Terms of service

Version 2026-09-04

These Terms of Service (the "Terms") form a binding agreement between Mad Monkey Trading Pty Ltd (ABN 42 658 372 037), trading as Mavos ("we", "us", "our") and the individual or entity that signs up for an Mavos account ("Customer", "you"). By creating an account or using the service you agree to these Terms.

1. The service

Mavos is a software-as-a-service point-of-sale platform for hospitality operators. It includes admin, kiosk, QR-ordering, and kitchen-display features, hosted online and accessed through a web browser. The features available to you depend on the plan you have subscribed to.

2. Accounts and access

You must provide accurate information when creating an account and are responsible for keeping your sign-in credentials confidential. You are responsible for the activity of every user you grant access to your account.

We require multi-factor authentication for staff with administrative access. You must enrol an authenticator within 14 days of being granted such access.

3. Acceptable use

You must not use Mavos to:

• break any law or regulation, including consumer-protection or tax law;
• send unsolicited commercial messages in breach of the Spam Act;
• upload content that is unlawful, defamatory, or infringes third-party rights;
• attempt to gain unauthorised access to the service or other tenants' data;
• interfere with the operation of the service or impose an unreasonable load.

4. Fees and payment

Subscription fees are billed in advance on the cadence shown at sign-up (monthly or annual). Transaction fees, where applicable, are deducted from the relevant payout. You authorise us to charge the payment method on file for all amounts due. We may suspend access for accounts that are more than 14 days overdue.

Fees are exclusive of GST unless stated otherwise. GST will be added to invoices for Australian customers as required by law.

5. Your data and our rights

You own the data you upload to Mavos. You grant us a non-exclusive licence to host, process, and display that data solely to provide the service. We will not access your data except as needed to operate the service, respond to your support requests, or comply with the law.

We may use aggregated and de-identified information derived from the service to improve the platform and produce industry benchmarks. No identifying customer information is shared with other tenants.

Platform monitoring is a condition of use. Error monitoring and product analytics run on the Mavos admin console and the Mavos point-of-sale register — the screens your staff use — and cannot be switched off, because we rely on them to keep the service working and to decide what to build. They record which pages and features are opened, your account identifiers, and error diagnostics. They do not record your customers' names, contact details, order contents or payment details, and they do not run on your customer-facing screens (your website, QR ordering, or kiosks). See the Privacy Policy, Section 6, for the full description.

6. Our intellectual property

The Mavos software, brand, documentation, and marketing materials are owned by us. These Terms do not transfer any of our intellectual property to you. You may use the service only as permitted by these Terms.

7. Third-party services

Mavos integrates with third-party services (including Stripe, Supabase, Vercel, Resend, Gmail, Twilio, FreshKDS, Sentry, PostHog, and OpenRouter). Your use of those services is governed by their respective terms. We are not responsible for the actions or availability of third-party services.

8. Service levels and availability

We aim for high availability but do not guarantee that the service will be uninterrupted or error-free. We may schedule maintenance windows from time to time and will provide reasonable notice for planned downtime affecting live tenants.

9. Warranties and disclaimers

Subject to the consumer guarantees set out in the Australian Consumer Law, the service is provided "as is". To the maximum extent permitted by law we disclaim all other warranties, express or implied, including warranties of merchantability, fitness for a particular purpose, and non-infringement.

Nothing in these Terms excludes, restricts, or modifies any consumer guarantee, right, or remedy you may have under the Australian Consumer Law that cannot lawfully be excluded.

10. Liability

To the maximum extent permitted by law, our total aggregate liability to you arising out of or in connection with these Terms or the service is limited to the fees paid by you to us in the 12 months immediately preceding the event giving rise to the claim. We are not liable for any indirect, incidental, special, consequential, or punitive damages, including lost profits, lost revenue, or loss of data.

11. Indemnity

You agree to indemnify us against any claim, loss, or damage arising from your use of the service in breach of these Terms or any law, including claims by your customers or staff.

12. Termination

You may cancel your subscription at any time from the admin settings. Cancellation takes effect at the end of the current billing period. We may suspend or terminate your account immediately if you materially breach these Terms or fail to pay fees when due.

You can ask us to close your account at any time from Settings → Support; we export your data within 30 days and delete it within a further 30 days.

13. Changes to these Terms

We may amend these Terms from time to time. Material changes will be notified to account administrators at least 30 days before they take effect. Continued use of the service after the effective date constitutes acceptance of the amended Terms.

14. Governing law and jurisdiction

These Terms are governed by the laws of New South Wales, Australia. The parties submit to the exclusive jurisdiction of the courts of New South Wales and the courts that hear appeals from them.

15. Contact

Questions about these Terms can be sent to hello@mavos.com.au.

Schedule 1 — Data Processing

This schedule allocates responsibility for personal information handled through the service between you ("the Venue") and us ("Mavos"), and applies to every venue using the service.

1. Instructions

Mavos processes Venue Data only: as needed to provide the features the Venue has enabled; as configured by the Venue in its settings; as required by law; and for the platform purposes in clause 5. Mavos will not sell Venue Data or use it to market to the Venue's customers.

2. Security

Mavos maintains the controls described in the Security Overview (data residency in Australia, tenant isolation by row-level security, encryption of integration credentials at rest, multi-factor authentication for privileged accounts, audited operator access, daily backups with point-in-time recovery). Mavos will not reduce these controls during the term.

3. Sub-processors

Mavos uses the sub-processors listed on our Sub-processors page. Mavos will give the Venue at least 30 days' notice by email before adding a sub-processor that will process personal information, and the Venue may terminate for cause within that period if it reasonably objects. Providers the Venue enables with its own account are not Mavos sub-processors.

4. Operator access and support

Mavos staff access Venue Data only through the platform console, with a recorded reason, for a bounded time, and every access is logged and available to the Venue on request. Support tickets the Venue raises are read by Mavos support staff.

5. Platform purposes

Mavos may use Venue Data to: operate and secure the Service; produce aggregated, de-identified metrics across venues for product improvement and benchmarks; detect fraud and abuse; and meet legal obligations. Personal information is not used to train AI models by Mavos. Where the Venue enables an AI assistant, the data sent to the AI provider is governed by the Venue's own account with that provider, and Mavos makes the assistant's data access described in the documentation.

6. Data subject requests

Mavos provides tools for the Venue to export and delete a customer's information and to export the Venue's own data. Where a request reaches Mavos directly, Mavos will forward it to the Venue within 5 business days and assist the Venue to respond.

7. Data breaches

If Mavos becomes aware of a data breach affecting Venue Data, Mavos will notify the Venue within 24 hours of confirming the breach, with the categories and approximate number of records affected, the likely cause, the containment steps taken, and a named contact. Mavos will assist the Venue to meet its own notification obligations. Each party is responsible for its own notifications to regulators and individuals unless agreed otherwise for the incident.

8. Retention and deletion

During the term, retention follows the Venue's configured retention period (default seven years for transaction records, as required by tax law) and the retention schedule in the documentation. Within 30 days after termination the Venue may export its data; Mavos then deletes or de-identifies Venue Data across all modules within a further 30 days, except records Mavos must keep by law (financial ledgers, which are de-identified rather than deleted) and backups, which expire on their normal schedule. Mavos confirms deletion in writing on request.

9. Location

Venue Data is stored and processed in Australia. Sub-processors listed as outside Australia receive only the data categories stated in the register. The Venue authorises those transfers when it enables the related feature.

10. Audit and assistance

Mavos will provide, on reasonable request and no more than annually, a completed security questionnaire and the results of its most recent independent assessment, and will cooperate with an audit the Venue is legally required to conduct.