Terms of Service

These Terms of Service form a binding agreement between you, the customer, and Vendeflect (the operator of Vendeflect, referred to as we, us or Vendeflect). They govern your access to and use of the Vendeflect application, websites and API.

By creating an account, or by using the service, you accept these terms. If you are accepting on behalf of an organisation, you confirm you are authorised to bind that organisation, which is then the customer.

Vendeflect is a Trust Center and security questionnaire automation tool. It lets you publish a Trust Center, store your own policy and security documents, and draft answers to security questionnaires from those documents. Drafting is assisted by an AI model where enabled; a person on your team reviews and approves every answer before it is treated as final or sent.

Some capabilities are described in our documentation as planned rather than available today, including object storage for file downloads, outbound email such as NDA request delivery, single sign-on, and write access through the API. We do not charge for a capability that is not yet available, and we describe the current state plainly rather than aspirationally.

You are responsible for the accounts and workspaces under your control, for the accuracy of the information you provide, and for keeping credentials secure. Passwords are handled by our authentication layer and are stored only in hashed form; we never see your plaintext password. You are responsible for activity that occurs under your accounts.

Access within a workspace is scoped by role. You are responsible for who you invite and the level of access you grant them, and for notifying us of any suspected unauthorised access.

Your use of the service is subject to our Acceptable Use Policy, which is incorporated into these terms. In particular, you must not use the AI to fabricate compliance claims or certifications you do not hold, upload material you have no right to use, or attempt to reach data outside your own workspace.

You keep all ownership of the documents, questionnaires, questions and answers you put into the service, together with your Trust Center content. We claim no ownership of your content.

You grant us a limited licence to host, store, process and display your content only to the extent needed to provide the service to you, including generating extracted text for retrieval and drafting answers you have asked for. Your content is used to answer your own questionnaires. We do not use your content to train models for other customers.

You are responsible for having the rights needed to upload your content, and for what you choose to publish on your Trust Center, which is public once published.

Plan names, prices and limits are shown on our pricing page. Paid plans are billed in advance for the interval you choose, monthly or yearly. Each plan has a questionnaire cap and an AI answer cap; whichever runs out first blocks further metered work. You receive a warning at 80 percent of a cap and a block at 100 percent, and you are not charged for overage without deliberately adding capacity.

Paddle.com Market Ltd acts as the merchant of record for purchases of Vendeflect. This means Paddle is the seller of record and the counterparty on your payment, and it handles payment processing, tax and invoicing. Your purchase is therefore also subject to Paddle's buyer terms in addition to these terms. We never receive or store your card details.

Add-ons, such as questionnaire packs and AI answer packs, attach to a paid plan and add capacity for the current period. Refunds are governed by our Refund Policy.

Subscriptions renew automatically at the end of each billing period at the then-current price for your plan, until cancelled. You can cancel at any time; cancellation stops future renewals and your plan continues until the end of the period already paid for. Cancelling does not, by itself, refund the current period. See the Refund Policy for when a refund may apply.

We may change plan prices. If a change affects your subscription, we will give you notice before it takes effect, and the new price applies from your next renewal so you have the chance to cancel before being charged at the new rate.

AI generated drafts are suggestions, not decisions. A person on your team must review and approve every answer before it is treated as final or shared. The model cannot approve or send an answer on its own.

We do not warrant that AI generated content is accurate, complete, current or fit for any particular compliance, legal or contractual obligation. You are responsible for checking every answer against your own facts before you rely on it or send it to a third party. Where AI drafting is disabled, including when the deterministic offline mode is in use, no document content is sent to a model provider.

We aim to keep the service available and reliable, but self-serve plans are provided without a committed uptime or service level agreement. We may perform maintenance, change or discontinue features, and impose reasonable technical limits. Contractual service levels are available only where they are set out in a separate written agreement, such as on an Enterprise plan.

Each party may receive non-public information from the other. The receiving party will use that information only to perform under these terms and will protect it with reasonable care. This does not apply to information that is or becomes public through no fault of the receiving party, was already known to it, or is required to be disclosed by law.

We and our licensors own the Vendeflect software, its design, and all related intellectual property. These terms grant you a limited, non-exclusive, non-transferable right to use the service during your subscription, and nothing more. Feedback you send us may be used to improve the service without obligation to you.

The service is provided on an as is and as available basis. To the fullest extent permitted by law, we disclaim all implied warranties, including merchantability, fitness for a particular purpose and non-infringement. We do not warrant that the service will be uninterrupted or error free, or that AI generated content will meet any compliance standard. Nothing in these terms excludes a warranty or right that cannot be excluded under the law that applies to you.

To the fullest extent permitted by law, neither party is liable for indirect, incidental, special, consequential or exemplary damages, or for lost profits, revenue, goodwill or data, arising out of or relating to the service.

Our total aggregate liability arising out of or relating to these terms is limited to the amount you paid us for the service in the twelve months before the event giving rise to the claim. These limits do not apply to liability that cannot be limited by law.

You will defend and indemnify us against third party claims arising from your content, your use of the service in breach of these terms or the Acceptable Use Policy, or your violation of law or the rights of a third party.

These terms apply while you use the service. You may stop using it and close your account at any time. We may suspend or terminate access if you materially breach these terms or the Acceptable Use Policy, if required by law, or if continuing to provide the service to you poses a security or legal risk. Where practical and lawful, we will give notice first.

On termination, your right to use the service ends. After your subscription ends and your account is closed, we delete workspace data within 30 days from active systems. Residual copies in encrypted backups are overwritten on a rolling cycle and are fully purged within 35 days, which is the real floor on deletion.

You are responsible for exporting anything you want to keep before you close your account. Plans with export features let you download your finalised answers while the subscription is active.

We may update these terms. When we make a material change we will update the effective date above and, where appropriate, give notice in the app or by email. Continuing to use the service after a change takes effect means you accept the updated terms.

These terms, and any dispute arising out of them, are governed by the laws of Latvia, and the courts of that jurisdiction have exclusive jurisdiction, except where mandatory consumer law gives you the right to bring a claim elsewhere.

Questions about these terms can be sent to our support contact, and requests about your personal data to our privacy contact. Both are listed in the contact block below and on our Privacy Policy.