Terms of Use

This document is written to be read — plain English first, with the necessary legal protections included below. These Terms of Use ("Terms") govern your access to and use of MyHub, the goodnus internal operations platform at myhub.goodnus.com. By signing in to or using MyHub, you agree to these Terms. If you do not agree, do not access or use MyHub.

If you are a goodnus employee, contractor, customer, supplier, or other authorised user, these Terms apply to your use of MyHub in that capacity. They do not replace your employment contract, supply agreement, master services agreement, statement of work, confidentiality agreement, or other agreement with goodnus. If there is a conflict, the terms of the relevant signed agreement will take priority to the extent of that conflict.

1. What MyHub is

MyHub is a private, invite-only web application operated by goodnus Ltd("goodnus", "we", "us", or "our") for its own operations and for authorised customers, suppliers, contractors, and other business partners. It contains modules and functionality including warehouse management, order processing, HR, training, supplier onboarding, operational reporting, customer reporting, communications, documents, data, and other business tools. MyHub is not a public consumer product. Access is granted only to authorised users and may be restricted by organisation, role, module, customer, supplier, location, or other permissions.

2. Who can use it

MyHub may be used by:

• current goodnus employees;
• contractors working under an active agreement with goodnus;
• customers and suppliers to whom goodnus has granted access; and
• other people expressly invited or authorised by goodnus.

Your account is personal to you unless goodnus expressly provides a shared or service account. You must not:

• share your password, MFA code, authentication token, Google session, login link, or other credentials with anyone else;
• allow another person to use MyHub through your account;
• sign in as, or on behalf of, another person without express authorisation;
• attempt to access another user's account or another organisation's data;
• circumvent or attempt to circumvent permissions or access controls; or
• leave an authenticated session available for use by an unauthorised person.

The exception is where goodnus has expressly granted you an administrative "impersonate", "assume identity", support, or equivalent role and you use it only for its authorised purpose. You are responsible for taking reasonable steps to keep your account secure. If you believe your account or credentials have been compromised, you must notify us promptly at myhub-support@goodnus.com.

3. Acceptable use

You must use MyHub only for the legitimate business purposes for which access has been granted to you. You must not:

• upload or introduce malware, malicious code, exploit code, or other harmful material;
• upload content that infringes another person's intellectual property, privacy, confidentiality, or other rights;
• scrape, crawl, mirror, systematically extract, harvest, or bulk-export MyHub data without goodnus's prior written permission, except in relation to rights you may have over your own personal data under applicable law;
• use automated tools, bots, scripts, agents, or interfaces to access MyHub except where expressly provided or approved by goodnus;
• attempt to bypass MFA, authentication, permissions, rate limits, access controls, Turnstile, bot mitigation, security measures, or technical restrictions;
• probe, scan, test, or exploit MyHub or its infrastructure except as part of a security test expressly authorised by goodnus;
• reverse-engineer, decompile, disassemble, copy, reproduce, or attempt to derive the source code, underlying models, system prompts, proprietary logic, data structures, or non-public operation of MyHub, except to the limited extent such restriction is prohibited by law;
• use MyHub or its outputs to create, train, improve, benchmark, or assist a competing product, service, dataset, model, or platform without our prior written permission;
• use another person's access rights to obtain information you would not otherwise be authorised to see;
• use MyHub in a way that breaches applicable law, your employment or contractual obligations, or a duty of confidence owed to another person; or
• assist or permit another person to do any of the above.

If you discover a security vulnerability, please report it responsibly to myhub-support@goodnus.com. We welcome good-faith security reports. We will not pursue action solely for reasonable, good-faith security research that avoids harm, unnecessary access to data, disruption, extortion, or exploitation and is reported promptly to us.

