Legal
Terms of service
Effective date: 19 August 2026 · Last updated: 19 August 2026
These terms are the agreement between you and Oneop. By creating an account, or by using the service, you agree to them. If you are agreeing on behalf of a company, you are confirming you have authority to bind it.
We have written these in plain English on purpose. Where a clause limits your rights, it says so directly rather than hiding in a subclause.
Section 1 — Definitions
- "Oneop", "we", "us" — ENEXXUS, a sole proprietorship registered in Pakistan, of D2, Phase 1, Johar Town, Lahore, Pakistan, National Tax Number 3783814-8. ENEXXUS is a sole proprietorship and is not a separate legal person under Pakistani law, so the party contracting with you is its proprietor personally, trading as ENEXXUS. The proprietor's personal name is not published here; write to legal@oneop.io, or to the postal address above, and we will identify the contracting party to you in writing before you commit to anything that depends on knowing it. Read Section 10 on that footing: the cap there limits an individual's otherwise-unlimited personal liability.
- "You", "Customer" — the individual or organisation that opens an account.
- "Service" — the Oneop platform at
app.oneop.io, the marketing site atoneop.io, the embeddable chat widget, the WordPress plugin, and the APIs we make available. - "Workspace" — the isolated tenant we create for you when you register.
- "Customer Data" — everything you or your users put into the Service: contacts, leads, deals, chat transcripts, tickets, documents, invoices, files and configuration.
- "User" — a person you authorise to use your Workspace. Each User consumes one seat.
Section 2 — Your account
Who is responsible for what happens in my workspace?
You are. We authenticate the people you authorise; we do not supervise what they do.
- You must give accurate registration details and keep them current.
- The person who registers becomes the Workspace administrator. Registration always creates a new Workspace; there is no way to register into someone else's.
- You are responsible for your Users' actions, for keeping credentials secret, and for telling us promptly at security@oneop.io if you believe an account has been compromised.
- You must be at least 18 and legally able to enter a contract.
- Accounts require a verified email address. We issue a verification link that expires after 24 hours.
We may suspend an account immediately, without notice, where we reasonably believe it is being used to attack the Service or another customer, or where continuing would put us in breach of the law. We will tell you why as soon as we practically can.
Section 3 — Plans, seats and payment
What do I pay, and what changes it?
Prices are per Workspace per month, not per user. Seats are included in the plan price up to the plan's limit; extra seats are billed separately.
| Plan | Monthly | Annual | Seats included | AI credits per month |
|---|---|---|---|---|
| Free | $0 | — | 2 | 50 |
| Starter | $19 | $190 | 3 | 1,000 |
| Pro | $59 | $590 | 10 | 5,000 |
| Business | $129 | $1,290 | 25 | 15,000 |
Additional seats beyond the plan's included count are $5 per seat per month. Annual billing is priced at ten months — two months free — and is charged in advance for the year. All prices are in US dollars and exclude any tax we are required to collect.
Who you are buying from. Lemon Squeezy LLC is the merchant of record for every Oneop plan subscription. That means Lemon Squeezy — not Oneop — is the legal seller of the plan: it runs the checkout, it takes the payment, it issues your receipt and invoice, and it is responsible for calculating, collecting and remitting any sales tax or VAT due where you are. Oneop never receives or stores your card number. Lemon Squeezy's own terms and privacy notice apply to that transaction alongside these terms, and the data it receives is set out on thesubprocessor register.
Stripe is not involved in what you pay Oneop. Stripe appears in the Service only as an optional capability for you: if you connect your own Stripe account, Oneop can help you collect payments from your own clients into that account. Money you collect through Stripe Connect is yours and goes to you. It is a different relationship from the one in this Section, and neither one governs the other.
- Payment is taken at checkout by Lemon Squeezy as merchant of record. We do not store your card details.
- Renewal is automatic at the end of each billing period until you cancel.
- Cancellation takes effect at the end of the current period. You keep access until then.
- Plan changes apply from the change; the processor handles proration.
- Price changes apply from your next renewal, and we will email you at least 30 days before they take effect. Thirty days is the single notice period used throughout these terms, the DPA and the subprocessor register — one number, so you never have to check which document you are reading.
- Refunds: Lemon Squeezy is the merchant of record and its own refund policy applies to every purchase you make from it. Beyond that, Oneop does not refund a partial billing period — cancel whenever you like and keep access until the period you have already paid for ends. Where these terms separately promise a refund of prepaid, unused fees — a price change you reject under this Section, a subprocessor you object to under the DPA, or a material change to these terms you do not accept under Section 13 — that promise stands and we will honour it.
