Terms of Service

Effective Date: August 7, 2026 · Last Updated: August 7, 2026

1. Agreement to These Terms

These Terms of Service ("Terms") are a binding agreement between InflowSheet LLC, a Wyoming limited liability company ("InflowSheet," "we," "us," or "our"), and the organization that subscribes to or uses our services ("Customer," "you," or "your").

By creating an account, granting administrative consent for our application in your Microsoft 365 tenant, accessing the Service, or signing an order form that references these Terms, you agree to be bound by them. If you are accepting on behalf of an organization, you represent that you have authority to bind that organization.

If you do not agree to these Terms, do not use the Service.

Priority. If you and InflowSheet have signed a separate written agreement or order form covering the Service, that agreement controls where it conflicts with these Terms.

2. Definitions

Service — the InflowSheet software-as-a-service platform, including its web application, integrations, and related features.
Customer Data — all documents, files, messages, records, and other content that you or your Authorized Users upload to, generate in, or transmit through the Service, including material you receive from your own clients.
Authorized User — an individual you permit to access the Service, including your personnel and the client contacts you invite into an engagement.
Your Client — an individual or entity that engages your firm for professional services and whose information may be handled through the Service.
Order Form — a written or electronic ordering document between you and InflowSheet specifying the subscription, fees, and term.

3. The Service

InflowSheet is an engagement and workflow platform built for CPA firms. It supports document request and collection workflows, document management, review and approval workflows, collaboration between firm staff and their clients, electronic signature workflows, and AI-assisted document processing, in each case for tax, audit, and advisory engagements.

We may add, modify, or discontinue features. If we discontinue a material feature or make a change that materially reduces functionality, we will give you 30 days' notice.

3.1 We Are Not a Professional Services Firm

InflowSheet is a software provider. We are not a certified public accounting firm, a law firm, or a tax advisor. We do not perform audits, prepare or review tax returns, issue attestations, or provide accounting, tax, legal, or financial advice. Nothing produced by the Service constitutes professional advice or a professional opinion.

You remain solely responsible for:

the professional services you provide to Your Clients;
your compliance with applicable professional standards, including those of the AICPA, state boards of accountancy, the PCAOB, and the IRS (including IRC § 7216 and Circular 230, where applicable);
the accuracy, completeness, and adequacy of your work product; and
all professional judgment exercised in your engagements.

The Service is a tool that supports your work. It does not replace your professional judgment, your engagement procedures, or your quality control obligations.

4. Accounts, Access, and Microsoft 365 Integration

4.1 Accounts

You must provide accurate account information and keep it current. You are responsible for all activity under your account and for maintaining the confidentiality of credentials. Notify us promptly at info@inflowsheet.com if you suspect unauthorized access.

4.2 Administrative Consent and Microsoft Graph Permissions

Connecting the Service to your Microsoft 365 tenant requires a tenant administrator to grant consent to our application's Microsoft Graph permissions. By granting that consent, you authorize us to access your tenant within the scope of the permissions granted, for the purpose of providing the Service.

The complete list of permissions we request is published in our Privacy Policy. You control this authorization: you may review the granted permissions and revoke consent at any time from the Microsoft Entra admin center. Revoking consent will disable integration features and may render the Service unusable.

You represent that you have authority to grant this consent and that doing so does not violate your own policies or your obligations to Your Clients.

4.3 Authorized Users

You are responsible for your Authorized Users' compliance with these Terms, for the access rights you assign, and for promptly removing access for individuals who no longer require it. You are responsible for obtaining any consents required to invite Your Clients into the Service.

5. Customer Data

5.1 Ownership

You own your Customer Data. We claim no ownership of it. As between you and InflowSheet, all rights in Customer Data remain yours.

5.2 License to Operate the Service

You grant us a limited, non-exclusive, worldwide license to host, store, copy, transmit, display, process, and otherwise use Customer Data solely to: provide, maintain, and support the Service to you; perform the AI processing described in Section 7 at your direction; prevent or address technical problems, security incidents, or violations of these Terms; and comply with law.