4. Data you put into MyHub

You retain ownership of intellectual property and other rights that you owned before providing material to MyHub. By uploading or submitting data to MyHub — including photographs, PDFs, documents, comments, spreadsheets, messages, records, or other content — you grant goodnus a non-exclusive licence to host, copy, store, back up, display, transmit, and process that material to the extent reasonably necessary to:

• operate MyHub and the relevant module;
• provide services to you or your organisation;
• perform goodnus's business operations;
• maintain security, backups, audit records, and business continuity;
• comply with applicable law; and
• investigate suspected misuse, security incidents, or breaches of these Terms.

You must only upload or submit information that you are authorised to provide. For example, you must not upload another company's confidential price list, personal information you have no authority to disclose, or a third party's copyrighted material unless you have an appropriate right or lawful basis to do so. Where personal data is processed through MyHub, our Privacy Policy provides further information about that processing.

5. MyHub content, reports and outputs

Unless otherwise stated in a separate written agreement, MyHub and the software, interfaces, designs, reports, templates, databases, compilations, documentation, proprietary methodologies, and other material provided through it are owned by or licensed to goodnus and are protected by applicable intellectual property and other laws. Your access to MyHub gives you a limited, non-exclusive, non-transferable and revocable right to use MyHub and its outputs only for the authorised business purpose for which access was granted.

Customer and supplier use

Where you access MyHub as a customer, supplier, contractor, or other external user, reports, dashboards, analyses, documents, data, images, exports, and other outputs made available through MyHub are provided for your organisation's authorised business use only, unless goodnus expressly agrees otherwise in writing. You must not, without our prior written permission:

• publish or make MyHub content publicly available;
• sell, sublicense, commercially exploit, or redistribute MyHub content;
• provide access to MyHub content to an unauthorised third party;
• forward reports or exports to an unauthorised third party;
• upload MyHub content to a public website, social media platform, public AI service, shared repository, data room, or other service accessible by unauthorised people;
• copy or reproduce substantial parts of MyHub for redistribution;
• photograph, screen-record, or screenshot MyHub content for the purpose of unauthorised disclosure or redistribution; or
• use extracts, screenshots, photographs, exports, or reproductions to circumvent these restrictions.

This restriction does not prevent an authorised customer or supplier from sharing information internally with personnel who reasonably need it for the authorised business purpose and who are subject to appropriate confidentiality obligations. It also does not prevent disclosure where required by law, court order, or a competent regulatory authority. Where legally permitted, we ask that you notify us before making such a disclosure. Nothing in these Terms transfers ownership of goodnus intellectual property to you.

6. Confidentiality

MyHub contains confidential and commercially sensitive information. Depending on your permissions, this may include:

• customer and supplier pricing;
• margins and commercial terms;
• operational data;
• forecasts and performance information;
• warehouse and fulfilment information;
• internal processes and methodologies;
• reports and analyses;
• employee and contractor information;
• salary or HR information;
• personal contact details;
• security and technical information; and
• other information which is marked confidential or which a reasonable person would understand to be confidential.

You must keep confidential information secure and use it only for the purpose for which access was provided. You must not disclose confidential information to an unauthorised person during or after your employment, engagement, commercial relationship, or access to MyHub. In particular, copying, forwarding, photographing, screen-recording, screenshotting, exporting, publishing, or otherwise reproducing confidential MyHub information for unauthorised disclosure is prohibited.

For employees and contractors, unauthorised disclosure may also constitute a breach of your employment or contractor obligations and may result in disciplinary or contractual action. For customers, suppliers, and other external users, unauthorised disclosure may constitute a breach of these Terms and any applicable confidentiality, supply, services, or other agreement.

These confidentiality obligations do not apply to information that you can demonstrate:

• was lawfully in the public domain other than through a breach of confidence;
• was lawfully known to you without confidentiality restrictions before receiving it through MyHub;
• was lawfully received from a third party entitled to disclose it; or
• must be disclosed by law or a competent authority.

