Terms of use and privacy policy
String One — String Systems
1. Definitions and scope
The “platform” is String One, the enterprise resource planning and customer relationship management service (ERP and CRM) provided by String Systems (Jordan): accounting, sales, purchasing, inventory, human resources, payroll, customer relations and sector modules. The “company” is the party that registers an account. A “user” is anyone from the company's management who signs in to the account. An “employee” is a person whose data is recorded in the company's account. The “company's clients” are the customers, suppliers, patients, students, guardians, tenants and others whose data the company enters.
This document (terms of use, privacy policy and data processing agreement) is the entire agreement between String Systems and the company and applies to every user and employee who uses the platform. If the company has a signed agreement with String Systems, it prevails over anything here that conflicts with it.
2. Acceptance and capacity
By registering an account, pressing “I agree” or using the platform you accept these terms. This electronic acceptance is valid and binding under Jordan's Electronic Transactions Law No. 15 of 2015.
The person who registers the account confirms that they are an adult and legally authorised to bind the company to these terms; the company remains responsible for everything done from its account.
3. The account and the company's responsibility
The company is responsible for the accuracy of the data it enters, for its users' and employees' accounts and permissions, for keeping passwords and API keys secret, and for telling us at once about any unauthorised use.
The company alone is responsible for its books, financial statements, tax returns and invoices, and for complying with the tax, labour and social security laws of its country. The platform is a tool for recording, calculating and presenting transactions and does not replace the company's accountant, auditor or legal adviser.
The company publishes its internal policy to its employees from the settings page (a ready text based on its country's labour law is suggested at registration); each employee is shown the policy to accept, and the text they accepted stays visible in their account.
4. Data processing roles (data processing agreement)
The company is the “controller” of the data of its employees, clients, suppliers and anyone else whose data it enters; String Systems is a “processor” that processes it on the company's behalf only to provide the service and according to its documented instructions, including these terms and the account settings.
As a processor we undertake to: keep the data confidential and limit access to those who need it to provide support; apply appropriate security measures; use sub-processors only for hosting, e-mail and backups; help the company answer requests from data subjects; notify the company of any security breach affecting its data without undue delay and within 72 hours of becoming aware of it; and delete or return the company's data when the service ends, as set out in section 9.
5. Trial, subscription and payment
Every company starts with a free fourteen-day trial. After that, the subscription is priced by the modules the company chooses (such as accounting, sales, inventory, human resources and sector modules) and the number of users, as shown on the subscription page; a module can be added or removed at any time and the amount changes from the next period.
The subscription is paid in advance for the chosen period by the methods shown on the subscription page and is activated once payment is confirmed. Prices exclude the taxes and fees due by law, which the company bears. Amounts paid for a period that has started are not refunded, unless the law requires it or we could not provide the service for a reason on our side.
When the subscription or trial ends, the company gets a grace period during which the service stays available for renewal; after it, access to the account is locked while the data stays stored under section 9 until the subscription is renewed or the data is deleted. We send an e-mail before and at expiry. We may change prices with at least thirty days' notice; a change never applies to a period already paid.
6. E-invoicing and government systems
If the company turns on the link with an e-invoicing or government finance system in its country (such as Jordan's national invoicing system JoFotara), the platform sends it the required invoice data on the company's behalf, using the credentials the company provides; those credentials are stored encrypted.
The company remains responsible for the accuracy of its invoice data and tax numbers, for registering with the authority and for meeting its deadlines. We are not responsible for outages of government systems or changes to their requirements, and we undertake to update the link within a reasonable time after new requirements are published.
7. The data we collect
Data about the company and its users: name, e-mail, phone number, country, sector and chosen modules, and the company's settings and subscription history.
Financial and commercial data the company enters: chart of accounts and journal entries, invoices, quotations, sales and purchase orders, payments, cheques and bank accounts, inventory, items and prices, fixed assets and budgets, and the attachments it uploads.
Data about the company's clients and suppliers: name, contact details and address, tax number, balances and transactions, notes and support tickets. In sector modules: whatever the company enters about patients and their visits, students, guardians and marks, or tenants and leases, depending on the module it uses.
Employee data: name, employee number, department and unit, job title, contact details, salary and its components, loans, leave and the attendance record that the company enters or imports from another system it links itself, plus whatever profile data and documents the company chooses to add.
Audit and usage logs: who did what, when and from which address, and sign-in records, to protect accounts and review changes. We collect no more data than the service needs.
8. How we use the data
We use the data only to run the service: recording and calculating financial and commercial transactions, preparing the reports, financial statements and payroll the company asks for, sending documents, notifications and account and subscription messages, connecting to the systems the company turns on, technical support, and protecting accounts and preventing abuse.
We do not sell or rent the data or use it for advertising or marketing for others, we do not use the data of companies, their clients or employees to train artificial intelligence models, and we look at a company's data only as far as needed to give support or fix a problem.
9. Retention, deletion and export
The company's data is kept for the whole subscription and grace period. Sign-in and audit logs are kept for twelve months and then deleted, unless the law requires otherwise.
After the account is closed, or the grace period ends without renewal, we keep the data as long as needed for legal records and to settle any claims, then delete it permanently, backups included. The company can export its data (entries, invoices, clients, items and reports) at any time as Excel, CSV and PDF, and can ask us to delete its account and data earlier by writing to us.
