Flowlu Marketplace Developer Terms

1. General Provisions

1.1. These Terms govern the participation of developers in the Flowlu Marketplace (hereinafter — the Marketplace), located within the Flowlu product. The current Marketplace URL is published in the Developer Account.

1.2. The Marketplace is operated by Cloud22 L.L.C-FZ, Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, United Arab Emirates, PO 95195 (hereinafter — Flowlu).

1.3. By using the Marketplace as a developer, you confirm that you have read these Terms and accept them in full. If you do not agree with any provision of these Terms, you may not participate in the Marketplace.

1.4. Flowlu may unilaterally amend these Terms by publishing the updated version in the Developer Account and/or sending a notification to the Developer Account. Continued use of the Marketplace after the amendments take effect constitutes acceptance of the updated Terms.

2. Definitions

Developer — a legal entity or individual registered in the Marketplace and publishing Apps.

App — software created by the Developer using the Flowlu JS SDK and/or REST API, embedded into a user's Portal as a mini-application.

Marketplace — a catalog of public Apps within the Flowlu product, available for self-installation by Users.

User — a Flowlu customer who installs an App into their Portal.

Portal — a customer's account (workspace) in the Flowlu system.

Developer Account — a section within Flowlu for managing Apps.

OAuth Permissions — a set of access rights to a User's Portal data that an App requests upon installation.

Developer Guide — a document defining technical requirements for building Apps (JS SDK, REST API, local apps, sandbox environment). Published by Flowlu and forming an integral part of these Terms.

3. Developer Registration

3.1. Legal entities and individuals registered under the laws of their country may participate in the Marketplace. Each Flowlu Portal may be registered in the Marketplace as only one Developer.

3.2. Only an administrator of a Flowlu Portal acting on behalf of their organization may submit a registration application.

3.3. To register, the Developer completes an application form in the Developer Account and provides:

• full legal name of the organization;

• entity type (company or individual);

• Tax ID / VAT number;

• registered address;

• country of registration;

• contact details of the responsible person;

• company or developer website;

• brief description of the Apps intended for publication.

3.4. Flowlu reviews the application within 14 (fourteen) business days of its submission and decides whether to approve or reject it. If additional documents or information are required during review, the review period may be extended by up to 14 (fourteen) business days from the date of receipt. Flowlu may reject an application without explanation. Following a rejection, Flowlu may, at its sole discretion and without explanation, refuse to accept a new registration application.

3.5. The Developer is responsible for the accuracy of the information provided and must keep it up to date.

4. Publishing Apps

4.1. Once registration is approved, the Developer may submit Apps for publication in the Marketplace through the Developer Account.

4.2. Each App undergoes review by Flowlu before publication. Requirements for App content and presentation are set out in a separate document — the Flowlu Marketplace App Requirements. Flowlu publishes the App or notifies the Developer of a rejection within 14 (fourteen) business days of submission. If additional information is required during review, the review period may be extended by up to 14 (fourteen) business days from the date of receipt.

4.3. Flowlu may reject an App or request revisions without explanation.

4.4. Publishing Apps in the Marketplace is free of charge. Flowlu is not a party to any financial relationship between the Developer and Users. Flowlu reserves the right to introduce a monetization model (commission or other paid Marketplace services) in the future, with no less than 30 (thirty) days' notice to Developers via the Developer Account before it takes effect.

4.5. If an App is paid, the Developer independently handles payments, invoicing, and user support. Flowlu is not a party to such transactions and bears no liability in connection with them.

5. Developer Obligations and Liability

5.1. The Developer shall:

a) ensure the App is operational and available;

b) provide Users with support regarding App functionality;

c) promptly fix bugs and security vulnerabilities in the App;

d) maintain a published Privacy Policy containing at minimum: the Developer's name, types of personal data processed, purposes of processing, information on data transfers to third parties (if applicable), data protection measures implemented, and the procedure for deleting data upon request;

e) as an independent data controller, process User data in accordance with the applicable laws of the end user's country;

f) request only those OAuth Permissions necessary for the declared functionality of the App;

g) notify Flowlu of any discovered App vulnerability or security incident involving User data within 2 (two) business days of discovery;

h) not send Users marketing, promotional, or other messages unrelated to the App's functionality without explicit User consent.

5.2. The Developer bears full responsibility for:

• the content, operation, and security of the App;

• the App's compliance with applicable law;

• any losses caused to Users as a result of using the App.

5.3. Flowlu is not liable to Users for the operation, security, data integrity, or support quality of third-party Apps.

6. Prohibited Content and Functionality

6.1. The Developer may not publish Apps that:

a) contain malicious code, spyware, or adware;

b) collect User data beyond the declared OAuth Permissions;

c) infringe the intellectual property rights of third parties;

d) contain materials that violate applicable law (including prohibited content, discriminatory materials, etc.);

e) intentionally mislead Users regarding the App's functionality or ownership;

f) violate these Terms or the Marketplace App Requirements;

g) use artificial methods to manipulate ratings, reviews, install counts, or other Marketplace metrics.

7. Flowlu's Rights

7.1. Flowlu may at any time, without prior notice:

• suspend or withdraw the publication of any App;

• block a Developer's Marketplace account;

• request from the Developer any information about the App, including source code, if necessary to verify compliance with security requirements or these Terms. The Developer shall provide the requested information within a reasonable time.

7.2. If a Developer's account is blocked, all of their Apps are removed from the Marketplace and cease to function in all User Portals where they were installed.

7.3. Flowlu may modify the Marketplace functionality, JS SDK, and REST API. For critical changes that break existing Apps, Flowlu will notify Developers in advance but does not guarantee backward compatibility.

7.4. Flowlu is not obligated to retain App data or settings after a Developer's account is blocked.

8. User Data

8.1. The Developer accesses User Portal data exclusively via OAuth 2.0 within the permissions granted by the User upon App installation.

8.2. The Developer may not use User data for purposes unrelated to the App's operation.

8.3. The Developer shall protect User data from unauthorized access and breaches.

8.4. Upon App uninstallation by a User, the Developer shall delete that User's associated data within the timeframe set out in the Developer's Privacy Policy.

9. Intellectual Property

9.1. The Developer retains all rights to their App.

9.2. By publishing an App in the Marketplace, the Developer grants Flowlu a royalty-free, non-exclusive license to use the App's name, description, icon, and screenshots for the purpose of promoting and displaying the App in the Marketplace.

9.3. The Developer warrants that the App and all associated materials do not infringe the intellectual property rights of any third party.

10. Termination of Participation

10.1. The Developer may remove their Apps from the Marketplace at any time through the Developer Account. Once removed, the App ceases to function in all User Portals.

10.1.1. If the removed App's functionality does not allow the User to independently export their data (or if the User is otherwise dependent on data stored in the App), the Developer must, prior to removal: (a) notify affected Users of the upcoming App discontinuation in advance; (b) provide the technical means and a reasonable period (no less than 30 days) for data export or migration.

10.2. Flowlu may unilaterally terminate a Developer's access to the Marketplace for violation of these Terms, as well as for other reasons at its discretion. Following termination, Flowlu may, at its sole discretion and without explanation, refuse the Developer's re-participation in the Marketplace.

11. Miscellaneous

11.1. Any disputes shall be resolved through negotiation, and if no agreement is reached, through legal proceedings at the location of Flowlu.

11.2. If any provision of these Terms is found to be invalid, the remaining provisions shall remain in full force and effect.