Terms and conditions of use

1.1. This document governs access to and use of the Correvo platform (the “Platform” or the “Service”), whose provider is:

Hereinafter, the “Provider”, “Correvo” or “we”.

1.2. The Provider is not required to register its databases with the Colombian National Database Registry (RNBD), as it is a natural person, pursuant to Decree 090 of 2018. This does not release it from complying with the remaining duties of the personal data protection regime.

For the purposes of this document, the following terms have the meanings assigned below:

• Attachment: a file carried within a Message.
• Inbox: a shared mailbox within an Organization, associated with one or more email addresses of a verified Subdomain.
• Customer: the natural or legal person entering into the service agreement with the Provider, acting within the scope of its business or professional activity.
• Customer Content: all Messages, Attachments, internal comments, drafts, templates, signatures, contacts and other information that the Customer or its Users upload, receive, generate or store on the Platform.
• Resend Account: the account the Customer contracts directly with Resend, Inc., a third-party provider of email sending and receiving infrastructure.
• Personal Data, Data Subject, Controller, Processor, Processing, Transfer and Transmission: have the meanings given to them by Colombian Law 1581 of 2012 and Chapter 25 of Decree 1074 of 2015.
• AI Features: the thread summary and draft generation functionality described in section 3.5.
• Thread: a set of Messages grouped by the Platform as a single conversation.
• Message: any inbound or outbound email processed by the Platform.
• Organization: the isolated logical space within the Platform that groups Inboxes, Users, domains and Customer Content.
• Plan: the service tier contracted by the Customer pursuant to section 7.
• Platform or Service: the Correvo web application, its APIs, interfaces, documentation and ancillary services.
• Subdomain: the subdomain owned or controlled by the Customer which it configures to receive email.
• User: any natural person authorized by the Customer to access the Organization.

3.1. Purpose

These Terms and Conditions govern the conditions under which the Provider grants the Customer access to the Platform. They constitute a software-as-a-service (SaaS) agreement of a continuing nature, entered into by adhesion.

3.2. What Correvo is

Correvo is a multi-tenant web application that turns one or more shared email addresses into a collaborative working inbox. It allows teams to receive, group into Threads, assign, comment on internally, reply to, archive and close email conversations, with optional artificial intelligence assistance under human control.

3.3. Main features

• Receiving email addressed to addresses on a verified Customer Subdomain.
• Automatic grouping of Messages into Threads.
• Creation and administration of multiple Inboxes within an Organization.
• User and role management (owner, administrator, member).
• Thread assignment and conversation statuses (open, pending, closed).
• Internal comments not visible to the external recipient.
• Composition, drafts and sending of replies from verified identities.
• Logging of delivery, bounce and complaint statuses.
• Private storage of Attachments accessible through temporary signed links.
• Permanent archiving of Customer Content on paid Plans, subject to the storage quota in section 7.
• Audit logging of sensitive actions.
• AI Features pursuant to section 3.5.

3.4. BYO (Bring Your Own) model: dependency on Resend

3.4.1. Correvo does not provide the email transport service. Receiving and sending Messages is carried out through Resend, Inc., a provider with which the Customer contracts directly and independently. Correvo merely integrates with the Customer's Resend Account.

3.4.2. Consequently, the Customer acknowledges and accepts that:

• It must maintain its own Resend Account in force and in good standing. The Correvo subscription neither includes nor replaces the cost of that account.
• The applicable email volume limits, number of domains and sending quotas are those of its Resend Account. Correvo will never offer more volume or more domains than the Resend plan contracted by the Customer allows.
• The Resend free plan has a daily sending cap that may be reached before the monthly allowance. That limit is set by Resend, not by Correvo.
• Suspension, termination, downgrade, failure or change of conditions of the Resend Account directly affects the operation of the Service, without this constituting a breach attributable to Correvo.
• Certain Plans require a minimum Resend plan level. The Platform may block contracting or degrade functionality where the level contracted with Resend is insufficient.

3.4.3. The permanent archiving of Customer Content described in section 3.3 is a feature of Correvo itself and does not dependon Resend's retention policies.

3.5. Artificial intelligence features

3.5.1. AI Features are limited to: (i) generating a summary of a Thread when the User expressly requests it, and (ii) generating an editable reply draft. The AI never sends email automatically. Every result is presented as a suggestion and requires human confirmation.

