Terms of Service

By signing up for or using RevRadar (the "Service"), operated by ASMBLR Pty Ltd ABN 74 389 390 879 ("we", "us"), you agree to these Terms of Service. If you don't agree, don't use the Service.

These Terms apply to the organisation that owns the account and to every user who signs in under it. The person who creates the organisation confirms they have authority to bind it.

1. The Service

RevRadar compares two PDF revisions of the same drawing and produces a triaged change report. The output is AI-assisted and is intended as a review aid only. It is not engineering advice and is not a substitute for a qualified person reviewing the drawings.

We may add, change, or remove features at any time. We will give you reasonable notice of changes that materially reduce functionality on your current plan.

2. Accounts

• You are responsible for keeping your sign-in credentials safe.
• One person, one account. Don't share logins.
• You must be at least 16 years old and act on behalf of a business.
• Your organisation owner is responsible for actions taken by their team members on the Service.

3. Acceptable use

You agree not to:

• Upload content you don't have the right to process.
• Reverse-engineer, scrape, or attempt to circumvent caps and quotas.
• Use the Service to build a competing product.
• Use the Service to process unlawful, harmful, or infringing content.
• Resell access without our written agreement.

We may suspend or terminate accounts that breach these rules.

4. Your content

You retain all ownership of the drawings you upload and the reports generated from them ("Customer Content"). You grant us a limited, non-exclusive licence to host, process, and display your Customer Content solely to provide the Service to you.

We do not use Customer Content to train machine-learning models — ours or anyone else's. See the Privacy Policy for sub-processor detail.

5. AI-assisted output disclaimer

The Service uses large language models to triage detected changes into severity buckets. AI output:

• Can be wrong, incomplete, or miss material changes.
• Is not a certified review and does not absolve any qualified person of their duty to independently verify drawings.
• Should be treated as a starting point for human review.

You agree to use the Service in conjunction with appropriate professional judgement and not to rely on it as the sole control on drawing accuracy. We exclude all liability for decisions made on the basis of AI-generated output to the maximum extent permitted by law.

6. Compliance and certification status

We believe you should know exactly where we stand on independent certification, insurance, and assurance — before you commit data and workflow to the Service. This section is the disclosure. By accepting these Terms you acknowledge you have read it and accept the Service on this basis.

6.1 What we are NOT certified or assessed under

As at the effective date of these Terms, we do not hold and do not claim any of the following:

• SOC 2 (Type 1 or Type 2)
• ISO 27001 (or 27017 / 27018)
• IRAP (Information Security Registered Assessors Program — Australian Cyber Security Centre)
• HIPAA compliance program
• PCI-DSS as a merchant of record (Stripe holds PCI-DSS Level 1 for card processing — we never see, store, or transmit your card data)
• Any government-issued security clearance for the Service or its operators

We will pursue the certifications above when customer demand makes them commercially sensible. We will never falsely claim a certification we don't hold.

6.2 What we DO inherit from sub-processors

The infrastructure layer the Service runs on inherits independent audit coverage from our cloud sub-processors:

• Supabase (database, storage, authentication, edge functions) — Sydney (AWS ap-southeast-2). AWS holds SOC 2, ISO 27001, ISO 27017, ISO 27018, and IRAP-PROTECTED. Supabase itself is SOC 2 Type 2.
• Fly.io (worker compute) — Sydney region. SOC 2 Type 2.
• Stripe (subscription billing) — PCI-DSS Level 1, SOC 2 Type 2.

This gives you third-party audited assurance over the physical, network, and platform-layer controls we sit on top of. The application-layer controls (access control inside the application, code review, vulnerability management, incident response) are operated by us and have not yet been independently audited.

6.3 Insurance

• Professional indemnity insurance — being arranged. The current status is published in our Trust & Security Pack (available on request from contact@revradar.com.au), and is updated as cover is bound.
• Cyber insurance — not currently held.

6.4 Penetration testing

Independent penetration testing of the Service has not been performed as at the effective date of these Terms.

We perform internal threat modelling, security review, and dependency patching, and we will commission an independent test before contracting with any customer that requires evidence of one.

6.5 Data residency

Your account, drawings, and reports are stored in Sydney, Australia (AWS ap-southeast-2 via Supabase, and Sydney region via Fly.io). Cropped image regions of your drawings are sent to AI providers hosted in the United States (currently Google via OpenRouter) for the comparison step described in §1 and §5. Operational metadata (error reports, uptime pings, transactional email) is processed by sub-processors hosted outside Australia. The full sub-processor list is in the Privacy Policy.

