General Terms and Conditions of Use – AbsolutHR
Last updated on these Terms: February 14, 2026
Presentation: This document establishes the General Terms and Conditions of Use (“Terms”) applicable to AbsolutHR, human resources management software provided by ConnectPBS (hereinafter referred to as “Provider” or “ConnectPBS”). AbsolutHR is an online platform based on Odoo applications, intended for companies (“Client”) for managing human resources operations, including the processing of personal data of employees and other information related to their HR activities.
The use of AbsolutHR by the Client and its authorized users (“Users”) is conditioned upon full acceptance of these Terms, and careful reading of this document is essential before subscribing to or using the service. By subscribing, accessing, or using AbsolutHR, the Client declares that they have read, understood, and fully accepted these Terms and our Privacy Policy. If the Client or their representatives do not agree with any clause provided herein, they must refrain from using the platform and the services of AbsolutHR.
The Terms, along with our Privacy Policy of the AbsolutHR and any commercial proposals or specific contracts signed, constitute the entire agreement between ConnectPBS and the Client, prevailing over any other documents or prior understandings in case of divergence. The person entering into this contract on behalf of the Client declares that they have the legal authority to bind the organization to these Terms.
Note: These Terms are a binding legal contract. If you have any questions about any provision, contact ConnectPBS before using AbsolutHR.
Table of Key Clauses
| Clause | Brief Description |
| 1. Introduction and Acceptance of the Contract | Presents ConnectPBS and AbsolutHR, formalizes the usage agreement, and establishes that the use of the platform implies full acceptance of these Terms and the Privacy Policy. |
| 2. Purpose of the Service | Describes the purpose and functionalities of AbsolutHR as a platform for managing people and HR operations. Clarifies the scope of the services provided and emphasizes that AbsolutHR does not constitute legal or labor consulting. |
| 3. License of Use and Ownership | Grant of a limited (non-exclusive and non-transferable) license to use the software during the contractual term. States the ownership of intellectual property of AbsolutHR by ConnectPBS (and its licensors, including Odoo S.A. for platform components) and prohibits unauthorized uses (such as copying, reverse engineering, or improper commercial exploitation of the software). |
| 4. Proper Use and Customer Obligations | Establishes the rules for permitted use of AbsolutHR and the obligations of the Customer and Users, including keeping access credentials confidential. It expressly prohibits misuse or illegal uses (for example, violation of laws, introduction of viruses, unauthorized access, data abuse, etc.), providing for the suspension or termination of the service in case of serious violations of the Terms. |
| 5. Privacy and Data Protection | Defines the commitments for personal data protection in AbsolutHR, in accordance with the GDPR and applicable Portuguese legislation. Specifies the roles of Data Controller (the Customer) and Data Processor (ConnectPBS), the existence of a Data Processing Agreement (DPA), and the privacy and security safeguards for the data of employees entered into the platform (e.g., rights of data subjects, data retention and deletion policies after the end of the contract, etc.). |
| 6. Integration with Odoo and Security | Explains that AbsolutHR is developed on the Odoo platform and that certain terms and policies of Odoo S.A. (ex: Odoo Subscription Agreement and Odoo Privacy Policy) apply to the use of the system. Highlights the measures of technical and organizational security implemented, as well as routines for security certifications on the Odoo platform [Odoo Legal Agreement], [Odoo Security]. |
7. Security and Confidentiality Measures in AbsolutHR | Details the technical and organizational security measures implemented by ConnectPBS in the operation of AbsolutHR, based on AWS infrastructure and the architecture of the Odoo platform. Includes practices such as logical data isolation by client, encryption of communications (TLS/SSL) and of data at rest (AES-256), backup policies with a minimum retention of 3 months, recovery objectives (RPO/RTO), and compliance with GDPR through principles of “privacy by design” and “privacy by default”. Clarifies that data is stored in data centers with international certifications (ISO/IEC 27001, SOC 2 Type II), with 24x7 surveillance, physical access control, and protection against network attacks (including DDoS mitigation). Reinforces ConnectPBS's commitment to the security, confidentiality, and integrity of personal data processed on the platform. |
| 7. Technical Support, Updates, and SLA | Defines the conditions of technical support provided by ConnectPBS (service hours, support channels) and the policy of updates and maintenance of the platform. Clarifies that technical interventions (updates or maintenance) may occur with prior notifications when possible. Establishes parameters of service level (SLA) with a target of high availability (for example, a target of 99.9% monthly uptime) and response time for incident resolution. |
| 8. Responsibilities of ConnectPBS (Provider) | Defines the responsibilities of the Provider. Includes the provision of the service “as is” (as is), without additional warranties of fitness for specific purposes beyond those provided by law. Establishes limits of liability – ConnectPBS is not liable for indirect damages, lost profits, or data loss, and its total maximum liability, in the event of a ruling, is limited to the total amount paid by the Client in the 12 months prior to the event causing the damage. Clause subject to applicable legal exceptions. |
| 9. Client Obligations and Indemnification | Reiterates the Client's duties to comply with these Terms and the law. Provides that the Client must indemnify ConnectPBS for any losses, third-party claims, or fines arising from misuse of AbsolutHR or from the Client's or its Users' breach of these Terms. Also provides for sanctions for the Client's non-compliance, including the possibility of suspension or termination of access to the service in case of non-payment or serious violation of contractual obligations. |
| 10. Payments, Duration, and Cancellation | Establishes the commercial conditions: plans and prices of the subscription to AbsolutHR, and billing and payment terms (frequency, taxes, accepted payment methods). Defines the duration of the contract and the automatic renewal of subscriptions, as well as the process for cancellation. Clarifies that, as a rule, there are no refunds of amounts paid in case of early cancellation, and details the consequences of the termination of the contractual relationship (deactivation of access and handling of data post-termination). |
| 11. Final Provisions | General clauses regarding any changes to these Terms (the right of ConnectPBS to change conditions, notifying the Client), survival of obligations after termination (e.g.: confidentiality, data protection, late payment), and definition of the applicable law and competent jurisdiction for dispute resolution (Portuguese law and European Union law as applicable, with the choice of competent jurisdiction in Portugal, without prejudice to the Client's non-disposable rights stipulated by law). |
1. Introduction and Acceptance of the Contract
1.1. Identification of the Parties: This contract is entered into between ConnectPBS (the company responsible for the development and provision of the AbsolutHR software) and the Client (the legal entity that subscribes to and uses the service for human resources management in its organization). AbsolutHR is a human resources software platform based on Odoo technology, provided by ConnectPBS under the terms established herein. The User designates any person authorized by the Client to access and use AbsolutHR on behalf of the Client (for example, company HR system administrators, employees, or other end users invited by them).
1.2. Acceptance and Binding: By the subscriber (Client) registering, formally adhering to, or using AbsolutHR, the full and unconditional acceptance of these Terms and Conditions, as well as our Privacy Policy, which is an integral part of this contract, is established. If the Client does not agree with any clause or condition, they should not use AbsolutHR. Continued use of the platform, from the moment of subscription and with each subsequent access, will be considered as agreement and continuous adherence to the current Terms.
1.3. Legal Capacity: The Client declares to have legal capacity to contract the services provided herein and, if a legal entity, that the person accepting this contract on its behalf is duly authorized and has the power to bind the Client to the obligations set forth herein. The Client will be responsible for ensuring that only users of legal age and with legal authorization access AbsolutHR in their organization. The use of AbsolutHR by minors or by individuals without legal capacity to contract, as well as by any entities prohibited by applicable laws from using services of this nature, is prohibited.