3.5.2. AI Features run only on the Threads the User expressly selects, action by action. Correvo does not process Customer Content through AI in bulk, automatically or preemptively.

3.5.3. Correvo does not use Customer Content to train, fine-tune or improve artificial intelligence models, whether its own or those of third parties.

3.5.4. Execution takes place through third-party language model providers, selected on security and availability criteria and identified in the Privacy Policy. Those providers act as sub-processors under the terms of section 10.

3.5.5. The Customer may disable AI Features for its entire Organization from the Platform settings.

3.5.6. The Customer acknowledges that artificial intelligence systems may produce inaccurate, incomplete or incorrect results. Correvo does not warrant the accuracy of the summaries or drafts generated. The User is solely responsible for reviewing, correcting and approving any content before sending it.

3.6. Out of scope

Unless expressly agreed otherwise, the Service does not include: two-way IMAP synchronization; historical import from other email providers; native mobile applications; push notifications; bulk sending, campaigns or email marketing; telephony or live chat; per-country custom data residency; or replacement of the MX record of the Customer's root domain.

4.1. Acceptance

4.1.1. The contract is formed when the Customer, through a User with authority to bind it, ticks the box accepting these Terms and completes registration or the contracting of a Plan.

4.1.2. Such acceptance constitutes a valid and binding declaration of intent. Under Articles 5, 6, 10 and 14 of Colombian Law 527 of 1999, a declaration of intent shall not be denied legal effect or binding force solely because it is expressed by means of a data message.

4.1.3. Correvo will keep an electronic record of the acceptance, including the User identifier, date, time and IP address. This record constitutes evidence of consent.

4.2. Capacity and authority to represent

4.2.1. The person accepting declares that they are of legal age, have full legal capacity and sufficient authority to bind the Customer they represent, and that the information provided is truthful and up to date.

4.2.2. The Service is not directed at minors. Registration of Users under eighteen (18) years of age is not permitted.

4.3. Business nature of the relationship

4.3.1. The Service is offered to natural or legal persons acting within the scope of a business, commercial, craft or professional activity.

4.3.2. By accepting, the Customer declares that it contracts the Service as an input to its economic activity and not to satisfy a personal, private, family or domestic need, without prejudice to section 8.3 for anyone who materially qualifies as a consumer.

5.1. Registration

5.1.1. Access requires creating an account with a valid, verifiable email address.

5.1.2. The Customer must provide truthful, complete and up-to-date information and keep it current throughout the contractual relationship.

5.2. Credentials

5.2.1. Access credentials are personal and non-transferable. Each User must have their own credentials.

5.2.2. Sharing credentials between individuals is prohibited: the core purpose of the Platform is precisely to eliminate the practice of sharing mailbox passwords.

5.2.3. The Customer and each User are responsible for safeguarding their credentials and for all activity carried out under them.

5.2.4. The Customer must notify Correvo immediately, at the email address in section 1.1, of any unauthorized use, loss of credentials or security incident of which it becomes aware.

5.3. Organization administration

5.3.1. The Customer is solely responsible for determining which Users access its Organization, assigning and revoking roles and permissions, promptly revoking access for Users who are no longer authorized, and for the actions of its Users within the Platform.

5.4. Subdomain verification

5.4.1. The Customer declares that it owns or legitimately controls the domain and Subdomain it configures, and that it is authorized to modify its DNS records.

5.4.2.The only thing the Customer must do manually is add, in its own DNS provider's control panel, the records indicated by the Platform (MX, SPF, DKIM and, where applicable, DMARC). Correvo has no access to the Customer's DNS provider and therefore cannot modify those records on its behalf.

5.4.3. Registering the domain with Resend, configuring the receiving webhook and managing the corresponding API key are carried out automatically by Correvo, with no further Customer intervention.

5.4.4. The Customer assumes in full the risk arising from modifying the DNS records of its root domain. Correvo expressly recommends using a dedicated Subdomain.

6.1. Ownership

6.1.1. The Platform, its source and object code, architecture, databases, interfaces, designs, technical documentation, trade marks and other elements are the exclusive property of the Provider or its licensors.

6.1.2. The software is protected as a work under the copyright regime, pursuant to Colombian Law 23 of 1982 — as amended by Law 1915 of 2018 — and Andean Decision 351 of 1993, which recognizes the protection of computer programs in their source and object code.

6.2. Licence granted

6.2.1. The Provider grants the Customer a non-exclusive, non-transferable, non-sublicensable, revocable, limited, worldwide licence to access and use the Platform for the term of the contract and solely for the internal purposes of its business activity.

