Terms of Service

1. Scope. These Terms govern your use of Spiral products and services ("Services"). Statements of Work (SOWs) or Order Forms specify project scope, deliverables, fees, and timelines.
2. Accounts. You are responsible for maintaining the confidentiality of access credentials and for activity under your account.
3. Fees & Invoices. Unless otherwise stated in an SOW, invoices are due within 15 days. Late amounts may accrue interest at 1.5%/month or the maximum permitted by law.
4. IP & Deliverables. Pre‑existing IP remains the property of the respective party. Unless otherwise agreed in an SOW, you receive a worldwide, non‑exclusive, non‑transferable license to use project deliverables for your internal business purposes.
5. Confidentiality. Each party will protect the other’s Confidential Information with reasonable care and use it only as permitted under these Terms or an SOW.
6. Data Protection. The DPA forms part of these Terms where Spiral processes Personal Data on your behalf.
7. Warranties. Services are provided "as is" except as expressly set forth in an SOW. Spiral does not warrant third‑party platforms or datasets.
8. Liability. To the extent permitted by law, each party’s aggregate liability is limited to the fees paid or payable in the 12 months preceding the claim. Neither party is liable for indirect or consequential damages.
9. Indemnities. Each party will defend the other against third‑party claims alleging (a) IP infringement by materials provided by that party; or (b) breach of law, and pay resulting damages and reasonable legal fees.
10. Term & Termination. Either party may terminate for material breach if not cured within 30 days’ notice. Upon termination, non‑exclusive licenses survive as needed for use of paid deliverables.
11. Governing Law. Specify governing law and venue here (e.g., England & Wales; Delaware; etc.).
12. Changes. We may update these Terms; material changes will be notified via the website or email.

Privacy Policy

• Controller. Spiral Science & Technology Ltd ("Spiral"). Contact: privacy@spiral.technology.

• Data we process. Account & contact info; usage & telemetry; support content; project data you provide (images, video, metadata) for AI/vision processing.

• Purposes & legal bases. Service delivery (contract), support (legitimate interest/contract), analytics & product improvement (legitimate interest), marketing (consent where required).

• Retention. We keep data as long as needed for the purposes above or as required by law. You can request deletion.

• Sharing. We use vetted subprocessors to host and operate the Services (see Subprocessors).

• International transfers. Where applicable, we use safeguards such as the EU Standard Contractual Clauses.

• Your rights. GDPR rights include access, rectification, erasure, restriction, portability, and objection. Submit requests to privacy@spiral.technology.

• Children. Services are not intended for children under 16.

• Updates. We will post changes here with a new “Last updated” date.

Data Processing Addendum (DPA)

• Roles. Customer is the Controller; Spiral is the Processor for Personal Data processed under the Services.

• Scope. Processing is limited to the subject matter and duration defined in the SOW; nature includes storage, inference, analytics; categories may include employees, operators, and end‑users.

• Security. Spiral implements technical and organizational measures (see Security).

• Subprocessors. Customer authorizes Spiral to use subprocessors listed in Subprocessors; Spiral will notify of material changes.

• Assistance. Spiral assists with data‑subject requests, DPIAs, and breach notifications.

• Audits. Upon reasonable notice, Customer may audit Spiral’s compliance once per year or after a security incident.

• Deletion/Return. Upon termination, Personal Data is deleted or returned within 60 days unless law requires retention.

• Cross‑border transfers. Standard Contractual Clauses apply where relevant.

Cookie Policy

• Types. Essential (auth, security); Analytics (usage, performance); Functional (preferences); Advertising (if used).

• Consent. On first visit, we show a banner to accept, reject, or customize. You can change preferences anytime via the footer link.

• Controls. Browser settings may block cookies; essential cookies are required for login and core features.

Acceptable Use Policy

• No illegal content or activities; comply with export and sanction controls.

• No harmful activity: malware, DDoS, credential‑stuffing, or scanning without authorization.

• No high‑risk use without written approval (e.g., life support, aircraft flight control).

• Respect IP and privacy; do not upload data you lack rights to process.

• Do not attempt to bypass security or rate limits.

SLA & Support

• Availability target. 99.5% monthly uptime for hosted components (excludes planned maintenance).

• Maintenance windows. Standard: Saturdays 01:00–05:00 UTC or with 48h notice.

Priority response.

Support hours. Mon–Fri 9:00–18:00 (customer’s local time unless otherwise agreed). Email: support@spiral.technology.