请在使用订阅服务(定义见下文)之前仔细阅读以下条款和条件。
除非您和 METABASE, INC.(“METABASE”)已签订单独的协议来管辖订阅服务的使用,否则本协议(定义见下文)的条款和条件将管辖订阅服务的使用。
Metabase 仅在您接受本协议中包含的所有条款的条件下才愿意向您提供订阅服务。通过点击注册页面上标记为“订阅”的复选框或访问或使用订阅服务,您已表明您理解本协议并接受其所有条款。如果您代表公司或其他法律实体接受本协议的条款,您声明并保证您有权约束该公司或其他法律实体遵守本协议的条款,在这种情况下,“您”和“您的”将指代该公司或其他法律实体。如果您不接受本协议的所有条款,则您不得接受本协议,并且您不得使用订阅服务。
1. 定义。
“**Agreement**” means this Subscription Services Agreement, together with the Data Processing Addendum attached as Exhibit A.
**“Customer Application Data”** means data input into the Subscription Services by you and your Authorized Users. Customer Application Data includes the log-in credentials for each Authorized User and queries submitted by your Authorized Users.
“**Customer Business Data**” means the data on your external databases that you and your Authorized Users retrieve or access in the course of using the Subscription Services.
“**Customer Data**” means, collectively, the Customer Application Data, the Customer Business Data and the Customer Metadata.
**“Customer Metadata”** means data that describes the Customer Data. Customer Metadata may include data such as the number of datasets in a database, the average data size of a dataset, what database software a user connects to or Metabase-generated descriptions of a given dataset.
“**Order**” means the order schedule presented to you at the time you purchase your initial subscription to the Subscription Services or the payment confirmation furnished to you at the time of each renewal, as applicable.
“**Subscription Services**” means Metabase’s cloud-based business intelligence and analytics platform as specified in an Order.
2. 订阅服务。
**2.1 Subscription Services**. Subject to your compliance with the terms and conditions of this Agreement, during the Subscription Term (as defined below): (i) Metabase will: provide you with Subscription Services, and you may access and use the Subscription Services solely for your internal business purposes within the usage limits specified in the applicable Order; and (ii) Metabase will provide the support services applicable to the service tier that you have subscribed to, in accordance with Metabase’s policies from time to time.
**2.2 Authorized Users**. The Subscription Services may only be accessed and used by your employees and independent contractors, who may only access and use the Subscription Services for the sole purpose of performing their job functions or services (as applicable) for you (“**Authorized Users**”), and only up to the number of Authorized Users specified in the applicable Order. The log-in credentials for each Authorized User are for a single individual only and cannot be shared or used by more than 1 person. You are responsible for all actions taken under an Authorized User’s account, whether or not such action was taken or authorized by the Authorized User.
**2.3 Restrictions**. You, on behalf of yourself and your Authorized Users, agree not to: (1) copy, modify, alter, decompile or reverse engineer the Subscription Services (including the source code, object code, and underlying structure and algorithms thereof); (2) resell or otherwise make the Subscription Services available to any third party; (3) use the Subscription Services either directly or indirectly to support any activity that is illegal or that violates the proprietary rights of others; (4) interfere with or disrupt the Subscription Services or attempt to gain access to any systems or networks that connect thereto (except as required to access and use the Subscription Services); (5) deactivate, impair, or circumvent any security or authentication measures of the Subscription Services; (6) use the Subscription Services or its output to train, calibrate, or validate, in whole or in part any other systems, programs or platforms, or for benchmarking, software-development, or other competitive purposes; or (7) permit any third parties to do any of the above. You are responsible for the use of the Subscription Services by your Authorized Users, and their compliance with this Agreement.