The Free plan is genuinely free. No card is required to start, and we will not convert you to a paid plan without an explicit action by you. We may change the Free plan's limits with notice.
Manual deletion after 60 days. We may delete a Free Workspace that has been inactive for 60 consecutive days — no sign-in and no other activity in the Workspace. This deletion is manual: it is carried out by a person who reviews the Workspace first. It is not an automated job, and the platform does not run one — no Free Workspace is deleted on this basis by software. We will send you at least two warnings by email before any deletion, and you can keep the Workspace simply by signing in.
Section 4 — AI credits
What happens when I run out of AI credits?
Nothing is silently billed to you. That is the whole point of the design.
AI features consume credits from your plan's monthly allowance. A credit is a unit of AI work, not a message: different actions cost different amounts — a chatbot reply costs 1, a document scan 3, an agent action 5, and so on. Every AI call in the product goes through a single metering point that reserves credits before the model is called, so usage is always recorded against your Workspace.
We do not bill overage. Where credit-cap enforcement is enabled on your deployment, an AI call made after the allowance is exhausted is refused rather than charged. Your allowance resets at the start of each calendar month and does not roll over.
On the Business plan you may supply your own model provider API key. If you do, AI usage runs against your key and your account with that provider, uncapped by us, and your agreement with that provider governs it.
Section 5 — Acceptable use
You may not use the Service to:
- send unsolicited bulk email, or any email that breaches CAN-SPAM, GDPR/PECR or equivalent law in your recipients' jurisdiction;
- upload, store or transmit malware, or content that is unlawful, infringing, defamatory, or that depicts the abuse of a child;
- attack, probe, scan or overload the Service or its infrastructure, or attempt to reach another customer's Workspace;
- circumvent plan limits, credit metering, rate limits or feature gates;
- resell or provide the Service to a third party as your own product, unless we have agreed that in writing;
- use AI features to generate content that impersonates a real person deceptively, or to attempt to extract another party's data through prompt manipulation.
Outbound email in particular. If you use the Service to send email, you are the sender. You are responsible for having a lawful basis for contacting each recipient, for honouring unsubscribe requests, and for the reputation of the domains and mailboxes you connect. We may suspend sending from a Workspace that generates significant spam complaints or that sends from a domain it has not verified.
We may remove content or suspend access where we reasonably believe this section has been breached.
Section 6 — Your data, and who owns what
Who owns the data I put into Oneop?
You do. Nothing in these terms transfers ownership of Customer Data to us.
- You own Customer Data. You grant us a limited licence to host, process, transmit and display it — only as far as is necessary to provide the Service to you, to support you when you ask, and to comply with the law.
- We own the Service — the software, the design, the documentation and our trade marks. You get a non-exclusive, non-transferable right to use it for the term of your subscription. Nothing else.
- We do not train models on your Customer Data. Oneop does not train, fine-tune or improve any model using the content of your Workspace.
- Feedback you send us about the product may be used freely and without obligation.
Processing terms. Where we process personal data contained in Customer Data, we do so as your processor under the Data Processing Agreement, which forms part of this agreement.
Export. While your subscription is active, you can export data from the product at any time. See the Privacy policy for what the built-in export tooling covers and what needs a manual request.
Deletion. When you close your account we will delete or anonymise Customer Data within 30 days, except where we are legally required to keep records — the retention table in the Privacy policy sets out what must be kept and for how long. Erasure is carried out manually on request today rather than by an automatic job.
Section 7 — Third-party integrations
The Service connects to third-party products — among them Google, Microsoft, HubSpot, Salesforce, WooCommerce, Shopify, WordPress, Apollo.io, Zoom, DocuSign, HelloSign, Plaid, QuickBooks, shipping carriers, and Stripe Connect — using credentials you supply. In each case you are connecting your own account. Stripe here means your own Stripe account, used to collect payments from your own clients; it is not how you pay Oneop, which is dealt with in Section 3.
Those products are not ours. Your use of them is governed by your agreement with each provider, they may change or withdraw their APIs, and we are not responsible for their availability, their accuracy, or what they do with data you direct to them. If an integration stops working because a provider changed something, we will do what we reasonably can, but we cannot commit to a fix.
Section 8 — Opt-in features
Some capabilities in the Service are off unless they have been enabled for your Workspace. The current list is published and kept current at/roadmap.
Nothing in our marketing, documentation or sales conversation entitles you to a capability that is not enabled for your Workspace at the time you subscribe. If a specific opt-in capability is material to your decision, get it confirmed in writing before you buy.
