DOC · 911 / HUB EULA v.2026.11
●Hub · end-user license agreement

Hub · EULA.

Last updated: 5 November 2026.

This End User License Agreement ("EULA") governs the licence of Hub by ALMA (also sold as ALMA ONE), white-label software that an organisation installs and runs in its own Cloudflare account under its own brand, and the services ALMA provides with it: installation, updates, licence checks, notification relay and support. It is an agreement between ALMA and the organisation that subscribes (the "Customer", "you"). By subscribing to, installing or using Hub, the Customer accepts it.

1. Who we are

Hub is provided by Albuquerque de Matos, Unipessoal, Lda (ALMA), NIPC 516746596, Rua Canto da Maya 1, 8.º, 1070-372 Lisboa, Portugal. Contact: legal matters, legal@alma.dev; support, support@alma.dev.

2. Business customers only, and a white-label product

  • Hub is offered only to businesses, public bodies and other organisations, for their professional activity. It is not offered to consumers.
  • The Customer runs Hub, not ALMA. Hub is self-hosted, white-label software: the Customer installs it in its own Cloudflare account and offers its workspace to its Users under its own name. The Customer, not ALMA, provides the workspace to its Users. It is responsible for giving them its own terms of use and privacy information, for supporting them, and, as between the Customer and ALMA, for the obligations that the law places on the provider of an online service and on whoever hosts its content (for example under the Digital Services Act).
  • ALMA has no contract with Users and owes them nothing under this EULA. Their only direct relationship with ALMA is the licence of the Hub apps (section 21) and the data described in the Hub Privacy Policy.
  • The person who accepts this EULA confirms that they do so on behalf of the Customer and have the authority to bind it.
  • The people the Customer lets use its workspace (its "Users") use Hub under the Customer's responsibility. The Customer makes sure they follow this EULA and is responsible for what they do in Hub.
  • How Hub handles personal data is described in the Hub Privacy Policy.

3. Licence

For the term of the subscription, ALMA grants the Customer a limited, non-exclusive, non-transferable licence, which cannot be sublicensed, to:

  • install Hub with ALMA's installer in the Customer's own Cloudflare account, on the domain and account the licence is bound to;
  • use the apps included in its plan, and create Users up to its plan's seat limit;
  • use Hub with the Customer's branding (logo, colours, domain), which ALMA sets up for it.

The licence does not transfer any ownership of Hub. Exceeding the seat limit without upgrading the plan is a breach of this EULA.

4. Subscription, price and payment

  • The plan, seat limit, price and billing period (monthly or annual) are those in the Customer's order or in ALMA's written quote. Prices are in euros and exclude VAT.
  • Fees are paid in advance for each billing period. The subscription renews at the end of each period unless the Customer cancels it before then.
  • Fees paid are not refundable, except as provided in sections 15, 19 and 20.
  • ALMA may change its prices for future periods by telling the Customer at least 30 days before the renewal they apply to.
  • If a payment fails and is not made within 14 days after ALMA's reminder, ALMA may suspend the licence until it is paid.

5. The Customer's Cloudflare account

Hub runs in the Customer's own Cloudflare account, under the Customer's agreement with Cloudflare, to which ALMA is not a party. The Customer:

  • is responsible for that account: its billing, its users and API tokens, its security settings, and compliance with Cloudflare's terms;
  • pays Cloudflare directly for the resources Hub uses there (Workers, D1, R2, Pages, Durable Objects, Calls and others);
  • accepts that ALMA is not responsible for Cloudflare's availability, performance, failures or loss of data, for the costs Cloudflare charges, or for changes that the Customer or third parties make in the account.

6. Installation, updates and ALMA's access

  • What ALMA holds. To install and update Hub, ALMA's installer obtains from Cloudflare, with the Customer's authorisation, a credential limited to the permissions Hub needs, and records the configuration of the deployment (for example the identifiers of its databases and storage and the secrets Hub needs to run). ALMA keeps them encrypted.
  • How ALMA uses it. Only to install, update, repair and configure the Customer's Hub, and for support the Customer asks for. ALMA does not use it to read the content of the Customer's workspace, except at the Customer's request (for example to fix a problem it reports) or where the law requires it.
  • Updates. Where automatic updates are on, ALMA delivers updates automatically, including changes to code, database schemas and configuration. The Customer may ask ALMA to turn automatic updates off, or revoke ALMA's credential in Cloudflare at any time; ALMA can then no longer update Hub, and does not have to support versions that are not up to date.
  • Changes the Customer makes. Changes the Customer makes to Hub's code or configuration may be overwritten by updates, and ALMA is not responsible for them or for what they cause.

7. Licence checks

Each workspace regularly confirms its licence with ALMA's licence server, sending the licence key, the workspace's domain, the Cloudflare account identifier and the Hub version: nothing about Users. If a check fails, Hub keeps working for a grace period (currently 7 days) on the last valid result. After that, and until the licence is valid again, Users cannot use Hub, and only an administrator can reach a settings page to update the licence.

