Terms of Service

1. Acceptance

By signing up for, signing in to or using the Service — with an email and password, with a Google or Microsoft account, or with a LINE account you have linked — you confirm that you have read and accept these Terms and the Privacy Policy. If you do not accept them, do not use the Service.

If you use the Service on behalf of a legal entity, you represent that you have authority to bind it to these Terms. You must be of legal age and have legal capacity to enter into contracts.

2. Definitions

• "Customer company": a Customer's workspace in the Service, either individual (one member only) or juristic.
• "Company administrator": a user entitled to manage the Customer company's members, seats, permissions, tax details and payments.
• "Seat": one user's right to use the boards of one Customer company, which a company administrator can enable or disable.
• "Customer Content": data that the Customer and its users create, upload or import, such as projects, issues, comments, sprints, releases, custom field values, project documents, Markdown files, attachments, data imported from Jira or moved in from another Customer company, and messages and attachments sent in support cases.
• "AI agent": a program or app that accesses the Service through MCP, OAuth or a personal access token on a user's behalf.

3. Accounts

You must provide accurate, current information, keep your password, tokens and any Google, Microsoft, LINE or Telegram account you sign in with confidential, and you are responsible for everything done under your account, including actions of AI agents using your tokens. Tell us immediately about any unauthorised use.

If you sign in with a Google or Microsoft account that uses the same email as an existing account and the provider has verified that email, we link it to the existing account. Access by that method also depends on the availability of Google or Microsoft. You can sign in with a LINE account only after linking it in your settings (one LINE account per account; you cannot sign up with LINE), and access by that method also depends on the availability of LINE.

If you turn on two-step sign-in, you must keep your authenticator device or app and your recovery codes safe, not choose "remember this device" on a device you share with others, and pay attention to the security alerts we send by email and — where you have linked or turned them on — by LINE or on your devices, which cannot be turned off. If you can use neither your authenticator app nor a recovery code, you can ask to turn two-step sign-in off with a code sent by email, which takes effect after 24 hours, or contact our support team, who will check your identity, which may include asking an administrator of a Customer company you belong to to confirm it, or another method we specify; such a request also takes effect only after 24 hours. We may refuse a request where we cannot verify your identity, and we never turn two-step sign-in off immediately or sign in on your behalf.

4. Customer companies and administrators

Company administrators decide who can access the Customer company and with which permissions, enable or disable seats, and are responsible for its fees. The Customer is responsible for the acts of every user it grants access to.

Company administrators can view and export the Customer company's audit log, including members' sign-ins (time, sign-in method, IP address and browser or device) and actions taken through AI agents. The Customer must use that information only to manage and secure its Customer company. All members of a Customer company can see and answer the support cases opened on its behalf.

The project or company administrator who sets up a webhook chooses its destination and the events it sends. Such destinations are services of third parties or of the Customer itself and may be outside Thailand; the Customer is responsible for choosing them, keeping webhook URLs and secrets confidential, and for the use and protection of the data at the destination. We may automatically switch off a webhook whose deliveries keep failing, and will tell the project administrators.

A company administrator who imports data from Jira represents that they are entitled to use the Jira account and API token they enter and to bring that data, including personal data of the people who appear in it, into the Service. A company administrator who approves moving a project to another Customer company represents that they are entitled to disclose that project's content, including the names of people who appear in it, to the receiving Customer company. Once the move is complete, the copy the receiving Customer company holds is that company's Customer Content.

5. Acceptable use

You agree not to:

• use the Service for anything unlawful or to infringe the rights of others, including intellectual property and personal data;
• upload malware or unlawful content, or use the Service to distribute it;
• attempt to access data or accounts you are not entitled to, probe or penetrate the system, or circumvent security measures or usage limits;
• send requests in volumes that unreasonably burden the system or disrupt the Service for others;
• reverse engineer, copy, resell or provide services to others based on the Service, unless we allow it in writing.

6. AI agents and MCP

An AI agent you connect acts with exactly your permissions in the Customer company its token belongs to. You are responsible for the instructions you give an agent and for the results of its actions as if they were your own. You can revoke tokens and authorised apps at any time in your settings. The provider of an AI agent is a third party of your choosing, and its terms also apply to your use. AI agents can open, read and answer the Customer company's support cases within your permissions, and we record the agent's client name, token kind, MCP tool and request id in the change history and in the Customer company's audit log.

7. Customer Content

The Customer owns Customer Content and grants the Company the right to store, copy, process and display it only as needed to provide the Service, back it up and keep it secure. We do not use Customer Content to train artificial intelligence models.

The Customer represents that it has the rights to the content it uploads and that using it in the Service does not violate the law or the rights of others. Customer Content is stored as Markdown files; the Customer can retrieve it through the Service or the API and request a copy by contacting us. It is kept until it is deleted or the Customer asks for it to be deleted, as described in the Privacy Policy.

For personal data in Customer Content, the Customer is the data controller and is responsible for having a lawful basis to bring that data into the Service and for informing data subjects as the law requires. We process such data as a data processor on the Customer's instructions, which are these Terms and the way the Customer and its users configure and use the Service, as described in the Privacy Policy.

An attachment deleted by a user or a company administrator is deleted for good at once and cannot be restored; links to it in content show that the file was deleted. The Customer should check before confirming a deletion.

