Terms of Service — Credentium

Effective date: 2025-10-11

This Terms of Service (“Terms”) is a contract between CloudTeam spółka z ograniczoną odpowiedzialnością and anyone who uses Credentium, including the Issuer app (B2B), the Wallet app (B2C), and the Validator tool at validate.credentium.com.

1) Overview & Acceptance

• Scope: SaaS to issue, store, share and check digital credentials; properties: issuer.credentium.com, wallet.credentium.com, validate.credentium.com.

• Acceptance: By accessing any part of the Service (including the Validator), you agree to these Terms.

• Authority: If you use the Service for an organization, you confirm you can bind that organization.

2) Provider & Contact (UŚUDE / EU e‑Commerce)

• Provider: CloudTeam spółka z ograniczoną odpowiedzialnością (limited liability company)
  Address: Plac Konesera 9, 03‑736 Warszawa, Poland • KRS: 0000276018 • NIP/VAT: PL5252388265 • Share capital: 854,000.00 PLN.
  Court of registration: Sąd Rejonowy dla m.st. Warszawy w Warszawie, XIV Wydział Gospodarczy KRS.

• Contact: support@cloudteam.pl (no phone support).

• Languages: Polish and English (English controls unless mandatory local law says otherwise).

• Contract steps: Wallet: invitation → sign‑in. Issuer: sign Order/MSA → choose plan → accept Terms (and DPA) → pay.

3) Eligibility & Age

• Age: Wallet users must be 18+ (no parental‑consent flow).

• Territory: Global except where prohibited by sanctions/export laws (see Sec. 21).

• Organization use: Only with proper authority.

4) Account & Security

• Accuracy: Keep profile details current.

• Security: Keep passwords and API keys confidential; one user belongs to one organization; MFA may be available.

• Auth: We use Auth0; password resets are handled there.

• Incidents: If you suspect compromise, change credentials and email support@cloudteam.pl.

• Enforcement: We may suspend for abuse, security risk, or legal requests (see Sec. 19).

5) Use Rules / Acceptable Use Policy

• Forbidden: illegal activity; fraud; forging/tampering with credentials; presenting revoked credentials as valid; IP/privacy violations; child sexual exploitation; harassment or hate; malware; security bypass; scraping outside allowed APIs/rate limits; service interference.

• APIs: Use only within documented purposes and limits; no replication to compete; no misrepresentation of verification results.

• Consequences: We may remove content, throttle, suspend, or terminate.

6) User‑Generated Content (UGC)

• Ownership: Issuers own credential content/templates. Wallet users control their public pages.

• License to provider: Non‑exclusive, worldwide, royalty‑free license to host, transmit, display, and use UGC only to operate, secure, back up, support, and improve the Service, and to comply with law; survives for backups/audit/legal retention.

• Revocation: Issuer revocation is permanent and disables downloads/public sharing for that credential.

• Takedown: Notice‑and‑action and counter‑notice are available (Sec. 15).

7) Intellectual Property

• Ours: Software, docs, and brands belong to us or our licensors; OSS components under their own licenses (see OSS notices).

• Yours: You keep rights in your UGC.

• Feedback: You grant a perpetual, irrevocable license to use feedback without payment.

8) Service Grant & Restrictions (incl. API)

• License: Limited, non‑exclusive, non‑transferable, revocable right to use the Service.

• No: reselling, framing, unauthorized access, or building competing services from our outputs.

• API keys: Org‑scoped; shown once on creation; respect usage caps/rate limits (as set in the Service).

• Validator: The public Validator lets you upload a credential file to run automated checks without logging in. Upload only content you have a right to share. Results are informational and not a legal certification.

9) Fees, Billing & Taxes

• Issuers (B2B): Commercial terms (pricing, currency, VAT, renewals, cancellation, refunds, credits) are defined only in your Order/MSA and invoices (not published). E‑invoicing consent included. We may suspend for non‑payment after reminders.

• Wallet (B2C): Free for normal use.

10) Trials, Promotions & Coupons

• If offered: Terms (length, scope, conversion, eligibility) appear at sign‑up or in your Order/MSA. We may revoke for abuse.

11) Changes

• Service & Terms: We iterate features (some may be Beta) and may update these Terms.

• Notice: We give advance notice of material changes. If you disagree, you may terminate before they take effect (Sec. 19).

12) Availability & Support

• Uptime: No guarantee unless your Order/MSA includes an SLA.

• Support: Email support@cloudteam.pl. No phone support.

• Dependencies: Auth0 (login), Microsoft Azure (hosting/storage), Eurocert (qualified eIDAS signing for Issuer workflows). Their outages or limits may affect the Service.