8. Data: who is responsible for what

  • The Customer's data is the Customer's. The workspace's data (accounts, content, files, meetings, time entries, mail campaigns, logs) is stored in the Customer's Cloudflare account, not in ALMA's systems.
  • The Customer is the controller of the personal data in its workspace and decides what is processed there and why. It is solely responsible for: having a legal basis for that processing and informing its Users and the other people whose data it processes; the content it and its Users store and send; how long data is kept and when it is deleted; answering requests from data subjects; the security of its Cloudflare account, credentials and Users' accounts; the integrations it turns on; and its own backups, for example with the backup and export features Cloudflare provides.
  • Data ALMA receives for itself. ALMA is the controller of the licence, billing and contact data of the Customer, of the error reports Hub sends to fix problems, and of the feedback Users choose to send, as described in the Hub Privacy Policy.
  • Data ALMA processes for the Customer. When ALMA relays notifications, when it converts files in its cloud conversion service because the Customer's administrator turned that on, and when it installs, updates, repairs or supports Hub with access to the Customer's account (section 6), it processes personal data on the Customer's behalf, as its processor, under section 9.

9. Data processing terms (GDPR Article 28)

  • Subject matter and duration: the services in this EULA, for the term of the subscription.
  • Nature and purpose: passing notifications on to Apple's Push Notification service for workspaces that do not send them to Apple themselves; converting the files Users send to ALMA's cloud conversion service, where the Customer's administrator has turned it on; installing, updating, repairing and configuring Hub; support the Customer asks for.
  • Personal data and data subjects: the title and text of notifications, device notification tokens and workspace identifiers; the content of files sent for cloud conversion; and any workspace data (account and content data) reached in the course of that work. The data subjects are the Customer's Users and the other people whose data is in the workspace.
  • Instructions: ALMA processes this data only on the Customer's documented instructions (this EULA, the Customer's settings and its requests), unless European Union or Member State law requires otherwise, in which case ALMA tells the Customer first unless that law forbids it. ALMA tells the Customer if, in its opinion, an instruction infringes data protection law.
  • Confidentiality and security: only people who need it have access, bound to confidentiality. ALMA applies the measures of GDPR Article 32, including encrypting the credentials and configuration it holds and limiting access to them.
  • Sub-processors: the Customer authorises ALMA to use Cloudflare, Inc. (hosting of ALMA's services, including the licence server and the relay) and Apple Inc. (Push Notification service). ALMA tells the Customer at least 30 days before adding or replacing one, and the Customer may object; if the objection cannot be resolved, the Customer may end the subscription and receive a refund of the fees paid for the period after it ends. ALMA binds each sub-processor to the same data protection obligations and remains responsible for it.
  • Transfers: those sub-processors are in the United States. Transfers rely on the European Commission's adequacy decision for the EU-US Data Privacy Framework, for providers that participate in it, or on the European Commission's standard contractual clauses.
  • Assistance: taking into account the nature of the processing and the information available to it, ALMA helps the Customer answer data subjects and meet its obligations under GDPR Articles 32 to 36.
  • Breaches: ALMA tells the Customer without undue delay after becoming aware of a personal data breach affecting this data, with the information it has.
  • End of processing: when the subscription ends, ALMA deletes the credential and configuration it holds for the Customer (section 19). Relayed notifications are not stored.
  • Audits: ALMA makes available the information needed to show that it meets these terms, and allows audits by the Customer or an auditor it appoints, bound to confidentiality, with reasonable notice, at the Customer's cost and, unless there has been a breach, no more than once a year.

10. Third-party services

Hub can connect to third-party services that the Customer chooses and that are governed by their own terms, for example Google Gmail (to send mail campaigns, with the Customer's own credentials) and Google Calendar. The Customer is responsible for obtaining and managing the accounts, keys and credentials they need and for complying with their terms. ALMA is not responsible for their availability, accuracy or conduct.

11. Processing in the browser

Some features (Media Tools) process files directly in the User's browser, with FFmpeg WebAssembly and ONNX Runtime. ALMA does not receive, process or store those files. Files sent to ALMA's cloud conversion service, which is off until the Customer's administrator turns it on, are different: section 9 applies to them.

12. Acceptable use

The Customer and its Users must not:

  • redistribute, resell, sublicense or share the licence;
  • reverse engineer or decompile Hub, or try to extract its source code, except where the law allows it;
  • remove proprietary notices or marks;
  • get around licence checks, seat limits or feature restrictions;
  • use Hub to store, send or process unlawful content, to infringe other people's rights or for unlawful activities;
  • send mail campaigns that do not comply with the law on unsolicited communications (in Portugal, Lei n.º 41/2004), for which the Customer is solely responsible.

13. Security

ALMA develops Hub following recognised secure development practices, and fixes security vulnerabilities it becomes aware of within a reasonable time, delivering the fixes as updates. Hub's security in use also depends on what the Customer controls (sections 5, 6 and 8), and no software is free of vulnerabilities: ALMA does not guarantee that Hub has none. The Customer tells ALMA promptly of any vulnerability or security incident it finds, at legal@alma.dev.

