Terms of Service

Rego Consulting Corporation
2115 N Main Street, Centerville, UT 84014

These Terms of Service (“Terms”) govern access to and use of the Moventus platform and related services (the “Service”) provided by Rego Consulting Corporation (“Rego,” “we,” “us,” or “our”). By creating an account, purchasing a subscription, clicking to accept, or accessing the Service, you (“Customer”) agree to these Terms. If you accept for an organization, you represent that you have authority to bind it.

Moventus is a cloud-based work, project, and portfolio management platform. Subject to payment and these Terms, Rego grants Customer a limited, non-exclusive, non-transferable right during the subscription term to use the Service for Customer’s own purposes. Customer may allow its authorized users to use the Service and is responsible for their compliance.

Rego may improve or modify the Service. Rego will not materially reduce its core functionality during a paid subscription term. The Service may include software components licensed under open-source licenses (“Open-Source Software”). To the extent required by an applicable open-source license, Rego will make the applicable license terms, copyright notices, attribution notices, and any required source-code offer available through the Service or upon request. The applicable open-source license governs the applicable Open-Source Software, and nothing in these Terms limits rights granted under that license.

Customer agrees to:

• provide accurate registration and billing information;
• protect account credentials and prevent unauthorized access; and
• promptly notify Rego of suspected unauthorized use.

Customer is responsible for activity under its accounts.

Subscription fees, term, user or usage limits, and other order details are shown at checkout or in an order form (the “Order”). Fees are billed in advance, exclude applicable taxes, and are non-refundable except as stated in these Terms or required by law. Customer authorizes Rego to charge the selected payment method. Rego may suspend the Service for overdue amounts.

Subscriptions automatically renew for the same term unless canceled before the renewal date. Rego may change renewal pricing by giving at least 30 days’ notice and following the Moventus cancelation process. Cancellation takes effect at the end of the current paid term. Rego will provide any additional renewal notice required by law.

Customer retains all rights in data uploaded to the Service (“Customer Data”). Customer grants Rego and its service providers a limited right to host, process, transmit, copy, and display Customer Data only as needed to provide, secure, support, and comply with law regarding the Service. Customer is responsible for the legality, accuracy, and necessary permissions for Customer Data.

For customers subscribing online without a separate agreement, Customer Data will be hosted in production data centers located in the United States. Rego may use aggregated or de-identified service usage information that does not identify Customer or an individual to operate, secure, and improve the Service.

Customer shall not:

• violate applicable law or third-party rights;
• upload malicious code, interfere with the Service, or attempt unauthorized access;
• reverse engineer or circumvent security or usage restrictions, except where law prohibits this restriction;
• resell, sublicense, or use the Service to provide a competing service; or
• use the Service for high-risk activities where failure could cause death, serious injury, or major property or environmental damage.

Rego maintains reasonable administrative, technical, and physical safeguards designed to protect Customer Data, including encryption in transit, access controls, SOC 2 security principles and ISO 27001 frameworks, monitoring, incident response, and vendor risk management. No system can be guaranteed completely secure.

Each party will use the other party’s non-public information only for the relationship, protect it using reasonable care, and disclose it only to personnel and service providers who need it and are bound to protect it. These duties do not apply to information that is public without breach, lawfully known without restriction, received lawfully from another source, or independently developed. Required legal disclosures are permitted.

Rego retains all right, title, and interest in the Service, including all software, technology, and documentation.

No rights are granted except as expressly stated. Customer may provide feedback, and Rego may use it without restriction or obligation.

• Rego will defend Customer against a third-party claim that the Service, as provided by Rego and used as allowed, directly infringes a valid U.S. patent, copyright, or trademark, and will pay damages finally awarded or settlements approved by Rego. This does not apply to claims arising from:
• Customer Data,
• Modifications not made by Rego
• Combination with third-party systems
• Use contrary to documentation

. Rego may modify or replace the affected Service, obtain rights, or terminate it and refund prepaid unused fees. This is Rego’s entire liability for such claims.