6.6 Your acknowledgement

By accepting these Terms you acknowledge that:

• You have read this section 6.
• You understand the current certification, insurance, and assurance status of the Service.
• You accept that the Service is not yet certified to SOC 2, ISO 27001, IRAP, or any equivalent framework.
• You accept that some processing occurs in jurisdictions outside Australia as described in §6.5.
• You have made your own assessment of whether this status is acceptable for the data and workflow you intend to use the Service with.

If your project, employer, or regulator requires a certification we don't hold, please contact us before contracting — we'll be honest about whether we can meet the requirement and on what timeline.

7. Subscriptions and billing

• Plans are listed on the Billing page and are quoted in AUD, excluding GST.
• We bill in advance via Stripe on a monthly cycle.
• Your subscription auto-renews until cancelled.
• Plan limits include a monthly drawing-cost cap. Submissions are paused if you exceed your cap; upgrade to resume.
• You are responsible for any fees, taxes, or duties imposed on the subscription, including GST where applicable.

8. Trial

New organisations start on a 14-day free trial with limited capacity ($5 spend cap, 5 drawings). At the end of the trial you must choose a paid plan to continue using the Service. Trial accounts that don't upgrade are read-only after expiry.

9. Cancellation and refunds

• You can cancel any time via Manage billing on the Billing page.
• Cancellation takes effect at the end of the current period — you keep access until then.
• We do not provide pro-rata refunds for partial periods, except where required by Australian Consumer Law.
• If you believe you've been incorrectly billed, contact us within 60 days and we will investigate and (where appropriate) refund.

10. Termination

We may suspend or terminate your account for breach of these Terms, non-payment, or sustained inactivity. We will give you reasonable notice and the opportunity to export your data, except where the breach is severe (e.g. fraud, abuse, illegal use).

On termination we delete your account and Customer Content per the retention schedule in the Privacy Policy.

11. Confidentiality

Each party will protect the other's confidential information with at least the care it uses for its own. This includes your uploaded drawings (we treat them as confidential) and the non-public details of the Service (you treat those as confidential).

12. Service levels

We aim for high availability but do not provide a contractual uptime SLA on Trial, Starter, Growth, or Pro plans. Enterprise customers may negotiate written SLAs separately.

We perform planned maintenance during low-traffic windows where practical.

13. Warranties and disclaimers

The Service is provided "as is" and "as available". To the maximum extent permitted by law, we exclude all implied warranties, including merchantability, fitness for purpose, and non-infringement.

Nothing in these Terms excludes any consumer guarantee that cannot be excluded under the Australian Consumer Law. Where a guarantee applies and we breach it, our liability is limited (at our option) to re-supplying the Service or refunding the price paid for the relevant period — to the extent the law allows that limitation.

14. Limitation of liability

To the maximum extent permitted by law:

• Our total liability arising out of or in connection with the Service is capped at the fees you paid us in the 12 months preceding the event giving rise to the claim.
• We are not liable for indirect, consequential, special, or incidental loss, including loss of profit, loss of goodwill, loss of data, or any loss arising from reliance on AI-assisted output.

15. Indemnity

You will indemnify us against losses arising from (a) your breach of these Terms, (b) Customer Content you upload, and (c) your unlawful or negligent use of the Service.

16. Force majeure

Neither party is liable for delay or failure caused by events outside its reasonable control, including outages of upstream providers (e.g. Supabase, Stripe, AI vendors), natural disasters, or government action.

17. Privacy

How we handle personal information is described in our Privacy Policy, which forms part of these Terms.

18. Changes to these Terms

We may update these Terms from time to time. Material changes are versioned and re-prompted for your acceptance on next sign-in. By continuing to use the Service after a change takes effect, you accept the updated Terms.

19. Governing law and venue

These Terms are governed by the laws of Victoria, Australia. The parties submit to the exclusive jurisdiction of the courts of Victoria.

20. General

• If a clause is unenforceable, the remaining clauses continue.
• A waiver must be in writing.
• You may not assign your rights without our consent. We may assign on notice in connection with a sale or restructure.
• These Terms (with the Privacy Policy and any order form) are the whole agreement between you and us about the Service.

21. Contact

ASMBLR Pty Ltd (ABN 74 389 390 879) Email: contact@revradar.com.au