Tovyra by Orpyxis Terms of Service

Tovyra was formerly called Graftr. Same service, same seller, new name.

Last updated: 25 October 2026

These terms are an agreement between Eman Curmi, trading as Orpyxis Technologies, 42, Triq it-Tin, Sannat SNT1443, Gozo, Malta ("Orpyxis", "we", "us"), and the business that uses Tovyra ("the Customer", "you"). They cover the Tovyra iPhone app, the Tovyra web app and the Tovyra service. Our Privacy Policy (orpyxis.com/tovyra/privacy) explains how we handle personal data.

Contact: [email protected] · WhatsApp +1 904 479 8353

1. Business use only

Tovyra is a tool for businesses: tradespeople, contractors, sole traders, studios and firms. It is sold only to businesses for use by their owners, staff and contractors. It isn't offered to consumers. By creating a company in Tovyra, or accepting these terms for one, you confirm that you're acting for a business and that you're allowed to bind it. Every user must be at least 18.

2. Accounts, companies and roles

• A company in Tovyra belongs to the Customer. The person who creates it becomes its owner. Owners can invite others as owners, office staff or field staff. Roles control what each person sees and does; for example, only owners and office staff see pay and cost rates.
• You're responsible for who you invite, for the roles you give them, and for everything done under your company's accounts. Keep passwords safe, and tell us at [email protected] straight away if you think an account has been compromised.
• Give us accurate account details and keep them up to date.

3. Plans, trial and payment

• Trial. A new company gets a 14-day trial with everything unlocked.
• Plans. After the trial, the company needs a paid plan. Plans set the number of users, the modules included and certain limits (for example, active jobs or bank accounts). Plans are chosen, paid for and managed by the company's owner through the Tovyra web app. They aren't sold in the iPhone app, and the iPhone app shows plan status only.
• Payment is taken by Stripe in euro, for the plan, users and period shown at checkout. We issue an invoice for each payment. We never see or store your full card number.
• VAT. Prices are in euro and shown without VAT. No VAT is charged at present. If VAT becomes applicable, it will be added to later payments, and we'll tell you first.
• Renewal. If your plan renews automatically, it renews at the end of each period until the owner cancels. Cancelling stops the next renewal, and you keep access until the end of the period already paid for. We'll give at least 30 days' notice of any price increase, which applies from your next renewal after that notice.
• When a plan ends. If a plan isn't renewed, the company keeps working for a 14-day grace period. After that it becomes read-only: everyone can still view and export all of the company's data, but changes can't be saved. Nothing is deleted because a plan ended. Full access returns as soon as a plan is active again.
• Refunds. Fees already paid aren't refundable, including for part periods, unless the law requires otherwise, we stop offering Tovyra (section 11) or you end your plan because you object to a new sub-processor (section 13.3). There are no refunds for unused actions, users or modules.
• Licence keys. If we give you a licence key for your plan, it's for your company only. Don't share, resell or publish it.

4. Your data

• You own your data. Everything your company puts into Tovyra (clients, suppliers, jobs, hours, rates, quotes, invoices, payments, company details and so on) is your "Company Data".
• You give us permission to host, process and display Company Data only to provide Tovyra to you, keep it secure and support you. Section 13 sets out how we process personal data in it for you.
• You're responsible for Company Data being lawful and accurate, and for having a lawful basis for the personal data you put in (for example your clients' details and your staff's hours and pay rates), including telling your staff and clients what you do with it.

5. Your responsibilities for quotes, invoices and records

• Tovyra helps you prepare quotes, invoices and related records. You are responsible for checking that they are correct and comply with tax and invoicing rules that apply to your business, including tax rates, invoice numbering and the details shown.
• Tovyra isn't a record-keeping or archiving service. You must keep your own business, accounting and tax records for as long as the law requires. In Malta, for example, VAT records generally have to be kept for at least 6 years and a company's accounting records for 10 years; other countries have their own rules. Check with your accountant. Use the export (section 9) to keep your own copies.
• Once a document is posted, Tovyra locks it so it stays as you sent it.
• Share links. When you share a quote or invoice by link, anyone with the link can open the PDF until the link expires. A link can't be withdrawn early. Only share links with the intended recipient.

