Terms of Service

Cindera (operated by Yassin Mahouti BV) provides a read-only Microsoft 365 identity security and compliance scanning service. We connect to your Entra ID tenant via the Microsoft Graph API, evaluate identity and access configuration against a curated rule set, and surface findings with plain-language remediation.

• Cindera is designed to read directly from Microsoft Graph using read-only permissions and does not perform write operations as part of its standard scanning.
• We do not store user passwords or productivity content (mail, files, calendars, chats). Microsoft Graph access tokens are obtained per scan and are not persisted in our database.
• Cindera is not a SIEM, threat-detection or incident-response platform. It is a posture and compliance product.

By signing in to Cindera, granting admin consent for the Cindera Scanner application, or otherwise using the service, you agree to be bound by these Terms of Service. If you are accepting these terms on behalf of a company, you represent that you have authority to do so.

During the beta phase, Cindera is provided on a best-effort basis. We do not guarantee any specific uptime, response time, or freshness of scan data, and we explicitly do not commit to a 99.9% (or any other) availability target during beta.

Scheduled scans are performed according to the configured schedule for your tenant and may be skipped or delayed during maintenance or sub-processor outages without notification.

• You must grant the Cindera Scanner application valid admin consent in the correct Microsoft tenant. We perform a tenant-match check at consent time, but the responsibility for selecting the right environment lies with the customer.
• You are responsible for keeping account access secure on your side, including the privileged Microsoft accounts used to grant consent or sign in to Cindera.
• You will not use Cindera to scan tenants you do not control, to attempt to bypass tenant isolation, or to reverse-engineer the service.
• You agree that Cindera may include error and usage telemetry necessary to operate the service, as described in the Privacy Policy.

All software, rule logic, content, documentation and trade marks relating to Cindera are and remain the exclusive property of Yassin Mahouti BV. Nothing in these terms transfers ownership of any Cindera intellectual property to the customer.

You retain ownership of the data Cindera reads from your Microsoft 365 tenant. We process it on your behalf under the Data Processing Agreement.

To the maximum extent permitted by Belgian law:

• Cindera is provided as-is, without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose, and non-infringement.
• Cindera is not liable for indirect, incidental, special, consequential or punitive damages, or for loss of profits, revenue, data or goodwill, arising out of or relating to the service.
• Our aggregate liability for any claim arising out of or relating to the service is limited to the fees paid by the customer to Cindera in the twelve (12) months preceding the event giving rise to the claim, or EUR 1 000 if no fees have been paid.
• Nothing in these terms excludes or limits liability that cannot be excluded under mandatory Belgian law (including liability for intent or gross negligence).

You may stop using Cindera at any time. To disconnect, use the "Disconnect Microsoft 365" option in the Connections page and email support@cindera.eu to request full deletion of your scan data. We will action a deletion request within 30 days.

We may suspend or terminate access to the service if you breach these terms, abuse the platform, or fail to pay due fees, after giving you reasonable notice and an opportunity to remedy the breach where the breach is capable of remedy.

Termination does not affect provisions that by their nature survive termination, including intellectual property, confidentiality, accrued payment obligations, and liability provisions.

These terms are governed by Belgian law. Any dispute arising out of or in connection with them is subject to the exclusive jurisdiction of the courts of Brussels, Belgium, unless mandatory consumer-protection law provides otherwise.

We may update these Terms of Service from time to time. Material changes will be communicated by email and/or an in-app notice with at least 30 days' notice before they take effect. Continued use of Cindera after the effective date constitutes acceptance of the updated terms.