Terms of Use

1. Parties & Scope

These Terms of Use ("Terms") are a binding legal agreement between LI Internal Operations Pty Ltd ("LI", "we", "us") and you, the individual or organisation accessing the OMS ("User", "you").

These Terms apply to all users of the OMS regardless of role: Internal Users (ops_admin, ops_user, superuser), External Users (contract_mfg_user, contract_mfg_admin, logistics_receiver), and Auditors. By accessing the OMS, registering a device, or otherwise using the platform, you agree to be bound by these Terms.

If you do not agree to these Terms, you must not access or use the OMS.

2. Definitions

3. Beta Access — Current Status & Limitations

The OMS is currently made available as pre-release software. The following additional terms apply during the Beta Period:

• • The OMS may contain bugs, defects, or incomplete features. You accept all risks arising from use during the Beta Period.
• • The OMS must not be relied upon for mission-critical operations without independent validation.
• • You must not use the OMS to process live customer personal information unless LI has expressly authorised a supervised production-simulation exercise in writing.
• • Any Feedback (bug reports, suggestions, or observations) you provide to LI is granted to LI on a perpetual, irrevocable, royalty-free basis. You warrant that Feedback does not include third-party proprietary information without consent.
• • LI's liability during the Beta Period is limited to AU$500 or the amount paid by you in the preceding three months, whichever is greater.
• • The Warranty & Service Level Agreement (Section 14) does not apply during the Beta Period.

4. Licence Grant

Subject to these Terms, LI grants you a limited, non-exclusive, non-transferable, revocable licence to access and use the OMS solely for the Permitted Purpose and solely through Registered Devices on Registered Networks (where applicable to your user role).

This licence does not include any right to: sublicense; copy or distribute the OMS; access the OMS source code or reverse-engineer any component; use the OMS outside the Permitted Purpose; or grant access to any person not individually onboarded by LI.

5. Permitted Use & Access Boundaries

5.1 Network Restriction (External Users)

External Users may only access the OMS from a Registered Network. The OMS verifies network identity via a one-way cryptographic Network Fingerprint Hash tied to the user-provided description registered during onboarding. Attempts to access from an unregistered network will be rejected. Circumventing this control by any means is a material breach of these Terms.

5.2 Device Restriction

Access is permitted only from a Registered Device. All devices begin in pending_approval status and may only access the OMS after an authorised administrator has explicitly approved the registration. Device credentials (private keys) must not be shared, copied, or transferred to any other device or person.

5.3 Role & Scope Restriction

Each User is assigned a specific role and data scope. Users must not attempt to access data or functionality outside their assigned role. Access controls are enforced server-side. Attempting to bypass them constitutes a security violation and may attract legal consequences under applicable computer-crime legislation.

6. Customer Information & Data Minimisation

The OMS processes customer information solely for the Permitted Purpose of order fulfilment. You must not:

• • Use customer information obtained through the OMS for any purpose other than order fulfilment
• • Export, copy, or retain customer information beyond what is strictly necessary to fulfil an order
• • Attempt to re-identify or correlate de-identified or pseudonymised customer records
• • Store customer names or email addresses obtained via the OMS in any external system

The OMS automatically de-identifies personal customer information before audit logging. An external_customer_id persists in the system for operational continuity until archival. LI provides a manual GDPR Article 17 erasure function accessible to authorised ops_admin users.

7. Security Obligations

LI implements encryption in transit (TLS v1.2+), at rest (AES-256 on all databases and S3 storage), and at entry for personal information. You are responsible for:

• • Maintaining the security of your credentials, passkey, and registered device
• • Ensuring your Registered Network remains under your organisation's control
• • Immediately notifying LI at security@li-ops.io if you suspect any unauthorised access or credential compromise
• • Not installing unauthorised root certificates or security-bypassing software on any Registered Device

8. Monitoring, Logging & Consent

By accessing the OMS, you explicitly consent to the following:

8.1 Real-Time Online Presence

The OMS records the online and offline status of every Registered Device in real time using Phoenix Presence. LI's authorised operations staff can see which devices and user accounts are currently active at any time.

