B
Blobify
Legal

Blobify Terms of Service

Effective date: 9 June 2026

These Terms of Service ("Terms") govern access to and use of Blobify's websites, dashboard, APIs, Model Context Protocol ("MCP") tools, software development kits, generated code, and related services (collectively, the "Service").

The Service is provided by Slidesome ehf, Icelandic company registration number (kennitala) 410618-0790, based in Iceland ("Blobify", "we", "us", or "our").

By creating an account, accepting an order form, or using the Service, you agree to these Terms. If you use the Service for an organization, you confirm that you have authority to bind that organization. In that case, "Customer" and "you" mean that organization.

1. The Service

Blobify is a bucket-first content management service. It allows Customers to manage schemas, content, assets, publishing workflows, permissions, integrations, and automation while storing Customer Content in storage controlled by the Customer, such as an Amazon S3 or Cloudflare R2 bucket.

Blobify's application infrastructure stores the limited account, authentication, organization, configuration, security, and operational data needed to provide the Service. Customer Content is written to the Customer's bucket and is not used as Blobify's primary content database.

The Service may include beta, preview, early-access, or experimental features. Such features may be changed or discontinued and may be less reliable than generally available features.

2. Accounts and Organizations

You must:

  • provide accurate account information and keep it current;
  • keep passwords, API keys, OAuth grants, and other credentials secure;
  • promptly revoke credentials that may have been compromised;
  • use reasonable safeguards for administrator accounts; and
  • notify us at [email protected] of suspected unauthorized access.

You are responsible for activity performed through your account and for users, agents, and integrations you authorize. Organization administrators control membership, roles, space access, API keys, connected applications, webhooks, storage configuration, and organization deletion.

You must be at least 18 years old and legally capable of entering into these Terms. The Service is intended for business and professional use.

3. Customer-Controlled Storage

Unless an order form expressly states otherwise, you provide and control the bucket used with Blobify. You are responsible for:

  • your agreement and account with the storage provider;
  • storage, bandwidth, request, CDN, and related provider charges;
  • selecting the storage region and configuring residency requirements;
  • bucket access policies, CORS settings, encryption, versioning, backups, and lifecycle rules;
  • determining which content and asset paths are public or private;
  • using credentials with appropriately limited permissions; and
  • maintaining independent backups where appropriate.

Blobify requires permission to read, create, update, list, and delete objects within the configured bucket to perform Customer instructions. You grant Blobify that limited permission for the duration of your use of the Service.

Public bucket settings, public asset links, drop zones, media players, webhook destinations, and published content may make information available to third parties. Path prefixes make URLs harder to guess but are not an access-control mechanism. You are responsible for deciding what may be published or shared.

Your bucket and Customer Content remain available independently of Blobify. Disconnecting or deleting a Blobify organization removes Blobify-side configuration and access but does not delete objects from your bucket unless you separately instruct Blobify to delete specific bucket objects through an available Service function.

4. Customer Content

"Customer Content" means content, files, assets, schemas, metadata, and other material that you or your users submit to, publish through, or store using the Service.

As between the parties, you retain all rights in Customer Content. You grant Blobify a non-exclusive, worldwide, limited licence to access, copy, transmit, transform, and otherwise process Customer Content only as necessary to:

  • provide, secure, maintain, and support the Service;
  • carry out your instructions;
  • prevent or address technical, security, or legal issues; and
  • comply with applicable law.

You are responsible for Customer Content and confirm that you have all rights, permissions, notices, and lawful bases needed to process it through the Service. You must not use the Service to process Customer Content in a manner that violates law or another person's rights.

Blobify does not acquire ownership of Customer Content and does not use Customer Content to train general-purpose artificial intelligence models unless you separately and expressly agree.

5. Data Protection

Each party will comply with applicable data protection law, including the General Data Protection Regulation (EU) 2016/679 as incorporated into the European Economic Area and Icelandic Act No. 90/2018.

For account, billing, security, and direct service-relationship data, Blobify acts as an independent controller as described in the Privacy Policy.

Where Blobify processes personal data contained in Customer Content on the Customer's behalf, the Customer is the controller and Blobify is the processor. The parties will enter into Blobify's Data Processing Agreement ("DPA") where required by Article 28 GDPR. If there is a conflict concerning personal-data processing, the DPA prevails over these Terms.