13) Third‑Party Services

• Use of third parties: Some features require or rely on third‑party services; their terms and SLAs apply to their parts.

• Social sharing: Subject to those platforms’ terms.

• Revoked credentials: Public sharing is disabled for revoked items.

14) Privacy & Data

• Policy: https://legal.cloudteam.global/credentium/privacy-policy (cookies included).

• DPA (B2B): https://legal.cloudteam.global/credentium/dpa (prevails over these Terms for processing).

• Region: Primary hosting and storage in EU Azure regions.

• Logs/retention: We keep security/audit logs; retention and deletion are described in the Privacy Policy.

15) Platform Rules / EU Digital Services Act (DSA)

• Online platform scope: When a Wallet user enables a public credential link, we host and disseminate that UGC to the public at the user’s request.

• Notice‑and‑action: Email support@cloudteam.pl with URL, description, legal basis, contact details, and a good‑faith statement. We act expeditiously and issue a Statement of Reasons for any restriction.

• Internal complaints / counter‑notice: Use the link in the Statement of Reasons or email support@cloudteam.pl. We also recognize trusted flaggers and cooperate with authorities as required.

• Transparency: We will publish a short annual DSA transparency summary on our legal site.

• US copyright: Send notices to support@cloudteam.pl per 17 U.S.C. §512. We have not designated a DMCA agent; safe‑harbor protections may be affected. Repeat‑infringer policy applies.

16) Warranties & Disclaimers

• As‑is: Service provided “as is” and “as available” to the maximum extent permitted by law.

• Verification limits: Wallet “verification” shows Service‑level checks (issuer/recipient match, status/dates, revocation) and is not cryptographic signature validation or an accreditation decision. Validator results are informational and not a legal certification.

• Consumer rights: Mandatory consumer rights are not limited.

17) Liability

• B2B cap: For Issuers, our aggregate liability is capped at fees paid in the last 12 months.

• Exclusions: Where lawful, no liability for indirect, incidental, special, consequential, or punitive damages; lost profits; lost data; or business interruption.

• Non‑excludable: We do not exclude liability for death/personal injury, fraud, or gross negligence. Consumer rights remain intact.

18) Indemnities

• Provider IP indemnity (B2B): We defend against claims that the Service (as provided) infringes IP, if you promptly notify, let us control the defense, and cooperate. We may modify/replace or refund prepaid fees for affected features.

• Your indemnity: You will indemnify us for claims arising from unlawful use, your UGC, or breach of these Terms or others’ rights.

19) Suspension & Termination

• Our rights: We may suspend/limit access for security risks, suspected misuse, legal requests, or (B2B) non‑payment; we’ll notify where lawful and feasible.

• Your rights: You may terminate anytime. Refunds/fees follow your Order/MSA (B2B).

• After termination: Access ends; you should export data beforehand. We may retain certain logs/records per the Privacy Policy.

20) Governing Law & Disputes

• Law: Polish law (conflict rules excluded).

• Venue (B2B): Courts of Warsaw, Poland.

• Consumers: Keep mandatory local protections. EU ODR: https://ec.europa.eu/consumers/odr.

• US users: No mandatory arbitration or class‑action waiver.

21) Export Controls & Sanctions

• Compliance: Do not use the Service in embargoed countries or for prohibited end uses; you are not a restricted party.

22) Anti‑Corruption

• Compliance: No bribes or improper payments; comply with Polish law and, where relevant, the FCPA and UK Bribery Act.

23) Notices

• From us: Email or in‑app messages.

• To us: support@cloudteam.pl and our registered address (Sec. 2). Keep your contact details current.

• No phone support.

24) Miscellaneous

• Assignment: Only with our consent, except intra‑group reorganization.

• Force majeure: No liability for events beyond reasonable control.

• Severability / waiver: Invalid terms don’t affect the rest; non‑enforcement is not a waiver.

• Entire agreement: These Terms + referenced docs (Privacy Policy, DPA, Order/MSA) are the entire agreement. No third‑party beneficiaries.

• Language: English controls unless mandatory local law provides otherwise.

25) Definitions

• Issuer: Business customer using the Issuer app to issue credentials.

• Wallet user: Individual storing or sharing credentials in the Wallet app.

• Validator: Public tool at validate.credentium.com to upload a credential file and receive automated checks without logging in.

• Credential: Digital certificate and related data (EDC‑style structures).

• Revocation: Permanent status set by the Issuer; disables downloads/public sharing.

• API: Documented endpoints (e.g., credential issuance, template listing) authenticated with API keys; rate limits as set in the Service.

26) Compliance Mapping (mini table)