Terms of Service

These terms govern use of PrivyLedger, operated by Vassbrekke AS, organisation number 835 834 212, Norway (“we”, “us”). By creating an account or using the service you accept them on behalf of your organization.

1. The service

PrivyLedger provides vendor/processor inventory, risk scoring, DPA and DSAR workflow tools, and export functions for business users. The service evolves over time; we publish material changes on the site.

2. Accounts & security

You are responsible for the confidentiality of credentials issued to your workspace, for enabling two-factor authentication where you require it, and for your members' conduct. Admins control member access. Notify us immediately at the contact below if you suspect unauthorized use.

3. Your data

You retain all rights to the register content you enter. You grant us only the limited right to process it to provide the service, as set out in our Data Processing Agreement and Privacy Policy. We do not sell your data or use it to train models. You may export your register at any time.

4. Acceptable use

Do not misuse the service: no unauthorized access attempts, unlawful content, interference with other workspaces, or attempts to probe or overload the platform outside responsible security research reported to us.

5. Plans & billing

Paid plans are billed via Stripe when configured, per the price list shown at sign-up. Plan limits (vendor counts, exports) are enforced in the product. Failed payments may downgrade the workspace to Free limits after notice. Norwegian VAT applies where relevant.

6. Availability

We aim for high availability but provide the service “as is” without an uptime guarantee during launch. Planned maintenance is kept short and, where practical, announced in advance.

7. Term & termination

You may stop using the service and close your workspace at any time; export your data first. We may suspend or terminate accounts that violate these terms, with notice where practicable. After termination, workspace data is deleted within 30 days per the retention schedule in the Privacy Policy.

8. Consumers & right of withdrawal

PrivyLedger is offered for business and professional use, and prices are quoted excluding VAT where relevant. If you subscribe as a natural person acting primarily outside a trade or profession, Norwegian consumer law grants you a 14-day right of withdrawal (angrerett) from the first payment; contact us to exercise it. Business subscribers are not covered by angrerettloven.

9. Disclaimers

PrivyLedger is a productivity tool, not legal advice. Risk scores, exposure bands, letters, and generated packs (trust packs, SIG-Lite / CAIQ exports) are technical heuristics and should be reviewed by qualified counsel before external use. To the maximum extent permitted by law we exclude liability for indirect or consequential loss. Our aggregate liability is limited to the fees paid in the preceding 12 months. Nothing limits liability that cannot be limited under Norwegian law.

10. Governing law

These terms are governed by Norwegian law, with Oslo district court as agreed venue, without prejudice to mandatory consumer protections.

11. Contact

Vassbrekke AS · org.nr 835 834 212 · Norway · contact@vassbrekke.no. Related policies: Privacy, DPA, Sub-processors.