6. Acceptable use

You must not, and must not let anyone else: - break the law or anyone's rights while using Tovyra, including data protection and employment law; - try to get around plan limits, licence checks, roles or security measures; - copy, reverse engineer or decompile Tovyra, except where the law allows it; - resell, sublicense or rent Tovyra, or offer it as a service to others; - upload malware or anything unlawful, infringing or harmful; - overload, scrape, attack or probe our systems.

These rules also apply to anything done through a bot or token you connect (section 6A). If you break them, we may suspend access under section 11.

6A. Agent Connect: your own bots and AI agents

6A.1 What it is. Agent Connect lets an owner connect the company's own AI agents, bots or scripts ("Bots") to its Tovyra company, over our REST API and our MCP server, using bot tokens the owner creates in Settings → Bots, or (where available) by connecting an AI assistant such as ChatGPT or Claude through OAuth. Each token belongs to one company, carries the scopes the owner picks (for example read or read+write for jobs, tasks, notes and handovers) and can be given an expiry. Bots can never reach billing, plans, members and roles, exports, company settings, bank, ledger, invoices or payments.

6A.2 Bots act for you. A Bot acts on your behalf and on your instructions. Everything done with a token you issued, or through a connection you authorised, is treated as done by your company. You're responsible for: - which Bots you connect, the scopes and expiry you give them, and revoking them when no longer needed; - every action taken with your tokens or connections, whether or not you intended it, until you revoke the token; - your choice of AI provider (for example OpenAI, Anthropic, xAI or any other) and your agreement with it. These are your own providers, not our sub-processors. We don't choose, control or check them and we aren't responsible for what they do with data; - any Company Data a Bot reads and sends to an AI provider or anywhere else. That is your own transfer, made on your instruction, and you're the one who must have a lawful basis for it, tell the people concerned, and put any data processing or transfer terms in place with that provider.

6A.3 Token security. Bot tokens are confidential credentials, like passwords. We show a token only once and store only a hash, so we can't recover it. Keep tokens secret, don't put them in shared code, chats or public places, and revoke a token straight away in Settings → Bots if you think it has leaked. Tell us at [email protected] if you suspect misuse.

6A.4 AI output can be wrong. AI systems can produce wrong, incomplete or unexpected output and can act on it. You must review what your Bots do (every Bot action is shown in the Bot activity log and labelled "by " on tasks, notes and handovers) before relying on it, sending it to clients or acting on it. We don't check, and aren't responsible for, the content a Bot creates or the actions it takes.

6A.5 Metering and fair use. Each authenticated Bot request, or each MCP tool call, counts as one action, per company per calendar month (UTC). Your plan sets how many Bots and actions you get (currently, Starter, Pro and the trial: 1 Bot and about 500 actions a month; Business and Enterprise: any number of Bots and about 25,000 actions a month; the current limits are shown in the app). When the limit is reached, further Bot requests are refused until the meter resets or the plan is upgraded; nothing is charged automatically for going over. Rate limits also apply (currently 120 requests a minute per token and 600 a minute per company). Agent Connect must be used fairly: don't use it to get around plan limits, to scrape, overload or probe the service, or to give access to anyone outside your company. Unused actions don't carry over and aren't refundable. We may change limits under section 14.

6A.6 Suspending a Bot. We may throttle, suspend or revoke a Bot or token straight away, without prior notice, if it's causing a security risk, misbehaving (for example looping, flooding the service, trying to reach other companies' data or sending secrets), breaking section 6, or putting the service or other customers at risk. We'll tell the owner as soon as we reasonably can, and restore access once the problem is fixed where that's safe. You can revoke any token at any time.

6A.7 Audit log. For every Bot request we record the Bot's name, the action, the item affected, the outcome, a short before/after summary of changed fields, the caller's IP address and the time. Owners can see it in the app. It forms part of Company Data, is kept while the company exists (including the 30-day restore period in section 10.2) and is deleted with it.

