NativeCMS Terms of Service

Version 1.0 Effective 31 July 2026

These Terms are between Sam Lewis, a sole trader trading as NativeCMS, whose address for service is Mortimer Court, Abbey Road, London, NW8 9AD ("NativeCMS", "we" or "us"), and the person or organisation accepting them ("Customer" or "you").

1. Scope and authority

NativeCMS provides managed Drupal environments, Git-based release workflows, backups, browser-based Native preview, supported integrations and related services. The person accepting these Terms confirms that they are at least 18 and authorised to bind the Customer.

The invited beta is a free service intended only for businesses and people acting for a business. It is not offered to consumers. Contact legal@nativecms.co.uk before registering if you are unsure whether you are acting for a business.

2. Accounts and workspaces

You must provide accurate details, protect passwords, recovery keys, Git credentials and authentication devices, and promptly remove people who no longer need access. Workspace Owners control membership and delegated permissions. You are responsible for actions taken through authorised accounts unless caused by our breach.

You must notify security@nativecms.co.uk promptly if credentials may have been compromised or somebody has obtained access they should not have.

3. Free invited beta

The invited beta has no subscription charge, refund, service credit or contractual availability SLA. Either party may end beta access at any time. Development and Testing environments may sleep or be archived under the policy displayed in the dashboard. Features, quotas and availability may change during the beta, but we will give reasonable notice of a material change where practicable.

No payment method is required for the beta. Before introducing a paid service, we will publish separate prices, billing periods, cancellation, failed-payment and refund terms and ask customers to accept the applicable commercial terms.

4. Customer content and code

You retain ownership of your content, custom code, themes, configuration, domains and trade marks. You grant NativeCMS a limited licence to host, copy, process, back up, scan, transform and transmit them only to provide, secure and support the service.

You confirm that you have the rights and lawful bases needed for the content and processing you configure. You must not introduce malicious code, infringe another person's rights, unlawfully monitor people, or process prohibited or high-risk data without our prior written agreement and suitable controls.

5. NativeCMS platform and open source

NativeCMS retains its service, control plane, build orchestration, documentation, branding and proprietary hosted Runtime. Public API contracts and browser-delivered HTML, CSS and JavaScript are inspectable. Drupal and any distributed Drupal modules or themes are governed by their applicable open-source licences. Where NativeCMS distributes Drupal-derived modules or themes, that distributed copy will carry the applicable GPL-2.0-or-later licence and notices or source as required.

Nothing in these Terms removes a right granted by an open-source licence. Restrictions concerning access apply to the hosted service, credentials, proprietary Runtime and other customers' systems or data.

6. Acceptable use

You must not:

• access another tenant, bypass authentication or limits, or probe the service except through our documented security-reporting process;
• host malware, unlawful material, phishing, spam or abusive surveillance;
• use contacts, camera, microphone, location, biometrics or notifications without appropriate notice, consent and data minimisation;
• upload secrets or regulated data that the selected service is not approved to process;
• disrupt the service or impose unreasonable load outside documented limits;
• resell the service without our written agreement; or
• misrepresent app-store ownership, device permissions or user consent.

We may contain an immediate security, legal or availability threat and then give reasons and a route to challenge the decision unless doing so is prohibited or would increase the risk.

7. Releases, backups and customer responsibility

Development, Testing and Production are separate environments. You choose and approve code and configuration promotions and remain responsible for testing custom code and content. A backup is not complete until its status is shown as verified. Restores and promotions may replace environment data and require the confirmations displayed in the dashboard. Keep independent exports appropriate to your own risk.

8. Domains and app stores

You own and control your domains and any production Apple or Google developer accounts. You authorise the scoped DNS, certificate and store access required for services you request. Apple and Google control store review, policy and availability; NativeCMS cannot guarantee their decisions.

9. Data protection and security

The Data Processing Addendum applies when NativeCMS processes personal data for you. Each party complies with applicable data-protection law. You provide the notices and instructions required for users of your sites and apps. We maintain proportionate technical and organisational measures and may update them without materially reducing overall protection.

10. Availability, support and changes

The Support Policy describes support channels and beta coverage. The invited beta has no service-level guarantee. We may perform emergency maintenance without advance notice and will give reasonable notice of planned material interruption where practicable. Current service information is published at status.nativecms.co.uk.

11. Suspension, cancellation and termination

You may cancel at any time. Either party may terminate for a material breach not remedied within 30 days after written notice, or immediately for insolvency, unlawful use or an urgent threat that cannot reasonably be remedied.

Following cancellation or termination, the site enters the existing 30-day deletion-recovery period shown in the dashboard. During that period you may use available exports. We then delete or anonymise Customer data under the Privacy Policy and DPA, except for protected backup cycles and records retained by law. Domain and developer-account access is revoked promptly.

12. Warranties and liability

Each party will perform its obligations with reasonable care and skill. The beta is evolving and, subject to rights that cannot lawfully be excluded, is provided without a guarantee of uninterrupted or error-free operation.

Nothing excludes or limits liability where applicable law does not permit it, including liability for death or personal injury caused by negligence, fraud or fraudulent misrepresentation. For this free invited beta, all other questions about liability and available remedies are governed by applicable law; these Terms do not invent a contractual liability cap.

13. Confidentiality

Each party protects the other's non-public business, security and technical information using reasonable care and uses it only for this agreement. This does not cover information already lawfully known, public without breach, independently developed or lawfully received. A required disclosure must be limited and notified where legally permitted.

14. General

Neither party may assign this agreement without consent, except as part of a genuine business transfer that does not reduce the Customer's rights. We may use subprocessors under the DPA. Neither party is liable for delay caused by events outside reasonable control, but must mitigate and resume performance. Notices go to the verified account email and legal@nativecms.co.uk. If a provision is unenforceable, the rest remains effective. A waiver must be explicit.

These Terms and any non-contractual dispute are governed by the law of England and Wales. The courts of England and Wales have exclusive jurisdiction for business Customers.