Section 9 — What we do not warrant
Does Oneop guarantee uptime?
No. Read this section before you build a critical process on the Service.
- The Service is provided "as is" and "as available". To the maximum extent the law allows, we disclaim all implied warranties, including merchantability, fitness for a particular purpose and non-infringement.
- There is no uptime service-level agreement. We publish no availability figure, operate no status page, and give no service credits for downtime. If a contractual uptime commitment is a requirement for you, Oneop cannot meet it today.
- We hold no security or compliance certification — no SOC 2, ISO 27001, PCI DSS, HIPAA or FedRAMP — and nothing in these terms is an attestation of one. The specific technical controls that do exist are described at /security.
- AI output is not advice. Model-generated text, extracted document values, suggested general-ledger codes, expense categories, tax determinations, demand forecasts and financial projections may be wrong. You must review anything material before you rely on it. Oneop is not an accountant, a tax adviser, a lawyer or a financial adviser, and the Service is not a substitute for one.
- You are responsible for your own filings. Where the Service submits a statutory return on your behalf, you remain responsible for its accuracy and for meeting your filing obligations.
- You are responsible for your own backups of anything you cannot afford to lose. We make no public backup-frequency, retention or recovery-time commitment.
Section 10 — Limitation of liability
This Section states Oneop's intended commercial position, and it has not been reviewed by a lawyer. Nothing in it displaces a right you have under the mandatory consumer-protection or data protection law of your own country, which applies whatever this agreement says.
Neither party excludes liability for death or personal injury caused by negligence, for fraud, or for anything else that cannot lawfully be excluded.
Subject to that:
- Neither party is liable for indirect or consequential loss, loss of profit, loss of revenue, loss of business, loss of goodwill, or loss of or corruption of data, however caused.
- Our total aggregate liability arising out of or in connection with this agreement is limited to the amount you paid us in the twelve months before the event giving rise to the claim.
- If you are on the Free plan, you have paid us nothing, and our aggregate liability to you is correspondingly limited to USD 100. We are stating that plainly rather than leaving you to work it out.
Section 11 — Indemnity
This indemnity runs one way, from you to us. That is deliberate, and it is the position Oneop offers today. If you need it to be mutual, or need an indemnity from Oneop against a claim that the Service itself infringes a third party's intellectual property, ask before you commit — it is a negotiation, not an oversight.
You will indemnify us against claims brought by a third party arising from your Customer Data, your use of the Service in breach of Section 5, or email you send through the Service.
Section 12 — Term, suspension and termination
- Term. This agreement runs for as long as you have an account.
- You may cancel at any time, effective at the end of the current billing period, from within the application or by emailing us.
- We may terminate for material breach that is not cured within 30 days of written notice; or immediately, for a breach of Section 5 that causes or threatens harm to us, another customer or a third party.
- We may discontinue the Service on at least 30 days' written notice, refunding any prepaid, unused fees.
- On termination your access ends, and Customer Data is deleted or anonymised per Section 6. Export your data before you cancel.
Sections 6 (ownership), 9 (warranties), 10 (liability), 11 (indemnity) and 14 (governing law) survive termination.
Section 13 — Changes to these terms
We may change these terms. For a material change we will email account owners at least30 days before it takes effect, and we will update the "Last updated" date. Continuing to use the Service after a change takes effect means you accept it. If you do not, cancel before the effective date and we will refund any prepaid, unused fees.
Section 14 — Governing law and disputes
This agreement is governed by the law of Pakistan, and the courts ofLahore, Pakistan have exclusive jurisdiction over any dispute arising out of it or connected with it. Arbitration is not elected. If you are a consumer rather than a business, this clause does not deprive you of the protection of the mandatory law of the country you live in, or of any right that law gives you to bring proceedings there. Section 12 of the DPA chooses the same law and the same venue, on purpose, so that the two documents cannot drift apart.
Section 15 — General
- Entire agreement. These terms, the DPA and the Privacy policy are the whole agreement between us on this subject.
- Assignment. You may not assign without our consent. We may assign on a merger or sale of the business.
- Severability. If a clause is unenforceable, the rest stands.
- No waiver. Not enforcing a right once does not waive it.
- Notices. To you, by email to your account owner. To us, at ENEXXUS, D2, Phase 1, Johar Town, Lahore, Pakistan, and legal@oneop.io.
Section 16 — Contact
Questions about these terms: legal@oneop.io · General enquiries: Contact
Links out
Data processing agreementPrivacy policySecurityRoadmapPricingContact
No CTA banner on this page — a legal page ending in a sales banner reads badly and helps nothing.