The Platform provides modules for e-invoicing, billing, revenue management, payment links, recurring billing, regulatory compliance, archival, and reporting. Abzer may modify, enhance, or discontinue any feature or module at its discretion. The Platform is offered strictly as a hosted service; no source code or software ownership is transferred to the Merchant.

Only duly licensed businesses authorized to issue electronic invoices in KSA may register for the Platform. By registering, the Merchant confirms that it holds all required commercial and tax registrations and that the person signing up has legal authority to bind the entity. Abzer may request verification documents and perform know-your-business (KYB) checks before activation. Onboarding approval is subject to Abzer’s discretion, and refusal or delay does not create liability.

Each Merchant must designate at least one administrator to manage user access. All activities performed through registered credentials are deemed authorized by the Merchant, who remains solely responsible for safeguarding login details and ensuring compliance with internal controls. Abzer may suspend or terminate accounts found to be non-compliant, incomplete, or fraudulent.

Abzer will provide access to the Platform and its standard modules in accordance with the selected subscription plan. Setup assistance and configuration support may be provided as a one-time service. The Platform is continually updated to maintain compatibility with evolving regulatory and security requirements, but Abzer makes no representation that it will meet every specific business or technical need of the Merchant.

The Platform facilitates compliance with the e-invoicing framework of the Zakat, Tax and Customs Authority (ZATCA) but does not constitute tax or legal advice. The Merchant is solely responsible for the accuracy of all invoice data, tax amounts, and filings. Abzer acts only as a technology provider transmitting data to and from ZATCA systems and bears no responsibility for regulatory penalties arising from inaccurate submissions.

Abzer hosts production environments within KSA in compliance with National Data Management Office (NDMO) standards and implements information-security measures consistent with ISO 27001 and SOC 2. The Merchant remains the data controller under the Personal Data Protection Law (PDPL) and must ensure all uploaded personal data is lawfully collected. Any regulatory fines or investigations resulting from the Merchant’s misuse of data shall be fully indemnified by the Merchant.

The Platform may include optional payment and checkout features that connect Merchants with licensed payment service providers (PSPs). Abzer’s role is purely technical: it does not process, store, or hold funds. All PSP accounts are established directly between the Merchant and the PSP, each operating under its own terms. Abzer is not liable for approval decisions, settlement delays, chargebacks, or PSP outages.

Cardholder data is handled exclusively by PSPs through tokenized or hosted payment pages; Abzer operates within PCI DSS SAQ A scope. Fraud-screening features are provided for convenience only and do not guarantee prevention of fraudulent activity.

The Merchant bears full responsibility for all actions under its account, for maintaining accurate data, and for ensuring ongoing compliance with KSA laws. Abzer is not responsible for errors in data entry, calculation, or integration. The Merchant must maintain proper security controls, pay all subscription fees on time, and refrain from using the Platform for any unlawful purpose.

The Merchant agrees to indemnify Abzer against all claims, penalties, or losses arising from misuse of the Platform, violation of law, or failure to secure credentials.

Recurring-billing features are optional and depend on the Merchant’s PSP. The Merchant must obtain explicit consent from customers before initiating recurring charges and maintain verifiable records of such authorization. Tokens used for recurring payments are generated and stored by PSPs; Abzer only transmits anonymized references and cannot access or decrypt them.

Abzer is not liable for failed schedules, chargebacks, or refunds. The Merchant remains solely responsible for cancellations, customer notifications, and dispute management in accordance with PSP and card-scheme rules.

All services are provided on a paid-subscription basis as per the active plan. Prices are exclusive of VAT and other applicable taxes. Payments are due upon invoice issuance and must be made via approved channels.

If payment is delayed, Abzer may apply a reasonable administrative or reinstatement fee to cover additional processing costs (not interest) and may suspend or terminate access after seven days of non-payment. All fees are non-refundable except for proven duplicate billing or confirmed Abzer error.

Subscriptions renew automatically unless cancelled at least five days before expiry. Upgrades take effect immediately; downgrades at renewal. Optional services—such as custom integration, archival exports, or data-migration—are billed separately.

For international payments, the Merchant must ensure full receipt in SAR net of bank charges.

Abzer maintains an information-security framework aligned with ISO 27001, SOC 2, and PDPL requirements. All data in transit is protected with TLS 1.3 or higher, and data at rest is encrypted with AES-256. Daily backups are maintained across separate availability domains within KSA and retained for 30 days unless a paid archival plan is active.

In case of a confirmed breach, Abzer will notify the Merchant within 72 hours of awareness. Abzer’s role under PDPL is that of a data processor, and the Merchant, as data controller, is responsible for lawful collection and use of personal data.

After termination, data is retained for 30 days for export, then permanently deleted, except for minimal metadata retained for compliance purposes. Abzer does not warrant absolute security and is not liable for indirect or consequential losses resulting from cyber incidents beyond its reasonable control.

