twenty/packages/twenty-website/src/sections/legal/TermsDocument.tsx

import { LocalizedLink } from '@/platform/i18n/LocalizedLink';
import { ExternalLink } from '@/ui';

export function TermsDocument() {
  return (
    <>
      <p>
        <strong>Effective Date:</strong>
        {' August 7, 2026'}
      </p>

      <h2>The short version</h2>
      <p>
        This summary is here for convenience. It is not itself part of the
        Terms; the numbered sections below are what govern.
      </p>
      <ul>
        <li>
          You own your data. We only use it to provide the Service to you, and
          we never make it available to anyone outside your workspace unless you
          choose to share or publish it.
        </li>
        <li>
          You can export your data at any time while you are subscribed. If your
          subscription ends, we keep your data for at least 14 days and warn you
          by email before deleting it. Because Twenty is open source, you can
          also leave our cloud and run Twenty on your own servers.
        </li>
        <li>
          The open-source software itself is governed by its open-source
          licenses, not by these Terms.
        </li>
        <li>
          We do not train AI models on your data. AI features send data to the
          model provider chosen for your workspace, under that provider&rsquo;s
          terms.
        </li>
        <li>
          Subscriptions renew automatically. You can cancel at any time,
          effective at the end of your current billing period.
        </li>
        <li>
          If we make a material change to these Terms, we will give you at least
          30 days&rsquo; notice. The full history of this document is public in
          our GitHub repository.
        </li>
      </ul>

      <h2>1. Who we are and what these Terms cover</h2>
      <p>
        Twenty.com PBC (&ldquo;Twenty&rdquo;, &ldquo;we&rdquo;,
        &ldquo;us&rdquo;, &ldquo;our&rdquo;) is a public benefit corporation
        incorporated in Delaware, United States. We build an open-source
        customer relationship management platform.
      </p>
      <p>
        These Terms of Service (the &ldquo;Terms&rdquo;) govern your access to
        and use of:
      </p>
      <ul>
        <li>
          our websites at twenty.com and its subdomains (the
          &ldquo;Site&rdquo;);
        </li>
        <li>
          our hosted CRM product, available at app.twenty.com, including its
          applications and APIs (the &ldquo;Cloud Service&rdquo;); and
        </li>
        <li>
          paid subscriptions and license keys that unlock commercial features of
          the self-hosted edition of Twenty (&ldquo;Self-Hosted
          Subscriptions&rdquo;).
        </li>
      </ul>
      <p>
        We refer to these together as the &ldquo;Service&rdquo;. Our{' '}
        <LocalizedLink href="/privacy-policy">Privacy Policy</LocalizedLink>{' '}
        explains how we handle personal data and forms part of your agreement
        with us. If you have signed a separate agreement with us, such as an
        enterprise agreement, an order form, or a data processing agreement,
        that agreement controls over these Terms to the extent of any conflict.
      </p>
      <p>
        By creating an account or using the Service, you agree to these Terms.
        If you use the Service on behalf of a company or other organization, you
        represent that you have authority to bind that organization, and
        &ldquo;you&rdquo; refers to it. If you do not agree with these Terms, do
        not use the Service; if you think something in them is wrong or unfair,
        we genuinely want to hear about it at{' '}
        <a href="mailto:contact@twenty.com">contact@twenty.com</a>.
      </p>

      <h2>2. Open source and self-hosting</h2>
      <p>
        Twenty&rsquo;s source code is publicly available at{' '}
        <ExternalLink href="https://github.com/twentyhq/twenty">
          github.com/twentyhq/twenty
        </ExternalLink>{' '}
        and is licensed mostly under the GNU Affero General Public License v3
        (AGPLv3), with certain packages under the MIT license and certain files
        under a commercial license, as described in the LICENSE file of the
        repository.
      </p>
      <p>
        These Terms do not limit, replace, or modify any rights granted to you
        by those software licenses. If you self-host the free edition of Twenty,
        your use of the software is governed by its open-source licenses, not by
        these Terms; only your use of the Site and of any services we provide to
        you (such as license keys or support) is covered here.
      </p>
      <p>
        Commercial features of the self-hosted edition require a valid license
        key purchased from us. A license key grants your organization a
        non-exclusive, non-transferable right to use those features for your
        internal business purposes, for the plan, number of users, and
        subscription term you purchased. License keys may not be shared outside
        your organization. Licenses are counted per user: each user of your
        instance requires a seat, and if your usage grows beyond the seats you
        purchased, we will ask you to true it up rather than cut you off, and
        you agree to do so promptly.
      </p>
      <p>
        While your subscription is active, it includes the commercial features,
        software updates, and the level of support included in your plan. We may
        verify license keys automatically, which involves limited technical
        information as described in our Privacy Policy; it never involves your
        CRM records. When your subscription ends, the license key expires and
        commercial features stop working, but your instance, your data, and
        everything the open-source licenses grant you keep working on your own
        servers.
      </p>