1.4. Contractual Relationship and Applicable Documents: These Terms, along with the Privacy Policy of AbsolutHR and any Commercial proposals or specific contracts signed between the Client and ConnectPBS (for example, service provision contracts or customized service level agreements), constitute the complete agreement governing the use of AbsolutHR by the Client. In case of conflict between these Terms and any other agreement between the parties, the more specific provisions agreed upon in writing between the parties to regulate the matter in question shall prevail, provided they do not contradict the fundamental obligations of confidentiality, data protection, and licensing set forth in this document.
2. Purpose of the Service and General Description
2.1. About AbsolutHR – HR Management Platform: The AbsolutHR is a software as a service (SaaS) for human resources management and personnel administration, developed by ConnectPBS based on Odoo technology. The platform offers companies an integrated solution to manage HR operations, including employee registration, attendance and punctuality control, vacation and absence management, payroll and benefits processing, training organization and performance evaluations, recruitment, and other HR functionalities. The primary objective of AbsolutHR is to centralize and digitize HR processes, contributing to greater efficiency in personnel administration and assisting the Client in meeting labor and regulatory obligations through the tools provided.
2.2. Features and Modules: The specific functionalities made available to the Client depend on the package or modules contracted. AbsolutHR may include, among others, the following modules: Employee Management (personal and contractual data, organizational charts, documents), Time and Attendance Management (time tracking, work schedules, absences, vacations, time bank), Payroll Processing (salary calculation, benefits, taxes), Performance Management (evaluations, objectives), Recruitment (management of candidates and vacancies) and Training and Development (training records, skills). ConnectPBS provides detailed information about each module in the commercial presentation materials and user manuals of AbsolutHR. New functionalities and improvements may be added to the platform periodically through updates (see Clause 7), at no additional cost within the contracted plan, unless expressly agreed otherwise.
2.3. "Scope" of the Services: ConnectPBS will make all reasonable efforts to provide AbsolutHR in accordance with the announced technical and functional characteristics. However, the Client acknowledges that it is responsible for verifying whether the software meets its specific needs. ConnectPBS does not provide, under this contract, legal, labor, accounting, or tax consulting services. Any information, document templates, or calculations provided by AbsolutHR are merely operational or informational in nature, not constituting legal or compliance advisory. The Client is responsible for ensuring that the configuration and use of the software, including parameters, formulas, and generated documents, comply with the laws and regulations applicable to their industry and jurisdiction. It is recommended that the Client seek independent professional advice for specific legal or tax matters.
2.4. Access Conditions: Access to AbsolutHR is via the Internet, through registration and authentication. Each User will have personal access credentials (username and password), linked to the Client's account, through which they can use the platform's functionalities within the permission limits defined by the Client (for example, an HR administrator will have broader access than a regular employee). The Client is responsible for providing and maintaining the technical resources necessary for Internet connection and access to the platform. ConnectPBS is not responsible for access limitations resulting from failures or deficiencies in the Client's Internet infrastructure or other factors external to the service (such as unavailability of the Client's local network).
2.5. Continuous Improvement: ConnectPBS may, over time, implement technical or functional changes in AbsolutHR to improve the security, performance, and usability of the platform. These enhancements or modifications do not alter the object of the contract and, when possible, will be communicated in advance to the Client, especially if they imply significant changes in the way the service is used. The Client understands that part of the natural evolution of cloud software involves updates and that, as long as the main scope of the contracted service is respected, ConnectPBS may change non-essential elements of the platform, introduce new functionalities, or discontinue obsolete functionalities, always aiming for the overall benefit of the system users.
3. License of Use and Intellectual Property of the Software
3.1. Grant of Limited License: ConnectPBS, as the owner and developer of AbsolutHR, grants the Client a non-exclusive, non-transferable, and limited license to access and use the platform during the term of this contract, exclusively for internal professional purposes of human resources management in their organization. This license of use is conditioned upon compliance with these Terms and the timely payment of the subscription fees agreed upon. The Client is not allowed to assign, sublicense, sell, rent, or transfer in any way this license or the rights to use AbsolutHR to third parties, except with prior written consent from ConnectPBS.
3.2. Intellectual Property Rights: ConnectPBS (and, if applicable, its licensors, including Odoo S.A. regarding the underlying Odoo technology) holds all intellectual and industrial property rights about the AbsolutHR software and its associated documentation. This includes the platform design, the source code and object code, the modules, interfaces for users, databases, reports, logos, trademarks, and content provided by ConnectPBS. These elements are protected by copyright, trademark, and patent laws and treaties. No provision of this contract shall be interpreted as a transfer of ownership of these rights to the Client; the Client acquires only the usage rights expressly described in clause 3.1 for the contracted purposes.
3.3. Software Usage Restrictions: The Client and Users may not, under any circumstances, (a) copy, modify, distribute, extract parts, create derivative works, or reverse engineer the AbsolutHR or any components of the software; (b) remove or alter copyright notices, trademarks, logos, or indications of intellectual property present in the software or its interface; (c) use the software to develop or enhance a competing product, or for any purpose not provided for in this contract, without prior written authorization from ConnectPBS. Any use of the AbsolutHR in violation of this license will be considered contractual and intellectual property rights violation, subjecting the Client to appropriate legal measures and immediate suspension of access to the platform.
3.4. Feedback and Business References: The Client agrees that any suggestions, improvements, or enhancement ideas for AbsolutHR voluntarily provided to ConnectPBS (“Feedback”) may be used by ConnectPBS freely to develop, improve, or update the software, without such fact giving rise to compensation or generating any ownership rights for the Client or Users over the implemented improvements. The Client also authorizes ConnectPBS to refer to their name and logo as a user/client of AbsolutHR in marketing materials and on the website, solely for informational and promotional purposes, respecting any brand usage guidelines that the Client provides. If the Client wishes to revoke this authorization, they must notify ConnectPBS in writing.
4. Proper Use of the Platform and Client Obligations
4.1. General Usage Rules: The Client declares that they will use AbsolutHR and ensure that their Users use it diligently, lawfully, and in accordance with these contractual conditions and applicable legislation. Access to the platform is provided exclusively to support the Client's internal HR management needs; any other use, especially providing HR management services to third parties (such as outsourcing) or commercial exploitation of the platform, without authorization from ConnectPBS, is prohibited. The Client must not use AbsolutHR for any unlawful purpose, contrary to morals or public order. All usage instructions provided by ConnectPBS (for example, in manuals, documentation, or official communications) must be respected, aiming to ensure the security and efficiency of the system.
4.2. Best Practices and Access Security: The Client agrees to ensure that the access data (usernames, passwords, tokens for authentication, etc.) are kept confidential and used only by authorized individuals. Each User must have individual credentials; sharing credentials is prohibited among multiple people. The Client will be responsible for any and all activities conducted through their Users' accounts. Therefore, it is recommended to adopt good security practices, such as setting strong passwords and periodically changing them. In case of suspected unauthorized access or compromise of any User's credentials, the Client must immediately notify ConnectPBS and proceed to change the passwords or revoke the compromised accesses. ConnectPBS may provide additional security resources, such as two-factor authentication or login restrictions, and the Client is encouraged to use them for greater account protection.
