Terms of Use. For the PeopleCoral application.

Effective date: 8 October 2026 · Applies to the PeopleCoral web and mobile applications

These Terms of Use ("Terms") govern access to and use of the PeopleCoral web and mobile applications and related services (the "Application" and "Services"). The Application is operated by HR Rebels B.V. (KvK: 65493486), operating the PeopleCoral product ("HR Rebels", "PeopleCoral", "we", "us").

By installing, accessing, or using the Application, you confirm that you have read and accept these Terms. If you do not accept these Terms, do not use the Application.

1. Scope and intended use (B2B only)

1.1 Business-to-business context

The Services are intended solely for business use by organizations and their authorized users (e.g., employees, contractors, or other staff) in the context of HR, payroll, workforce administration, and related workflows. The Application is not offered for consumer use.

1.2 Relationship to customer agreements

If the Services are provided to you by an organization (the "Customer"), your access to and use of the Services is subject to the agreement(s) between HR Rebels and the Customer (e.g., a master services/subscription agreement and/or data processing agreement). If there is a conflict between those agreement(s) and these Terms, the Customer agreement(s) prevail to the extent of that conflict.

2. Definitions

• "Customer" means the organization that procures the Services from HR Rebels and authorizes individuals to use the Services.
• "Authorized User" means an individual who is permitted by the Customer to access the Services.
• "Customer Data" means data and content submitted to or processed in the Services on behalf of the Customer (including HR and payroll data).
• "Device" means a supported computer, smartphone, or tablet used to access the Application.

3. Eligibility and account access

3.1 Eligibility

You may use the Application only if you are (i) an Authorized User of a Customer, and (ii) legally capable of entering into binding obligations under applicable law. The Application is not directed to children.

3.2 Access prerequisites

Access is limited to individuals with a valid user account issued or enabled under the Customer's PeopleCoral environment. If you do not have an employee/user record in PeopleCoral, you will not be able to log in.

3.3 Credentials and security

You are responsible for maintaining the confidentiality of your login credentials, including one-time passcodes sent to you, and for all activities conducted under your account. You must promptly notify the Customer's administrator and/or HR Rebels if you suspect unauthorized access, credential compromise, or suspicious activity.

4. License and permitted use

4.1 Limited license

Subject to these Terms and (where applicable) the Customer agreement(s), HR Rebels grants you a limited, non-exclusive, non-transferable, revocable right to access and use the Application solely for the Customer's internal business purposes and only in accordance with the documentation and these Terms.

4.2 Use restrictions

You must not, and must not permit any third party to:

• Access or use the Services other than as an Authorized User for the Customer's internal business purposes;
• Share accounts, credentials, or authentication factors (including one-time passcodes) with others;
• Reverse engineer, decompile, disassemble, or otherwise attempt to derive source code, underlying ideas, or algorithms (except to the extent expressly permitted by mandatory law);
• Circumvent security controls, access restrictions, or tenant isolation boundaries;
• Probe, scan, or test the vulnerability of any system or network (except with HR Rebels' prior written permission);
• Upload or transmit malicious code, exploit payloads, or content intended to disrupt the Services;
• Use the Services to infringe rights, violate laws, or process data in a manner not authorized by the Customer.

4.3 Acceptable use and professional conduct

You must use the Services in a manner consistent with employment/organizational policies applicable to you (including security and confidentiality requirements of the Customer).

5. Customer administration and organizational controls

5.1 Customer control

The Customer (through designated administrators) controls user provisioning, permissions, role-based access, workflows, configurations, and data entry requirements. The Customer may access, restrict, suspend, or terminate your access in accordance with its policies and agreements with HR Rebels.

5.2 Instructions and approvals

You are responsible for ensuring the accuracy of the data you submit (to the extent you provide data) and for following Customer processes for approvals, payroll inputs, leave/time requests, and related workflows.

6. Data, privacy, and device permissions

6.1 Privacy and data protection

Personal data processing practices are described in the PeopleCoral Application Privacy Policy.

6.2 Customer Data and employment context

In most cases, Customer Data is processed in an employment/organizational context. Requests concerning access, correction, deletion, or other rights typically need to be directed to the Customer (your employer/organization), subject to applicable law and contractual arrangements.

6.3 Device features and permissions

The mobile Application may request access to device features to enable business functionality, such as camera access (e.g., expense receipt capture, QR-based time registration, profile photo upload) and notifications (e.g., workflow alerts, approvals, operational messages). You may be able to manage permissions in your device settings; however, disabling permissions may limit functionality.

7. Third-party platforms and app stores

7.1 App stores and platform terms

Your use of the mobile Application may also be governed by the terms of the relevant app store and mobile operating system provider. HR Rebels is not responsible for third-party platform outages, restrictions, or changes that affect Application availability or functionality.

7.2 Notification and messaging providers

To deliver push notifications, limited technical identifiers (such as device tokens) may be processed by platform notification services (e.g., Apple Push Notification service and/or Firebase Cloud Messaging). To deliver SMS verification codes, your mobile phone number is processed by our SMS provider Twilio. Both are further described in the Privacy Policy.

8. Intellectual property and feedback

8.1 Ownership

The Application, Services, software, interfaces, and all related intellectual property rights are owned by HR Rebels and/or its licensors. No rights are granted except as expressly stated in these Terms.

8.2 Feedback

If you provide suggestions, ideas, or feedback regarding the Services, HR Rebels may use that feedback without restriction or obligation, unless prohibited by applicable law or agreed otherwise in writing.