This license exists only to run the Service for you and ends when your Customer Data is deleted. We do not use Customer Data to train, fine-tune, or improve any machine learning or AI model, and we do not sell, rent, or share Customer Data for advertising.

5.3 Your Responsibilities

You represent and warrant that you have all rights, consents, and authority necessary to place Customer Data into the Service and to have us process it as described in these Terms and our Privacy Policy.

5.4 Where Customer Data Lives

Customer Data is processed and stored in InflowSheet's Microsoft Azure environment in the United States (East US region). Where the Service interacts with your own Microsoft 365 tenant, content in your tenant remains in your tenant under your control. Our Privacy Policy describes this in full and forms part of these Terms.

6. Data Protection Roles

For personal information contained in Customer Data:

You are the controller. You determine the purposes and means of processing your clients' information, and you are responsible for the lawfulness of that processing and for your relationships with Your Clients.
InflowSheet is the processor. We process Customer Data only on your documented instructions, which include these Terms, our Privacy Policy, your configuration of the Service, and your use of its features.

We will not process Customer Data for our own independent purposes. For account, billing, and usage information about you and your Authorized Users, InflowSheet acts as a controller in its own right, as described in the Privacy Policy.

A Data Processing Addendum (DPA) is available on request. Contact us at info@inflowsheet.com.

7. AI-Assisted Features

The Service includes AI-assisted features such as document data extraction, summarization, variance and risk indicators, and evidence mapping, provided using Azure AI Document Intelligence and Azure OpenAI Service, operated by Microsoft within the Azure environment.

Output may be wrong. AI-generated extractions, summaries, and indicators are probabilistic. They can be inaccurate, incomplete, or misleading, and may appear confident while being wrong.
Human review is required. You must independently verify all AI-generated output before relying on it in any engagement, workpaper, filing, or deliverable. Do not treat AI output as reviewed work product.
No professional advice. AI output is not accounting, audit, tax, legal, or financial advice, and does not constitute audit evidence on its own.
No model training. Customer Data submitted to these features is not used to train or improve the underlying AI models.
Your responsibility. You determine whether AI-assisted processing of particular Customer Data is appropriate under your professional obligations and your agreements with Your Clients.

We do not warrant the accuracy of AI-generated output.

8. Third-Party Services

The Service integrates with third-party services, including Microsoft (Azure and Microsoft 365) and DocuSign. Your use of those services may also be governed by their own terms, which we do not control.

Electronic signatures. Signature workflows are executed through DocuSign. We do not warrant that any particular signature, document, or transaction satisfies the requirements of the ESIGN Act, UETA, or any other law applicable to your engagement. Determining the legal sufficiency and enforceability of any signature or record is your responsibility. You should confirm that the signature workflow meets your requirements before relying on it for any binding transaction.

We are not liable for the acts, omissions, availability, or performance of third-party services.

9. Acceptable Use

You may not, and may not permit any Authorized User to:

use the Service in violation of any law, regulation, or professional standard;
upload or transmit malware, or otherwise interfere with the integrity or performance of the Service;
attempt to gain unauthorized access to the Service, other customers' data, or related systems;
probe, scan, or test the vulnerability of the Service without our prior written authorization;
reverse engineer, decompile, or disassemble the Service, except to the extent this restriction is unenforceable under applicable law;
resell, sublicense, or provide the Service to third parties as a service bureau, except for the intended use of serving Your Clients within your engagements;
use the Service to build a competing product, or to benchmark it for publication without our prior written consent;
remove or obscure proprietary notices;
upload Customer Data that you lack the right to upload; or
upload, store, or process protected health information (PHI) subject to HIPAA, or cardholder data subject to PCI DSS. The Service is not designed or configured for these data categories, we do not enter into Business Associate Agreements, and such use is prohibited.

We may investigate suspected violations and take appropriate action.