3. 客户数据。
**3.1 Customer Data**. As between you and Metabase, you own all worldwide right, title and interest in and to all Customer Data. You grant to Metabase a non-exclusive license to access and use the Customer Data to provide the Subscription Services to you and your Authorized Users. In addition, you grant to Metabase a non-exclusive license to access and use the Customer Application Data and Customer Metadata (but not the Customer Business Data) to develop and improve Metabase’s products and services (including the Subscription Services) as set forth in more detail in the Metabase Privacy Policy at: metabase.com/hosting/privacy_policy. You acknowledge and agree that your use of the Subscription Services is subject to Metabase’s Privacy Policy. You are solely responsible for the content of all Customer Data. You represent and warrant that (1) you have, and will continue to have, during the term of this Agreement, all necessary rights, authority and licenses for the access to and use of the Customer Data as contemplated by this Agreement and the software and systems on or through which you have requested us to provide services; and (2) Metabase’s use of the Customer Data in accordance with this Agreement will not violate any applicable laws or regulations or cause a breach of any agreement or obligation between you and any third party. The Data Processing Addendum set forth in Exhibit A is hereby incorporated herein by reference.
**3.2 Security; Backup**. Metabase will maintain (and will require its third party service providers to maintain) reasonable administrative, physical and technical safeguards intended to protect the Customer Data against accidental loss and unauthorized access or disclosure, in accordance with applicable industry standards. Metabase will follow its standard archival procedures for Customer Data. In the event of any loss or corruption of Customer Data, Metabase will use its commercially reasonable efforts to restore the lost or corrupted Customer Data from the latest backup of such Customer Data maintained by Metabase. Metabase will not be responsible for any loss, destruction, alteration, unauthorized disclosure or corruption of Customer Data caused by you or by any Authorized User or third party. METABASE’S EFFORTS TO RESTORE LOST OR CORRUPTED CUSTOMER DATA PURSUANT TO THIS SECTION 3.2 WILL CONSTITUTE METABASE’S SOLE LIABILITY AND YOUR SOLE AND EXCLUSIVE REMEDY IN THE EVENT OF ANY LOSS OR CORRUPTION OF CUSTOMER DATA IN CONNECTION WITH THE SUBSCRIPTION SERVICES.
4. 订阅费用和付款。
**4.1 Subscription Fees**. You will pay the fees and charges stated in the Order (“**Subscription Fees**”) for use of the Subscription Services. The base Subscription Fee for each Subscription Term will be specified in the Order (“**Base Subscription Fee**”) and is payable and charged at the beginning of each Subscription Term.
**4.2 Verification; True-Up**. If specified in the Order, Subscription Fees will be calculated based on units of use of the Subscription Services such as number of users or amount of data processed (each, a “**Unit**”). Where applicable, the Base Subscription Fee includes the number of Units specified in the Order for each Subscription Term. Metabase may create and maintain logs reflecting usage of the Subscription Services under your account. Metabase may access and review such logs from time to time to verify your compliance with applicable usage limitations and other terms of this Agreement, and Metabase may use such logs to prevent or limit unauthorized use of the Subscription Services. Without limiting any of Metabase’s other rights or remedies, if your actual usage of the Subscription Services exceeds the Units covered by the Base Subscription Fee prepaid by you for a Subscription Term, Metabase will charge you for the difference between the Units covered by the Base Subscription Fee and the number of Units actually used by you during that Subscription Term (“**Additional Units Fee**”).
**4.3 Payment Terms**. If you have provided us with credit card details, we will charge that credit card: (i) at the start of each Subscription Term, for the Base Subscription Fee; and (ii) within thirty (30) days of our invoice for any Additional Units Fee payable by you (if any). We will issue a payment confirmation to you with respect to any charges we have made to your credit card. If we issue an invoice to you, all invoices are payable as specified in the Payment Terms section of the Order (or if not so specified, within thirty (30) days of receipt). All amounts are stated and shall be paid in US dollars and are exclusive of taxes, duties, levies, tariffs, and other governmental charges (collectively, “**Taxes**”). You are responsible for payment of all Taxes and any related interest and/or penalties resulting from any payments made to us, other than any taxes based on Metabase’s net income. All past due amounts will incur interest at a rate of 1% per month or the maximum rate permitted by law, whichever is less. Except as expressly set forth in this Agreement, all payments, once paid, are non-refundable.