8. Fees and payment

• The Service has two plans per Customer company, Pro and Premium (Pro by default); the features and rates of each plan are as published on the pricing page. Only administrators of the Customer company can change the plan. An upgrade to Premium takes effect immediately; a change back to Pro takes effect at the end of the day (00:00 Thailand time) and can be cancelled until then. A day on which the plan changes is charged at the higher plan of that day. There is no trial.
• Some features are available only on certain plans, as published on the pricing page — such as work notifications on LINE, custom board columns and keeping project history after permanent deletion (Premium), and Releases (a Customer company outside the free-of-charge conditions in the next item, or on Premium). When a Customer company moves to a plan without such a feature, work notifications on LINE stop (users' settings are kept), custom board columns and Releases data remain and can be read but not changed until the company is back on a plan with that feature, and project history can no longer be chosen to be kept; archives already kept can still be downloaded or deleted. Account security alerts on LINE are available on every plan.
• A Customer company on the Pro plan with at most 2 users with an enabled seat, at most 2 projects and at most 10 GB of storage uses the Service free of charge. Going beyond this, or upgrading to the Premium plan, requires a payment method, complete tax details and a verified email first.
• Fees are charged monthly in arrears (post-paid) in Thai baht, based on the seats enabled each day and the rate of that day's plan. On the Pro plan the first 2 seats of every Customer company are free; on the Premium plan every seat is charged. Storage above 10 GB is charged in blocks of 10 GB, at the rates published on the pricing page at the time of use. Project history archives kept after permanent deletion count toward storage, including the free 10 GB, until they are deleted. AI agents and tokens do not count as seats.
• We may issue coupons that give a Customer company additional free seats for a stated number of seats and period. Each code can be redeemed once, by one Customer company, by a company administrator, and must be redeemed by its expiry date (end of that day, Thailand time). A Customer company holds one active coupon at a time. Coupons have no cash value and cannot be exchanged for cash or transferred. While a coupon runs, enabling the seats it gives and creating more projects need only a verified email. When a coupon ends, existing seats and projects remain and are charged under this section as usual.
• Published prices exclude value added tax, which is added at the statutory rate. A juristic Customer with withholding tax enabled and complete tax details may withhold tax at the statutory rate and must upload the withholding tax certificate (50 Tawi).
• We issue an invoice on the 1st of each month for the previous month's use, due within 15 days, payable by card, PromptPay or bank transfer to the account shown on the invoice. We issue a tax invoice and receipt upon payment. These documents are issued as a Thai PDF and an English PDF; the English tax invoice and receipt always also carry the Thai text.
• We may change the fees with at least 30 days' notice; new rates apply to use from their effective date.
• The Private plan (a separate BoardMark set-up for one Customer company) is provided under a separate written agreement with the Company, which sets its price, scope and terms. These Terms apply to the Private plan insofar as they do not conflict with that agreement; where they conflict, that agreement prevails.

9. Overdue payment

We send reminders for unpaid invoices. If an invoice is more than 30 days past its due date, the Customer company becomes read-only; if it is more than 60 days past due, we may suspend the whole Customer company. Normal use resumes once the outstanding amount is paid in full. Suspension does not cancel fees already incurred.

10. Cancellation and refunds

The Customer may cancel or reduce use at any time by disabling seats or stopping use of the Service; charges stop from the day after a seat is disabled. Fees for use already incurred are not refunded, except where we billed in error, in which case we refund or credit the overcharged amount on the next invoice.

11. Suspension and termination

We may suspend or terminate access of a user or Customer company for a material breach of these Terms, use that harms the system or others, or where required by law or an order of a competent authority. We will give reasonable notice unless the matter is urgent.

12. Intellectual property

The software, the BoardMark name and marks, the design and the documentation of the Service belong to the Company or its licensors. These Terms only give you the right to use the Service in accordance with them. We may use feedback you give us to improve the Service without obligation.

13. Availability

We aim to keep the Service available, but it may be interrupted for maintenance, updates or causes beyond our control. The Service is provided "as is" and "as available"; to the extent permitted by law, we do not warrant that it is error-free or fit for your particular purpose.

Features that rely on third-party services — such as signing in with Google, Microsoft, LINE or Telegram, notifications on LINE, Telegram and on devices, webhook deliveries and importing from Jira — also depend on the availability and terms of those providers. We do not warrant that notifications or messages through those channels will always reach the recipient, or reach them in time.

14. Limitation of liability

To the maximum extent permitted by law, the Company is not liable for indirect, special or consequential damages, including loss of profit, revenue or data, and the Company's total liability to the Customer arising out of or in connection with the Service, on any basis, is limited to the fees the Customer paid the Company in the 3 months before the event giving rise to the liability.

This limitation does not apply to liability that cannot be limited by law, such as damage caused by the Company's wilful misconduct or gross negligence, and does not affect consumers' statutory rights.

15. Indemnity

The Customer will indemnify the Company against third-party claims arising from Customer Content or from use of the Service in breach of these Terms or the law by the Customer, its users or AI agents it connects.

16. Changes to these Terms

We may amend these Terms from time to time. We will publish the new version on this page with its effective date and, for material changes, give at least 30 days' notice by email or in the Service. Continued use after the effective date means you accept the new Terms.

17. Governing law and disputes

These Terms are governed by and construed in accordance with the laws of Thailand. The parties will first try to settle any dispute in good faith; failing that, the Thai courts have jurisdiction. If any provision is unenforceable, the others remain in force. The Thai version of these Terms prevails.

18. Contact

For questions about these Terms, contact the Company using the details at the end of this document.