4.3. Content and Information Compliance: The Client is solely responsible for all content and data entered, stored, or transmitted through AbsolutHR in their account. The Client agrees not to input or allow the storage on the platform of content that: (a) is illegal, unlawful, or infringes on the rights of third parties (for example, personal data of third parties without authorization, materials that infringe copyright, or defamatory, discriminatory, obscene, or offensive information); (b) contains viruses, malware, Trojan horses or any other malicious code that may compromise the integrity of the software or systems of ConnectPBS; or (c) may, in any way, harm or overload the platform's infrastructure or interfere with the experience of other users. The Client guarantees that all personal data entered in AbsolutHR has been obtained legitimately and that they have a legal basis for its processing (for example, consent from the data subjects, legal or contractual obligation, legitimate interests, as applicable). The Client also undertakes to keep the data updated and accurate, and not to use the platform for purposes other than those contemplated in this contract.
4.4. Unauthorized Access and Platform Security: It is prohibited for the Client or any User to attempt to bypass security mechanisms of AbsolutHR or gain unauthorized access to any modules, data, or servers of the service. Activities of hacking, port scanning, reverse engineering of communication protocols, or using automated tools for data extraction (such as bots, scrapers or similar) are strictly prohibited without prior authorization from ConnectPBS. The Client may not use AbsolutHR in a way that harms the availability, integrity, or performance of the platform, nor to collect or attempt to collect information from other clients in an unauthorized manner. Any indication of security breach, unauthorized access, or exploitation of vulnerabilities must be immediately reported to ConnectPBS.
4.5. Consequences of Misuse: ConnectPBS reserves the right to suspend or terminate temporarily or permanently the Client's access to AbsolutHR, in whole or in part, if it identifies or has strong indications that the Client or any User has violated the provisions of this contract (for example, abusive or fraudulent use of the platform, repeated delays in payment, violation of intellectual property or acceptable use rules). Whenever possible, ConnectPBS will notify the Client about the identified violation, giving them the opportunity to remedy the issue within a reasonable timeframe. However, in cases of serious infringement that justify termination for cause, access may be immediately blocked, without prejudice to other legal measures. The suspension or termination for the above reasons does not exempt the Client from the payment of amounts due until the effective date of termination of the contract, nor does it prevent ConnectPBS from claiming compensation for damages resulting from the infringements committed by the Client.
5. Privacy and Personal Data Protection
5.1. Legal Compliance – GDPR and Applicable Legislation: ConnectPBS undertakes an absolute commitment to the privacy and protection of personal data processed within the scope of AbsolutHR. The Supplier declares that it fully complies with the provisions of the General Data Protection Regulation (GDPR) – Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 – as well as the applicable national data protection laws, including Law No. 58/2019 (Portuguese legislation that ensures the implementation of the GDPR) and other relevant local or sectoral regulations. The conditions for processing personal data in the context of AbsolutHR are detailed in this clause and supplemented by the Privacy Policy of ConnectPBS, available on our website.
5.2. Roles of the Client and ConnectPBS: For the purposes of the provisions of the GDPR and other data protection legislation, the Client is the Data Controller of the personal data entered or managed in AbsolutHR, being responsible for defining the purposes and means of processing that information. ConnectPBS, in turn, will act as the Subcontractor/Data Processor on behalf of the Client, accessing and processing personal data only in accordance with the documented instructions of the Client and for the purposes set forth in this contract, as provided in Article 28 of the GDPR and other applicable regulations. Therefore, there is no transfer of control of personal data to ConnectPBS; the Client retains ownership and control over all data that they enter or collect through the platform. ConnectPBS will not carry out any processing of the Client's data for its own purposes that are incompatible with the Client's instructions or beyond what is necessary to fulfill this contract.
5.3. Data Processing Agreement (DPA): In consideration of the nature of AbsolutHR and the provisions of the GDPR, ConnectPBS provides a Data Processing Agreement (Data Processing Agreement – DPA) that complements these Terms. By accepting this contract, the Client and ConnectPBS also enter into the applicable DPA, which defines in greater detail the obligations of both parties regarding the processing of personal data on behalf of the Client. The DPA is attached or available for consultation (for example, through our website or upon request), and covers topics such as: purposes of processing, types of personal data processed, categories of data subjects, duties of the Supplier as a subcontractor, confidentiality obligations, data security measures, assistance in fulfilling the rights of data subjects, and rules for subcontracting processing (sub-processors).
5.4. Purpose of Data Processing: The personal data entered in AbsolutHR by the Client will be used by ConnectPBS exclusively to enable the use of the contracted functionalities of the platform, in accordance with the Client's instructions and the purposes inherent to human resources management. Such purposes may include, for example: maintaining employee records (name, contact details, contractual information), processing payroll and benefits, managing absences and vacations, performance evaluation, recruiting candidates, among others. ConnectPBS does not access or use the Client's data for any purposes unrelated to this contract., unless required by law or by order of a competent authority (for example, in response to a judicial or administrative order, in which case we will inform the Client, unless legally prohibited). ConnectPBS may process aggregated and anonymized data from the Client's data for statistical analysis and service improvement purposes, ensuring that no report or result allows for the individual identification of the Client or their employees.
5.5. Subcontracting and International Data Transfer: The Client authorizes ConnectPBS to use subcontractors or third-party service providers (subprocessors) to perform specific functions of personal data processing within the scope of AbsolutHR, such as cloud hosting, email sending, analytics, etc. ConnectPBS will ensure that all data subcontractors are bound by equivalent contractual obligations to those set forth in this contract and in the DPA, especially regarding confidentiality, security, and access restrictions to personal data. ConnectPBS will keep an updated list available to the Client of the main subcontractors involved in the processing of their data (for example, Odoo S.A. as the provider of the underlying platform, and other relevant data hosting or complementary service providers), either in a dedicated section of the DPA, on our website, or upon specific request from the Client.
Whenever the provision of services involves the international transfer of personal data (for example, storage or access to data from countries outside the European Economic Area), ConnectPBS is committed to taking appropriate legal measures to ensure a level of data protection equivalent to that required in the European Union. This may include, as applicable, the conclusion of Standard Contractual Clauses approved by the European Commission with subcontractors located in third countries, or ensuring that the data recipients are in jurisdictions deemed adequate by the European Commission in terms of data protection.
5.6. Rights of Data Subjects: The Client, as the data controller, is committed to informing its employees and other data subjects whose personal data is processed in AbsolutHR about the respective data processing practices, as required by law. ConnectPBS will assist the Client, to the extent possible, in fulfilling the rights of data subjects provided for in the legislation (such as right of access, rectification, deletion, objection, portability, etc.). Requests received from data subjects (for example, an employee of the Client who contacts ConnectPBS directly) will be forwarded to the Client or handled according to their instructions.
In the event of a personal data security breach that affects the Client's data, ConnectPBS is committed to notifying the Client without undue delay after becoming aware of the incident, providing sufficient information for the Client to fulfill any reporting obligations to data protection authorities and data subjects, in accordance with the GDPR. ConnectPBS will cooperate with the Client in the investigation and mitigation of the breach, taking appropriate measures to minimize any impacts.
5.7. Retention and Deletion of Data: During the term of the contract, the personal data of employees and other information of the Client will remain stored in AbsolutHR according to the functionalities of the system and this contract. After the termination of the contract, ConnectPBS will retain the Client's data for a limited period solely for the fulfillment of pending legal or contractual obligations. Unless a specific legal requirement states otherwise, ConnectPBS will adopt the following standard procedures: (a) The data will be placed in a ““blocked” or inaccessible state for normal operations immediately after the termination of the contract (or after any additional period in which the system remains active for final data extraction); (b) The blocked data will be kept for up to one (1) year for safeguarding possible residual legal obligations of the contract or for making final backup copies; and (c) once the necessary retention period has expired, all personal data of the Client will be deleted securely and definitively from the production databases and backups of ConnectPBS.
