union, European Economic Area, or United Kingdom, mandatory local consumer protection laws apply, and jurisdiction and dispute resolution shall be governed by Annex A (EU/EEA & UK Special Provisions Addendum).
18.3 Open Source. The Services include software provided under open-source license terms or other license terms.
18.4 Entire Agreement. This Agreement, the Privacy Policy, Annex A, Annex B (DPA), and other official rules published by us constitute the entire agreement between you and us regarding your use of the Services, superseding prior agreements.
18.5 Assignment. Neither party may assign this Agreement without consent, except that we may assign these terms or our rights/obligations hereunder to our affiliates (including designated European operating entities) or in connection with a merger, acquisition, or corporate restructuring.
18.6 Age of Intended Users. The primary target audience of the Services is individuals aged 18 and above (or applicable legal majority). Minors may only access the platform under guardian supervision in accordance with Section 16.
18.7 No Waiver. Our failure to enforce any provision of these terms shall not be construed as a waiver of any right.
18.8 Security. We implement robust technical and organizational security measures to protect the Services. You are responsible for configuring your terminal devices, maintaining account credential security, and using appropriate security software.
18.9 Severability. If any provision of this Agreement is held invalid or unenforceable by a court of competent jurisdiction, such provision shall be severed or limited to the minimum extent necessary, and the remaining provisions shall remain in full force and effect.
18.10 Headings are for convenience only and do not affect interpretation.
18.11 Independent Contractors. You and we are independent contractual entities. Nothing in this Agreement creates an agency, partnership, joint venture, or employment relationship.
18.12 Precedence. In the event of any conflict between the main body of this Agreement and Annex A or Annex B, Annex A and Annex B shall prevail with respect to EU/EEA data protection and consumer rights matters.

Annex A: EU/EEA and UK Special Provisions Addendum

This Addendum applies specifically to users who reside in or are located within the European Union (EU), European Economic Area (EEA), or United Kingdom (UK) ("EU Users").

1. Scope & Priority

1.1 This Annex A supplements the SymbolFlow Terms of Service for EU Users. In the event of any conflict between the main body of the Terms of Service and this Annex A, this Annex A shall govern for EU Users.

2. Mandatory Local Consumer Protection Laws

2.1 Consumer Rights Protection. Nothing in Section 18.1 or any other section of the Terms of Service deprives EU Users acting as consumers of the protection afforded to them by mandatory provisions of the consumer protection laws of their country of residence within the EU/EEA or UK.
2.2 Statutory Right of Withdrawal. EU consumers subscribing to paid Services have a statutory right to withdraw from the contract within fourteen (14) days of purchase without giving any reason, provided that performance of digital services has not commenced with the consumer's prior explicit consent and acknowledgment of loss of withdrawal right.

3. Jurisdiction & Dispute Resolution for EU Consumers

3.1 Local Court Jurisdiction. EU Users acting as consumers may choose to bring legal proceedings relating to these Terms of Service either in the competent court of their place of residence in an EU/EEA Member State or in the jurisdiction of SymbolFlow's established entity.
3.2 Online Dispute Resolution (ODR). The European Commission provides an Online Dispute Resolution platform for consumer dispute resolution, accessible at https://ec.europa.eu/consumers/odr.

4. Separation of Consent & Privacy Policy

4.1 Unbundled Privacy Authorization. In accordance with GDPR Articles 6 and 7, acceptance of these Terms of Service constitutes a binding contract for software access and is completely separate from the processing of personal data.
4.2 Legal Bases & Privacy Rights. All processing of personal data, legal bases (including performance of contract under GDPR Article 6(1)(b), legal compliance, and legitimate interests), and statutory data subject rights (Access under Art. 15, Rectification under Art. 16, Erasure under Art. 17, Restriction under Art. 18, Data Portability under Art. 20, and Objection under Art. 21) are detailed independently in the SymbolFlow Privacy Policy.

5. Cross-Border Data Transfers & Standard Contractual Clauses (SCCs)

5.1 International Transfer Mechanism. Where personal data of EU Users is transferred from the EEA/UK to SymbolFlow team's servers outside the EEA in countries without an EU adequacy decision, such transfers are executed pursuant to the EU Standard Contractual Clauses (SCCs) set forth in Annex B and appropriate supplementary technical safeguards (including end-to-end encryption).

