Terms of service

These terms of service (the Terms) apply between Obsecure AB (SE559313-738201, Nejlikevägen 42, SE 125 55, Älvsjö) (we, us) and the business that subscribes to TrustDesk or AccessWatch (the Customer, you). The services are offered to businesses only, not to consumers.

1. Definitions

• Services: TrustDesk and AccessWatch, the software we provide as a service, as described on our websites and in your plan.
• Organization: your account in a Service, with its members.
• Customer Data: content and data you or your users put into the Services, including documents, questionnaires, scan targets and results.
• Users: people you allow to use the Services under your Organization, including client logins and invited contacts.
• Partner: a customer that manages Services for its own clients through a partner or agency account.

2. Accounts

You are responsible for your Users, for keeping sign-in details secure and for the accuracy of the information you give us. You must be authorized to accept these Terms for the business you represent.

3. Trial, plans and payment

1. New Organizations may get a 14-day free trial without a card. At the end of the trial, the Organization moves to the free plan unless a paid plan is chosen.
2. Paid plans and add-ons are billed in advance, monthly or yearly, in EUR and excluding VAT, through our payment provider. EU businesses with a valid VAT ID are invoiced under the reverse charge mechanism.
3. Fees are non-refundable except where these Terms or mandatory law say otherwise. [TO CONFIRM: refund policy for yearly plans and downgrades]
4. If a payment fails, we will tell you and may limit the Services to the free plan if it is not resolved within [TO CONFIRM: number of days] days.
5. We may change prices with at least 30 days' notice. New prices apply from your next billing period.

4. Your data

1. You keep all rights to Customer Data. You give us the rights we need to host, process and display it to provide the Services.
2. We process personal data in Customer Data as your processor under our Data Processing Agreement, which forms part of these Terms.
3. You can export your data at any time. Cancelling a paid plan doesn't delete your data: the Organization moves to the free plan. When you delete your Organization, or we end the agreement under section 15, we delete Customer Data within 30 days, and from backups within a further 30 days, unless the law requires us to keep it.

5. Compliance support, not legal advice

The Services help you with compliance work: documenting security measures, answering questionnaires, classifying AI systems, monitoring accessibility and preparing statements. They do not provide legal advice and do not certify that you, your products or your websites comply with any law or standard (including NIS2, the GDPR, the EU AI Act, the European Accessibility Act or WCAG). Results depend on the information you give and on checks the Services cannot perform. You remain responsible for your compliance decisions and for what you send to your customers or publish.

6. AI features

Some features use AI models to draft text (for example questionnaire answers, policy wording or code fix suggestions). Drafts can be wrong. You must review them before relying on or sharing them. AI features can be switched off for your Organization. We do not use Customer Data to train AI models, and our AI providers are bound not to either. [TO CONFIRM: confirm against the AI provider's current terms]

7. Acceptable use

You and your Users must follow our Acceptable Use Policy. In particular, you may only scan websites with AccessWatch that you own or are authorized to test.

8. Partners and agencies

If you use a partner or agency account, you are responsible for having your clients' permission to manage their accounts and data, and for the client logins you create. Where you pay for clients at a wholesale price, you are responsible for billing them. The affiliate and partner program has its own program terms.

9. Availability and support

We aim to keep the Services available and to fix problems quickly, but we do not promise uninterrupted service unless agreed in writing. We may carry out maintenance, preferably outside business hours (Central European Time). Support is provided by email at hello@rongu.app.

10. Security

We protect the Services and Customer Data with the technical and organizational measures described in the Data Processing Agreement.

11. Intellectual property

We own the Services, including their software, templates, training content and documentation. You may use them for your internal business purposes, and you may share outputs (for example completed questionnaires, generated policies, reports and statements) with anyone. Feedback you give us may be used to improve the Services.

12. Confidentiality

Each party will keep the other's non-public information confidential and use it only for the purposes of these Terms, except where disclosure is required by law.

13. Warranties

The Services are provided "as is". Apart from what these Terms say expressly, we make no warranties, including fitness for a particular purpose, to the extent the law allows.

14. Liability

1. Neither party is liable for indirect or consequential loss, including lost profits, revenue or data, except in cases of intent or gross negligence.
2. Each party's total liability under these Terms in any 12-month period is limited to the fees you paid in the 12 months before the event giving rise to the claim. [TO CONFIRM: cap for free plans; carve-outs for data protection breaches and indemnities]
3. These limits do not apply where the law does not allow them.

15. Term, suspension and termination

1. These Terms apply while you have an Organization. Paid plans renew automatically until cancelled; cancellation takes effect at the end of the paid period.
2. We may suspend access to stop a security threat, a serious breach of these Terms or unlawful use, and will tell you why.
3. Either party may terminate for material breach that is not remedied within 30 days of notice.

16. Changes

We may update these Terms. For material changes, we give at least 30 days' notice by email or in the Services. If you don't agree, you can cancel before the change takes effect.

17. Governing law and disputes

These Terms are governed by Swedish law, without regard to its conflict of law rules. Disputes are settled by [TO CONFIRM: Swedish courts, with Stockholm District Court as first instance, or arbitration under the SCC Rules].

18. Miscellaneous

These Terms, the Data Processing Agreement and your plan are the whole agreement between us about the Services. If a provision is invalid, the rest remains in force. Neither party may assign the agreement without consent, except to a successor of its business. Notices are given by email to the addresses on your account and to hello@rongu.app.