Tax and commercial laws usually require companies to keep their books and accounting documents for several years; the company must therefore export the records it needs before asking for deletion or before our retention period ends.
10. Data security
The connection to the service is encrypted (HTTPS); passwords are not stored as text but hashed with a modern algorithm; each company's data is isolated from the others; keys for external connections are encrypted; administrative access to the servers is key-restricted and logged; and encrypted backups are taken daily.
The service offers two-factor authentication, permissions by department and unit, document approval rules and a change history, and we recommend using them. The company remains responsible for its users' devices, its network and its passwords.
11. Sharing and connections to other systems
We share data with no one except our hosting, e-mail and backup providers, to the extent needed to run the service and under confidentiality obligations, or when the law, a court order or an official request from a competent authority requires it; in that case we tell the company unless the law forbids it.
When the company links its account to another system (an online store, String Workforce, a government invoicing system or any API integration), data moves between the two systems at the company's request and under its responsibility, and the other system is governed by its own terms.
Data may be stored on servers outside the company's country. We choose providers that apply recognised security measures, and we remain responsible to the company for their processing on our behalf.
12. Rights of data subjects
Employees can see their data, payslips and requests in their account, along with the policies they accepted and when. A client of the company can see their statement and invoices through the private link the company gives them.
Personal data is processed under Jordan's Personal Data Protection Law No. 24 of 2023 and the equivalent law in the company's country. Requests to access, correct, delete or object go to the company as controller, and we help it answer them within the legal deadlines. A data subject may also complain to the data protection authority of their country.
Health data of clinic patients and data of students who are minors are sensitive; the company enters them only on a valid legal basis, limits access to the staff who need it through unit permissions, and does not share them outside its account.
13. Acceptable use
The platform may not be used for unlawful purposes, to issue fictitious invoices or entries, for tax evasion or money laundering, to try to reach another company's data, to probe, attack, disrupt or overload the service, to send spam through campaigns, or to resell the service without a written agreement.
The API is available within reasonable usage limits; we may throttle excessive use or disable abusive keys. We may suspend or terminate an account that breaches these rules after a warning, or at once if the breach is serious or threatens the service or other users.
14. Intellectual property
The platform, its software, design, marks and documentation belong to String Systems and are protected by intellectual property law; these terms grant only a limited, non-exclusive, non-transferable right of use for the subscription term. The data of the company, its clients and employees belongs to the company, which grants us a licence to use it only as far as needed to provide the service. We may use any improvement suggestion the company makes without charge.
15. Availability and support
We make reasonable efforts to keep the service available at least 99.5% of each month, excluding scheduled maintenance announced in advance by e-mail and failures beyond our control. Support is given by e-mail on working days, and we aim to reply within two working days.
16. Disclaimer
The service is provided “as is” and “as available”. We do not guarantee it will be free of interruptions or errors. Financial statements, reports, taxes, payroll, commissions and other calculations are aids that depend on the company's settings and data; the company must review them before relying on them or submitting them to anyone. The platform gives no accounting, tax or legal advice, and its ready texts and templates are models the company must review with its adviser.
17. Limitation of liability
To the extent the law allows, we are not liable for any indirect or consequential loss or loss of profit, data or reputation, and our total liability for any claim about the service does not exceed what the company paid us in the twelve months before the event. This does not limit liability that the law does not allow to be limited, such as for fraud or gross negligence.
18. Indemnity
The company will indemnify us against any claim or loss arising from its breach of these terms or of the law, from its data, or from its disputes with its employees, clients or anyone else over its use of the platform, including reasonable legal fees.
19. Term, termination and suspension
These terms apply from registration until the account is closed. The company may close its account at any time from the subscription page or by writing to us. We may suspend or terminate the account for non-payment after the grace period, for a breach of section 13, when the law requires it, or if we stop providing the service, with at least ninety days' notice.
On termination, the retention, export and deletion rules of section 9 apply, and the clauses that by their nature survive (intellectual property, limitation of liability, indemnity, governing law) remain in force.
20. Force majeure
Neither party is liable for delay or failure to perform (other than payment) caused by circumstances beyond its reasonable control, such as natural disasters, war, unrest, general internet or power outages, and acts of government.
21. Changes to these terms
We may update these terms from time to time. The updated version is published on this page with its date, and companies are told about material changes by e-mail at least thirty days before they take effect. Continuing to use the service after that means acceptance; a company that does not agree may close its account before then.
22. Governing law and disputes
These terms are governed by and interpreted under the laws of the Hashemite Kingdom of Jordan. The parties will try to settle any dispute amicably within thirty days of written notice; failing that, the courts of Amman have jurisdiction, without prejudice to any mandatory rights the law of the company's country gives it, its employees or its clients.
This document was written in Arabic and translated for convenience; in case of difference, the Arabic text prevails.
23. General
If a competent authority finds a clause invalid, the other clauses stay in force. The company may not assign its rights under these terms without our written consent; we may assign them to a successor that continues the service. Formal notices are sent by e-mail to the company's registered address and to our address below and are deemed received on the next working day. Not enforcing a clause is not a waiver of it.
24. Contact us
For any question about these terms or your data, to exercise your rights, or to report a security issue, write to us at: info@stringsystems.net