6.2.2. The licence is granted exclusively in online service form. No copy of the software is delivered and no economic copyright is transferred.

6.3. Restrictions

Except to the extent mandatorily permitted by law, the Customer may not:

• Copy, reproduce, modify or create derivative works of the Platform.
• Decompile, disassemble or reverse engineer it.
• Access the Platform in order to build a competing product or service.
• Sublicense, lease, resell, assign or provide the Service to third parties outside its Organization.
• Remove or alter ownership notices.
• Carry out load, penetration or vulnerability testing without the Provider's prior written authorization.

6.4. Customer Content

6.4.1. The Customer retains full ownership of Customer Content. This contract does not transfer any ownership right over that content to Correvo.

6.4.2. The Customer grants Correvo a limited, non-exclusive, royalty-free licence, solely to host, store, transmit, process, index, back up and display Customer Content to the extent strictly necessary to provide the Service.

6.4.3. Correvo will not use Customer Content for advertising or commercial purposes, for aggregate analytics with third parties, or to train artificial intelligence models.

7.1. Current plans

7.1.1. The number of available domains is not determined by Correvo but by the plan of the Customer's Resend Account, pursuant to section 3.4.

7.1.2. “Unlimited retention” means unlimited in time, in all cases subject to the Plan's storage quota in gigabytes. Correvo does not delete Customer Content by age on paid Plans.

7.1.3. Prices are stated in Colombian pesos (COP) and may be adjusted pursuant to section 17.

7.1.4. Upon reaching the Plan's storage limit, the Platform may temporarily suspend the ingestion of new Messages until the Customer frees up space or upgrades its Plan, without affecting Content already stored.

7.2. Free Plan

7.2.1. The Free Plan automatically deletes any Message older than thirty (30) days, through an automated process.

7.2.2. This deletion is permanent and irreversible. The Free Plan does not include permanent archiving or any recovery guarantee.

7.2.3. The Free Plan is offered with no availability guarantee or support commitment, and may be modified or discontinued at any time on thirty (30) calendar days' notice.

7.2.4. Correvo will notify Free Plan Customers by email, with reasonable advance notice, of each scheduled deletion, and will make the export function in section 13.2 available so they can keep a copy of their Content before deletion.

7.3. Team Plan trial

7.3.1. Solo Plan Customers may activate a Team Plan trial for fourteen (14) calendar days.

7.3.2. At the end of the trial period, the Organization automatically returns to the Solo Plan at no additional charge, unless the Customer expressly confirms, before expiry, its decision to continue on the Team Plan.

7.4. Taxes

7.4.1. The tax treatment of each Plan (whether taxes are included in the published price) is expressly stated during checkout, before confirming the purchase.

7.4.2. The Customer bears the taxes, duties, withholdings and contributions levied on the transaction under applicable regulations.

7.5. Payment methods and automatic renewal

7.5.1. Payment is made in advance, through the Mercado Pago payment gateway and the methods enabled therein.

7.5.2. Correvo does not store full credit or debit card details. Processing of payment information is governed by the gateway's policies, which acts as an independent controller with respect to that information.

7.5.3. Subscriptions renew automatically for periods equal to the one contracted, charged to the registered payment method, unless previously cancelled by the Customer.

7.5.4. The Customer may cancel automatic renewal at any time from its account settings, effective at the end of the current period. Cancellation does not give rise to a pro-rata refund of the period already paid, except as provided in section 8.

7.5.5. Correvo will notify the Customer by email, at least five (5) calendar days in advance, of the date and amount of each renewal.

7.6. Late payment and suspension

7.6.1. Rejection or failure to pay results in automatic default, without need for demand.

7.6.2. Correvo will notify the non-payment and grant a cure period of ten (10) calendar days.

7.6.3. Once that period expires without payment, Correvo may suspend access to the Organization. During suspension no inbound or outbound Messages are processed, Customer Content is retained, and the Customer retains the right to export it pursuant to section 13.

7.6.4. After a further thirty (30) calendar days of suspension without payment, Correvo may terminate the contract and apply the deletion procedure in section 13.

7.7. Plan changes

7.7.1. Upgrades take effect immediately, with pro-rata charging for the current period.

7.7.2. Downgrades take effect at the start of the next billing period. The Customer must first verify that its Content and number of Users fit within the lower Plan's limits.