The Client is responsible for extracting or requesting a copy of their data before the end of the contract or during the immediately following period (typically, up to 30 days after the end of the subscription), if you wish to retain such data for your own records. After this operational retention period of 30 days, ConnectPBS cannot guarantee the recovery of deleted data. ConnectPBS may provide self-service mechanisms for data export (for example, features to export records or reports) before cancellation, or upon written request from the Client within the indicated retention period. After permanent deletion, the data cannot be recovered.
5.8. Privacy Policy of AbsolutHR: The complete details on how ConnectPBS handles personal data under AbsolutHR can be found in the Privacy Policy of the product, available on the ConnectPBS website (or provided along with this contract). This policy provides additional information about the types of personal data collected, legal bases for processing, duration of processing, and rights of the data subjects, complementing the provisions of this clause. In case of any discrepancy between the provisions of this clause and the Privacy Policy, the provision that provides greater protection to personal data of the data subjects shall prevail, without prejudice to the rights and obligations defined in the GDPR and applicable legislation.
5.9. Security and Privacy Notifications: ConnectPBS has appointed a Data Protection Officer (DPO), whose contacts are available in the Privacy Policy, to act as a point of contact for issues related to personal data protection. Any questions or requests (for example, related to the exercise of data protection rights or security issues) can be sent to the DPO or to our support, which will forward them appropriately. Both parties commit to comply with data protection laws and to mutually cooperate to ensure the privacy and security of the data processed through AbsolutHR.
5.10. Security and Confidentiality Measures: A ConnectPBS implements strict technical and administrative security measures to protect personal data against unauthorized access, misuse, loss, or improper disclosure. Such measures comply with industry best practices and the requirements of the GDPR (principles of privacy by design and by default). Some of the security controls adopted include, but are not limited to: a) Data isolation – each Client has its own dedicated database, with no sharing of information with other clients, and logical access control mechanisms prevent users from one company from accessing data of another; b) Encryption – all communications between users and AbsolutHR are protected by transport encryption via HTTPS protocol with 256-bit TLS certificates (high-level SSL/TLS), and all Client data stored in the infrastructure (including backups) are encrypted at rest with robust algorithms (for example, AES-256); c) Backups and Disaster Recovery – ConnectPBS performs periodic backups of the Client's data, maintaining 14 backups (7 daily, 4 weekly, and 3 monthly) stored for at least 3 months in multiple geographically distributed data centers. These backups are monitored and can be restored in case of data loss or serious incidents, observing appropriate RPO/RTO (Recovery Point Objective / Recovery Time Objective) in accordance with Odoo platform practices. Additionally, the underlying data centers comply with international physical security standards (e.g., ISO/IEC 27001 certifications, SOC 2 Type II, access controls with 24x7 surveillance) and have protection against network attacks (including DDoS attack mitigation). These measures are described in detail in point 7 mentioned below in these terms and conditions.
ConnectPBS ensures that its employees and any direct subcontractors who need to access the Client's data for technical support or maintenance will be subject to contractual obligations of confidentiality and will only process the data to the extent necessary for the provision of the service. Administrative accesses are logged and monitored, and restricted to authorized personnel trained in good information security practices. The Client acknowledges and agrees that ConnectPBS may, in response to Client support requests, access configurations or data from their AbsolutHR instance strictly to resolve the reported issue, always respecting the privacy and confidentiality of the data.
6. Integration with Odoo and Security
6.1. Dependency on Odoo Technology: The AbsolutHR is developed and operates based on the Odoo, a third-party enterprise management system (ERP) provided by Odoo S.A., subject to its own terms and policies. Thus, the Client acknowledges that the use of AbsolutHR also implies adherence to certain terms and conditions of Odoo, especially regarding the cloud, underlying software components, and security updates provided by Odoo. Among these relevant documents are, for example, the Odoo Enterprise Subscription Agreement and the Odoo Privacy Policy (available on the official Odoo website). Such documents contain obligations and rights that may impact the use of AbsolutHR (for example, Odoo licensing restrictions and Odoo's commitments regarding the security and privacy of data hosted on its cloud). In the event of a direct conflict between Odoo's conditions (applicable to the underlying platform) and the conditions of this contract, what is necessary to ensure compliance with Odoo's technological requirements shall prevail; otherwise, if there is no incompatibility, the provisions shall accumulate and apply cumulatively to the Client.
6.2. Security Policies and Audits: Odoo S.A. implements security measures at various levels, which are reflected in the operation of AbsolutHR. Among these measures are: updated and hardened operating systems, firewalls e sistemas de prevenção de intrusões ativos nos servidores do Odoo Cloud, monitorização contínua para detecção de ameaças, e procedimentos para gestão de vulnerabilidades conhecidos (com aplicação rápida de correções de segurança em caso de identificação de falhas graves no software Odoo ou nas infraestruturas). O Odoo é um software open-source, tendo seu código submetido a constante auditoria pela comunidade internacional e pela própria equipa de desenvolvimento da Odoo S.A., seguindo princípios de “secure by design” que mitigam riscos de vulnerabilidades comuns, tais como injeções SQL ou ataques XSS. A ConnectPBS, como parte do seu compromisso de segurança, acompanha os boletins de segurança da Odoo e de outros fornecedores relevantes, aplicando atualizações ou patches críticos imediatamente quando necessário, a fim de proteger os dados do Cliente.
6.3. Políticas da Odoo e Prevalência: O Cliente declara-se ciente de que as Políticas de Privacidade e Segurança da Odoo S.A. – incluindo, mas não se limitando à Política de Privacidade do Odoo (que esclarece como a Odoo trata dados pessoais no contexto de seus serviços) e ao Acordo de Nível de Serviço do Odoo (which includes commitments to availability and security) – contain relevant obligations for the use of the platform. These policies are publicly available on the Odoo website and are incorporated into this contract by reference, in that they complement the security and privacy measures described herein. ConnectPBS will ensure that the Client has access to the links or copies of these policies for consultation. In particular, with respect to the information security, ConnectPBS adheres to the practices and controls established by Odoo S.A., as summarized on the official Odoo website. If the Client requires additional information about Odoo's security or privacy practices, they may request it from ConnectPBS or consult Odoo's public resources directly. [Odoo Cloud Service Level Agreement], [Odoo Security]
6.4. Third-Party Integrations: AbsolutHR may offer integration with third-party applications or services (e.g., payroll processing services, accounting systems, e-learning, among others) to enhance HR functionalities. The Client acknowledges that the use of third-party integrations or plugins will be subject to the terms of use and privacy policies of those third parties. ConnectPBS is not responsible for services or content provided by integrated third parties, acting only as a technical intermediary. The Client must review and accept the terms of the third parties before activating the integrations and is responsible for fulfilling any obligations arising from that use. If any third-party integration causes incidents that affect the security or stability of AbsolutHR, ConnectPBS may temporarily or permanently disable such integration, notifying the Client and, if possible, assisting in mitigating the effects.
7. Security and Confidentiality Measures in AbsolutHR
The AbsolutHR platform , provided by ConnectPBS, and based on the Odoo Community edition (an open-source ERP system), is hosted on Amazon Web Services (AWS). This report details the technical and organizational security measures implemented, aligned with the principles of the General Data Protection Regulation (GDPR), including “privacy by design” and “privacy by default”. Additionally, the security guarantees and Service Level Agreements (SLAs) are compared between the Odoo Community (self-managed in AWS environment) and Odoo Enterprise (Odoo's Odoo Cloud platform), highlighting the applicable practices in AWS environments.
