Terms & Conditions

Open HR provides tools to help employers manage core HR functions including: employee records, leave management, onboarding workflows, compliance-aware job creation, applicant tracking, document storage, and reporting.

Current stage: The Platform is currently in early access. Features available to early-access users are described at tryopenhr.com. Not all features described in the Documentation may be available during the early-access period. Angle Open Source Ltd will communicate feature availability changes to registered users by email.

Compliance by design:The Platform includes a jurisdiction-aware compliance engine. When an employer creates a job or manages employee data, the Platform surfaces jurisdiction-specific requirements, such as EU Pay Transparency Directive salary disclosure, works council consultation notices in Germany, Kenya DPA Section 50 data localisation warnings, Nigeria NDPA cross-border transfer requirements, and India DPDP Act employment legitimate-use notices, as gates and inline warnings within the product workflow. This compliance layer supports the employer’s own obligations; it does not replace the employer’s obligation to obtain independent legal advice.

Data residency:Candidate and employee data is routed to a regional storage bucket based on the candidate’s or employee’s location, not the employer’s headquarters. An employer in London hiring a candidate in Lagos routes that candidate’s application data to the Africa-region storage infrastructure.

Account creation flow: Registration requires: (a) email entry; (b) OTP verification, a 6-digit code sent to the registered email, valid for 15 minutes, single-use; (c) account type selection (Individual, Team/Business, or Employee); (d) for Team/Business accounts, company setup including country of operation, which determines data residency routing and applicable compliance gates; and (e) DPA acceptance before any employee data pipeline is accessible.

The Platform is currently available to waitlist and early-access users. Access during the early-access period is provided subject to these Terms.

Employee Users access the Platform under the Customer’s account and authority. The Customer is responsible for ensuring Employee Users comply with these Terms.

Platform IP: All intellectual property rights in the Service, including its software, architecture, design, Documentation, and branding, are owned by Angle Open Source Ltd or its licensors. These Terms grant a limited, non-exclusive, non-transferable right to access and use the Service while access is granted.

Customer Data: Customers retain full ownership of Customer Data. Angle Open Source Ltd acquires no ownership rights in Customer Data.

Open source code: The Open HR codebase will be made available as open-source software in due course. Details of the applicable licence will be published at tryopenhr.com when available. These Terms govern use of the hosted Service only.

Feedback: Angle Open Source Ltd may use any feedback, suggestions, or improvement ideas provided by Customers or Employee Users freely and without compensation. This clause does not grant Angle Open Source Ltd any rights to Customer Data.

Trademarks:“Open HR” and “Angle Open Source” are trademarks of Angle Open Source Ltd. Nothing in these Terms grants any right to use them.

DPA gate: Customers must accept the DPA before any employee data pipeline is accessible. The DPA is available at tryopenhr.com/legal/dpa.

Each party will keep the other’s confidential information private and not disclose it without prior written consent. Confidential information excludes anything that is or becomes publicly available other than through breach, was already known to the recipient, is independently developed, or must be disclosed by law with prior notice where practicable. These obligations survive termination for five years.

We will use commercially reasonable efforts to keep the Service available. During early access, no formal uptime SLA applies. Planned maintenance will be communicated in advance where possible.

If we become aware of a security incident affecting Customer Data in our capacity as processor, we will notify the Customer within 72 hours with details of the nature of the incident, affected data subjects, likely consequences, and steps taken. The Customer, as data controller, remains responsible for notifying the relevant supervisory authority and affected individuals. On reasonable written request (no more than once per year), we will provide available security audit reports or certification documentation under a mutual NDA. Customers subject to NIS2 supply chain obligations may request additional assurance cooperation with 30 days’ notice.

We may suspend access immediately if we have reasonable grounds to believe a Customer is in material breach of the Acceptable Use Policy, continued access would create legal risk, or a competent authority requires it. Where possible, 7 days’ notice will be given.

Customers may close their account at any time by contacting [email protected]. On closure or termination, Customer Data is retained for 30 days during which a full export in CSV or JSON format is available on request at no charge. After 30 days, Customer Data is deleted from production systems; written confirmation is available on request. Anonymised or aggregated data from which no individual can be identified may be retained.

Customers may export Customer Data at any time via the Platform’s built-in export tools. For EU-based Customers, we comply with the EU Data Act (Regulation 2023/2854, in force from 12 September 2025) and maintain no technical or contractual barriers to switching providers.

We warrant that the Service will materially conform to its published Documentation, that we will apply commercially reasonable security measures to protect Customer Data, and that we have the right to grant the access rights in these Terms. To the fullest extent permitted by law, we disclaim all other warranties, express or implied, including any implied warranty of fitness for a specific purpose or error-free operation. The Platform’s compliance features support Customer obligations; they do not constitute legal advice and do not replace independent legal counsel. Nothing in these Terms excludes statutory rights under the Consumer Rights Act 2015, applicable EU, US, Nigerian, Indian, or Kenyan mandatory law, or liability for death or personal injury caused by negligence, or for fraud.