      <h2>3. Accounts and workspaces</h2>
      <p>
        The Service is for business and professional use only: by using it, you
        represent that you are acting for the purposes of a trade, business, or
        profession, not as a consumer, and that you are at least 18 years old.
      </p>
      <p>
        You agree to provide accurate account information and keep it up to
        date, to keep your credentials confidential, and to notify us promptly
        at <a href="mailto:contact@twenty.com">contact@twenty.com</a> if you
        suspect unauthorized use of your account. You are responsible for
        activity that occurs under your account.
      </p>
      <p>
        Data in Twenty lives in workspaces. Workspace administrators control who
        is a member of a workspace and what each member can see and do. If you
        join a workspace owned by an organization, that organization controls
        the workspace and its data, including your access to it.
      </p>
      <p>
        We will email you about your account and the operation of the Service,
        such as invoices, security notices, and important changes; you will
        receive these for as long as you have an account. We may also send you
        occasional updates about what is new in Twenty, which you can opt out of
        at any time using the unsubscribe link they contain. We do not send
        third-party promotions and we do not share your contact details with
        anyone for their marketing.
      </p>

      <h2>4. Your data</h2>
      <p>
        &ldquo;Customer Data&rdquo; means the data you or your workspace members
        submit to, store in, or sync into your workspace: records such as
        people, companies and opportunities, notes, tasks, files, emails and
        calendar events from connected accounts, and any other content of your
        workspace.
      </p>
      <p>
        <strong>You own your Customer Data.</strong> We claim no ownership of
        it. You grant us a non-exclusive, worldwide license to host, store,
        process, transmit, display, and back up Customer Data solely as
        necessary to provide, maintain, secure, and support the Service, as
        directed by you and your workspace members through the features of the
        Service, and as required by law. This license exists only so we can run
        the Service for you and ends when your Customer Data is deleted, except
        for residual copies in backups until those are purged.
      </p>
      <p>
        <strong>Your Customer Data is private to your workspace.</strong> We do
        not make it available to other customers or to anyone outside your
        workspace, except as you direct through the sharing and publishing
        features described below, and we do not use it for advertising or sell
        it. Within your workspace, visibility is controlled by the roles and
        permissions your administrators configure. Our personnel access Customer
        Data only when needed to operate the Service, to respond to a support
        request, to address a security or legal issue, or with your permission.
      </p>
      <p>
        Some features are designed to make content available beyond your
        workspace: for example, an app you install or build can publish pages or
        expose API endpoints on the internet, and you may share content with
        people outside your workspace or distribute an app you have built to
        other workspaces. When you use such a feature, you direct us to display
        or distribute that content to the audience you choose, our license from
        you extends to doing so, and recipients may view and use the content as
        you allow. You are responsible for what you make available this way,
        including its legality and your right to publish it.
      </p>
      <p>
        Customer Data is your confidential information under Section 12, whether
        or not it is marked as such.
      </p>
      <p>
        You are responsible for the Customer Data you and your workspace members
        bring into the Service: for having the right to use it, and for
        complying with the laws that apply to it, including privacy laws
        covering the people whose information you store in your CRM. Do not
        submit data that requires protections we have not agreed to provide in
        writing, such as regulated health information or full payment card
        numbers.
      </p>
      <p>
        We collect technical logs, metrics, and telemetry about the operation
        and usage of the Service (&ldquo;Usage Data&rdquo;). Usage Data does not
        include the contents of your CRM records. We may also use data that has
        been aggregated and de-identified, so that it identifies neither you nor
        any person in your Customer Data, to operate, secure, and improve the
        Service.
      </p>
      <p>
        You can export your Customer Data at any time while your subscription or
        trial is active, using the Service&rsquo;s export features and APIs.
        When your subscription ends, your workspace is suspended and can no
        longer be used, but we retain your Customer Data for at least 14 days
        and email you a warning before deleting it. During that period you can
        restore full access, including export, by reactivating your
        subscription, or write to{' '}
        <a href="mailto:contact@twenty.com">contact@twenty.com</a> and we will
        provide you with an export. After that period, we delete your Customer
        Data as described in our Privacy Policy.
      </p>