The Customer must not use the Service for special-category data, criminal offence data, children's data, health records, financial account credentials, or similarly sensitive regulated data unless the parties have expressly agreed in writing on appropriate safeguards and the Customer has completed any required risk assessment.

6. Acceptable Use

You must not:

  • break the law or infringe intellectual property, privacy, confidentiality, publicity, or other rights;
  • upload or distribute malware or malicious code;
  • gain or attempt to gain unauthorized access to accounts, systems, buckets, or data;
  • probe, scan, or test vulnerabilities except under a written security testing authorization from Blobify;
  • interfere with the integrity, security, or availability of the Service;
  • bypass rate limits, access controls, plan limits, or security measures;
  • use the Service to send spam, phishing, fraudulent, or deceptive material;
  • publish unlawful, abusive, or harmful content;
  • resell or provide the Service as a standalone competing service without our written permission; or
  • use automated systems in a way that imposes an unreasonable load on the Service.

We may investigate suspected violations and suspend affected access where reasonably necessary to protect the Service, Customers, or third parties.

7. AI, MCP, and Integrations

The Service may allow you to connect third-party AI assistants, identity providers, storage providers, webhook endpoints, deployment systems, or other applications.

You control which integrations you authorize and the organizations, roles, spaces, and permissions granted to them. Third-party services are governed by their own terms and privacy practices. Blobify is not responsible for a third-party service or for actions it performs using permissions you granted.

AI-generated actions and outputs may be inaccurate or unintended. You are responsible for reviewing material changes, publications, deletions, schema updates, and bulk operations before or after execution as appropriate. Use least-privilege credentials and revoke access that is no longer needed.

8. Fees, Taxes, and Plan Changes

Fees, usage allowances, billing periods, and payment terms are shown in the Service or an applicable order form. Unless stated otherwise:

  • fees are exclusive of VAT and other taxes;
  • you are responsible for taxes other than taxes on Blobify's net income;
  • subscriptions renew for the stated billing period until cancelled; and
  • amounts paid are non-refundable except where required by law or expressly stated in an order form.

We may change plans or prices by giving reasonable advance notice. A price change applies from the next renewal after the notice period. We may suspend a paid account for overdue undisputed amounts after reasonable notice.

9. Security

Blobify will maintain reasonable technical and organizational measures appropriate to the nature of the Service. These measures include access controls, credential hashing or encryption as appropriate, and operation of core Blobify infrastructure in the European Economic Area.

No service is completely secure. You are responsible for securely configuring your bucket, integrations, users, public links, and endpoints. You should rotate storage credentials after disconnecting Blobify or whenever compromise is suspected.

10. Intellectual Property

Blobify and its licensors retain all rights in the Service, software, documentation, branding, and related technology, excluding Customer Content and third-party components.

Subject to these Terms and payment of applicable fees, Blobify grants you a limited, non-exclusive, non-transferable, revocable right to use the Service during your subscription for your internal business purposes.

You may use code generated specifically for your organization, such as a generated TypeScript client, in your own applications. Any third-party or open-source components remain subject to their applicable licences.

If you provide feedback, you grant Blobify a perpetual, worldwide, royalty-free right to use it without restriction or obligation.

11. Confidentiality

Each party may receive non-public information that is identified as confidential or that reasonably should be understood to be confidential. The receiving party will use that information only to perform or receive the Service and will protect it using reasonable care.

Confidential information does not include information that the receiving party can show is public through no breach, was already lawfully known, was independently developed, or was lawfully received without confidentiality restrictions.

A party may disclose confidential information where legally required, after giving notice where permitted.

12. Service Changes and Availability

We may improve, modify, or discontinue parts of the Service. We will provide reasonable notice of a material reduction in core paid functionality when practicable.

Maintenance, provider failures, internet conditions, security incidents, force majeure events, and beta operation may affect availability. Unless an order form includes a service-level agreement, the Service is provided without an availability guarantee.

13. Suspension

We may suspend access where reasonably necessary because:

  • you materially breach these Terms;
  • your use creates a security risk or may harm the Service or another person;
  • continued provision may violate law;
  • required fees are overdue; or
  • a storage provider or other essential provider suspends the relevant service.

Where practicable, we will give notice and an opportunity to remedy the issue. We will limit a suspension to the scope and duration reasonably necessary.