Furthermore, the assignment of privileges follows the principle of least privilege – users only receive the permissions strictly necessary for their roles, minimizing the risk of unauthorized access. The combination of these mechanisms (database segregation by client and granular access policies) ensures a high level of confidentiality and integrity of the data, two essential pillars for compliance with the GDPR. In fact, the GDPR itself requires that controllers and processors implement appropriate technical and organizational measures to ensure the integrity and confidentiality of personal data, a goal fully met by these isolation practices.
At the same time, all data stored on servers and backups of AbsolutHR are encrypted at rest using robust encryption algorithms, namely standard AES-256. Thus, even in the unlikely scenario of a physical security breach or unauthorized access to the disks/servers, the information remains unreadable without the decryption keys appropriate. It is worth noting that the AWS infrastructure used provides native options for encryption of storage volumes (EBS) and databases (for example, Amazon RDS with data encryption according to AES-256) in compliance with industry standards.
It is also important to mention that user passwords are protected through secure hashing, using PBKDF2 with SHA-512 and “salting” and “key stretching” (several thousand iterations). This method, considered state-of-the-art, ensures that passwords are not stored in plain-text and are virtually irreversible, protecting users against unauthorized access. Not even the platform administrators or support team can read or recover the original passwords, only being able to reset them if necessary.
In the context of Odoo Community, the adoption of these measures is the responsibility of the entity that manages the infrastructure – in this case, ConnectPBS – following the guidelines of Odoo. Odoo S.A. itself recommends that implementations on-premises (or in cloud private) should always be carried out through secure proxy servers, in order to enforce encrypted HTTPS traffic to the Odoo instance. In Odoo Enterprise in the (Odoo Cloud), these encryption protections are already enabled by default – all instances in cloud of Odoo operate exclusively under HTTPS, and all database content and files associated are automatically encrypted at the storage level. Thus, regardless of the edition (Community or Enterprise), it is possible to achieve the same levels of encryption, provided that best practices are followed (in the case of Community, properly configuring the AWS infrastructure to enforce TLS and enable disk encryption, snapshots and databases; in the case of Enterprise SaaS, relying on the default configuration managed by Odoo).
Além da retenção prolongada, as cópias de segurança são replicadas em múltiplos locais geograficamente distribuídos. Em alinhamento com a política do Odoo Cloud, pelo menos três centros de dados distintos armazenam réplicas dos backups, garantindo redundância geográfica. Por exemplo, a Odoo S.A. informa que os backups das bases SaaS são replicados em 3 datacenters localizados na Europa e no Canadá, with a fourth copy kept in cold and immutable storage. Similarly, the AWS infrastructure provides distinct regions and availability zones, allowing ConnectPBS to distribute backups across multiple data centers, mitigating risks of data loss in cases of localized disasters.
Recovery objectives (RPO/RTO) have also been defined for disaster situations. In accordance with the practices of the Odoo platform, AbsolutHR establishes a Recovery Point Objective (RPO) of up to 24 hours, meaning that in the worst-case scenario of a catastrophic failure, at most 24 hours of data may not yet be replicated in the latest backup. Likewise, the Recovery Time Objective (RTO) – maximum time to fully restore services in a new data center in case of disaster – is set at approx. 24 hours, following the parameters of Odoo Cloud. In less severe contexts (for example, isolated server or instance failure in the cloud), recovery times tend to be much lower; for reference, Odoo documents a typical RTO of 6 hours for outages of a single server in its SaaS infrastructure.
It is also worth noting that the platform allows for the extraction of backups on-demand. In Odoo Enterprise cloud, the client can download an up-to-date copy of their data at any time through the control panel. In a self-managed AWS installation, ConnectPBS also provides mechanisms for data export or restoration when requested by the client, ensuring transparency and control over their information.
The network security is also a priority. All endpoints of the application are protected by firewalls and monitored by intrusion detection/prevention systems. These layers of defense identify and block malicious access, mitigating attack attempts such as port scans or repeated unauthorized login attempts (brute force attacks). Additionally, Odoo allows configurations for rate limiting of authentication requests and implementation of CAPTCHA after several failed attempts, making it harder for brute force automated attacks.
In the specific case of a deployment on AWS, the platform benefits from the native network protections and scalability of this cloud. AWS has extensive bandwidth capacity and dedicated DDoS mitigation services that protect applications against large volumes of malicious traffic, diverting and filtering malicious packets before they affect the servers. The que protegem as aplicações contra tráfego malicioso volumoso, desviando e filtrando pacotes maliciosos antes que afetem os servidores. A resilience of the AWS architecture, with multiple Availability Zones and load balancing, allows for drastically reducing the risk of downtime. Additionally, continuous monitoring mechanisms for logs e alertas de segurança são implementados tanto pela Odoo (no caso de instâncias cloud) quanto pela ConnectPBS na sua infraestrutura AWS, assegurando resposta rápida a quaisquer incidentes ou comportamentos anómalos.
Regarding the underlying physical infrastructures, the trust in a cloud market leader like AWS brings numerous additional guarantees of security and compliance. The data centers of AWS meet strict international standards for physical and logical security, being audited and certified according to ISO/IEC 27001, ISO 27017 (cloud security), ISO 27018 (cloud privacy), among others. Additionally, AWS regularly obtains System and Organization Control (SOC 2 Type II, among others) reports from independent auditors, attesting to the effectiveness of the controls for security, availability, integrity, confidentiality, and privacy in its operations.
From an operational perspective, the data centers supporting the solution have multiple physical security controls: restricted access to facilities only for authorized personnel, with multi-factor authentication (card, biometrics) and 24x7 surveillance by dedicated security teams. Essential resources (power, cooling, connectivity) have N+1 redundancy or higher, with facilities equipped to withstand failures or disasters (in this regard, the data centers used meet at least the requirements of Tier III onwards). Odoo S.A. itself emphasizes that its partner data centers (such as OVH and Google Cloud Platform) have controlled access perimeters, continuous surveillance, and automatic fire suppression and intrusion mitigation systems. Such measures ensure that customer data is protected not only against virtual threats but also against physical or environmental risks, reinforcing the availability and resilience required by both the market and data protection legislation.
Finally, it is important to emphasize that the responsibility for the roles of data controller and subcontractor (processor) varies according to the implementation model. In a SaaS scenario (for example, using Odoo Enterprise on the Odoo Cloud), the client company acts as the Data Processing Responsible, while Odoo S.A. takes on the role of Subcontractor, processing the data on behalf of the client. In a self-managed Odoo Community installation by ConnectPBS on AWS servers, the responsibility for the operation and security of the infrastructure falls on ConnectPBS, which acts as a subcontractor, and the client remains the ultimate responsible party (controller) for the data. In both cases, however, the technical and organizational security and confidentiality measures described here contribute to ensuring compliance with GDPR requirements, protecting personal data against unauthorized access, misuse, loss, or improper disclosure.8. Technical Support, Updates, and Service Level Agreement (SLA)
8.1. Technical Support: ConnectPBS commits to providing technical support to the Client regarding the use of AbsolutHR. Standard support will be provided in business hours (time of Continental Portugal, on business days), through designated channels such as email support, ticket system or support chat on the Client portal, as per availability and indication provided to the Client. Support includes clarification of questions about functionalities, guidance on initial setup, and resolution of any technical or performance issues of the platform. ConnectPBS will make efforts to respond to and resolve support tickets within reasonable timeframes, according to the criticality of the reported issue (for example, critical issues or service interruptions may receive priority attention, aiming for resolution or mitigation in the shortest possible time). In situations of severe service unavailability, support will be activated urgently, regardless of the time, to restore normal operation.