8.2 Immutable Audit Log

All actions performed through the OMS are recorded in an immutable audit log retained for a minimum of seven (7) years. No update or delete path exists. Logged events include state transitions, device approvals/rejections, document generation, print job submissions, GDPR erasure operations, and all credential or token access events. Superuser actions are logged separately under row-level security.

8.3 Data Stored About You

The OMS stores, at minimum: your name, work email address, company name, assigned role and scope, registered device UUID and public key fingerprint, and last-seen timestamp. All platform actions you take are attributed to your account in the audit log.

Internal Users additionally authenticate through Google Workspace SSO. Google's own terms and privacy policy apply to that authentication step.

9. Prohibited Conduct

You must not:

• • Use the OMS for any unlawful purpose or in violation of any applicable law or regulation
• • Introduce malware, harmful code, or unauthorised scripts into the OMS or any connected system
• • Attempt to probe, scan, or test the vulnerability of the OMS or its infrastructure without LI's prior written authorisation
• • Use automated tools to access the OMS outside of authorised API integrations
• • Share your credentials, passkey, or device access with any other person
• • Use another user's credentials or impersonate another user
• • Circumvent device-approval, network-fingerprint, or role-based access controls
• • Interfere with the availability or integrity of the OMS or any connected system
• • Access data or system areas beyond the scope assigned to your role

10. Intellectual Property

The OMS, including its source code, architecture, documentation, trademarks, and all related intellectual property, is and remains the exclusive property of LI. Nothing in these Terms transfers any intellectual property rights to you. You may not reproduce, adapt, distribute, or create derivative works from any OMS component without LI's prior written consent.

11. Disclaimer of Warranties

Nothing in these Terms excludes, restricts, or modifies any right or remedy, or any guarantee, warranty, or other term or condition implied or imposed by the Australian Consumer Law (Schedule 2 to the Competition and Consumer Act 2010 (Cth)) that cannot lawfully be excluded or limited.

12. Limitation of Liability

Subject to Section 11 and to the extent permitted by applicable law:

• • During the Beta Period: LI's aggregate liability is limited to AU$500 or the amount paid by you in the preceding three months, whichever is greater.
• • In production: LI's aggregate liability will not exceed AU$1,000 or the fees paid by you to LI in the preceding twelve months, whichever is higher.
• • LI will not be liable for any indirect, incidental, consequential, exemplary, special, or punitive damages, including loss of profits, loss of data, or business interruption, regardless of the form of action.
• • LI is not liable for any loss arising from your failure to maintain the security of your credentials, device, or network, or from use of the OMS outside the Permitted Purpose.

13. Termination

LI may suspend or terminate your access immediately and without notice if you breach these Terms. During the Beta Period, either party may terminate on 5 business days' written notice. On termination, your right to access the OMS ceases immediately. Sections 8, 10, 11, 12, and 15 survive termination.

14. Service Levels (Production)

A separate Software Warranty & Service Level Agreement (SLA) governs availability commitments, incident response targets, and service credits for production deployments. The SLA applies only where a separate written commercial agreement references it and only after the Beta Period ends. During the Beta Period, no uptime commitments are given.

Contact ops@li-ops.io to request a copy of the current SLA.

15. Governing Law & Disputes

These Terms are governed by the laws of New South Wales, Australia.

For EU Users: LI complies with applicable EU consumer and data protection law. Nothing in these Terms limits rights afforded to EU data subjects under the GDPR, including the right to lodge a complaint with a supervisory authority.

For US Users: These Terms are interpreted in a manner consistent with applicable US federal and state law.

Disputes will first be referred to good-faith negotiation for 30 days. If unresolved, disputes will be resolved by binding arbitration in Sydney, NSW under the ACICA Arbitration Rules, except that either party may seek urgent injunctive relief from a court of competent jurisdiction.

16. Amendments

LI reserves the right to update these Terms at any time. Material changes will be communicated with at least 14 days' notice via the OMS notification system or by email. Continued use of the OMS after the effective date of an amendment constitutes acceptance of the updated Terms.

17. Contact