7. Watermarking, identifiers and protection against unauthorised distribution

To protect confidential information, intellectual property, platform security, and authorised users, content displayed or generated by MyHub may contain visible or non-visible watermarks, unique identifiers, forensic markers, metadata, or other technical identification features. These measures may be applied to reports, dashboards, documents, images, exports, pages, or other outputs. Where appropriate, an identifier may be associated in our systems with information such as:

• the relevant customer or organisation;
• the authorised user;
• the report, page, document, or output;
• the date and time it was generated or displayed;
• the relevant session or request; and
• other technical information reasonably necessary to investigate security incidents or unauthorised distribution.

Identifiers displayed or embedded in outputs should, where reasonably practicable, use pseudonymous or non-obvious references rather than unnecessarily displaying personal information. We may use these measures to:

• protect goodnus and third-party intellectual property;
• deter unauthorised copying or distribution;
• investigate suspected unauthorised disclosure;
• identify the authorised source from which a copy or screenshot appears to have originated;
• investigate security incidents;
• enforce contractual or confidentiality obligations; and
• establish, exercise, or defend legal claims.

You must not knowingly remove, obscure, alter, crop out, interfere with, defeat, reverse-engineer, or attempt to circumvent a watermark, identifier, metadata field, forensic marker, confidentiality marking, or other traceability or security feature.

What an identifier can and cannot establish

A watermark or identifier may provide evidence that material originated from a particular authorised account, organisation, session, report, or output. It does not necessarily establish that a particular individual personally copied, disclosed, or distributed that material. Any investigation or decision based on such information should take account of the surrounding evidence and circumstances. Further information about our processing of personal data, including security and audit information, is provided in our Privacy Policy.

8. Security, audit and misuse detection

We may maintain security and audit records relating to the operation and use of MyHub. Depending on the circumstances and applicable law, these records may include authentication events, account activity, access to modules or records, exports, downloads, administrative actions, security events, and other activity reasonably necessary for security, audit, compliance, troubleshooting, or investigation purposes.

MyHub may also record certain actions taken within the service, such as downloads, exports, printing functions, or copying actions where technically available. A normal web browser does not provide MyHub with a reliable method of detecting every screenshot taken using a device or operating system. The absence of a screenshot event or audit record therefore does not establish that a screenshot was not taken.

We do not represent that security, audit, watermarking, or traceability measures will detect or prevent every unauthorised act. Information collected for these purposes will be handled in accordance with applicable data protection law and our Privacy Policy.

9. Availability and changes

We aim to keep MyHub available when reasonably required for business operations, but we do not guarantee uninterrupted or error-free availability. Planned maintenance windows will be announced through appropriate internal or platform channels where reasonably practical. We may add, remove, modify, replace, or discontinue features as MyHub develops.

We may immediately restrict, suspend, or revoke access where reasonably necessary, including where:

• you breach these Terms;
• your employment, engagement, customer, supplier, or other relevant relationship ends;
• your organisation no longer requires access;
• we reasonably suspect your account has been compromised;
• we reasonably suspect unauthorised access, disclosure, copying, or misuse;
• continued access creates a security, legal, regulatory, or operational risk; or
• suspension is reasonably necessary to protect MyHub, goodnus, another user, a customer, supplier, or third party.

Where appropriate, access may be restored after the relevant issue has been investigated or resolved.

10. Third-party services

MyHub integrates with or embeds certain third-party services, including Google, Cloudflare, Resend, Trello, and other providers identified in our Privacy Policy or elsewhere in MyHub. Those services may be subject to their own terms and privacy information when you interact with them. For example, using Google authentication may also involve Google's applicable terms. We are not responsible for third-party services outside our reasonable control, but this does not affect any liability that cannot lawfully be excluded.

11. Accuracy and reliance

MyHub contains operational information and may include automatically generated calculations, summaries, reports, recommendations, forecasts, or other outputs. While we take reasonable steps to maintain the platform, MyHub should not be treated as a substitute for professional, legal, financial, regulatory, health and safety, or other specialist advice where such advice is required. Users remain responsible for applying appropriate human judgement and following any applicable goodnus procedures before making material decisions based on MyHub information. If information appears incorrect, incomplete, or inconsistent, please report it rather than knowingly relying on it where doing so could cause harm, loss, or an incorrect business outcome.