5. 期限和终止
**5.1 Subscription Term**. This Agreement will commence on the date you accept it and, unless terminated earlier by either party in accordance with the terms of this Agreement, will continue for the initial subscription term specified in the Order. At the end of such initial subscription term and each renewal subscription term thereafter, subject always to timely payment of the Subscription Fees, this Agreement will automatically renew for additional renewal subscription terms having the duration specified in the Order (or if no renewal term length is stated in the Order, having the same duration as the Initial Subscription Term), unless either party provides 15 days’ prior written notice of non-renewal. Such initial subscription term and each renewal subscription term are each individually referred to herein as a “**Subscription Term**.”
**5.2 Termination for Breach**. Each party will have the right to terminate this Agreement if the other party breaches this Agreement and fails to cure such breach within 10 days after written notice thereof. If you terminate this Agreement for breach, Metabase will refund the unused portion of the Subscription Fees that you had paid for the Subscription Services for the remainder of the then-current Subscription Term (if any).
**5.3 Additional Remedies**. Without limiting other available remedies, Metabase reserves the right to suspend or disable your and your Authorized Users’ access to the Subscription Services if any undisputed amounts payable under this Agreement more than 30 days past due. Metabase also reserves the right to suspend or disable access to the Subscription Services if Metabase determines (in its discretion) that: (1) your or any Authorized User’s use of the Subscription Services disrupts, harms, or poses a security risk, or may cause harm, in each case to Metabase, the Subscription Services or any third party; or (2) you or any Authorized User has used, or is using, the Subscription Services in breach of this Agreement.
**5.4 Effect of Termination**. Upon any expiration or termination of this Agreement, your (and your Authorized Users’) right to access and use the Subscription Services will automatically terminate, except that the Authorized Users will be permitted to access the Subscription Services for 30 days following termination solely to download any Customer Data stored thereon. Metabase will have no liability for any costs, losses, damages, or liabilities arising out of or related to Metabase’ exercise of its termination rights under this Agreement. Any payment obligations as of the expiration or termination will remain in effect. The obligations and provisions of Sections 2.3, 3, 4, 5.4 and Sections 6 through 12 (inclusive) will survive any expiration or termination of this Agreement.
6. 保密性。 各方理解,另一方可能需要披露与披露方业务相关的某些非公开信息,这些信息在披露时被标记或标识为“保密”,或者在本协议中被描述为保密性质的任何信息(“保密信息”),以便使用和/或执行订阅服务。Metabase 保密信息包括订阅服务的非公开部分以及任何相关文档和定价信息。在本协议期限内以及此后三 (3) 年内,各方同意采取合理的预防措施来保护披露方的保密信息免遭未经授权的披露,除非获得授权或为履行其在本协议项下的义务所必需,否则不得使用此类保密信息,并且不得向任何第三方披露(未经披露方事先授权,包括本协议项下给出的任何此类授权)任何此类保密信息(接收方的员工、顾问和服务提供商除外,他们受到的保密义务至少与本协议对披露方的保密信息提供的保护力度相同),或本协议明确允许的情况除外。保密信息不包括接收方可以证明的任何信息:(1) 并非由于接收方的过错,而是现在或将来普遍可供公众获取;或 (2) 在从披露方收到之前已由其拥有或知悉;或 (3) 由第三方合法地无限制地披露给它;或 (4) 是在未使用披露方的任何保密信息的情况下独立开发的。如果披露对于遵守有效的法院命令或传票是必要的,则接收方可以披露保密信息(在这种情况下,接收方将立即通知披露方并与披露方合作,除非法律或法律程序禁止,如果披露方选择对披露要求提出异议、寻求对要披露的信息进行保密处理或限制要披露的信息的性质或范围)。在本协议终止后,将立即归还给披露方或销毁其拥有或控制的所有披露方的保密信息副本,但接收方可以保留一份 (1) 披露方的保密信息副本,仅用于监控其在本协议项下的合规性。尽管有前述规定,在本协议终止后,Metabase 将不会保留客户数据,除非为了遵守第 5.4 条的规定。
7. 所有权。
**7.1 Metabase IP**. As between Metabase and you, Metabase owns all worldwide right, title and interest in and to the Subscription Services and the Usage Data, including all Intellectual Property Rights therein. For purposes of this Agreement, “**Intellectual Property Rights**” means patent rights (including patent applications and disclosures), copyrights, trade secrets, know-how and any other intellectual property rights recognized in any country or jurisdiction in the world.
