Terms of Service

Last updated September 22, 2026 (version draft-2026-09-22). This is the first version of these terms. [Dream's legal entity name, address and place of formation to be added before general sign-up opens.]

1. Who these terms are between

These terms are between Dream ("Dream", "we", "us") and the business that signs up for or uses the Command Center ("Customer", "you"). The person accepting them confirms they are allowed to accept them for that business. The Command Center is for business use only, and people who use it must be at least 18.

2. Words we use

• Service: the Command Center website and features, including Org Health Reviews, monitoring, the issue log, reports and integrations.
• Connected org: a Salesforce org you connect to the Service. Paid plans are priced per connected org.
• Customer Data: what the Service reads from your connected orgs (configuration and usage counts) and what it produces from them (scores, findings, alerts, lists of affected items, reports), plus what your people enter.
• Authorized Users: the people you invite to your account.
• Aggregated Data: statistics derived from many customers' results with every name, org identifier and personal detail removed.

3. Your account

You are responsible for your Authorized Users, for keeping sign-in details private, and for telling us promptly if you think someone has accessed your account without permission. Each person uses their own login.

4. How the Service connects to Salesforce

• You connect an org through Salesforce's own sign-in and approval screen. The connection is read-only: the Service reads configuration (such as settings, permissions, automation and code metadata) and usage counts, and never changes anything in your org.
• The Service does not read the contents of your business records. Some findings list the users, fields or other components they concern, which can include your users' names, usernames and email addresses.
• You decide what access to approve and are responsible for having the authority to connect the org. We ask only for the access the Service needs.
• You can disconnect an org at any time from its page; we then revoke the connection at Salesforce and delete the stored credentials.

5. Plans, fees and invoices

• Plans and prices are listed on our pricing page. Paid plans are priced per connected org, either monthly or yearly, and renew for the same period unless either of us gives 30 days' notice before renewal.
• For now we invoice by email. Invoices are due within 30 days. Prices do not include taxes, which you pay except for taxes on our income. Late amounts may carry interest of 1.5% per month or the highest rate the law allows, whichever is lower.
• We may change prices for a new term with at least 30 days' notice.

6. The Free plan

The Free plan is provided as it is, without support commitments or service levels, and its limits are shown on the pricing page. We may change or end the Free plan. Free accounts that are not used are deleted as described in section 12.

7. Your data

• You own your Customer Data. You give us permission to process it only to provide and support the Service for you, and to create Aggregated Data.
• Aggregated Data never identifies you, your orgs or any person. We use it for peer benchmarks (only when you opt in on the Settings page, and only when at least five organizations take part) and to improve the Service.
• You confirm that you have the right to let us process the data the Service reads from your orgs, including your users' names and email addresses.

8. AI features

The two-page executive brief is written by an AI model from a fact sheet of scores and counts that contains no names, org identifiers or personal data. AI text can contain mistakes: review it before you share or rely on it. We do not send identifiable Customer Data to an AI model.

9. Other services you connect

Salesforce, Jira, ServiceNow, Slack, Microsoft Teams and similar services are run by other companies under their own terms. You choose whether to connect them and you control those connections. We are not responsible for them, their availability or what happens to data once it is in them.

10. Acceptable use

You will not: copy, resell or sublicense the Service; try to reverse engineer it or get around its limits or security; use it to build a competing product; publish benchmark comparisons of it without our consent; upload malicious code; or use it in breach of law or of another party's rights.

11. Security and confidentiality

• We protect Customer Data with reasonable technical and organizational measures, including encrypted connections, encrypted storage of Salesforce connection tokens and integration secrets, and role-based access for your people. No system is perfectly secure.
• If we learn that Customer Data was accessed without authorization, we will tell you promptly, describe what happened and what we are doing about it, and work to limit the harm.
• Each of us keeps the other's confidential information private, uses it only for this relationship and shares it only with people who need it and are bound to keep it private. This lasts 3 years after these terms end, and for as long as information remains a trade secret.

12. Keeping and deleting data

• While your account is active. We keep your Org Health Index history, findings, alerts and issue history for as long as your account is active, so you can see trends. Lists of affected items (for example the users or fields behind a finding), raw monitoring results and the activity log are kept for 2 years, then removed.
• Free accounts. On the Free plan, the lists of affected items are deleted as soon as a review is scored, except the one behind your most severe finding. The Salesforce connection is revoked when the review finishes, or, if you keep the 7-day monitoring trial you are offered when you connect, when the trial ends or you stop it. A Free account nobody has signed in to for 12 months is deleted; we email its owner 30 days and 7 days before.
• Sign-ups that are never activated. An account whose owner never sets a password is deleted after 30 days.
• After a paid account ends. We keep your data for 90 days so you can come back or ask for an export, then delete it. Copies in platform backups are removed as those backups expire.
• Salesforce connections. We revoke a stored connection as soon as you disconnect an org or your account ends, and automatically when it has not been used for 180 days. An org whose reading is paused at your request stays connected, unused, until reading resumes or you remove the connected app.
• On request. You can ask us to delete your account and its data at any time, and an account owner can delete the account from the Profile page.

Our Privacy Policy describes the same rules.

13. Suspension

We may suspend access if an invoice is more than 10 days past its due date after we remind you, or right away if needed to stop a security threat or unlawful use. We will tell you when we can and restore access once the issue is resolved.

14. Service availability and warranties

We work to keep the Service available and working as described, but we do not commit to a service level unless a signed order says so. EXCEPT AS STATED IN THESE TERMS, THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE", WITHOUT WARRANTIES OF ANY KIND, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. Findings and recommendations are guidance: decisions about your org remain yours.

15. Limits of liability

Neither of us is liable for indirect, special, incidental or consequential damages, or for lost profits, revenue or data. Each party's total liability is limited to the fees you paid for the Service in the 12 months before the claim; for the Free plan it is limited to US $100. These limits do not apply to a party's indemnity duties, to fees you owe, or to fraud or willful misconduct. [Whether a higher limit applies to claims about a data breach to be decided with counsel.]

16. Indemnities

We will defend you against third-party claims that the Service infringes their intellectual property, and pay resulting damages, unless the claim comes from your changes, your data or combining the Service with things we did not provide. You will defend us against third-party claims arising from your Customer Data (including that you lacked the right to have it processed) or from use of the Service in breach of these terms.

17. Ending these terms

You can stop using the Service at any time; paid plans end at the close of the paid period. Either of us may end these terms if the other seriously breaches them and does not fix the breach within 30 days of notice, or becomes insolvent. When a paid account ends we keep its data for 90 days so you can return or ask for an export, then delete it as described in section 12.

18. Ownership and feedback

We own the Service and everything we build for it. If you send us ideas or feedback, we may use them without obligation to you.

19. Changes to these terms

We may update these terms. We will post the new version here with its date and, for changes that materially reduce your rights, tell you by email or in the Service at least 30 days ahead. If you do not accept a material change you may end your paid plan before it takes effect and we will refund any prepaid fees for the remaining period.

20. General

These terms, your orders and the policies they mention are the whole agreement between us and replace earlier discussions; terms in a purchase order do not apply. Neither of us may transfer these terms without the other's consent, except to an affiliate or in a merger or sale of the business. Notices go to the email addresses on your account and to tom@dream.cloud. [Governing law and courts to be set once Dream's place of formation is confirmed.]

Questions: tom@dream.cloud.