      <h2>5. Privacy, security and data processing</h2>
      <p>
        Our <LocalizedLink href="/privacy-policy">Privacy Policy</LocalizedLink>{' '}
        describes what we collect and how we use it. Where data protection laws
        such as the GDPR apply to Customer Data, we process it as your processor
        under our Data Processing Agreement, which you can review and sign in
        your workspace settings, at
        your-workspace.twenty.com/settings/legal/dpa. For any privacy question,
        contact <a href="mailto:privacy@twenty.com">privacy@twenty.com</a>.
      </p>
      <p>
        We protect the Service with technical and organizational measures
        including encryption in transit and at rest, access controls, and
        monitoring. Details about our security practices and the list of
        subprocessors we use are available in our{' '}
        <ExternalLink href="https://trust.twenty.com/">
          Trust Center
        </ExternalLink>
        . If a breach of security affects your Customer Data, we will notify you
        without undue delay, as required by applicable law.
      </p>

      <h2>6. Connected accounts and integrations</h2>
      <p>
        The Service can connect to third-party accounts and services, for
        example to sync email and calendar data from Google or Microsoft
        accounts. Connections are made only when a user chooses to establish
        them, sync only the data described at the time of connection, and can be
        disconnected at any time in the Service&rsquo;s settings.
      </p>
      <p>
        When you enable an integration or use our APIs to exchange data with a
        third-party service, we share and receive data at your direction. Your
        use of a third-party service is governed by that third party&rsquo;s own
        terms and privacy policy, and we are not responsible for third-party
        services, including what they do with data after you direct us to send
        it to them.
      </p>

      <h2>7. AI features</h2>
      <p>
        The Service includes optional AI-powered features, such as AI agents and
        AI steps in workflows. When you use them, the relevant data is sent to
        the AI model provider configured for your workspace, solely so the
        feature can be provided. We do not use your Customer Data to train our
        own AI models. How a model provider may use data depends on which
        provider and model your workspace chooses: providers we offer by default
        are listed in our Trust Center and process data under our agreements
        with them, and where your workspace connects its own provider or model,
        your agreement with that provider governs.
      </p>
      <p>
        AI output is generated by statistical models: it can be inaccurate,
        incomplete, or misleading, and similar prompts by other customers may
        produce similar output. Review AI output before relying on it or sending
        it to anyone. You are responsible for your use of AI output, and it is
        not professional advice of any kind.
      </p>
      <p>
        Some AI and workflow features are metered, for example through credits
        included in your plan. Metered allowances that come with a plan expire
        at the end of the period for which they were granted unless we state
        otherwise.
      </p>

      <h2>8. Fees and billing</h2>
      <p>
        Paid plans are described on our{' '}
        <LocalizedLink href="/pricing">pricing page</LocalizedLink> or in your
        order form. Unless stated otherwise, fees are charged per user, in
        advance, on a monthly or annual billing period, using the payment method
        you provide. Adding users during a billing period may result in
        additional pro-rated charges. Fees do not include taxes; you are
        responsible for applicable taxes other than taxes on our income.
      </p>
      <p>
        Subscriptions renew automatically at the end of each billing period. You
        can cancel at any time in the Service&rsquo;s settings or by contacting
        us; cancellation takes effect at the end of the current billing period,
        and you keep access until then.
      </p>
      <p>
        We may change our prices. Price changes take effect at your next
        renewal, never mid-term, and we will give you at least 30 days&rsquo;
        notice before a price increase applies to you, so you can cancel first
        if you disagree.
      </p>
      <p>
        If a payment fails, we will notify you and retry before suspending
        access for non-payment. We will not suspend the Service while an amount
        is subject to a reasonable, good-faith billing dispute that you are
        working with us to resolve.
      </p>
      <p>
        Except as set out in these Terms or required by law, fees are
        non-refundable. We will, however, refund the pro-rated remainder of any
        prepaid fees if we terminate your subscription without cause, if we
        discontinue the Cloud Service, or if you terminate because of our
        uncured material breach or because you reject a material adverse change
        to these Terms under Section 20.
      </p>

