Terms of Use

1. Scope and acceptance

These Terms of Use (the "Terms") form an agreement between ONERiC EI ("we", "us") and the organization or person using Blob Web Explorer ("Customer", "you"). By creating an account, deploying, or using the service, you accept these Terms. If you act on behalf of an organization, you confirm that you are authorized to bind it.

If documents conflict, the following order of precedence applies: (1) a specific agreement signed with us, such as a Platinum order; (2) for Azure Marketplace purchases, the terms accepted in Azure Marketplace; (3) for paid SaaS plans, the Subscription Terms; (4) these Terms.

2. Definitions

Service

Blob Web Explorer, including the web application, its documentation, and the related support services.

Edition

The way the Service is provided: SaaS (publisher-operated, shared environment), Platinum (managed dedicated deployment), or Azure Marketplace (Azure Managed Application in your subscription).

Connected Storage

The Azure Storage accounts and containers you link to the Service.

Customer Data

The files, metadata, and tags stored in Connected Storage, together with the content you submit to the Service.

Application Data

The data the Service needs to operate: accounts, container configuration, sharing settings, activity logs, and support tickets.

User

Any person who signs in to the Service under your account or identity provider.

3. The service and editions

Blob Web Explorer is an enterprise file explorer for Azure Blob Storage. It provides browsing, upload and download, file organization, cross-container search, container sharing with permissions, storage insights, an activity log, and an integrated support hub.

Features may differ by edition and plan. Billing pages are available only in the SaaS edition; Azure Discovery and enterprise roles are available only in Platinum and Azure Marketplace deployments.

4. Accounts, identity and roles

• SaaS. You create an account with accurate information and keep your credentials confidential. You are responsible for all activity under your account.
• Platinum and Azure Marketplace. Users sign in through your identity provider (Microsoft Entra ID or Azure AD B2C). You manage who can sign in and which role they receive: BWE.Admin, BWE.Contributor, or BWE.Reader. A user without a resolved role receives Reader access.
• You remove access promptly for users who leave your organization and review role assignments regularly.

5. Your responsibilities

• Storage credentials. You provide and protect the connection strings, SAS URLs, or Azure permissions used to connect containers. We recommend Azure Identity or short-lived SAS URLs to limit long-lived secrets.
• Access decisions. You decide which containers are shared, with whom, with which permission, and for how long.
• Azure costs. Operations performed through the Service (reads, writes, listings, data transfer) are billed by Microsoft to the subscription that owns the storage account. In the Azure Marketplace edition, the resources deployed in your subscription are also billed to you.
• Backups and retention. Deletions and overwrites performed through the Service are applied directly to your storage. Configure Azure features such as soft delete, versioning, or backup if you need recovery options, and retain activity logs according to your own policies.
• Lawful content. You are responsible for the content stored in Connected Storage and for having the rights required to process it.

6. Acceptable use

You agree not to use the Service to:

• store, share, or distribute malware, or any unlawful, infringing, or harmful content;
• access or share data without proper authorization, or in breach of applicable law (including data protection law);
• attempt to gain unauthorized access to the Service, to Azure resources, or to other users' data;
• probe, scan, load-test, or test the security of the Service without our prior written approval;
• reverse-engineer, decompile, or extract the source code of the Service, except where the law expressly allows it;
• disrupt the Service or consume resources in a way intended to degrade it for others.

We may suspend access that breaches this section, as described in section 15.

7. Customer data and privacy

You retain all rights to Customer Data. We use Customer Data only to perform the operations you request in the Service and to provide support at your request.

• SaaS and publisher-managed Platinum. Application Data is stored in the environment we operate. When we process personal data on your behalf, we act as a processor under the GDPR.
• Azure Marketplace and customer-controlled Platinum. Application Data is stored in Azure resources you control.

Details are provided in the Privacy Policy.

8. Azure Marketplace terms

The following terms apply in addition when you deploy Blob Web Explorer from Azure Marketplace.

Deployment and billing

The application is deployed as an Azure Managed Application in a managed resource group of your subscription. Marketplace charges are billed by Microsoft; Azure resources (App Service, Application Insights) are billed to your subscription at Azure rates.

Publisher management access

As with any Azure Managed Application, we hold management access to the managed resource group. We use this access only to:

• deliver the deployment credentials (container registry access and support service key) into your deployment after deployment or rotation;
• restart the web application so that it applies these credentials or a security update;
• investigate and resolve issues you report to support.

We do not use this access to read Application Data or the content of Connected Storage, except when you explicitly ask for it during a support case.

Updates

The application runs the Blob Web Explorer container image we publish; a restart of the web application applies the current release. Significant changes are announced in the release notes.

Network prerequisites

The application must be able to reach the BlobExplorer container registry and support service over HTTPS. The required endpoints are listed in the deployment wizard and in the Azure Marketplace guide.

Removal

Deleting the managed application deletes the managed resource group, including the web application and its settings. Your application data storage account and your Connected Storage are not affected.

9. Support

Support is available by email at support@blobexplorer.com, through the website contact form, and from the Customer Hub inside the application, on business days (Monday to Friday, Central European Time). We usually answer within 12 to 24 business hours. Platinum agreements may define specific service levels.

10. Security

• Connections use HTTPS with TLS 1.2 or higher. File operations are authorized on the server for every request.
• In the Azure Marketplace edition, secrets are stored as encrypted application settings of the web application in the managed resource group.
• We do not currently hold SOC 2, ISO 27001, or FedRAMP certification. Contact us if your organization has specific requirements.
• If a security incident affects your data, we inform you without undue delay and in accordance with applicable law, including the GDPR.
• Vulnerabilities can be reported as described in the Legal Notice.

11. Intellectual property

We grant you a non-exclusive, non-transferable right to use the Service for your internal purposes during your subscription or deployment. We and our licensors retain all rights in the Service, its software, documentation, and trademarks. Third-party components remain subject to their own licenses.

12. Availability and changes to the Service

The Service is provided on an "as available" basis and depends on Microsoft Azure and your identity provider. We may improve, change, or remove features; changes that materially reduce functionality are announced in advance where practicable.

13. Warranties

To the extent permitted by law, the Service is provided "as is", without express or implied warranties, including warranties of merchantability, fitness for a particular purpose, or uninterrupted and error-free operation.

14. Limitation of liability

To the extent permitted by law, we are not liable for indirect, incidental, or consequential damages, including loss of profits, business, or data, nor for Azure costs incurred in your subscription, compromised credentials under your control, or failures of Microsoft Azure or third-party identity services.

Our total liability for any claim is limited to the amounts you paid to us for the Service in the 12 months preceding the claim, or EUR 100 if you use the Service free of charge. Nothing in these Terms limits liability that cannot be limited by law.

15. Suspension and termination

• You may stop using the Service at any time: delete your SaaS account from Account settings → Delete account, or delete the managed application in the Azure portal.
• We may suspend or terminate access in case of a serious breach of these Terms, a security risk, or a legal requirement. Except in urgent cases, we notify you first and give you a reasonable opportunity to remedy the breach.
• Deleting a SaaS account removes your profile and the containers you linked from the Service. It does not delete any data in your storage accounts.

16. Changes to these Terms

We may update these Terms. The date at the top of this page shows the latest version. Material changes are announced by email to registered SaaS users and account administrators, or within the application. Continuing to use the Service after a change takes effect means you accept the updated Terms.

17. Governing law and jurisdiction

These Terms are governed by French law. The parties will first seek an amicable solution. Failing that, any dispute falls under the exclusive jurisdiction of the competent courts of Paris, France, subject to mandatory consumer protection rules.