Terms and operator agreement

Version 2026-11-09. A firm accepts these terms, this operator agreement and the privacy notice when it signs up.

1. The service

Durio is software for preparing and administering deceased estates. The firm remains responsible for the estates it handles and for checking every document before it is signed or lodged.

2. Trial, subscription and billing

• A new firm has a 30-day free trial with everything included.
• To continue after the trial, a Firm Admin chooses to continue and gives a billing contact. From the end of the trial, Durio invoices the firm monthly in advance, per active user, at the price shown on the pricing page on the invoice date.
• Invoices are emailed and are payable by EFT within the period stated on the invoice.
• A price change is announced to paying firms by email at least 30 days before it takes effect.

3. Non-payment, cancellation and read-only access

If the trial ends without the firm continuing, if an invoice is unpaid 7 days after its due date, or when a cancelled subscription reaches the end of the period already invoiced, the firm becomes read-only. It can still view and download all its data. Recording the outstanding payment, or continuing the subscription, restores full access.

4. Deleting the firm's data

Durio deletes a firm's data only on the firm's instruction: a Firm Admin confirms the deletion in Durio, after which any Firm Admin can cancel it for 14 days. The data is then deleted, and backups expire within 35 days. Durio does not delete a firm's data because of non-payment. Invoices are kept as Durio's own financial records.

5. Operator agreement (POPIA section 21)

For the personal information a firm captures in Durio, the firm is the responsible party and Durio is its operator. Durio:

• processes that information only on the firm's documented instructions, which are the use of Durio as designed, and for no other purpose;
• keeps it confidential, and ensures that anyone with access to it is bound to confidentiality;
• maintains appropriate technical and organisational security measures, including separation of each firm's data, encryption in transit and at rest, access controls and audit trails;
• notifies the firm immediately on becoming aware of a security compromise affecting its information;
• gives the firm at least 30 days' notice before adding a sub-operator, and passes the same obligations on to it;
• helps the firm respond to requests from data subjects and from the Information Regulator;
• on the end of the agreement, returns the firm's information through the firm's own export and then deletes it as clause 4 describes;
• makes available the information the firm reasonably needs to show compliance with these obligations.

6. General

[Liability, warranties and dispute resolution to be completed.] These terms are governed by the law of the Republic of South Africa.