7. Our service

• We'll provide Tovyra with reasonable skill and care.
• We may update, improve or change features. We won't materially reduce the core functionality of a plan you've already paid for during its current period, unless the law, a security issue or a third-party provider forces us to.
• Tovyra depends on internet connections and on third parties such as hosting, network, email and payment providers. We aim to keep it available but can't promise it will be uninterrupted or error-free.
• Apart from the commitments in these terms, Tovyra is provided "as is". As far as the law allows, we exclude all other warranties, including fitness for a particular purpose and the accuracy of calculations, totals, costings and tax figures. Check figures before you rely on them.

8. Intellectual property

We (or our licensors) own Tovyra, its software, design and branding. While your plan or trial is active, we give your company a non-exclusive, non-transferable right to use Tovyra for its own internal business purposes, within your plan's limits. You're buying a right to use Tovyra, not ownership of it. If you send us suggestions, we may use them freely.

9. Exporting your data

An owner can download a copy of the company's data at any time while the account exists, including in read-only mode: in the app, through Settings → Delete account, where the download is offered before anything is deleted. The export is a ZIP file containing CSV files of every table, quote and invoice PDFs (up to 200 per export) and your logo, or a single JSON file. It covers every company where you're an active owner. Quote and invoice PDFs can also be downloaded one at a time.

10. Deleting your account and company

10.1 Export first

Before you delete, export everything you need (section 9), including invoices, credit notes, quotes, client lists and payment records. Keeping these is your legal responsibility (section 5).

10.2 Deleting in the app

• Settings → Delete account. Tovyra first shows what will be deleted and what will be kept, and offers the data download. You confirm with your password and by typing DELETE.
• If you're the only member of a company, the account and company are deactivated straight away and no one can use them. You can restore everything by signing in again within 30 days. After those 30 days, our daily clean-up permanently deletes the company and all of its Tovyra data: invoices, credit notes, quotes, clients and their details, suppliers, jobs, hours, machinery, payments, the ledger, company details, logo, settings, invitations, Bot tokens and the Bot audit log. You can also ask us at [email protected] to delete straight away.
• If you're the only owner and others are still members, you must make someone else an owner, or remove the other members, first.
• Otherwise (another owner exists, or you're office or field staff), you leave the company, and the records you created stay with it as "Deleted user".
• Your own login is removed: your name and email are replaced, and all sessions end.

10.3 Closing a company account through us

An owner can instead ask us at [email protected] to close the company account. We deactivate it straight away and permanently delete all of its Tovyra data 30 days later. During those 30 days no one can use the account, but an owner can ask us to cancel the deletion or to provide an export. The owner can also ask for immediate deletion.

10.4 Deletion is permanent

We don't keep a copy of your invoices or any other Tovyra data after deletion, and we can't recover it, even if a tax authority, auditor or client later asks for it. Deleted data stays in our encrypted backups only until they roll over, which happens within 35 days (currently 14 days). It isn't restored or used in that time, except to recover our systems after an incident, and in that case we delete it again.

10.5 Your plan

Deleting the company account ends its Tovyra plan. Fees already paid follow section 3.

10.6 What we keep about you

Deleting Tovyra data doesn't delete the records we need about our relationship with you. As controller, we keep: - the invoices and receipts we issued to your company, and related payment records (including what Stripe holds for us), for as long as Maltese tax law requires (at least 6 years for VAT records, and longer where other tax rules apply); and - a minimal record that the account existed and was deleted, when and by whom, to show we followed your instruction and to deal with any dispute.

11. Suspension and termination

• You can stop using Tovyra or cancel your plan at any time (section 3).
• We may suspend or end your access if you seriously breach these terms and don't fix the breach within 14 days of our notice. We can act immediately where there's a security risk, unlawful use or abuse.
• If we stop offering Tovyra, we'll give at least 60 days' notice so you can export your data, and refund any prepaid fees for the period after it ends.
• When our agreement ends for any reason other than deletion under section 10, an owner can export the company's data for at least 30 days (section 11.1), after which we delete it as described in section 10.4.
• Sections 4, 5, 8, 10.4, 10.6, 12, 13 (for as long as we hold Company Data) and 15 continue after termination.