      <h2>9. Trials, betas and free features</h2>
      <p>
        We may offer free trials of paid plans. When a trial ends, your
        workspace continues on whatever paid option you have chosen; if you
        choose none, the workspace is suspended and then handled as described in
        Section 4: your data is retained for at least 14 days, you are warned by
        email, and you can subscribe to pick up where you left off or request an
        export before deletion.
      </p>
      <p>
        Features labeled beta, preview, experimental, or similar are provided so
        you can try them early. They may change, break, or be withdrawn at any
        time, are provided as-is without any commitment or warranty, and may
        have reduced support. Tell us what you think of them; that is what they
        are for.
      </p>

      <h2>10. Acceptable use</h2>
      <p>When using the Service, you agree not to:</p>
      <ol>
        <li>
          violate applicable laws, or infringe the rights of others, including
          intellectual property and privacy rights;
        </li>
        <li>
          send spam or other communications that violate anti-spam,
          telemarketing, or privacy laws; you are responsible for the compliance
          of outreach you send using the Service;
        </li>
        <li>
          upload or distribute malware or other harmful code, or use the Service
          to phish or defraud;
        </li>
        <li>
          attempt to access accounts, workspaces, data, or systems you are not
          authorized to access, or probe or test the vulnerability of the
          Service without our written consent;
        </li>
        <li>
          interfere with or disrupt the Service, or circumvent its security,
          rate limits, or usage limits;
        </li>
        <li>
          access the Cloud Service by automated means other than our documented
          APIs;
        </li>
        <li>misrepresent who you are or your affiliation with anyone; or</li>
        <li>
          resell or commercially provide access to the Cloud Service to third
          parties without our written agreement. This restriction is about our
          hosted service: it does not limit any right the open-source licenses
          give you, including hosting the software yourself.
        </li>
      </ol>
      <p>
        Plans include usage limits, described on the pricing page or in your
        order form, and the Service is subject to fair use so one
        customer&rsquo;s usage cannot degrade the Service for others. We may
        investigate violations of this section and take reasonable action,
        including those described in Sections 14 and 15.
      </p>

      <h2>11. Our intellectual property and feedback</h2>
      <p>
        The Service, including its software, design, and content other than
        Customer Data, belongs to Twenty and its licensors. Other than the
        rights to use the Service granted in these Terms and the rights granted
        by the applicable open-source licenses, no rights in the Service or in
        our trademarks are granted to you. Please do not use the Twenty name or
        logo in a way that suggests endorsement or affiliation without our
        permission; using them to truthfully refer to the open-source project is
        fine.
      </p>
      <p>
        If you send us feedback, ideas, or suggestions, you do not have to, but
        if you do, you grant us a non-exclusive, perpetual, irrevocable,
        royalty-free license to use them without restriction or obligation to
        you. Your feedback stays yours; this license simply lets us build on it.
      </p>

      <h2>12. Confidentiality</h2>
      <p>
        Each of us may receive non-public information from the other in
        connection with the Service (&ldquo;Confidential Information&rdquo;);
        yours includes your Customer Data. Each of us agrees to use the
        other&rsquo;s Confidential Information only as needed under these Terms,
        to protect it with at least reasonable care, and to share it only with
        personnel and service providers who need it and are bound by comparable
        obligations.
      </p>
      <p>
        These obligations do not apply to information that is or becomes public
        through no fault of the recipient, was lawfully known to the recipient
        before disclosure, was received from a third party without duty of
        confidence, or was independently developed. If a party is legally
        compelled to disclose Confidential Information, it will, where legally
        permitted, notify the other party and disclose only what is required.
      </p>

      <h2>13. Publicity</h2>
      <p>
        We may identify you or your organization as a Twenty customer and
        display your name and logo alongside other customers on our website and
        in our marketing materials. If you would rather not appear there, tell
        us at <a href="mailto:contact@twenty.com">contact@twenty.com</a> and we
        will remove you. We will ask for your consent before publishing anything
        more substantial about you, such as a case study or a quote.
      </p>