14. Intellectual property

Hub, its code, design, documentation and brand belong to ALMA or its licensors and are protected by Portuguese copyright law and international treaties. The subscription grants a licence (section 3), not ownership. The Customer's branding and content remain the Customer's.

15. What ALMA warrants

ALMA will provide Hub substantially as described in its documentation and fix errors that prevent this within a reasonable time. If it cannot, the Customer may end the subscription and receive a refund of the fees paid for the period after it ends. Otherwise, to the extent the law allows, Hub is provided as it is and as available, without any other warranty, express or implied. In particular, ALMA does not warrant that Hub will meet the Customer's particular requirements, be uninterrupted or free of errors, work with every environment or third-party service, or preserve data the Customer has not backed up.

16. Liability

  • ALMA is not liable for: loss of profit, revenue, business, opportunity or goodwill; indirect or consequential damage; loss or corruption of data, except to the extent caused by ALMA's breach and not avoidable with the Customer's backups; costs charged by Cloudflare or other third parties; damage caused by the Customer's or its Users' breach of this EULA or of the law, by their content, by changes they made to Hub, by their Cloudflare account or integrations (sections 5 and 10), or by running a version that is not up to date after turning updates off; or events outside ALMA's reasonable control, such as failures of Cloudflare, public networks or power, attacks that could not reasonably have been prevented, natural events or acts of authorities.
  • ALMA's total liability for all claims under this EULA is limited to the fees the Customer paid ALMA for Hub in the 12 months before the event that caused the damage.
  • Nothing in this EULA excludes or limits ALMA's liability for harm to life, health or physical integrity, for damage caused intentionally or with gross negligence (by ALMA or by anyone acting on its behalf), or any other liability that the law does not allow to be excluded or limited.

17. Claims against ALMA caused by the Customer

The Customer will compensate ALMA for the losses and reasonable costs (including legal fees) it incurs because of a claim by a third party (including Users, people whose data is in the workspace, Cloudflare, Google or an authority) that arises from the Customer's or its Users' content or data, their use of Hub in breach of this EULA or of the law, or the Customer's Cloudflare account, configuration or integrations. ALMA will tell the Customer about the claim promptly, let it conduct the defence where the law allows, and cooperate reasonably.

18. Support

ALMA provides support with reasonable effort, at support@alma.dev. Unless agreed in writing, there is no service level agreement. ALMA does not have to support problems caused by the Customer's Cloudflare account, third-party outages, the Customer's changes, or versions that are not up to date.

19. Term, suspension and termination

  • By the Customer. The Customer may cancel at any time, effective at the end of the current billing period, without a refund for the rest of it.
  • By ALMA. ALMA may suspend or end the licence: at once, for a serious breach (for example getting around licence checks or unlawful use) or a risk to the security of Hub or of other people; for any other breach not remedied within 14 days after ALMA's notice; for non-payment (section 4); or where the law requires it.
  • If ALMA stops offering Hub, it tells the Customer at least 90 days in advance and refunds the fees paid for any period after Hub stops.
  • When the licence ends, the Customer must stop using Hub, which stops working once the licence checks fail (section 7). The workspace's data remains in the Customer's Cloudflare account, where the Customer can export it with Cloudflare's tools. Within 30 days, ALMA deletes the credential and configuration it holds for the Customer, and the Customer may revoke ALMA's credential in Cloudflare itself at any time.

20. Changes to this EULA

ALMA may change this EULA to reflect changes in the law, in Hub or in how ALMA provides it. ALMA tells the Customer by email at least 30 days before a change takes effect, unless the law or the security of Hub requires a shorter period. If the Customer does not agree, it may end the subscription before the change takes effect and receive a refund of the fees paid for the period after it ends. Earlier versions are available on request.

21. The Hub apps from the App Store

If Users download the Hub apps for iPhone, iPad or Mac from the App Store, Apple's terms also apply to the download. This EULA is between ALMA and the Customer, not Apple: Apple is not responsible for Hub or its content, has no obligation to provide maintenance or support for it, and is not responsible for claims relating to it. Hub Classic, the Mac app for macOS 12 and 13, is not from the App Store: ALMA distributes it directly, and it is part of Hub under this EULA.

22. Governing law and courts

This EULA is governed by Portuguese law. The courts of Lisbon have exclusive jurisdiction over any dispute arising from it.

23. General

  • Entire agreement. This EULA, the Customer's order or ALMA's accepted quote and the Hub Privacy Policy are the whole agreement on Hub. A written agreement signed by both parties prevails over this EULA; this EULA prevails over ALMA's general Terms.
  • Invalid provisions. If a provision is invalid, the others remain in force, and the law takes the place of the invalid provision.
  • No waiver. Not enforcing a right at once does not waive it.
  • Notices. ALMA sends notices to the email address in the Customer's licence; the Customer keeps it up to date.
  • This version applies to subscriptions started from 3 November 2026. For subscriptions started before, it applies 30 days after ALMA sends it to the Customer by email; until then, the earlier version applies.

24. Contact

Albuquerque de Matos, Unipessoal, Lda
Rua Canto da Maya 1, 8.º, 1070-372 Lisboa, Portugal
Legal: legal@alma.dev
Support: support@alma.dev