8.1. Applicable framework

8.1.1. The right of withdrawal (Article 47 of Colombian Law 1480 of 2011) and the right to payment reversal (Article 51 of the same law) are guarantees established in favour of consumers.

8.1.2. Given that the Service is offered to Customers acting within the scope of their business or professional activity, and that the Platform is an input intrinsically linked to that activity, Articles 47 and 51 of Law 1480 of 2011 do not apply as a general rule to the relationship governed by these Terms.

8.2. Voluntary cancellation and refund policy

Notwithstanding the above, and as a voluntary commercial policy, Correvo grants the Customer:

• The right to cancel the subscription at any time from its account settings, effective at the end of the current period.
• The right to request a full refund of the first billed period, if requested within five (5) business days of the first charge.
• Export of all its Content in MBOX format, available permanently and free of charge, including after cancellation, within the time limits in section 13.

8.3. Reservation

8.3.1. If, despite section 4.3, a Customer materially qualifies as a consumer under Article 5(3) of Law 1480 of 2011, the guarantees of the Colombian Consumer Statute apply to it as of right, including withdrawal and payment reversal, and the clauses of this document restricting them will not be enforceable against it.

8.3.2. In that case, the Customer may exercise withdrawal within five (5) business days of entering into the contract, and payment reversal in accordance with the procedure in Article 51 of Law 1480 of 2011, by request to the channel in section 20.

9.1. Prohibited conduct

The Customer and its Users undertake not to use the Platform to:

1. Send unsolicited bulk email, spam or mass marketing campaigns to purchased lists without the authorization of their data subjects.
2. Impersonate natural or legal persons, or falsify the origin of a Message.
3. Carry out phishing, social engineering, distribution of malicious software or any conduct criminalized under Colombian Law 1273 of 2009.
4. Infringe third parties' intellectual property, industrial property or image rights.
5. Store, transmit or disseminate unlawful, defamatory, discriminatory, violent content or content involving child sexual exploitation.
6. Process Personal Data without the authorization or lawful basis required by applicable law.
7. Circumvent, disable or interfere with technical security measures or the isolation controls between Organizations.
8. Attempt to access data, Organizations, Inboxes or Content that do not belong to its Organization.
9. Reverse engineer, carry out mass automated extraction or abusive resource consumption that degrades the Service for other Customers.
10. Resell, lease or provide the Service to third parties outside the Organization.
11. Contact individuals for commercial or advertising purposes in breach of Colombian Law 2300 of 2023, which restricts contact channels, hours and frequency: Monday to Friday from 7:00 to 19:00 and Saturdays from 8:00 to 15:00, prohibiting contact on Sundays and public holidays, and requiring the recipient's express and specific authorization.

9.2. Responsibility for Customer Content

9.2.1. Correvo does not monitor, review, edit or pre-screen Customer Content. It acts as a technical intermediary and hosting service provider.

9.2.2. The Customer is solely responsible for the lawfulness, truthfulness, accuracy and relevance of Customer Content, and for holding the authorizations necessary for its Processing.

9.3. Automated security measures

Correvo applies the following automatically, without this implying any review of the content of the correspondence: HTML sanitization; blocking of remote images by default; detection of the actual type of Attachments by their content; antimalware scanning; and blocking of dangerous file types.

9.4. Right to act

Where there are reasonable indications of a breach of this section, Correvo may, proportionately to the seriousness of the matter: request explanations; limit functionality; suspend access pursuant to section 16; and, where required by law, report the facts to the competent authority.

10.1. Allocation of roles

10.1.1. With respect to the Personal Data contained in Customer Content — correspondence, contacts, attachments, comments and all information the Customer uploads to or receives on the Platform — the Customer is the Controller and Correvo is the Processor, acting exclusively on the Customer's instructions.

10.1.2. With respect to the Personal Data that Correvo processes for its own commercial relationship with the Customer — registration, billing, audit, logs and usage metrics — Correvo is the Controller.

10.2. Correvo's obligations as Processor

Correvo undertakes to:

• Process Personal Data only in accordance with the Customer's documented instructions and to provide the Service.
• Not use the Personal Data in Customer Content for its own purposes, for advertising or to train artificial intelligence models.
• Maintain secrecy and confidentiality, including after the relationship ends.
• Keep the information under security conditions that prevent its alteration, loss, unauthorized or fraudulent consultation, use or access.
• Apply logical isolation between Organizations through database-level and application-level controls.
• Promptly carry out the updates, rectifications or deletions instructed by the Customer.
• Handle enquiries and claims received directly from Data Subjects, forwarding them to the Customer where it is for the Customer to handle them.
• Inform the Customer, without undue delay and no later than within forty-eight (48) hours of becoming aware, of any security incident affecting its Personal Data.