Customer will defend and indemnify Rego against third-party claims arising from Customer Data or Customer’s unlawful or unauthorized use of the Service. The indemnified party must promptly notify the other party, reasonably cooperate, and allow the indemnifying party to control the defense and settlement.

THE SERVICE IS PROVIDED “AS IS” AND “AS AVAILABLE.” REGO DISCLAIMS ALL IMPLIED WARRANTIES, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT. REGO DOES NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, OR COMPLETELY SECURE.

TO THE MAXIMUM EXTENT PERMITTED BY LAW, REGO’S TOTAL AGGREGATE LIABILITY ARISING FROM THE SERVICE OR THESE TERMS WILL NOT EXCEED THE FEES PAID OR PAYABLE FOR THE SERVICE DURING THE 12 MONTHS BEFORE THE EVENT GIVING RISE TO LIABILITY. NEITHER PARTY WILL BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR LOST PROFITS, REVENUE, DATA, OR USE. THESE LIMITS DO NOT APPLY TO CUSTOMER’S PAYMENT OBLIGATIONS, CUSTOMER’S INDEMNITY, FRAUD, WILLFUL MISCONDUCT, OR LIABILITY THAT CANNOT LEGALLY BE LIMITED.

Customer will not access or use the Service in violation of U.S. export-control or sanctions laws, including from embargoed locations or by prohibited parties.

Either party may terminate for material breach not cured within 30 days after notice. Rego may suspend access for non-payment, violation of these Terms, security risk, unlawful use, or harm to the Service or others. Upon termination, access ends. Customer may request an export of Customer Data for 30 days, after which Rego may delete it, subject to legal retention and ordinary backup cycles.

Utah law governs these Terms without regard to conflict-of-law rules. Any dispute must be brought in the state or federal courts located in Utah, and the parties’ consent to jurisdiction there. Neither party is liable for delay caused by events beyond its reasonable control. If a provision is unenforceable, the remainder remains effective. These Terms and the Order are the entire agreement regarding the Service. Customer may not assign these Terms without Rego’s consent; Rego may assign them in connection with a merger, reorganization, or sale of its business. Sections intended by their nature to survive termination will survive.

Rego may update these Terms by posting a revised version. Rego will provide reasonable notice of material changes. Material changes will apply to an existing paid subscription at renewal unless required earlier by law or for security. Continued use after the applicable effective date constitutes acceptance.

Moventus may collect:

• name, company name, email, telephone number, and account credentials;
• subscription, billing, and payment status information;
• device, IP address, browser, usage logs, and security information;
• support communications; and
• Customer Data submitted to the Service.

Moventus does not require sensitive personal data. Customers should submit it only when necessary and legally permitted.

Rego uses personal information to:

• provide, secure, support, and improve the Service;
• authenticate users, process subscriptions, and communicate with users;
• prevent fraud, misuse, and security threats; and
• comply with law and enforce agreements.

For EEA and UK users, the legal bases are contract performance, Rego’s legitimate interests in operating and securing the Service, legal compliance, and consent where required.

Rego may share personal information with affiliates and service providers that support hosting, payment, security, analytics, communications, and customer support; when directed by the user or Customer; in connection with a business transaction; or when required to protect rights, safety, or comply with law. Rego does not sell personal information or share it for cross-context behavioral advertising.

Moventus websites and the Service may use necessary, functional, and analytics cookies or similar technologies. Available choices are described at [Insert Cookie Notice or Preference Link].

For online customers, personal information in Customer Data is hosted in production data centers in the United States. Information may also be processed where Rego or its service providers operate. Where required, Rego uses appropriate transfer safeguards, including Standard Contractual Clauses.

Rego retains personal information only as long as reasonably necessary to provide the Service, maintain security, resolve disputes, and meet legal obligations. Rego uses reasonable safeguards, but no security method is infallible.