**7.2 Feedback**. If you provide any ideas, suggestions, or recommendations regarding the Subscription Services (“**Feedback**”), Metabase will be free to use, disclose, reproduce, license or otherwise distribute, and exploit such Feedback as it sees fit, entirely without obligation or restriction of any kind. By providing Feedback, you grant to Metabase a worldwide, perpetual, irrevocable, fully-paid, royalty-free, nonexclusive license to use and exploit in any manner such Feedback.
**7.3 Usage Data**. You acknowledge and agree that Metabase may generate de-identified data with respect to the use and performance of the Subscription Services and may retain and use such de-identified usage and performance data for its internal business purposes, such as developing and improving Metabase’s products and services (including the Subscription Services).
8. 无担保。订阅服务“按原样”提供,不提供任何形式的担保。METABASE 否认所有明示或暗示的担保,包括但不限于对适销性、特定用途的适用性和不侵权的任何暗示担保,以及因交易过程或行业惯例产生的任何担保。从 METABASE 或其他地方获得的任何建议或信息,无论是口头还是书面形式,均不构成未在本协议中明确声明的任何担保。METABASE 否认订阅服务将无错误或不间断,或所有错误都将得到纠正的任何担保。您对从订阅服务的使用中获得的结果以及从此类使用中得出的结论承担全部责任和义务。Metabase 对因任何客户数据中的错误或遗漏或订阅服务基于客户数据产生的任何结果而引起的任何索赔、损失或损害不承担任何责任。
9. 责任限制。在任何情况下,METABASE 均不对任何特殊的、偶然的、惩戒性的、惩罚性的或后果性的损害,或任何使用损失、数据丢失、利润损失或商誉损失,或采购替代产品的成本负责,无论是否可预见,因本协议或订阅服务的使用或性能而引起或与之相关的,无论此类责任源于基于合同、担保、侵权(包括疏忽)、产品责任或其他方面的任何索赔,以及无论 METABASE 是否已被告知此类损失或损害的可能性。METABASE 在本协议项下的总累计责任,因所有诉讼原因和所有责任理论而产生,将不超过您在首次提出责任索赔之前的 12 个月期间为订阅服务向 METABASE 支付的金额。双方同意,即使本协议中规定的任何独家补救措施被发现未能达到其基本目的,本第 9 条和本协议其他部分包含的限制和排除条款仍然有效并适用。
10. 美国政府最终用户。订阅服务分别是“商业计算机软件”和“商业计算机软件文档”,这些术语在 FAR 12.212 和 DFARS 227.7202 中使用。如果美国政府正在获取或代表美国政府获取订阅服务的使用权,则根据适用情况,按照 FAR 12.212 和 DFARS 227.7202-1 至 227.7202-4 的规定,美国政府在订阅服务中的权利将仅限于本协议中规定的权利。
11. 不可抗力。如果 Metabase 的履行因超出其合理控制范围的情况而受阻或延迟,则 Metabase 不会违反本协议,这些情况包括但不限于天灾、恶劣天气、洪水、闪电或火灾、罢工或其他劳资纠纷或工业行动、政府或其他主管当局的行为或不作为、恐怖主义、战争、骚乱或内乱、供应或电力中断、黑客、病毒、传输中断或电信服务中断。