11.1 Switching to another service and getting your data back (EU Data Act)

• Asking to switch or leave. An owner can ask us at any time, by email to [email protected], to end the agreement and move the company's data to another provider or to the company's own systems. The notice period is at most 2 months; you choose a shorter one if you like.
• Transition. Once the notice period ends, we keep the service running and help with the move for up to 30 days. If that isn't technically possible, we'll tell you within 14 working days, explain why and propose another period of no more than 7 months.
• What you can export. All Company Data: every table as CSV (or JSON), quote and invoice PDFs, and your company logo. Not included: password hashes, invitation and reset tokens, licence keys, our software, and our own billing records about you.
• Retrieval period. After the transition, you have at least 30 days to retrieve your data. When that period ends, we delete it as described in section 10.4.
• No charge. We don't charge for exports or switching.
• Deleting your account in the app (section 10.2) is your instruction to delete, so no separate transition or retrieval period follows it beyond the 30-day restore period. Export first.

12. Liability

12.1 Business customers only. Tovyra is supplied only to businesses (section 1). This section is written for business-to-business contracts. If, despite section 1, a mandatory consumer protection law applies to you, nothing in this section limits rights that law gives you.

12.2 What we never exclude. Nothing in these terms excludes or limits liability for: death or personal injury caused by negligence; fraud or fraudulent misrepresentation; wilful misconduct (dolo) or gross negligence; breach of obligations that can't be limited under applicable law (including a party's direct liability to data subjects or authorities under the GDPR); or anything else that can't lawfully be excluded or limited.

12.3 Losses we're not liable for. Subject to 12.2, we're not liable, whether in contract, tort (including negligence), breach of statutory duty or otherwise, for: - (a) indirect, special or consequential loss; - (b) loss of profit, revenue, business, contracts, anticipated savings or goodwill (whether direct or indirect); - (c) loss or corruption of data. Keeping your own exports and backups is your responsibility (sections 5 and 9); our only duty is to use reasonable efforts to restore from our most recent backup where one exists; - (d) anything done or produced by Bots, AI agents or AI providers you connect, or by anyone using your tokens or accounts (section 6A); - (e) errors in figures, tax or documents that you didn't check (section 5).

12.4 Cap. Subject to 12.2, our total liability for all claims arising out of or in connection with Tovyra and these terms, in aggregate, is limited to the lower of (a) the fees you paid us for Tovyra in the 12 months before the event giving rise to the first claim, and (b) €100.

12.5 Your indemnity. You'll compensate us for third-party claims (including from your clients, staff or AI providers, or from authorities) caused by Company Data, by your Bots or tokens, or by your breach of section 6 or 6A.

13. Data processing terms (GDPR Article 28)

This section is the data processing agreement between you (controller) and us (processor) for personal data in Company Data. It forms part of these terms and applies automatically.

13.1 Details of the processing - Subject matter and purpose: providing Tovyra to you: storing, organising, displaying, calculating with, producing PDFs and share links from, exporting and securing Company Data. - Duration: while your company account exists, then until deletion under sections 10 and 11 (including the backup roll-over). - Nature: hosting, storage, retrieval, display, transmission and deletion. - Types of personal data: names, email addresses, phone numbers, postal addresses, VAT numbers, bank details, hours worked, pay and charge-out rates, job, quote, invoice and payment details, notes, and company logos. - Data subjects: your clients and their contacts, your suppliers and their contacts, your owners, staff and contractors, and anyone else you record in Tovyra.