10.3. Sub-processors

10.3.1. The Customer authorizes Correvo to engage sub-processors to provide the Service:

10.3.2. Correvo will maintain data protection obligations with each sub-processor that are no less strict than those assumed towards the Customer, and will be liable to the Customer for the conduct of its sub-processors.

10.3.3. Correvo will inform the Customer, at least thirty (30) calendar days in advance, of any addition or replacement of sub-processors. The Customer may terminate the contract without penalty if it objects to the change on reasoned grounds.

10.4. International data transmission

10.4.1. The Customer acknowledges and expressly authorizes that providing the Service involves processing Personal Data outside Colombian territory, in the countries listed in section 10.3.1.

10.4.2. These operations constitute international transmissions of personal data, in that they take place between the Customer (Controller) and Correvo or its sub-processors (Processors), so that the latter carry out Processing on the Customer's behalf.

10.4.3. Under Article 24 of Colombian Decree 1377 of 2013, compiled into Chapter 25 of Decree 1074 of 2015, international transmissions between a Controller and a Processor need not be notified to the Data Subject nor require their consent, provided there is a transmission agreement meeting the legal requirements. The Data Processing Agreement referred to in section 10.6 constitutes that agreement.

10.5. Customer obligations as Controller

The Customer undertakes to:

• Hold the Data Subjects' authorization or another valid lawful basis in respect of all Personal Data it processes through the Platform.
• Have its own Personal Data Processing Policy and Privacy Notice.
• Handle the enquiries and claims of its Data Subjects, under Articles 14 and 15 of Law 1581 of 2012.
• Register its databases with the RNBD where required under Decree 090 of 2018.
• Not upload sensitive data or data of minors to the Platform without the reinforced lawful basis required by Articles 6 and 7 of Law 1581 of 2012.
• Give Correvo only lawful instructions.

10.6. Supplementary documents

The Processing of Personal Data is additionally governed by Correvo's Privacy Policy and the Data Processing Agreement, which forms an integral part of this contract. In the event of a conflict between these Terms and the Data Processing Agreement on personal data protection matters, the Data Processing Agreement prevails.

11.1.Each party undertakes to keep the other's confidential information under strict secrecy, not to disclose it to third parties without written authorization, and to use it exclusively for the performance of the contract.

11.2.Customer Content constitutes private correspondence, protected by the right to privacy and the inviolability of correspondence enshrined in Article 15 of the Colombian Constitution. Correvo personnel do not access the content of Customers' Messages, except: (a) when the Customer expressly requests it in writing in order to resolve a support incident; (b) when it is indispensable in order to address a critical security incident; or (c) when ordered by a competent authority. Any access carried out under these circumstances is recorded in the audit system and reported to the Customer, unless expressly prohibited by law.

11.3. Information is not considered confidential where it is in the public domain through no fault of the receiving party, was legitimately held by it before receipt, is developed independently, or must be disclosed by legal mandate or order of a competent authority.

11.4. These obligations survive for the term of the contract and for five (5) years from its termination. With respect to Personal Data, the duty of secrecy is indefinite, pursuant to Article 17(f) of Law 1581 of 2012.

12.1.Correvo will use commercially reasonable efforts to keep the Platform continuously available. The following do not count as unavailability: scheduled maintenance, failures of third-party providers — in particular the Customer's Resend Account —, the Customer's connectivity failures, force majeure events, or legitimate suspensions under sections 7.6 and 16.

12.2.Correvo may carry out scheduled maintenance, endeavouring to perform it during low-activity hours and giving at least forty-eight (48) hours' notice. Emergency maintenance for security reasons may be carried out without prior notice, informing the Customer as soon as possible.

12.3.Correvo provides email support on business days in Colombia, in Spanish, with response times varying by contracted Plan. Support covers incidents attributable to the Platform; it does not cover the Customer's DNS configuration or incidents with its Resend Account, without prejudice to the documentation and guidance Correvo makes available.

13.1. Backups

13.1.1. Correvo makes periodic backups of the information stored, with a frequency and retention defined by its internal business continuity policies.