10. Suspension

We may suspend your access or that of any Authorized User, in whole or in part, if: you materially breach these Terms, including Section 9; your use poses a security risk to the Service or others; we are required to do so by law; or your account is 30 days past due.

We will give notice before suspending unless circumstances make advance notice impracticable or would increase risk. We will restore access promptly once the cause is resolved.

11. Fees and Payment

Fees, billing frequency, payment terms, subscription term, renewal, and any trial or pilot arrangement are as set forth in the applicable Order Form between you and InflowSheet. Where an Order Form does not address a matter, the parties will agree it in writing.

Unless the Order Form states otherwise, fees are stated exclusive of taxes, and you are responsible for all sales, use, and similar taxes other than taxes on our income.

12. Term, Termination, and Data After Termination

12.1 Term

These Terms apply from the date you first access the Service until terminated as described below or as set out in your Order Form.

12.2 Termination

By you: as set forth in the applicable Order Form.
By us for cause: if you materially breach these Terms and fail to cure within 30 days after written notice.
By either party: immediately, if the other becomes insolvent or subject to bankruptcy proceedings.

12.3 Effect of Termination

On termination, your right to access the Service ends.

Data export. For 30 days after termination, you may export your Customer Data through the Service's available export functionality, provided your account is in good standing.

Deletion. We will delete Customer Data from our production systems within 60 days after termination. Residual copies may persist in encrypted backups until those backups expire in the ordinary course of our backup rotation, after which they are deleted.

We may retain data where required by law, and may retain aggregated or de-identified data that does not identify you, Your Clients, or any individual.

12.4 Survival

Sections 5.1, 9, 13, 14, 15, 16, 17, 20, and 21 survive termination, along with any provision that by its nature should survive.

13. Confidentiality

Each party may receive confidential information of the other. The receiving party will use it only to perform under these Terms, protect it with at least reasonable care, and not disclose it except to personnel and contractors who need it and are bound by comparable obligations.

Customer Data is your confidential information. These obligations do not apply to information that is publicly available through no fault of the receiving party, was rightfully known before disclosure, or is independently developed. If compelled by law to disclose, the receiving party will give notice where legally permitted.

14. Security

We maintain administrative, technical, and physical safeguards designed to protect Customer Data, as described in our Privacy Policy. These include encryption of Customer Data in transit and at rest, logical separation of customer environments, role-based access controls, and restricted access to production systems.

No certifications are claimed. InflowSheet does not currently hold a SOC 2 report, ISO 27001 certification, or any other third-party security attestation, and nothing in these Terms should be read as claiming one. If that changes, we will say so and make the report available.

No system is perfectly secure, and we do not guarantee that the Service will be free from unauthorized access.

14.1 Security Incident Notification

If we become aware of a security incident that resulted in confirmed unauthorized access to, or acquisition of, Customer Data, we will notify you without undue delay and in any event within 72 hours of confirming the incident.

Our notice will describe what we know about the nature of the incident, the data involved, the steps we are taking, and what we recommend you do. We will cooperate reasonably with your own breach-response obligations. Because you are the controller, notification to Your Clients and to regulators is your responsibility.

15. Warranties and Disclaimers

We warrant that we will provide the Service with reasonable care and skill.

EXCEPT AS EXPRESSLY STATED IN THESE TERMS, THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE." TO THE MAXIMUM EXTENT PERMITTED BY LAW, INFLOWSHEET DISCLAIMS ALL OTHER WARRANTIES, EXPRESS OR IMPLIED, INCLUDING IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT.

WE DO NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, OR SECURE, THAT DEFECTS WILL BE CORRECTED, OR THAT AI-GENERATED OUTPUT WILL BE ACCURATE OR COMPLETE.

Any service level commitment, if offered, will be set forth in the applicable Order Form. Absent such a commitment, no uptime or availability guarantee applies.

16. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW:

(a) NEITHER PARTY WILL BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR EXEMPLARY DAMAGES, OR FOR LOST PROFITS, LOST REVENUE, LOST DATA, OR BUSINESS INTERRUPTION, EVEN IF ADVISED OF THE POSSIBILITY.

(b) EACH PARTY'S TOTAL AGGREGATE LIABILITY ARISING OUT OF OR RELATING TO THESE TERMS WILL NOT EXCEED THE TOTAL FEES PAID OR PAYABLE BY YOU TO INFLOWSHEET IN THE TWELVE (12) MONTHS IMMEDIATELY PRECEDING THE EVENT GIVING RISE TO THE CLAIM.

These limits apply regardless of the theory of liability and even if a limited remedy fails of its essential purpose.

Exclusions. These limits do not apply to: your payment obligations; either party's indemnification obligations under Section 17; your breach of Section 9; or either party's fraud, gross negligence, or willful misconduct.

Some jurisdictions do not allow certain limitations, so parts of this section may not apply to you.

17. Indemnification

By you. You will defend, indemnify, and hold harmless InflowSheet from third-party claims arising out of: (a) Customer Data, including any claim that it infringes rights or was uploaded without necessary rights or consents; (b) your professional services to Your Clients; (c) your violation of Section 9; or (d) your violation of law.

By us. We will defend, indemnify, and hold harmless Customer from third-party claims alleging that the Service, as provided by us and used in accordance with these Terms, infringes a United States patent, copyright, or trademark. This does not apply to claims arising from Customer Data, from combination of the Service with anything not provided by us, or from modifications not made by us. If the Service becomes subject to such a claim, we may procure the right to continue using it, modify it, or terminate the affected subscription and refund prepaid unused fees.

The indemnified party must promptly notify the indemnifying party, allow it to control the defense, and provide reasonable cooperation.

18. Feedback

If you send us suggestions or feedback, we may use it without restriction or obligation to you. Feedback is not your confidential information. We will not identify you as its source without your permission.

19. Changes to These Terms

We may update these Terms. If a change is material, we will provide notice by email to your account administrator or by notice in the Service at least 30 days before it takes effect. Continued use after the effective date constitutes acceptance. If you object to a material change, your remedy is to terminate before it takes effect. We will update the "Last Updated" date above and provide prior versions on request.

20. Governing Law and Venue

These Terms are governed by the laws of the State of Wyoming, without regard to its conflict-of-laws rules. The UN Convention on Contracts for the International Sale of Goods does not apply.

The state and federal courts located in Natrona County, Wyoming have exclusive jurisdiction over any dispute arising out of or relating to these Terms or the Service, and each party consents to personal jurisdiction and venue in those courts and waives any objection based on inconvenient forum.

21. General

Entire agreement. These Terms, the Privacy Policy, and any Order Form are the entire agreement between the parties on this subject and supersede prior discussions.
Assignment. You may not assign these Terms without our prior written consent, except to a successor in a merger or sale of substantially all assets. We may assign to an affiliate or successor. Any other assignment is void.
Subprocessors. We may use subprocessors as described in the Privacy Policy and remain responsible for their performance.
Force majeure. Neither party is liable for delays caused by events beyond its reasonable control. This does not excuse payment obligations.
Severability. If a provision is unenforceable, it will be modified to the minimum extent necessary and the rest remains in effect.
No waiver. Failure to enforce a provision is not a waiver of it.
Independent contractors. The parties are independent contractors. Nothing creates a partnership, joint venture, agency, or employment relationship.
Notices. Notices to you may be sent to the email on your account or posted in the Service. Notices to us must be sent to the address in Section 22.
No third-party beneficiaries. These Terms create no rights in any third party, including Your Clients.
U.S. Government. The Service is "commercial computer software" as defined in FAR 12.212 and DFARS 227.7202.
Export. You will comply with applicable U.S. export control and sanctions laws.

22. Contact

InflowSheet LLC
Casper, Wyoming, United States
Legal and security notices: info@inflowsheet.com