      <h2>14. Suspension</h2>
      <p>
        We may suspend access to all or part of the Service, for a workspace or
        a user, if: (i) there is a security risk or compromise; (ii) the use
        materially violates Section 10; (iii) fees are more than 10 days overdue
        after we have notified you, other than amounts disputed in good faith;
        or (iv) we are required to by law.
      </p>
      <p>
        Where practicable we will notify you before suspending, limit the
        suspension to what is necessary, and lift it promptly once the issue is
        resolved. Suspension by itself does not delete any Customer Data. While
        a workspace is suspended you may not be able to use the Service&rsquo;s
        export features yourself, but you can request an export from us as
        described in Section 4, unless we are legally prevented from providing
        it.
      </p>

      <h2>15. Term and termination</h2>
      <p>
        These Terms apply for as long as you use the Service. You may stop using
        the Service and cancel your subscription or delete your workspace at any
        time.
      </p>
      <p>
        Either party may terminate the agreement if the other materially
        breaches it and does not cure the breach within 30 days of written
        notice. We may also terminate immediately for serious violations of
        Section 10, where required by law, or for non-payment following
        suspension under Section 14. If we decide to discontinue the Cloud
        Service entirely, we will give you at least 90 days&rsquo; notice and
        refund prepaid fees for the period after discontinuation.
      </p>
      <p>
        Upon termination, your right to use the Cloud Service ends, the
        retention and export terms of Section 4 apply, and we then delete your
        Customer Data as described in our Privacy Policy. Because Twenty is open
        source, you can continue running Twenty on your own infrastructure with
        the data you export. Provisions that by their nature should survive
        termination do so, including the retention, export, and deletion
        commitments of Section 4, fees owed for the period before termination,
        and Sections 11, 12, 16, 17, 18, 19, and 21.
      </p>

      <h2>16. Warranties and disclaimers</h2>
      <p>
        We will provide the Service with reasonable skill and care, and we work
        hard to keep it fast, secure, and available. We do not, however, promise
        uninterrupted or error-free operation, and we offer no uptime commitment
        unless one is set out in a separate agreement with you, such as an
        enterprise agreement.
      </p>
      <p>
        EXCEPT AS EXPRESSLY STATED IN THESE TERMS, AND TO THE MAXIMUM EXTENT
        PERMITTED BY LAW, THE SERVICE IS PROVIDED &ldquo;AS IS&rdquo; AND
        &ldquo;AS AVAILABLE&rdquo;, AND WE DISCLAIM ALL OTHER WARRANTIES,
        EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR
        PURPOSE, AND NON-INFRINGEMENT.
      </p>

      <h2>17. Limitation of liability</h2>
      <p>
        TO THE MAXIMUM EXTENT PERMITTED BY LAW, NEITHER PARTY WILL BE LIABLE FOR
        INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR
        FOR LOST PROFITS, REVENUES, OR BUSINESS OPPORTUNITIES, EVEN IF ADVISED
        OF THEIR POSSIBILITY. TO THE MAXIMUM EXTENT PERMITTED BY LAW, EACH
        PARTY&rsquo;S TOTAL AGGREGATE LIABILITY ARISING OUT OF OR RELATED TO
        THESE TERMS IS LIMITED TO THE FEES YOU PAID US FOR THE SERVICE IN THE 12
        MONTHS BEFORE THE EVENT GIVING RISE TO THE CLAIM, OR 100 US DOLLARS IF
        YOU ONLY USED FREE PARTS OF THE SERVICE.
      </p>
      <p>
        These limits do not apply to a party&rsquo;s indemnification obligations
        under Section 18, to your payment obligations, to either party&rsquo;s
        gross negligence, willful misconduct, or fraud, or to any liability that
        cannot be limited under applicable law.
      </p>