13.1.2. Backups are a business continuity measure of Correvo and do not constitute an archiving or custody service contracted by the Customer, unless expressly agreed.

13.2. Portability and export

13.2.1. The Customer may export all of its Content in MBOX format, an open standard, at any time during the term of the contract and during the grace periods in section 13.3.

13.2.2. This function is available free of charge and permanently, including after cancellation, for as long as the grace period subsists.

13.3. Termination: retention and deletion periods

Once the contract ends for any reason, the following procedure applies:

13.3.1. Content present in backups is deleted when each backup's normal retention cycle expires. During that period it remains subject to the confidentiality and security obligations of this contract.

13.3.2. Even after deletion, Correvo will retain billing records and the data required by tax and commercial regulations for the statutory retention periods, and audit logs for twelve (12) months.

13.3.3. The Customer may request early deletion of its Content by express request to the channel in section 20. That request is irreversible.

13.3.4. On the Free Plan, the automatic thirty (30) day deletion provided for in section 7.2 additionally applies.

14.1. Correvo warrants that it will provide the Service in a professional and diligent manner, using competent personnel and reasonable industry practices, and that it will comply with the security and confidentiality obligations of this contract.

14.2. Except as stated in section 14.1, the Service is provided “as is” and “as available”. Correvo does not warrant that the Service will operate uninterrupted or error-free; that the results of AI Features will be accurate or complete; that every Message sent will be delivered, since actual delivery depends on Resend, the destination servers and the Customer's DNS configuration; or that third-party providers will maintain their current services or prices.

14.3.Correvo is not liable for damage arising from failures of the Customer's Resend Account; incorrect DNS configurations made by the Customer; loss of information on the Free Plan due to the automatic deletion warned of in section 7.2; loss of access resulting from a voluntary Plan downgrade; the use the Customer or its Users make of the Service in breach of section 9; the content of the Messages; decisions the Customer takes based on AI Feature results without human review; or force majeure events.

14.4.Correvo's total aggregate liability to the Customer, on any grounds, is limited to the amount actually paid by the Customer during the twelve (12) months preceding the triggering event. Correvo will not be liable for loss of profits, loss of business opportunities, reputational harm or indirect or consequential damages. Any claim must be brought within one year of the event giving rise to it.

14.5. The above limitations do not apply in respect of: Correvo's wilful misconduct or gross negligence; damage to life or personal integrity; breach of the confidentiality obligations in section 11; penalties imposed by the data protection authority for a breach attributable exclusively to Correvo in its capacity as Processor; and the non-waivable rights available to the Customer where it materially qualifies as a consumer under section 8.3.

15.1. The Customer will hold the Provider harmless and defend it against any claim, demand, investigation, administrative action, penalty, fine or expense brought by a third party or an authority arising from: Customer Content and Messages sent from its Organization; the absence of authorization or a valid lawful basis for the Processing of the Personal Data it uploads to the Platform; breach of section 9 by the Customer or its Users; infringement of third-party rights; breach of Colombian Law 2300 of 2023 in its commercial communications; or the configuration of domains over which it does not have legitimate ownership or control.

15.2. Correvo will hold the Customer harmless against third-party claims alleging that the Platform, used in accordance with this contract, infringes intellectual property rights in Colombia. This indemnity does not cover claims arising from Customer Content or from unauthorized modifications.

15.3. The party receiving a covered claim will notify the other within ten (10) business days, allow it to assume the defence and provide reasonable cooperation.

16.1. Correvo may suspend access in whole or in part where there is late payment; where there are reasonable indications of a breach of section 9; where necessary to avert a security risk or a use that degrades the Service for other Customers; or where ordered by a competent authority. Save in cases of urgency or legal mandate, Correvo will notify the suspension with its reasons and, where the cause is curable, will grant a reasonable period to cure it. During suspension, Customer Content is retained and the Customer keeps the right to export it.

16.2. The Customer may terminate the contract at any time, without cause, from its account settings or by notice to the channel in section 20. Termination takes effect at the end of the current billing period.

16.3. Correvo may terminate the contract for a material breach by the Customer not cured within fifteen (15) calendar days of written demand; for persistent late payment under section 7.6.4; for use of the Platform for unlawful activities; or by decision to discontinue the Service, on ninety (90) calendar days' notice and with a pro-rata refund of periods paid but not provided.

