Terms of service.

1. The service and who provides it

isa is operated by isa (“isa”, “we”). isa is software for running hospitality and related businesses: each customer has a workspace and installs modules such as Hotel, Website and Reach. Features, integrations and payment methods are shown with their availability status and may need configuration or approval by a third party. A separate order form or written agreement, where one exists, prevails over these terms.

2. Accounts and workspaces

The person or business that creates a workspace (the “customer”) controls it and is responsible for who it invites, their roles and their use of isa. Keep sign-in details and authenticator devices secure and tell us promptly about unauthorized use. You must be at least 18 and able to bind the customer you act for.

3. Customer data and our role

Data the customer puts into its workspace or collects through isa (guest, reservation, payment, website visitor and marketing records) is “customer data”. The customer is its personal information controller; isa processes it as the customer’s personal information processor under the Philippine Data Privacy Act of 2012 and these terms, which form the processing agreement between us. isa will: process customer data only to provide, secure and support isa and as the customer instructs through its configuration; keep it confidential and restricted to authorized personnel; protect it with organizational, physical and technical measures including workspace isolation enforced by the database; use the sub-processors listed in the Privacy Policy and give notice of changes there; notify the customer without undue delay, and within 72 hours of discovery where required, of a personal data breach affecting customer data; help the customer answer data subject requests and regulator inquiries; and on termination make customer data available for export and then delete it, subject to legal retention and backup expiry. The customer is responsible for having a lawful basis and giving notice for what it collects, including the privacy notice on its own website, and for the instructions it gives isa.

isa may create aggregated or de-identified information from customer data and service use that does not identify the customer, its guests or any individual, and use it to operate, secure, benchmark and improve isa.

4. Product analytics and session recording

To support, secure and improve isa, we record how signed-in users use the application: screens visited, clicks and other interactions, errors, performance measurements and session recordings. This usage data is linked to the user’s account (identifier, name and email address) and workspace so we can help with support requests and understand how isa is used. Recordings mask all text, inputs and element attributes and block forms, payment and confirmation details, images, media and embedded content, so guest records shown on screen are not captured; console output and network payloads are not captured. Recording applies to signed-in isa screens, never to the customer’s public website or booking pages, which follow the customer’s own visitor choices. Using isa signed in is subject to this recording, which is part of providing the service. The customer must tell its staff who use isa about it. The Privacy Policy describes processors and retention.

5. Integrations

The customer may connect its own third-party accounts, such as Meta, Google, PayMongo, Resend, PostHog, Sentry or Better Stack. By connecting one, the customer authorizes isa to access that account within the permissions granted and to send it the data the integration describes, for example booking conversions sent to Meta or Google when a visitor gave advertising consent. Those providers act under their own terms with the customer. isa stores integration credentials encrypted and uses them only for the connected feature. Disconnecting stops future access.

6. Acceptable use

Do not use isa to break the law; infringe others’ rights; send spam; process data you have no right to process; upload malware; probe, scan or test vulnerabilities without our written permission; circumvent access controls, rate limits or workspace isolation; or resell isa without agreement. We may suspend access that threatens the service, other customers or third parties, and will tell you why where we lawfully can.

7. Fees

Fees, if any, are set in the customer’s order form or written agreement. Payment provider fees charged to the customer for guest payments are between the customer and its provider. We will give at least 30 days’ notice of fee changes.

8. Availability and support

We work to keep isa available and to restore it promptly after incidents, but do not guarantee uninterrupted service unless a written agreement says so. Maintenance, third-party outages and features marked experimental may affect availability. Support is provided through the channels published on this site.

9. Term, termination and export

The customer may stop using isa at any time. Either party may end the service for material breach not cured within 30 days of notice; we may end it on 30 days’ notice for any reason. After termination the customer may request an export of its customer data for 30 days, after which we delete it as described in section 3.

10. Warranties and liability

isa is provided as is, without warranties beyond those required by law. To the extent the law allows, neither party is liable for indirect or consequential loss or lost profits, and each party’s total liability under these terms is limited to the fees paid to isa in the 12 months before the claim. These limits do not apply to liability that cannot be limited by law, a party’s fraud, or the customer’s payment obligations.

11. Changes, law and disputes

We may update these terms and will post the new version here with its effective date; material changes take effect 30 days after notice to workspace owners. Continued use after that date means acceptance. These terms are governed by the laws of the Philippines. The parties will first try to resolve disputes in good faith; otherwise the courts of the Philippines have jurisdiction.

Contact

isa

support@useisa.com