12. 通用条款。本协议将受加利福尼亚州法律管辖并根据其解释,不考虑或适用法律冲突规则或原则。《联合国国际货物销售合同公约》不适用。未经 Metabase 事先书面同意,您不得通过法律或其他方式转让或转移本协议或本协议项下授予的任何权利,并且您在未获得此类同意的情况下进行的任何尝试均属无效。Metabase 可以自由转让本协议。除非本协议另有明确规定,否则任何一方行使本协议项下的任何补救措施均不妨碍其在本协议项下或以其他方式享有的其他补救措施。本协议项下要求或允许的所有通知或批准均应采用书面形式,并通过已确认的电子邮件传输、隔夜送达服务或挂号邮件送达,并且在每种情况下,均应在收到时视为已送达。所有通知或批准均应发送至适用订单中规定的地址或任何一方根据本条规定向另一方指定的其他地址。任何一方未能执行本协议的任何条款均不构成对未来执行该条款或任何其他条款的放弃。对本协议任何条款的任何放弃、修改或修订,只有以书面形式并经双方授权代表签字后方可生效。如果本协议的任何条款被认定为不可执行或无效,则该条款应在最大程度上强制执行,其他条款应保持完全有效。本协议连同订单,是双方就其主题事项达成的完整且排他的理解和协议,并取代双方之间就其主题事项达成的所有口头或书面建议、理解或沟通,除非您和 Metabase 已签订单独的协议来管辖订阅服务的使用。任何采购订单或其他订购文件中包含的与本协议条款和条件不一致或附加于本协议条款和条件的任何条款或条件,均被 Metabase 特此拒绝,并将被视为无效。本协议双方均为独立承包商,本协议不建立双方之间任何合伙、合资、雇佣、特许经营或代理关系。未经另一方事先书面同意,任何一方均无权约束另一方或代表另一方承担义务。
13. 联系信息。如果您对本协议有任何疑问,可以通过 sales@metabase.com 联系 Metabase。
数据处理附录
本数据处理附录(“DPA”)构成您(“客户”)与 Metabase 之间订立的附件订阅服务协议(“协议”)的一部分。
主题事项和期限。
1.1 主题事项。 本 DPA 反映了双方承诺遵守有关 Metabase 在履行其在本协议项下义务时处理客户个人数据的数据保护法律。所有在本 DPA 中未明确定义的大写术语均应具有协议中赋予它们的含义。如果本 DPA 中的语言与协议中的语言冲突,则以本 DPA 为准。
1.2 期限和存续。 本 DPA 将在协议生效日期起具有法律约束力。Metabase 将处理客户个人数据,直到协议中规定的关系终止。只要 Metabase 处理客户个人数据,Metabase 在本 DPA 项下的义务和客户的权利将继续有效。
定义。
2.1 “客户个人数据”是指 Metabase 代表客户处理的客户业务数据中的个人数据。
2.2 “数据保护法律”是指客户个人数据所适用的所有适用的数据隐私、数据保护和网络安全法律、规则和法规。“数据保护法律”应包括但不限于 2020 年 1 月 1 日生效的 2018 年《加州消费者隐私法案》(“CCPA”)和欧盟通用数据保护条例 2016/679(“GDPR”)。
2.3 “个人数据”应具有数据保护法律下“个人数据”和/或“个人信息”术语的含义。
2.4 “Process” 或 “Processing” 指对个人数据或成组个人数据执行的任何操作或一组操作,无论是否通过自动化方式进行,例如收集、记录、组织、结构化、存储、改编或更改、检索、咨询、使用、通过传输、散播或以其他方式提供披露、对齐或组合、限制、擦除或销毁。
2.5 “安全事件(Security Incident(s))” 指导致因 Metabase 的原因造成的客户个人数据意外或非法销毁、丢失、更改、未经授权的披露或访问的安全漏洞。
2.6 “服务(Services)” 指 Metabase 根据协议履行的任何和所有服务。
2.7 “第三方(Third Party(ies))” 指 Metabase 授权的承包商、代理商、供应商和第三方服务提供商(即,分包处理者),他们处理客户个人数据。
数据使用和处理。
3.1 书面指示(Documented Instructions)。Metabase 及其第三方应仅根据客户的书面指示或本 DPA、协议或任何适用订单明确授权的情况下处理客户个人数据。除非法律禁止,否则如果 Metabase 合理认为客户的指示与适用法律之间存在冲突,或以不符合客户指示的方式寻求处理客户个人数据,Metabase 将以书面形式通知客户。
3.2 授权使用第三方(Authorization to Use Third Parties)。在履行 Metabase 根据协议承担的合同义务所需的范围内,客户特此授权 (i) Metabase 聘请第三方,以及 (ii) 第三方聘请分包处理者。