16.4. Once the contract ends, the licence in section 6.2 ceases and the retention and deletion procedure in section 13.3 applies. Clauses which by their nature should survive remain in force, in particular those on intellectual property, confidentiality, data protection, limitation of liability, indemnity and applicable law.

17.1. Correvo may amend these Terms and Conditions to adapt them to regulatory, technical, operational or business model changes.

17.2. Material amendments — those increasing prices, reducing functionality or included quotas, altering data retention periods, adding new sub-processors or processing countries, or broadening the limitation of liability — will be notified to the registered email address of the Organization owner and announced on the Platform, at least thirty (30) calendar days before they take effect.

17.3. If the Customer continues using the Service after a material amendment takes effect, it will be deemed to have accepted it. If it does not accept it, it may terminate the contract without penalty before it takes effect, with the right to a pro-rata refund of periods paid but not provided and to export its Content pursuant to section 13.

17.4. Correvo keeps a version history of this document, available upon request to the channel in section 20.

18.1. Neither party will be liable for failure to perform its obligations — other than payment obligations already accrued — where this is due to force majeure or fortuitous event, pursuant to Article 64 of the Colombian Civil Code.

18.2. These include, among others: natural disasters, armed conflict, acts of authority, widespread power or telecommunications outages, massive and prolonged failures of critical infrastructure providers, and large-scale cyberattacks exceeding reasonably required security measures.

18.3. The affected party will notify the other as soon as possible and will take reasonable mitigation measures.

18.4. If the event continues for more than sixty (60) calendar days, either party may terminate the contract without penalty, with a pro-rata refund of periods paid but not provided.

19.1. This contract is governed by the laws of the Republic of Colombia.

19.2. Before resorting to the courts, the parties will attempt to resolve the dispute by direct settlement, for a period of thirty (30) calendar days from the written communication setting out the claim.

19.3. Once that stage is exhausted without agreement, the parties will resort to out-of-court conciliation in law before a legally authorized conciliation centre based in Bogotá D.C. or Chía, Cundinamarca.

19.4. If conciliation fails, disputes will be submitted to the courts of the Republic of Colombia, with express waiver of any other forum, save for the forum mandatorily granted to consumers by law and the jurisdictional powers of the Superintendency of Industry and Commerce.

19.5. In this version, the Service is offered exclusively to Customers domiciled or incorporated in the Republic of Colombia. Correvo may enable contracting from other countries in the future, upon publication of jurisdiction-specific annexes.

20.1. All petitions, complaints, claims or suggestions, as well as the exercise of Personal Data rights, are received at the email address contacto@correvo.app or at the physical address Calle 11 # 6A-56, Chía, Cundinamarca.

20.2. Under Articles 14 and 15 of Law 1581 of 2012, enquiries are handled within a maximum of ten (10) business days from receipt, and claims within a maximum of fifteen (15) business days from the day following receipt. Where it is not possible to handle them within those periods, the interested party will be informed of the reasons and the response date.

20.3.Where the request concerns Personal Data contained in a Customer's Content, Correvo acts as Processor and will forward the request to the relevant Customer, which is the Controller and responsible for handling it. Where it concerns registration, billing or Platform usage data, Correvo will handle it directly as Controller.

20.4. Under Article 16 of Law 1581 of 2012, the Data Subject may only file a complaint with the Superintendency of Industry and Commerce once they have exhausted the enquiry or claim procedure before the Controller or Processor. Once that procedure is exhausted, they may turn to the Superintendency of Industry and Commerce, the personal data protection and consumer protection authority in Colombia.

20.5. Correvo has an internal officer responsible for personal data protection, available through the email address in section 20.1.

21.1. Version 1.0, in force since August 8, 2026. This document applies indefinitely for as long as the Platform is available, without prejudice to the amendments in section 17.

21.2. Severability. If a competent authority declares any clause invalid, ineffective or unenforceable, the remaining clauses will remain in full force.

21.3. No waiver. A party's tolerance or delay in requiring performance of an obligation does not constitute a waiver of the right to require it later.

21.4. Assignment. The Customer may not assign its contractual position without Correvo's prior written authorization. Correvo may assign the contract in the event of corporate reorganization, merger, spin-off or transfer of the business unit, notifying the Customer thirty (30) days in advance; a Customer that does not accept the assignment may terminate the contract without penalty.

21.5. Language. The official language of this contract is Spanish. Any translation is provided for convenience only and, in the event of discrepancy, the Spanish version prevails.