Each party agrees to protect the other’s confidential information with reasonable care. Abzer’s confidential information includes its source code, system architecture, pricing, and product documentation. Merchant data uploaded to the Platform is also treated as confidential.

Obligations do not apply to information already public, lawfully known, or independently developed. Either party may disclose information if required by law, provided notice is given where permitted. Abzer may retain minimal data copies for legal or backup purposes, and confidentiality obligations survive for three years—or indefinitely for trade secrets and security architectures.

Abzer strives to maintain 99.9 % monthly application-layer uptime, consistent with Oracle Cloud Infrastructure standards. Downtime caused by ZATCA systems, PSPs, network providers, or maintenance windows is excluded.

If monthly uptime materially falls below the target, Abzer may, at its discretion, extend the subscription term or issue a goodwill credit. Such remedies are discretionary and non-monetary. The Platform is provided “as is” and “as available,” without any implied warranties.

The Merchant may terminate its subscription with 30 days’ written notice after settling all dues. Abzer may terminate immediately for non-payment, breach, fraud, or regulatory reasons.

Upon termination, the Merchant has 15 days to export data (PDF/A-3 and ZATCA XML). After that, Abzer may permanently delete the data. A managed archive may be provided as a paid professional service.

Suspension does not pause billing or entitle the Merchant to refunds. Sections concerning confidentiality, liability, and indemnity survive termination.

Abzer’s liability is strictly limited. All claims, whether in contract or tort, are subject to the following limitations:

• 14.2 Aggregate Cap: Abzer’s total cumulative liability shall not exceed the subscription fees actually paid by the Merchant during the six (6) months preceding the event giving rise to the claim.
• 14.3 Exclusions: Abzer shall not be liable for loss of profits, data, goodwill, business interruption, or any indirect, consequential, or special damages.
• 14.4 Third-Party Dependencies: Abzer is not liable for failures caused by other systems, payment gateways, Internet providers, or Force Majeure events.
• 14.5 Third-Party Claims: The Merchant is responsible for any disputes or claims from its own customers or regulators.
• 14.6 Essential Basis of the Commercial Understanding: The Merchant acknowledges that the fees charged reflect the agreed allocation of risk between the parties and that these limitations are an essential part of their commercial understanding. Without them, Abzer could not offer the Platform on the same terms, scope, or pricing.
• 14.7 Exceptions (Carve-Outs): These limitations do not apply to liability arising from Abzer’s proven fraud or willful misconduct, or to liabilities that cannot legally be excluded. Nothing in this Section shall be interpreted as expanding Abzer’s liability beyond the minimum extent required by law.
• 14.8 Claims Period Limitation: Any claim must be initiated within six (6) months of the event giving rise to it; otherwise, it is deemed waived and permanently barred. This period reflects the commercial allocation of risk and applies to the fullest extent permitted by law.
• 14.9 No Set-off or Withholding: The Merchant must pay all fees in full and may not offset or withhold payments against any claim.

The Merchant shall defend and indemnify Abzer and its affiliates from all claims, losses, fines, and expenses arising from the Merchant’s breach of these Terms, non-compliance with law, or misuse of the Platform.

Abzer provides only a limited intellectual-property indemnity for claims alleging that the unmodified Platform infringes a registered KSA patent, copyright, or trademark. Abzer’s options are to procure usage rights, modify the Platform, or terminate the affected module and refund unused fees. This represents the Merchant’s sole remedy and Abzer’s entire liability for IP infringement.

Abzer shall not be liable for failure or delay in performance caused by events beyond its reasonable control, including natural disasters, war, cyberattacks, governmental orders, or third-party system failures. During such events, obligations other than payment are suspended without liability. If a Force Majeure event lasts over 30 days, either party may terminate the affected services, with no damages or refunds other than prepaid unused fees.

The parties shall first attempt to resolve disputes amicably through good-faith discussions. If unresolved within 30 days, disputes shall fall under the exclusive jurisdiction of the courts of Riyadh, Kingdom of Saudi Arabia, and governed by Saudi law.

At Abzer’s sole discretion, disputes may instead be referred to arbitration under the Saudi Center for Commercial Arbitration (SCCA), conducted in English by one arbitrator. Each party bears its own costs. Abzer may seek interim injunctive relief in any competent court to protect its IP or data security.

All claims must be brought individually; class or collective actions are prohibited. The English version of these Terms prevails over any translation.

These Terms, together with any active Order or Plan, form the entire agreement between Abzer and the Merchant. In case of inconsistency, the Order takes precedence, followed by these Terms.

The Merchant may not assign rights or obligations without Abzer’s consent. Notices will be deemed delivered when sent by email or posted on the Merchant dashboard. The relationship is that of independent contractors.

If any clause is held invalid, the remainder remains enforceable. These Terms create no third-party rights except for Abzer affiliates expressly named. Key provisions—fees, confidentiality, liability, indemnity, and dispute resolution—survive termination.