3.3 Metabase 和第三方合规性(Metabase and Third-Party Compliance)。Metabase 同意 (i) 与第三方就该等第三方处理客户个人数据签订书面协议,该协议对该等第三方施加符合数据保护法律的客户个人数据的数据保护和安全要求;以及 (ii) 对 Metabase 的第三方未能履行其在处理客户个人数据方面的义务向客户承担责任。
3.4 反对第三方的权利(Right to Object to Third Parties)。在数据保护法律要求的情况下,Metabase 将在聘请任何新的处理客户个人数据的第三方之前通知客户,方式是在 metabase.com/hosting/subprocessors 更新其分包处理者列表,并允许客户在十 (10) 天内提出异议。如果客户对任命任何与隐私或数据保护相关的新第三方有合理的异议,双方将真诚合作,在不少于三十 (30) 天内解决异议的理由。
3.5 保密性(Confidentiality)。任何被授权处理客户个人数据的个人或第三方必须以合同方式同意对该等信息保密,或承担适当的法定保密义务。
3.6 个人数据查询和请求(Personal Data Inquiries and Requests)。在数据保护法律要求的情况下,Metabase 同意提供合理的协助,并遵守客户关于个人根据数据保护法律授予他们的客户个人数据权利(例如,访问、更正、擦除、数据可移植性等)提出的任何请求的合理指示。如果请求直接发送给 Metabase,Metabase 应在不过分延迟的情况下通知客户。
3.7 禁止出售客户个人数据(Sale of Customer Personal Data Prohibited)。Metabase 不得出售客户个人数据,如 CCPA 定义的术语“出售”的含义。Metabase 不得向第三方或其他方披露或传输客户个人数据,这将构成 CCPA 定义的术语“出售”。
3.8 数据保护影响评估和事先咨询(Data Protection Impact Assessment and Prior Consultation)。在数据保护法律要求的情况下,Metabase 同意在客户的判断下,Metabase 执行的处理类型需要进行数据保护影响评估和/或与相关数据保护机构事先咨询时,在客户承担费用的情况下向客户提供合理的协助。
3.9 可证明的合规性(Demonstrable Compliance)。Metabase 同意根据合理要求提供合理必要的信息,以证明符合本 DPA。
信息安全计划(Information Security Program)。Metabase 同意实施商业上合理的技术和组织措施,旨在根据数据保护法律保护客户个人数据。
安全事件(Security Incidents)。在获悉安全事件后,Metabase 同意通过电子邮件向与您的帐户关联的电子邮件地址发送书面通知,不得无故拖延,并在数据保护法律要求的时间范围内通知客户。在可能的情况下,该通知将包括数据保护法律要求的所有可用详细信息,以便客户遵守其自身对监管机构或受安全事件影响的个人的通知义务。
审计(Audits)。在数据保护法律赋予客户审计权的情况下,客户(或其指定的代表)可以每年不超过一次地对 Metabase 处理客户个人数据的情况进行审计,方式是让 Metabase 完成一份长度合理的数据保护问卷。任何此类审计均应遵守 Metabase 的安全和保密条款及指南。
数据删除(Data Deletion)。在本协议到期或终止时,Metabase 将根据客户的选择,删除或归还所有客户个人数据(不包括任何备份或存档副本,这些副本应根据 Metabase 的数据保留计划删除),除非 Metabase 根据适用法律要求保留副本,在这种情况下,Metabase 将隔离并保护该客户个人数据,使其免受任何进一步处理,除非适用法律要求。
处理详情。
主题事项(Subject Matter):处理的主题事项是根据协议提供的服务。
持续时间(Duration):处理将持续到协议到期或终止。
数据主体类别(Categories of Data Subjects):其个人数据将根据协议处理的数据主体。
处理的性质和目的(Nature and Purpose of the Processing):Metabase 处理客户个人数据的目的是履行服务。
客户个人数据的类型(Types of Customer Personal Data):根据协议处理的客户个人数据。