Annex B: Data Processing Addendum (DPA) & Standard Contractual Clauses

This Data Processing Addendum ("DPA") forms a legally binding part of the SymbolFlow Terms of Service and applies whenever SymbolFlow processes Personal Data on behalf of the Customer (as Data Controller) in connection with the Platform and Services.

1. Definitions & Roles

1.1 "Controller" means the Customer (user or customer entity creating workflows, applications, or static sites on the Platform).
1.2 "Processor" means SymbolFlow Team.
1.3 "Personal Data", "Data Subject", "Processing", and "Personal Data Breach" shall have the meanings given under Regulation (EU) 2016/679 (General Data Protection Regulation - "GDPR").
1.4 Roles of the Parties. Customer acts as Controller and SymbolFlow acts as Processor with respect to Customer Content and End User Personal Data processed via Customer's workflows.

2. Processing Instructions

2.1 Processor shall process Personal Data strictly in accordance with Controller's documented instructions and for the sole purpose of providing, securing, and maintaining the Services under the Terms of Service. Processor shall not sell, retain, use, or disclose Personal Data for any commercial purpose outside the direct service relationship.

3. Technical & Organizational Security Measures

3.1 Processor shall implement and maintain appropriate technical and organizational measures to ensure a level of security appropriate to the risk, pursuant to GDPR Article 32, including:
(a) Encryption of Personal Data in transit (TLS 1.3/AES-256) and at rest;
(b) Access control mechanisms ensuring only authorized personnel with a need-to-know access Personal Data;
(c) Regular backup procedures, data restoration capability, and redundancy;
(d) Continuous monitoring, vulnerability assessments, and incident management procedures.

4. Confidentiality

4.1 Processor ensures that all persons authorized to process Personal Data have committed themselves to strict confidentiality or are under an appropriate statutory obligation of confidentiality.

5. Sub-Processors

5.1 General Authorization. Controller grants Processor general authorization to engage sub-processors to assist in delivering the Services.
5.2 Approved Sub-Processors. Approved sub-processors include infrastructure and security providers such as Cloudflare, Inc. (Edge CDN & Security) and Amazon Web Services / Cloud Hosting infrastructure (EU regions where selected).
5.3 Sub-Processor Obligations. Processor shall enter into a written agreement with each sub-processor imposing data protection terms no less protective than those in this DPA (GDPR Article 28(4)). Processor shall notify Controller of any intended changes concerning the addition or replacement of sub-processors, giving Controller the opportunity to object on reasonable data protection grounds.

6. Data Subject Rights Assistance

6.1 Processor shall, taking into account the nature of processing, assist Controller by appropriate technical and organizational measures in fulfilling Controller's obligation to respond to requests from Data Subjects exercising their rights under GDPR Chapter III (including Access, Rectification, Erasure, Data Portability, and Restriction).

7. Personal Data Breach Notification

7.1 Processor shall notify Controller without undue delay, and in any event within 48 hours, after becoming aware of a Personal Data Breach affecting Controller's Personal Data. The notification shall describe the nature of the breach, affected data categories, estimated number of Data Subjects, and mitigation steps taken or proposed.

8. Data Return & Deletion

8.1 Upon termination of the Services or upon Controller's request, Processor shall, at the choice of Controller, delete or return all Personal Data to Controller within 30 days, and delete existing copies unless applicable European Union or Member State law requires retention.

9. Audits & Compliance Verification

9.1 Processor shall make available to Controller all information necessary to demonstrate compliance with GDPR Article 28 obligations and allow for reasonable audits or inspections conducted by Controller or an independent auditor mandated by Controller.

10. Standard Contractual Clauses (SCCs) for International Transfers

10.1 Where processing involves international transfers of Personal Data from the EEA/UK to countries outside the EEA without an adequacy decision, the parties hereby incorporate by reference the Standard Contractual Clauses approved by European Commission Decision (EU) 2021/914 of 4 June 2021:
(a) Module 2 (Controller-to-Processor) applies where Customer is Data Controller and SymbolFlow is Data Processor located outside the EEA;
(b) Module 3 (Processor-to-Processor) applies where SymbolFlow acts as a sub-processor for Customer;
(c) The relevant Annexes of the SCCs are deemed populated with the security measures in Section 3 and sub-processor details in Section 5 of this DPA.