8.2. Updates and Improvements: AbsolutHR will receive periodic updates provided by ConnectPBS, which may include bug fixes (bug fixes), security patches and performance or usability improvements, as well as new functionalities. A large part of these updates results from continuous improvements of Odoo and the development of ConnectPBS on the platform itself. ConnectPBS reserves the right to implement version updates in the cloud of AbsolutHR as needed, ensuring, whenever possible, that such updates do not disrupt service continuity or cause data loss. When significant or potentially incompatible changes are introduced, ConnectPBS will seek to notify the Client in advance, providing relevant information (e.g., release notes or recommended configuration actions). The Client agrees to cooperate in implementing relevant updates, especially security updates, also committing to keep their systems (such as browsers and access devices) updated and compliant with the technical requirements of AbsolutHR.
8.3. Availability and Scheduled Maintenance: ConnectPBS strives to keep AbsolutHR available at a high level of performance and reliability. The normal operation of the service is on a 24 hours a day, 7 days a week. However, the Client acknowledges that temporary unavailability periods may occur for preventive maintenance, system updates, or emergency technical interventions. Whenever possible, scheduled maintenance will be communicated to the Client in advance and scheduled for times of lower impact (e.g., outside local business hours). Minor interruptions or performance degradation may also occur due to external factors (such as Internet network failures, fortuitous events, or force majeure) or due to urgent security implementations – in such cases, ConnectPBS will make efforts to restore normalcy as quickly as possible.
8.4. Service Level Agreement (SLA): In addition to this contract, a Service Level Agreement (SLA) formalizing the quality and availability standards of the platform. Unless otherwise specified in a specific contract, ConnectPBS adopts a minimum monthly availability performance objective of 99.9% (uptime), in alignment with the SLA of the Odoo infrastructure used. This availability target excludes periods of previously communicated scheduled maintenance or force majeure causes. Although it strives to consistently exceed this service level, ConnectPBS cannot guarantee the absence of occasional interruptions. Any failure resulting in significant service unavailability, provided it is caused by factors controllable by ConnectPBS, may give rise to the compensation mechanisms provided in the SLA (for example, proportional credits on future invoices, according to the percentages and conditions described in the applicable SLA). Outside the circumstances covered by the SLA, ConnectPBS will not be responsible for access failures resulting from causes beyond its reasonable control (for example, the Client's own connection issues, internet outages, downtime in third-party services, force majeure cases, etc.).
8.5. Limited Warranty: ConnectPBS guarantees that it will strive to provide services in accordance with usual professional standards and as described in this contract. However, except as expressly provided in these Terms, no other warranties, conditions, or representations are given regarding AbsolutHR. In particular, the Provider does not guarantee that the software will be completely free of errors or defects, or that will meet all specific requirements of the Client, or that will operate without interruptions under all circumstances. Any implied warranties of quality, fitness for a particular purpose, or non-infringement of rights will only apply to the extent that they cannot be legally excluded.
8.6. Odoo Community vs Enterprise: Security Guarantees and SLA (AWS Environment): The following is a summarized comparison of the main security guarantees and service levels between the Community version of Odoo (implemented and managed by the organization or partner, e.g. on AWS infrastructure) and the Enterprise version of Odoo (typically associated with the official cloud service of Odoo, with hosting managed by Odoo S.A. – Odoo Online/Odoo.sh). This comparison focuses on aspects of data security, compliance, and SLAs in each scenario:
| Aspect | Odoo Community (Self-managed on AWS) | Odoo Enterprise (Odoo Cloud official SaaS) |
| Data Isolation | Dedicated databases for each client, isolated from others. Implementation depends on the partner or the internal IT team, following Odoo practices of separating each client/instance into its own database and applying appropriate access rules [odoo.com]. | Dedicated databases per client, isolated by design in the Odoo Cloud infrastructure [odoo.com]. Odoo ensures complete logical isolation between client instances in the same cluster, preventing cross-access. |
| Access Control | Operator's responsibility (partner/client): Configuration of users, profiles, and permissions in Odoo according to client needs. Odoo Community offers the same security mechanics (groups, record rules, etc.) as the Enterprise version [odoo.com], [odoo.com]. It is the administrator's responsibility to ensure configurations align with the principle of least privilege. | Managed by Odoo: Application-level access policies are integrated into the solution. Odoo applies security patches to the software and provides updates that reinforce access controls when necessary. Both editions share the same core security of Odoo, including protection against common vulnerabilities (SQL Injection, XSS, CSRF, etc.) [odoo.com], [odoo.com]. |
| Encryption in Transit | Manual configuration required: Requires the implementation of SSL/TLS certificates (e.g., via AWS Certificate Manager or configuring a reverse Nginx/Apache proxy) to enable HTTPS. With good practices, it is possible to achieve the same level of security (TLS 1.2+ with 256-bit cipher and 2048-bit certificates) as the official cloud oficial [odoo.com], [odoo.com]. | Enabled by default: All communications in Odoo Cloud are via HTTPS with 256-bit TLS and 2048-bit certificates, configured by Odoo itself [odoo.com]. End-to-end encryption covers both client-server traffic and internal traffic between Odoo servers [odoo.com]. |
| Encryption at Rest | Available via AWS: Must be enabled by the operations team (e.g.: use of encrypted EBS volumes, RDS databases with encryption enabled, keys managed via AWS KMS). ConnectPBS adopts AES-256 encryption for all stored data and backups, as recommended [odoo.com]. | Enabled by default: Customer data in Odoo Cloud (databases and stored files) is encrypted with AES-256 on all production and backup, without customer intervention [odoo.com], [odoo.com]. |
| Backups & Retention | Policy defined by the operator: ConnectPBS implements a backup policy inspired by Odoo practices – typically 14 backups (7 daily, 4 weekly, 3 monthly) with retention ≥ 3 months and geographically redundant storage across multiple data centers AWS [odoo.com]. The restoration and testing of backup are the responsibility of the operator, with documented procedures for disaster recovery. | Guaranteed standard policy: Odoo Cloud automatically performs 14 backups per database (7 daily, 4 weekly, 3 monthly), retained for ≥ 3 months [odoo.com]. The backups are replicated in ≥ 3 data centers (at least 2 continents) and include copies in immutable storage [odoo.com]. Odoo routinely monitors and tests the backups, providing clients with the ability to download backups at any time [odoo.com]. |
| Disaster Recovery (RPO/RTO) | Dependent on the operator's planning: With a well-architected deployment in AWS (e.g.: instances in multiple Availability Zones, frequent snapshots and recovery scripts), it is possible to achieve RPO ~24 h and RTO < 24 h in severe disaster scenarios, according to objectives aligned with Odoo practices [odoo.com]. ConnectPBS defines and meets appropriate RPO/RTO through DR (Disaster Recovery) procedures that are periodically tested. | Odoo's public commitment: Odoo sets objectives of RPO = 24 h and RTO = 24 h in its SLA for data center disasters [odoo.com]. For isolated server failures, the Odoo Cloud has high availability and automatic failover, aiming to restore service in ~6 hours with near-zero data loss [odoo.com]. These recovery objectives guide Odoo's internal procedures (although they are not absolute legal guarantees) [odoo.com]. |
| Monitoring & Patching | Operator's responsibility: Monitoring of AWS resources (instance metrics, logs of the system and application) and implementation of security patches and Odoo updates depend on the IT team/partner. ConnectPBS follows Odoo's best practices by proactively applying security patches to the OS and official Odoo updates to mitigate known vulnerabilities. | Managed by the provider: Odoo team performs 24x7 monitoring of the infrastructure and applies security patches to the Linux operating system and Odoo updates automatically or on a scheduled basis [odoo.com]. The customer benefits from regular application updates (including hotfixes security) and continuous monitoring without manual effort. Audits and pentests independent to Odoo Cloud are periodically conducted by third parties, with Odoo promptly addressing any security findings [odoo.com], [odoo.com]. |
