2. Terms of Service (DRAFT)

Last updated: [DATE]

1. Agreement. These terms are between you (the customer organisation, and the person accepting on its behalf) and [LEGAL ENTITY NAME] ("we"). By using subprocessors.fyi or paying for a plan, you accept them.
2. The service. We monitor publicly published vendor subprocessor information, map relationships between vendors, and send alerts. The service is early access (v0.4): features may change and availability is not guaranteed [unless an SLA is agreed in writing].
3. No legal advice and no guarantee of completeness. Alerts and maps come from what vendors publish, which may be incomplete, late or wrong, and our detection may miss changes. The service supports your compliance work. It does not replace your own review, legal advice, or your contractual notice rights with vendors.
4. Accounts. Keep your login details secure. You are responsible for activity under your account. Users must be 18 or over and acting for a business.
5. Acceptable use. Do not misuse the service, resell it without our agreement [except under an Agency plan], scrape or overload it, or use it in breach of law.
6. Fees and billing. Fees are as shown at purchase and exclude VAT/sales tax. Vendor Chain Audit: a one-off fee of $490. Monitoring: $99/month for up to 100 vendors. Agency plans: quoted separately, from €300/month. Payment is taken in advance through [Stripe]. 30-day refund (Monitoring): if you cancel within 30 days of your first Monitoring payment, we refund it in full. Audit refund: if we have not delivered your audit report within [10] business days of payment, you can ask for a full refund. Otherwise fees are non-refundable except where the law requires. You can cancel Monitoring at any time and it runs to the end of the paid period.
7. Your data. You own your watchlists and configurations. We process personal data in them under our DPA [LINK], which forms part of these terms. We may use aggregated, de-identified usage data to improve the service.
8. Our IP. We own the service, the software and the compiled Trust Graph. You may export alerts and evidence for your internal compliance, audit and customer-assurance purposes.
9. Third-party integrations. Slack, email providers and webhooks are governed by their own terms. We are not responsible for their availability.
10. Confidentiality. Each side protects the other's non-public information with reasonable care.
11. Warranties. We will provide the service with reasonable skill and care. Otherwise it is provided "as is" to the extent the law allows.
12. Liability. Neither side is liable for indirect or consequential loss, or for lost profits or data. Our total liability in any 12 months is capped at the fees you paid in that period. Nothing limits liability that cannot be limited by law.
13. Suspension and termination. We may suspend for non-payment or material breach. Either side may terminate for material breach not fixed within 14 days. On termination you may export your data for 30 days.
14. Changes. We may update these terms and will give 30 days' notice of material changes to paying customers.
15. Law. Governed by the laws of [JURISDICTION]. Courts of [JURISDICTION] have exclusive jurisdiction.
16. Contact. [LEGAL EMAIL], [ADDRESS].