Terms of Service
1. Who we are and acceptance of these terms
GaflahTech («قفلة تك», “we”, “us”) operates a property-access management platform from the Kingdom of Saudi Arabia. The platform lets property managers and hospitality operators control smart locks, manage reservations, issue time-bound access codes, and coordinate with property management systems. By creating an account or using the platform you agree to these terms on behalf of yourself and, where applicable, the business you represent. If you do not agree, do not use the service.
2. The service
The service includes: remote control of supported smart locks (locking, unlocking, status); creation and delivery of temporary access codes tied to reservations; reservation management and synchronization with supported property management systems (PMS); team access with role-based permissions; notifications to you and your guests by SMS, email, and WhatsApp; usage analytics; and, on eligible plans, a developer API with API keys and webhooks. We continuously improve the platform and may add, change, or retire features. If a change materially reduces core functionality you pay for, we will tell you in advance where reasonably possible.
3. Accounts, eligibility, and your team
The service is offered to businesses and professional operators, not consumers. You must provide accurate information, including a valid mobile number, which acts as your sign-in identifier. You are responsible for safeguarding your credentials and for all activity under your account, including activity by team members you invite. Assign roles (owner, manager, staff) carefully — they control who can open doors, issue codes, and see guest data. Remove access promptly when someone leaves your team.
4. Plans, fees, and the free trial
Paid plans are billed in Saudi riyals on a recurring basis, plus any one-time setup fee shown at purchase. New accounts may start with a free trial (currently 14 days); when the trial ends, continued use requires a paid plan. Each plan carries usage limits (such as the number of properties, locks, and monthly reservations). If you exceed them we may ask you to upgrade. Payments are processed by a licensed third-party payment provider; we do not store full card numbers. Fees already paid are non-refundable except where Saudi law requires otherwise. We may change prices with at least 30 days' notice, effective from your next billing cycle. Non-payment may lead to suspension after reasonable notice.
5. Smart-lock hardware and vendor services
Smart locks and gateways are manufactured and operated by third parties (for example the Tuya and TTLock ecosystems). We integrate with their cloud services but do not manufacture hardware and do not control vendor clouds. Lock features depend on the vendor account under which a lock is registered or shared to the platform. You are responsible for installing locks correctly, keeping batteries charged, maintaining gateways and internet connectivity, and complying with the vendor's own terms for your devices.
6. Physical access and safety
The platform is a management layer over physical locks — it complements, but does not replace, sound physical security practice. Remote operations and code synchronization can fail or be delayed by events outside our control: vendor cloud outages, lost connectivity, gateway failures, or depleted batteries. You must always maintain an independent means of physical entry (such as a mechanical key or master code held securely) and must not rely on the platform as the only way to enter or secure a property. You are responsible for whom you give codes and roles to; treat active access codes like keys.
7. Guest data and your responsibilities
When you enter guest details (names, phone numbers, emails, stay dates) you remain the owner and controller of that data; we process it on your behalf to run the service. You confirm that you collected guest data lawfully, that you are entitled to share it with us, and that guests may be contacted with stay-related messages (such as access codes and check-in instructions) on your instruction. You must comply with the Saudi Personal Data Protection Law (PDPL) and any other rules that apply to your business, including hospitality licensing requirements.
8. Acceptable use
You must not: use the service for unlawful purposes, including unlawful surveillance or entry; attempt to access other customers' data or probe, scan, or test the platform's security without written permission; interfere with the service's operation or abuse rate limits; misrepresent who you are when sending guest messages; resell or white-label the service without a written agreement; or use the service to violate tenancy, hospitality, or housing regulations. We may suspend accounts that put the platform, other customers, or guests at risk.
9. Developer API and webhooks
Eligible plans include access to our partner API. API keys are confidential credentials: keep them secret, rotate them if exposed, and use test keys outside production. Calls are subject to documented scopes, property restrictions, and rate limits, and we record API usage for billing and security. Webhook endpoints you register are your responsibility — keep them available and verify our signatures. We may throttle, suspend, or revoke keys that are abused or compromised.
10. Intellectual property and your data
The platform, including its software, design, and brand, belongs to GaflahTech and its licensors. We grant you a limited, non-exclusive, non-transferable right to use it while you have an active account. Your data remains yours. You grant us the licence needed to host, process, transmit, and display it solely to operate and improve the service. We do not sell your data and we do not use guest contact details for our own marketing.
11. Availability, disclaimers, and limitation of liability
We work to keep the service available and dependable, but it is provided “as is” and we cannot promise uninterrupted or error-free operation, and we are not responsible for failures of third-party services (lock vendors, messaging carriers, payment providers, PMS systems) or events beyond our reasonable control. To the maximum extent permitted by Saudi law: we are not liable for indirect or consequential losses (including lost revenue, lost bookings, lockouts, or property loss arising from misuse of codes you issued), and our total liability for all claims in any 12-month period is limited to the fees you paid us for the service in that period. Nothing in these terms excludes liability that cannot be excluded under applicable law.
12. Suspension and termination
You may cancel your subscription at any time; cancellation takes effect at the end of the paid period. We may suspend or terminate the service for material breach of these terms, non-payment after notice, or where required by law or to protect the platform. After your account closes, you have 30 days to request an export of your data, after which we may delete it in line with our Privacy Policy. Sections that by their nature should survive (including fees owed, liability limits, and governing law) survive termination.
13. Changes to these terms
We may update these terms as the service evolves. For material changes we will notify you (for example by email or an in-app notice) at least 14 days before they take effect. Continued use after the effective date constitutes acceptance of the updated terms.
14. Governing law and contact
These terms are governed by the laws of the Kingdom of Saudi Arabia, and disputes are subject to the competent courts and authorities of the Kingdom. Questions about these terms: support@gaflah.tech.