Depending on applicable law, individuals may request access, correction, deletion, portability, or restriction; object to certain processing; withdraw consent; or appeal a denied request. Rego may verify identity and authority. If information is contained in Customer Data, the individual should first contact the Customer that controls it.

Moventus is not directed to children, and Rego does not knowingly collect personal information from children under 16. Rego may update this Policy by posting a revised version and will provide additional notice when required.

Please go to https://regoconsulting.com/privacy-policy/ for additional privacy policy information.

This DPA applies when Rego processes personal data in Customer Data for Customer as a processor or service provider. Customer is the controller or business and is responsible for its instructions, notices, consents, and lawful basis.

Rego will process personal data only to provide, secure, support, and administer the Service; on Customer’s documented instructions; or as required by law. Processing lasts for the subscription and limited retention period. Data may include business contact, account, project, portfolio, resource, communications, usage, and other data selected by Customer concerning users, personnel, customers, vendors, and other persons identified by Customer.

Rego will ensure that personnel authorized to process personal data are bound by confidentiality obligations and will maintain appropriate technical and organizational security measures, including encryption in transit, access controls, logging and monitoring, incident response, and vendor risk management.

Customer generally authorizes Rego to use Subprocessors to provide the Service. Rego will maintain a current list available upon request, require Subprocessors to protect personal data under substantially similar obligations, remain responsible for their performance as required by law, and provide notice of material new Subprocessors where required so Customer may object on reasonable data-protection grounds.

Rego will notify Customer without undue delay after becoming aware of a confirmed personal data breach affecting Customer personal data and will provide available information reasonably needed for Customer’s legal obligations.

Taking into account the nature of processing and information available, Rego will reasonably assist Customer with data-subject requests, security and breach obligations, data-protection impact assessments, and regulator consultations.

Upon termination, Rego will make personal data available for return as described in Part I and then delete it, unless law requires retention. Backup copies will be deleted through ordinary retention cycles.

Rego will provide information reasonably necessary to demonstrate compliance. If legally required information is not otherwise available, Customer may conduct a reasonable audit no more than once annually, on advance notice, subject to confidentiality and safeguards for other customers and the Service.

Where required for transfers from the EEA, the European Commission Standard Contractual Clauses adopted under Decision 2021/914 are incorporated: Module Two applies when Customer is a controller and Module Three when Customer is a processor. The processing details in this DPA, Rego’s security measures, and its Subprocessors list complete the applicable annexes. For UK transfers, the applicable UK addendum applies.

Rego will not sell or share Customer personal data or retain, use, or disclose it outside the business relationship or purposes in these Terms except as permitted by applicable law. Rego will provide the level of privacy protection required of a processor or service provider and notify Customer if Rego can no longer comply.

This DPA controls over conflicting provisions regarding processing of Customer personal data. The liability limits in Part I apply to this DPA, except where applicable law prohibits that limitation.

Moventus may include automation and algorithmic features.

• Customer Data is not used to train third-party models.
• Automated outputs are provided for informational purposes and may be inaccurate or incomplete.

Customer is responsible for reviewing outputs before relying on them and must not use automated outputs as the sole basis for decisions producing legal or similarly significant effects on an individual unless legally permitted and subject to appropriate human review. Rego does not guarantee the accuracy or uniqueness of automated outputs.

If Rego provides APIs:

• Customer receives a limited, non-exclusive, revocable right to use documented APIs with the Service;
• Customer must protect API credentials, follow security practices and usage limits, and comply with law;
• APIs may not be used to replicate or build a competing service;
• Rego may rate-limit, modify, or suspend API access for security, abuse, or operational reasons;
• Rego is not responsible for third-party integrations selected by Customer; and
• SDKs or sample code accompanied by an open-source license are governed by that license. Otherwise, they may be used only with the Service and are provided without warranty.