Our total aggregate liability to the Customer, in contract, tort, or otherwise, shall not exceed £500 or the total fees paid by the Customer in the 12 months preceding the claim, whichever is greater. During the early-access period when no fees are charged, the cap is £500. We are not liable for indirect, consequential, or punitive damages, loss of profit or revenue, or data loss except where caused by our failure to maintain adequate backups. These exclusions do not apply to liability for death or personal injury caused by negligence, fraud, our DPA obligations in respect of a breach caused by our own default, or any liability that cannot be limited under applicable law.

The Customer will defend, indemnify, and hold harmless Angle Open Source Ltd from any claims arising from breach of these Terms, failure to comply with applicable law, Customer Data infringing third-party rights, or use of the Platform without a valid legal basis. We will defend, indemnify, and hold harmless the Customer from third-party claims that the Service (as provided, unmodified) infringes their intellectual property rights, provided the Customer notifies us promptly, grants us control of the defence, and cooperates reasonably. This does not apply to claims arising from Customer modifications, Customer Data, or use in breach of these Terms.

We may update or modify the Service at any time during early access. Material changes to these Terms those substantially affecting Customer rights will be notified by email at least 30 days before taking effect. Minor changes take effect immediately on publication. The current version is always at tryopenhr.com/terms. Continued use after any change takes effect constitutes acceptance.

These Terms are governed by the laws of England and Wales. This choice of law does not affect mandatory local protections that apply to Customers in each Active Market. For EU and German customers, these include Consumer Rights Directive withdrawal rights, EU GDPR, EU Data Act portability rights, EU Pay Transparency Directive obligations, NIS2 supply chain obligations for regulated-sector customers, and, specifically for Germany, BetrVG works council co-determination rights, BDSG, and KSchG employment protections. For US customers, applicable state consumer protection law applies, including CCPA/CPRA for California users and state AI transparency laws. For Nigerian customers, the NDPA 2023, GAID 2025, and Federal Competition and Consumer Protection Act 2018 apply. For Indian customers, the DPDP Act 2023 and Information Technology Act 2000 apply. For Kenyan customers, the Data Protection Act 2019 and Consumer Protection Act 2012 apply.

If you have a complaint, email [email protected]with the subject line “Complaint”. We will acknowledge within 5 business days and respond substantively within 30 days. Data-related complaints from UK users will be acknowledged within 30 days in line with the Data (Use and Access) Act 2025 from 19 June 2026. If unresolved, UK users may escalate to the ICO at ico.org.uk; EU users to their national supervisory authority listed at edpb.europa.eu (German users may contact the BfDI or the relevant Landesbehörde); US users to the FTC or their state attorney general; Nigerian users to the NDPC at ndpc.gov.ng or the FCCPC at fccpc.gov.ng; Indian users to the Data Protection Board of India when established; and Kenyan users to the ODPC at odpc.go.ke or the Competition Authority of Kenya.

For B2B disputes, both parties agree to attempt resolution through good-faith senior management discussions before commencing proceedings. If unresolved within 30 days, either party may refer the matter to the courts of England and Wales, subject to the mandatory jurisdiction provisions above.

The Service may integrate with third-party identity providers and communication tools. Use of any third-party service is governed by that party’s own terms. We are not responsible for the availability, performance, security, or data practices of third-party services. A current sub-processor list is published at tryopenhr.com/legal/sub-processors; Customers will be notified before any new sub-processor is engaged.

These Terms, together with the Privacy Policy and DPA, are the entire agreement between the parties and supersede all prior representations. If any provision is found invalid, the remainder continues in full force. Failure to enforce any provision is not a waiver of future enforcement. The Customer may not assign its rights without our prior written consent; we may assign ours to a successor entity provided the successor is bound by these Terms. Formal legal notices must be sent in writing to our registered office; day-to-day communications may go to [email protected]. Neither party is liable for failure to perform due to circumstances beyond their reasonable control, provided prompt notice is given. The parties are independent contractors nothing in these Terms creates a partnership, agency, or employment relationship.

The following sections survive termination: Section 8A (data use restriction), Section 9 (intellectual property), Section 11 (confidentiality), Section 13 (termination obligations), Section 15 (limitation of liability), Section 16 (indemnification), Section 18 (governing law), and this Section 20.

We are committed to making Open HR accessible and target WCAG 2.1 Level AA compliance. We maintain business insurance including public liability, professional indemnity, and cyber liability cover. Certificates of insurance are available on written request to [email protected].

These Terms were last reviewed Pre-launch on 21 July 2026.