| Network Protection (Firewalls, DDoS) | Custom configuration on AWS: Use of Security Groups, Network ACLs and Web Application Firewalls (AWS WAF) as needed to filter malicious traffic. AWS provides robust defense against DDoS at the infrastructure level (e.g., AWS Shield, global distribution network) and ConnectPBS can integrate auto-scaling and load balancers to absorb traffic spikes [odoo.com]. | Built-in protections: Odoo Cloud operates in data centers with high bandwidth and advanced anti-DDoS mechanisms, capable of mitigating volumetric attacks before they affect the service [odoo.com]. Odoo servers are protected by firewalls and intrusion prevention systems managed by Odoo, as well as rate limiting and configurable CAPTCHAs at the application level to stop brute force attacks [odoo.com]. |
| Certifications & Compliance | Inherited controls from AWS: Cabe à organização garantir conformidade, aproveitando o modelo de responsabilidade partilhada da AWS. A infraestrutura AWS é certificada em normas ISO (27001, 27017, 27018, 27701, etc.) e disponibliza relatórios de auditoria SOC 1/2/3 cobrindo segurança, disponibilidade e confidencialidade [aws.amazon.com], [aws.amazon.com]. A implementação do Odoo Community pode ser configurada para cumprir os requisitos do RGPD (p.ex., funcionalidades de anonimização/exclusão de dados pessoais, encriptação, registos de auditoria) – com suporte da comunidade Odoo e partners. | Odoo-Managed Controls: Odoo S.A. certifies that its cloud operations comply with the GDPR and adhere to leading security standards. Odoo Cloud holds the CSA STAR (Cloud Security Alliance) certification, and its data centres are Tier III certified. Odoo implements privacy by design and privacy by default principles, ensuring that the personal data of all customers is afforded the same level of protection. When Odoo Online is used to process the personal data of EU citizens, Odoo acts as a data processor and provides a Data Processing Addendum (DPA) aligned with the GDPR, including Standard Contractual Clauses (SCCs) for international data transfers. |
(Sources: Official security documentation and GDPR from Odoo, Odoo Cloud SLA terms, and technical material from AWS.)
9. Responsibilities and Limitations of ConnectPBS
9.1. Provision of Service: ConnectPBS is committed to making its best efforts to provide AbsolutHR securely and as specified in this contract. However, the Client understands and accepts that AbsolutHR is provided “as is” (as is, as made available by ConnectPBS and the underlying technology platform (Odoo). In this sense, ConnectPBS does not guarantee that the service will meet all of the Client's specific needs, nor that the platform will operate uninterrupted or free of errors in all environments and scenarios, despite all precautions taken to minimize failures.
9.2. Exclusion of Indirect Damages: Within the limits permitted by law, ConnectPBS will not be liable to the Client for indirect, special, incidental, or consequential damages, including losses such as loss of profits, revenues, business, goodwill, interruption of activity, loss of data, or costs of obtaining substitute services, resulting from or related to the use or inability to use AbsolutHR, even if ConnectPBS has been advised of the possibility of such damages. This exclusion covers any claim based on contract, tort, negligence, or other legal grounds.
9.3. Limitation of Direct Liability Amount: In the event of a breach of ConnectPBS's duties or proven tort liability of ConnectPBS for direct damages suffered by the Client in relation to the use of AbsolutHR, the the total and aggregate liability of the Supplier shall be limited to the amount corresponding to the sums actually paid by the Client for the services of AbsolutHR in the 12 (twelve) months prior to the event that gave rise to the liability. If the period since the start of the contract is less than 12 months, the limit will be calculated based on pro rata monthly payments up to the date of the event. This clause is not intended to limit liability in cases of willful misconduct or other situations where the law prevents the exclusion or limitation of liability. The Client acknowledges that the amounts paid for the subscription to the service reflect this distribution of risks and the present limitation of liability.
9.4. External Events and Force Majeure: ConnectPBS shall not be liable for failures to comply with its contractual obligations resulting from circumstances beyond its reasonable control, such as natural disasters, labor disputes, government actions, power or telecommunications failures, unpredictable or unavoidable third-party cyberattacks, or other force majeure events. In such situations, the affected obligations will be suspended for the period during which the uncontrollable event persists. ConnectPBS commits, however, to make reasonable efforts to mitigate the effects of the force majeure event and to resume normal services as quickly as possible.
9.5. Legal Responsibilities Not Excluded: No provision of these Terms shall be interpreted as excluding or limiting the liability of either party in situations where the applicable law prohibits such exclusion or limitation, including, but not limited to, cases of fraud, deceit, death or personal injury caused by gross negligence of the responsible party, or deliberate violation of the law.
10. Customer Obligations and Indemnification
10.1. Compliance and Reimbursement: The Customer agrees to use AbsolutHR in strict compliance with these Terms and applicable law. The Customer agrees to indemnify and hold harmless ConnectPBS, its directors, employees, and partners from any losses, liabilities, costs, and expenses (including reasonable attorney's fees) resulting from claims, actions, or proceedings by third parties arising from: (a) the use of AbsolutHR by the Customer or its Users in an unauthorized manner or contrary to these Terms; (b) violation by the Customer of any third-party rights or the law (for example, using software for practices that violate data protection or intellectual property laws); or (c) breach of the Customer's contractual obligations, including the insertion of illegal content or data into the system or the misuse of personal information of employees. The Customer will be responsible for defending ConnectPBS, at its request, in any legal or administrative proceedings related to such claims, bearing the damages owed to third parties if ConnectPBS is found liable or settles due to an act or omission attributable to the Customer.
10.2. Duty of Cooperation and Accurate Information: The Customer agrees to provide accurate and up-to-date information to ConnectPBS when requested (for example, billing data, number of users or employees for licensing, etc.), and to cooperate in good faith with the Supplier for the proper execution of the contract. The Client must notify ConnectPBS of any relevant changes in their situation that may affect this contract, such as changes in the corporate name, billing contacts, significant changes in the number of users requiring licensing, or security incidents related to the use of AbsolutHR. Furthermore, the Client must promptly inform ConnectPBS if they become aware of any unauthorized use of the software or security breach related to their account, in order to allow the Supplier to take the necessary mitigation measures.
10.3. Client's Internal Policies: In addition to these Terms, the Client must observe and ensure that Users observe the internal policies of their organization in the use of AbsolutHR (for example, acceptable use policies for IT resources, information security policies, employee data protection policies, etc.). ConnectPBS will not be responsible for monitoring compliance with the Client's internal policies, with the Client being entirely responsible for configuring AbsolutHR in accordance with such policies (to the extent that the software allows customizations) and for taking appropriate disciplinary measures in case of misuse of the platform by their employees.
10.4. Default and Applicable Measures: The Client commits to timely pay the amounts due for the subscription and any other services that may be contracted. The absence of payment within the established deadline constitutes contractual default and authorizes ConnectPBS to suspend the Client's access to AbsolutHR if the default is not remedied within a reasonable time after notification (typically, 15 days after the payment delay notice). If the Client remains in default for more than 30 days after the invoice due date, ConnectPBS may proceed to terminate the contract for breach and permanently deactivate the Client's access to the platform, without prejudice to the collection of overdue amounts plus the late fees allowed by law. The Client will remain responsible for any amounts due until the effective date of termination and, if applicable, for any losses and damages resulting from the breach of contract.
