Effective date: 20 January 2026

These OSS terms apply to the self-hosted, open source edition of ProductPathPro (the **“Software”**). They do **not** apply to any hosted ProductPathPro service (if offered), which may be governed by separate terms. By downloading, installing, running, or modifying the Software, you agree to these terms. 1) Definitions - **“Software”**: the ProductPathPro open source codebase and related artifacts you obtain from an official repository or distribution. - **“Operator” / “You”**: the person or entity that installs, runs, or makes the Software available to others (including as a service). - **“End users”**: people whose interactions may be recorded or processed by the Software when the Operator deploys it. - **“Customer data”**: recordings, events, metadata, configurations, and any other data processed or stored by the Operator’s deployment. 2) Open source license (AGPL) 1. **License grant.** The Software is licensed under the **GNU Affero General Public License, version 3 (or later)** (**AGPLv3+**). Your rights to use, study, modify, and share the Software are governed by the AGPL license text included with the Software distribution. 2. **No additional restrictions intended.** Nothing in these terms is intended to restrict rights granted to you under the AGPL. If there is a conflict, the AGPL governs to the extent of that conflict. 3. **Network use / “source offer” reminder.** If you modify the Software and make it available for users to interact with over a network (for example, running it as a web app for others), the AGPL may require that those users be able to obtain the corresponding source code of your modified version (e.g., via a visible “Source” link in the UI or an equivalent method). 4. **Alternative licensing.** The Software (or parts of it) may also be offered by the copyright holder under **other licenses** (for example, a commercial license). If you receive the Software under a separate written license agreement, that agreement may govern your use under that separate license. 3) Third-party software and licenses (including rrweb) 1. **Third-party components.** The Software may depend on, bundle, or integrate with third-party open source components. Those components are licensed by their respective authors under their own license terms. 2. **rrweb.** ProductPathPro uses **rrweb** as a core session recording/replay component. rrweb is distributed under the **MIT License**. You must comply with the rrweb license when using, distributing, or bundling rrweb with your deployment. 3. **Notices.** Where practicable, third-party attributions and license texts should be kept in the repository and/or distributed with the Software (for example, in `NOTICE`, `THIRD_PARTY_NOTICES`, or similar files). 4) Self-hosting: you are fully responsible The OSS Software is provided for **self-hosting**. You are solely responsible for everything related to your deployment, including: - provisioning infrastructure, hosting, and networking; - configuration (including masking/suppression rules, retention, and access controls); - security, monitoring, backups, incident response, and updates; - compliance with all applicable laws, regulations, and third-party terms; - how you collect, store, use, share, and delete Customer data. The authors and contributors do not operate your deployment, do not control your configuration, and do not assume responsibility for your operational decisions. 5) Privacy and data protection responsibilities (operator-controlled) ProductPathPro is a session recording / replay and analytics tool. Depending on how you configure it, the Software may capture or process information that can be personal data (e.g., page content, form inputs, identifiers, URLs, device/browser metadata, and interaction events). 1. **You decide what is collected.** As the Operator, you decide whether and how to deploy the Software, what it records, where it is stored, who can access it, and how long it is retained. 2. **You are the controller (or equivalent).** For deployments that record or process end-user personal data, you are responsible for determining your legal role (controller/processor or equivalents) and meeting all related obligations. 3. **Notices and consent.** You are responsible for providing legally compliant notices and obtaining any required consents (including for cookies/session replay) before recording end users, and for honoring opt-outs and applicable privacy rights requests. 4. **Data minimization and masking.** You are responsible for configuring masking/suppression and excluding pages/fields as needed to avoid recording sensitive data. 5. **Do not record prohibited/sensitive data.** Unless you have a verified lawful basis and have implemented strict safeguards required by law, you should not intentionally collect: - payment card/PCI data; - passwords, authentication secrets, or recovery codes; - government IDs; - special-category/sensitive personal data (e.g., health/PHI, biometric identifiers, sexual orientation, political/religious beliefs, trade-union membership), as defined by applicable law; - children’s personal data without all legally required protections and verifiable parental consent where applicable. 6. **Cross-border transfers.** If your deployment transfers personal data across borders, you are responsible for ensuring appropriate transfer mechanisms are in place. 6) No support; no service commitments The Software is provided without any obligation to provide support, maintenance, uptime guarantees, security fixes, or continued availability of any feature. Any support that is provided is at the sole discretion of the maintainers. 7) Disclaimer of warranties TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE SOFTWARE IS PROVIDED **“AS IS”** AND **“AS AVAILABLE”**, WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND THAT THE SOFTWARE WILL BE UNINTERRUPTED, ERROR-FREE, OR SECURE. You acknowledge that session recording and masking effectiveness depends on configuration and environment and cannot be guaranteed in all circumstances. 8) Limitation of liability TO THE MAXIMUM EXTENT PERMITTED BY LAW: - THE AUTHORS, COPYRIGHT HOLDERS, AND CONTRIBUTORS WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, CONSEQUENTIAL, SPECIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR LOST PROFITS, LOST REVENUE, LOST GOODWILL, OR LOST/DAMAGED DATA, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. - THE TOTAL AGGREGATE LIABILITY OF THE AUTHORS, COPYRIGHT HOLDERS, AND CONTRIBUTORS FOR ALL CLAIMS RELATING TO THE SOFTWARE WILL NOT EXCEED **USD $0**. Some jurisdictions do not allow certain limitations, so some of the above may not apply to you. 9) Indemnification You agree to indemnify, defend, and hold harmless the authors, copyright holders, and contributors from and against any claims, damages, losses, liabilities, and expenses (including reasonable legal fees) arising from or related to: - your deployment or use of the Software; - Customer data and any recordings you collect or process; - your failure to provide notices or obtain required consents; - your violation of law, regulation, or third-party rights; or - your breach of third-party license terms (including rrweb’s license). 10) Trademarks “ProductPathPro” and associated logos/marks may be trademarks of the project owner. The AGPL license does not grant trademark rights. You may use the name only to refer to the Software in a nominative way and must not imply endorsement or affiliation unless you have written permission. 11) Changes to these terms These OSS terms may be updated by publishing a new version with a new effective date. Your continued use of the Software after an update means you accept the updated terms. 12) Governing law Unless required otherwise by applicable law, these terms are governed by the laws of Ukraine, and courts located in Dnipro, Ukraine will have exclusive jurisdiction. 13) Contact For licensing inquiries or project contact, use the contact method listed in the official repository or website.