12. No warranty and limitation of liability

MyHub is provided as a business and operational platform. To the fullest extent permitted by applicable law, we do not guarantee that MyHub will always be available, uninterrupted, secure, error-free, or suitable for every particular purpose. Nothing in these Terms excludes or limits liability where it would be unlawful to do so, including liability for:

• death or personal injury caused by negligence;
• fraud or fraudulent misrepresentation; or
• any other liability that cannot lawfully be excluded or limited.

Subject to the above and to any different limitation agreed in a separate written agreement, goodnus's aggregate liability arising out of or in connection with your use of MyHub will, to the fullest extent permitted by law, be limited to the greater of:

• £100; or
• the fees specifically paid to goodnus for access to MyHub by or on behalf of the relevant user or organisation during the 12 months preceding the event giving rise to the claim.

Where no separate fee is charged for MyHub and access is ancillary to another commercial relationship, the £100 limit applies unless a separate written agreement provides otherwise. To the fullest extent permitted by law, goodnus will not be liable for indirect or consequential loss, or for loss of profit, revenue, anticipated savings, business opportunity, or goodwill arising from use of or inability to use MyHub. Nothing in this section affects any rights or remedies that cannot lawfully be excluded or restricted.

13. Termination and consequences of termination

You may stop using MyHub at any time and may ask us to deactivate your account. We may terminate, suspend, or restrict your access in accordance with these Terms. When your right to access MyHub ends:

• you must stop accessing MyHub;
• you must not attempt to regain access without authorisation;
• any copies of confidential MyHub material in your possession remain subject to the confidentiality and use restrictions in these Terms and any other applicable agreement; and
• provisions which by their nature are intended to continue after termination — including confidentiality, intellectual property, restrictions on redistribution, watermark and identifier protections, liability provisions, and governing law — will continue to apply.

Staff off-boarding will also follow applicable internal HR and security procedures.

14. Privacy and data protection

Our processing of personal data through MyHub is described in our Privacy Policy. This includes, where applicable, information relating to account administration, authentication, security, audit logging, platform operation, and measures used to protect confidential information and investigate suspected misuse. Where goodnus introduces materially different monitoring or security processing involving personal data, we will update the relevant privacy information as required.

15. Governing law and jurisdiction

These Terms and any non-contractual obligations arising out of or in connection with them are governed by the laws of England and Wales. Subject to any rights or jurisdiction that cannot lawfully be excluded, the courts of England and Wales will have exclusive jurisdiction over disputes arising out of or in connection with these Terms or MyHub.

16. Changes to these Terms

We may update these Terms as MyHub, our business, security requirements, or applicable law changes. If we make a change that materially reduces users' rights or materially expands their obligations, we will normally provide registered users with at least 14 days' notice before the change takes effect, unless an earlier change is reasonably required for security, legal, regulatory, or urgent operational reasons. Minor clarifications, corrections, formatting changes, and changes that do not materially affect users' rights or obligations may be published without advance notice. The "Effective" date at the top identifies the version currently in force. Continued use after an updated version takes effect constitutes acceptance of the updated Terms to the extent permitted by law.

17. General

If any provision of these Terms is found to be invalid, unlawful, or unenforceable, the remaining provisions will continue to apply to the fullest extent permitted by law. A delay or failure by goodnus to enforce a provision does not waive our right to enforce it later. You may not transfer or assign your rights to access MyHub to another person without our prior written permission. Nothing in these Terms creates a partnership, joint venture, agency, or employment relationship where one does not otherwise exist. Headings are included for convenience and do not affect interpretation.

18. Contact

Questions, concerns, security reports, or disputes relating to MyHub can be sent to myhub-support@goodnus.com. We would much rather resolve an issue directly and promptly where possible.