11. Plans, Prices, Payments, and Cancellation
11.1. Subscription and Licensing Plans: The services of AbsolutHR are provided through subscription plans for software, which may vary according to the number of employees (or “active users”) and the functionalities/modules included, as agreed in the commercial proposal or specific contract signed with the Client. The plans may be monthly, annual, or for another defined period, and the price is set based on the number of licensed users and the chosen options, according to the current table or private negotiation. ConnectPBS will provide the Client with detailed information about the costs of each plan before contracting, including any applicable discounts or promotional conditions, and such amounts will be confirmed in the invoice or contract.
11.2. Billing and Payment Terms: Unless otherwise specified, ConnectPBS will issue invoices according to the frequency of the selected plan (for example, monthly or annually, in advance). Payments must be made by the Client within the timeframe defined in the invoice or in the contract (typically 30 days from the invoice date, unless another period is specified). The amounts due are presented without VAT (Value Added Tax) or other applicable taxes, which will be added according to the current tax legislation and detailed in the invoice. Payments may be made by the methods provided by ConnectPBS, such as bank transfer, SEPA direct debit, credit card, or other indicated electronic methods. Any bank charges or international transfer fees will be the responsibility of the Client, in order to ensure that ConnectPBS receives the full net amount invoiced.
11.3. Late Payment and Service Suspension: In case of delay or non-payment, ConnectPBS may send collection notices to the Client. If an invoice remains outstanding for more than 30 (thirty) days after the due date, ConnectPBS reserves the right to suspend the Client's access to AbsolutHR until overdue payments are regularized, notably if at least one formal collection notice has already been sent to the Client without effect. The suspension of service due to default does not exempt the Client from the responsibility of paying the amounts due and to become due related to the contract. After 60 (sixty) days of default without resolution, ConnectPBS may consider the contract terminated due to the Client's non-compliance, invoking clause 9.4 above, with the consequent permanent deactivation of access to the system and the adoption of appropriate legal measures for the collection of the amounts owed.
11.4. Duration of the Contract and Renewal: Unless otherwise agreed, this contract comes into effect on the date of subscription of AbsolutHR by the Client (or on the date stipulated in the service order) and will remain in effect for the chosen initial period (for example, 1 year in the case of annual subscription; or 1 month in the case of monthly subscription), renewing automatically for equal successive periods at the end of each contractual period. The Client may choose not to renew the subscription, provided that they notify ConnectPBS in writing at least 30 (thirty) days before the next renewal date (in the case of annual or longer plans) or, in the case of monthly plans, at least 15 (fifteen) days in advance of the next monthly cycle. Failure to express within this period will imply automatic renewal and consequent enforceability of the fees corresponding to the new period. ConnectPBS reserves the right to adjust the subscription fees for subsequent periods, notifying the Client of such adjustments in advance (normally, at least 60 days before the next annual renewal). If the Client does not agree with the new values or conditions, they may exercise the right not to renew under the terms of this clause, thus avoiding the application of the changes in the following period.
11.5. Cancellation and Refund: The Client may terminate this contract at any time, by providing written notice to ConnectPBS with the advance notice indicated in the previous clause. Upon receipt of this notification, ConnectPBS will confirm the scheduling of the cancellation at the end of the already paid service period or, if agreed, on an earlier date. As a rule, no proportional refunds of amounts already paid for the ongoing subscription at the time of cancellation are made (for example, if the Client chooses to cease using the service before the end of the already paid month or year, they will not be entitled to a refund for the remaining days). In exceptional cases, at the sole discretion of ConnectPBS, credits or pro-rata refunds may be granted, especially if the early termination is due to an unresolved service failure attributable to ConnectPBS.
After the effective date of termination or cancellation, the Client and Users' access to AbsolutHR will be disabled. As provided in clause 5.8, the Client must arrange for the extraction of their data before or immediately after cancellation. ConnectPBS will have no obligation to retain the Client's data beyond the timeframes established in the data protection provisions of this contract. It is emphasized that the payment obligations for amounts already due and the clauses of this contract intended to remain in effect after termination (such as confidentiality and limitations of liability) will survive termination.
12. Final Provisions
12.1. Changes to the Terms and Conditions: ConnectPBS may modify or update these Terms and Conditions periodically to reflect service improvements, legal or regulatory changes, or other justifiable reasons. Any changes will be made available to the Client (for example, through registered email communication or a prominent notice on the platform). Substantial modifications will take effect at least 30 (thirty) days after notification, unless a legal requirement necessitates immediate application. Continued use of AbsolutHR after the changes take effect constitutes acceptance of the modified Terms. If the Client does not agree with the updated terms, they must notify ConnectPBS before the effective date of the changes, and may choose to cease using the service on the date the new conditions take effect, without additional penalties beyond the proportional payment due up to that date.
12.2. Assignment and Subcontracting: The Client may not assign to third parties the rights and obligations arising from these Terms without the prior and express consent of ConnectPBS, except in the case of internal corporate reorganization of the Client's business group that does not involve a change of actual control, and provided that ConnectPBS is informed in writing in advance. ConnectPBS may freely assign its contractual position to affiliated or successor companies, or subcontract the fulfillment of specific parts of this contract to third parties, remaining, however, responsible to the Client for the full compliance with the subcontracted obligations.
12.3. Independence and Absence of Partnership: The parties are independent and no partnership, joint venture, agency relationship, representation, or employment relationship is established between ConnectPBS and the Client through this contract. Each party will act at its own risk and account in fulfilling its contractual obligations.
12.4. Partial Invalidity: If any provision of these Terms is considered null, invalid, or unenforceable by a competent authority, such invalidity or unenforceability shall not affect the validity of the other clauses. The provision in question shall, whenever possible, be interpreted in a way that reflects the original intent of the parties, to the maximum extent permitted by law, and if necessary, the parties will negotiate in good faith a valid wording that preserves the commercial purpose of the original provision.
12.5. Governing Law and Dispute Resolution: This contract shall be governed by the laws of the Portuguese Republic, including the directly applicable European regulations (such as the GDPR in the context of data protection). Any dispute arising from the interpretation or execution of these Terms that is not resolved amicably will be submitted to the exclusive jurisdiction of the courts of Portugal, preferably in the district of the ConnectPBS headquarters, unless another specific jurisdiction is imperatively required by law (for example, due to the location of the consumer/Client, if applicable). Before resorting to legal proceedings, the parties agree to make reasonable efforts to resolve any controversy extrajudicially, through good faith negotiation within a period not exceeding 15 (fifteen) days after written notification of the dispute by one party to the other.
12.6. Completeness of the Agreement and Waiver: These Terms constitute the entirety of the agreement between ConnectPBS and the Client regarding the use of AbsolutHR, replacing any prior understandings or agreements on the same subject. The eventual non-enforcement, by either party, of the compliance with any provision of these Terms, or the tolerance of contractual breaches by the other party, shall not be considered a waiver of rights, and the aggrieved party may demand full compliance with the contract at any time. Any waiver of rights or agreement to amend these Terms shall only be valid if made in writing and signed by authorized representatives of both parties.
Acceptance Statement: The Client declares that they have read carefully and understood all the above terms, and agrees to submit to the present conditions in the use of AbsolutHR.
ConnectPBS – AbsolutHR thank you for your trust. We are committed to providing a safe, effective service that complies with legal standards, and we rely on the Client's cooperation in adhering to these Terms to ensure the success of our partnership.