13.2 Our commitments. We will: - (a) process the personal data only on your documented instructions (these terms and your use of Tovyra's features), unless the law requires otherwise, in which case we'll tell you first unless the law forbids it. We'll tell you if we think an instruction breaks data protection law; - (b) ensure that anyone we authorise to process it is bound by confidentiality; - (c) take appropriate technical and organisational security measures under GDPR Article 32, including encryption in transit, password hashing, role-based access, rate limiting and restricted administrative access; - (d) use sub-processors only as set out in 13.3; - (e) help you, as far as we reasonably can, to respond to data subjects exercising their rights; and pass on to you any request we receive directly; - (f) help you meet your obligations on security, breach notification, impact assessments and prior consultation (GDPR Articles 32 to 36), taking into account the information available to us. We'll notify you of a personal data breach affecting Company Data without undue delay after becoming aware of it, with the information you need to meet your own obligations; - (g) at the end of the service, delete the personal data as described in sections 10 and 11. You obtain your copy by exporting before deletion (section 9). We won't keep a copy unless the law requires us to; - (h) make available the information needed to show we meet this section, and allow and contribute to audits, including inspections, by you or an auditor you appoint, with reasonable notice, at reasonable times, at your cost, and subject to confidentiality. Where possible we'll first answer by providing written information.

13.3 Sub-processors. You give general authorisation for us to use sub-processors. Our current sub-processors are:

Sub-processor	Purpose	Location
Cloudflare, Inc.	Network protection and secure connection to our server (traffic in transit)	US company, global network
Google (Gmail)	Sending password reset and team invitation emails	US
Apple (iCloud Mail)	Receiving and storing email sent to our orpyxis.com addresses, such as support requests containing Company Data	US company

The Tovyra service and database run on Orpyxis's own server in Ireland. We'll tell account owners at least 30 days before adding or replacing a sub-processor; if you object on reasonable data protection grounds, you may end your plan and we'll refund any prepaid fees for the remaining period. We impose data protection obligations on each sub-processor that are at least as protective as this section, as far as its standard terms allow, and we remain responsible for its performance.

13.4 Transfers outside the EEA. Where a sub-processor processes personal data outside the EEA, we rely on the EU-US Data Privacy Framework where the provider is certified under it, and otherwise on the European Commission's Standard Contractual Clauses.

13.5 Your instructions and responsibilities. You confirm that you have a lawful basis to put personal data into Tovyra and to instruct us to process it, and that you've given the people concerned the information the law requires.

13.6 Liability. Each party's liability under this section is subject to section 12, except where the law doesn't allow that.

13.7 Bots and AI providers. When you connect a Bot (section 6A), our processing is limited to authenticating it, carrying out the requests you've authorised within the token's scopes, metering them and keeping the audit log, all on your instructions. Your Bots and your AI providers (such as OpenAI, Anthropic or xAI) are not our sub-processors: you choose and engage them, and any personal data a Bot reads from Tovyra and passes to them is disclosed on your documented instruction and is your transfer. Sections 13.3 and 13.4 don't apply to them, and you're responsible for any data processing agreement, transfer safeguards (for example Standard Contractual Clauses) and information to data subjects they require. The Bot audit log, including caller IP addresses, is Company Data that we keep for you to help you supervise your Bots and keep them secure.

14. General

• Changes: we may update these terms. For material changes, we'll give account owners at least 30 days' notice by email or in the app. Changes apply from your next renewal, unless the law requires otherwise.
• Transfers: you can't transfer these terms without our consent. We may transfer them to a group company or as part of a sale of our business.
• Force majeure: neither of us is liable for delays caused by events outside our reasonable control.
• Entire agreement: these terms, with any order form we agree in writing, are the whole agreement between us about Tovyra. If they conflict, the order form wins.
• Severability: if part of these terms is invalid, the rest still applies.
• No waiver: not enforcing a right straight away doesn't mean we've given it up.
• Notices: we send formal notices by email to the owner's address on the account. You send yours to [email protected] or by post to our business address (see section 16).
• Apple: Apple isn't a party to these terms and has no responsibility for Tovyra or its support. Your use of the iPhone app must also follow the App Store's terms.

15. Governing law and disputes

These terms are governed by the laws of Malta. If there's a problem, contact us first and we'll try to resolve it informally within 30 days. The courts of Malta have jurisdiction.

16. Contact

Eman Curmi, trading as Orpyxis Technologies 42, Triq it-Tin, Sannat SNT1443, Gozo, Malta Email: [email protected] · WhatsApp: +1 904 479 8353