14. Cancellation and Termination

You may stop using the Service at any time and may cancel according to the controls shown in the Service or your order form.

Either party may terminate for a material breach that is not cured within 30 days after written notice. Blobify may terminate immediately for an unlawful use or a serious security threat.

On termination:

  • your right to use the Service ends;
  • outstanding fees remain due;
  • Blobify may delete or anonymize Blobify-side account and configuration data subject to legal retention duties and backup cycles;
  • Blobify will initiate deletion of configured bucket credentials from its active systems when the organization is deleted, subject to technical recovery procedures and legal retention duties; and
  • Customer Content remains in your bucket under your control.

Before termination, you should verify direct bucket access, retain required configuration, download any information you need from Blobify's account systems, and rotate or revoke credentials previously supplied to Blobify.

Sections that by their nature should survive termination will survive, including ownership, confidentiality, accrued payment obligations, disclaimers, liability limits, indemnities, and dispute terms.

15. Disclaimers

To the maximum extent permitted by law, the Service is provided "as is" and "as available." Blobify disclaims implied warranties of merchantability, fitness for a particular purpose, non-infringement, and uninterrupted or error-free operation.

Blobify does not warrant that:

  • Customer Content, bucket policies, or public links are legally compliant;
  • third-party storage, AI, identity, webhook, or hosting services will remain available;
  • generated code or AI-assisted actions will be error-free; or
  • the Service will satisfy requirements specific to a regulated industry without a separate written agreement.

Nothing in these Terms excludes a warranty or right that cannot lawfully be excluded.

16. Liability

To the maximum extent permitted by law, neither party will be liable for indirect, incidental, special, punitive, or consequential damages, or for loss of profits, revenue, goodwill, anticipated savings, or business opportunity.

Blobify is not liable for loss arising from:

  • Customer bucket configuration or credentials;
  • Customer Content or publishing decisions;
  • a third-party service;
  • actions performed by authorized users, API keys, OAuth clients, or integrations; or
  • failure to maintain backups controlled by the Customer.

Except for liability that cannot lawfully be limited, Blobify's total aggregate liability arising from the Service during any 12-month period will not exceed the fees paid or payable by the Customer to Blobify for the Service during the 12 months before the event giving rise to liability.

Nothing in these Terms limits liability for fraud, fraudulent misrepresentation, wilful misconduct, or death or personal injury caused by negligence, or any other liability that cannot be limited under applicable law.

17. Indemnity

You will defend and indemnify Blobify against third-party claims, damages, and reasonable costs arising from:

  • Customer Content;
  • your unlawful or unauthorized use of the Service;
  • your breach of Section 4 or Section 6; or
  • your infringement of another person's rights.

Blobify will promptly notify you of a claim and reasonably cooperate at your expense. You may not settle a claim in a manner that admits fault by or imposes an obligation on Blobify without our written consent.

18. Governing Law and Disputes

These Terms are governed by the laws of Iceland, without regard to conflict-of- law rules.

The District Court of Reykjavík has exclusive jurisdiction over disputes arising from these Terms, unless mandatory law requires otherwise. Before filing a claim, each party will attempt in good faith for 30 days to resolve the dispute through written notice and direct discussion.

If mandatory consumer law applies to you despite the business purpose of the Service, nothing in these Terms removes rights or jurisdiction protections that cannot be waived.

19. Changes to These Terms

We may update these Terms. We will give reasonable notice of material changes, for example through the Service or by email. The updated Terms will state their effective date. Continued use after the effective date constitutes acceptance, except where applicable law requires another form of consent.

20. General

Neither party may assign these Terms without the other's consent, except that Blobify may assign them in connection with a merger, reorganization, sale of assets, or transfer to an affiliate.

Blobify may use subcontractors to provide the Service and remains responsible for their performance as required by law and the DPA.

Neither party is liable for delay caused by events beyond its reasonable control.

Failure to enforce a provision is not a waiver. If a provision is unenforceable, it will be modified to the minimum extent necessary and the remaining provisions remain effective.

These Terms, the Privacy Policy, any applicable DPA, and any order form are the entire agreement concerning the Service. An order form prevails over these Terms only where it expressly identifies the provision being changed.

21. Contact

Questions or legal notices may be sent to:

Slidesome ehf
Kennitala: 410618-0790
Iceland
[email protected]