      <h2>18. Indemnification</h2>
      <p>
        We will defend you against third-party claims alleging that the Cloud
        Service, used as permitted by these Terms, infringes their intellectual
        property rights, and we will pay the resulting damages finally awarded
        or agreed in settlement. If such a claim arises, we may modify or
        replace the affected part of the Service or, if we cannot reasonably do
        so, terminate the affected subscription and refund prepaid fees for the
        remaining period. This is your exclusive remedy for such claims. It does
        not cover claims arising from Customer Data, from modifications we did
        not make, from combination with things we did not provide, or from
        self-hosted use of the open-source software under its own licenses.
      </p>
      <p>
        You will defend us against third-party claims arising from your Customer
        Data, from your use of the Service in violation of these Terms or of
        law, or from your products, services, or relationships with the people
        and companies in your CRM, and you will pay the resulting damages
        finally awarded or agreed in settlement.
      </p>
      <p>
        The party seeking defense must promptly notify the other, give it
        control of the defense and settlement, and reasonably cooperate. A
        settlement may not impose obligations on the defended party without its
        consent.
      </p>

      <h2>19. Governing law and disputes</h2>
      <p>
        These Terms are governed by the laws of the State of Delaware, United
        States, without regard to its conflict of law rules. Before starting any
        formal proceeding, you agree to first raise the issue with us at{' '}
        <a href="mailto:contact@twenty.com">contact@twenty.com</a> and give us
        30 days to try to resolve it with you in good faith.
      </p>
      <p>
        Disputes that cannot be resolved this way will be brought exclusively in
        the state or federal courts located in Delaware, and both parties
        consent to their jurisdiction. Either party may seek injunctive relief
        in any competent court to protect its intellectual property or
        confidential information. If mandatory law in your country of residence
        grants you protections or forums that cannot be waived, these Terms do
        not take them away.
      </p>

      <h2>20. Changes to the Service or these Terms</h2>
      <p>
        Twenty evolves continuously and features will change. We will not
        materially degrade the core functionality or the overall security of
        your paid plan during a subscription period; if we ever do and cannot
        promptly restore it, you may terminate and receive a refund of prepaid
        fees for the remaining period. Subscriptions are purchases of the
        Service as it exists today, not of future features.
      </p>
      <p>
        We may update these Terms from time to time. For material changes, we
        will notify you at least 30 days before they take effect, by email or
        prominently in the Service, and the change will apply from the stated
        effective date. Changes that are non-material, that concern new
        features, or that we must make to comply with law may take effect
        sooner. If a change materially reduces your rights, you may terminate
        before it takes effect and receive a refund of prepaid fees for the
        remaining period. Continued use after the effective date constitutes
        acceptance.
      </p>
      <p>
        Every version of these Terms is preserved in the history of our{' '}
        <ExternalLink href="https://github.com/twentyhq/twenty/commits/main/packages/twenty-website/src/sections/legal/TermsDocument.tsx">
          public GitHub repository
        </ExternalLink>
        , so you can always see exactly what changed and when.
      </p>

      <h2>21. Miscellaneous</h2>
      <p>
        These Terms, together with the Privacy Policy, any data processing
        agreement, and any order form or separate agreement between us,
        constitute the entire agreement regarding the Service and supersede
        prior agreements on that subject.
      </p>
      <p>
        You may not assign these Terms without our consent, which we will not
        unreasonably withhold, except to a successor in a merger, acquisition,
        or sale of substantially all assets, with notice to us. We may assign
        these Terms to an affiliate or successor.
      </p>
      <p>
        We will send notices to your account email address or through the
        Service, and you agree to receive them electronically. You can send
        notices to us at{' '}
        <a href="mailto:contact@twenty.com">contact@twenty.com</a>.
      </p>
      <p>
        Neither party is liable for delay or failure caused by events beyond its
        reasonable control. You agree to comply with applicable export control
        and sanctions laws, and you represent that you are not a sanctioned
        person or located in an embargoed country. The parties are independent
        contractors; these Terms create no partnership, agency, or third-party
        rights.
      </p>
      <p>
        If any provision of these Terms is held unenforceable, it will be
        limited to the minimum extent necessary and the rest will remain in
        effect. A failure to enforce a provision is not a waiver of it.
      </p>

      <h2>22. Contact us</h2>
      <p>
        Questions, concerns, or feedback about these Terms are welcome at{' '}
        <a href="mailto:contact@twenty.com">contact@twenty.com</a>. For privacy
        matters, contact{' '}
        <a href="mailto:privacy@twenty.com">privacy@twenty.com</a>.
      </p>
    </>
  );
}