These Terms of Service (“Terms”) form a contract between Conformaze (“Conformaze”, “we”), operator of the Conformaze platform, and any natural or legal person who accesses or uses the service (“Client”, “you”).
By creating an account or using the platform, you acknowledge that you have read, understood and accepted these Terms without reservation. If you act on behalf of an organization, you warrant that you have the authority to bind it.
1. Description of the service
Conformaze is a SaaS platform supporting the documentation and management of compliance with personal data protection laws — notably Quebec’s Law 25 and the GDPR. It includes, without limitation, a record of processing activities (ROPA), a privacy impact assessment module (EFVP / DPIA), data subject rights management (DSAR), incident management and subprocessor tracking.
Conformaze is not a law firm and does not provide legal advice. Templates and documents generated are working tools to support your compliance program; they do not replace the advice of a qualified lawyer or privacy officer.
2. Account creation and access
- You must be at least 18 and represent a legally constituted entity to open a business account.
- You must provide accurate, complete and up-to-date information and notify us promptly of any change.
- You are responsible for the confidentiality of your credentials. Activity from your account is presumed attributable to you. We strongly recommend enabling multi-factor authentication.
3. Plans, payments and trials
- Plans, prices and features are described on the Pricing page. Payments are processed by Stripe.
- One-time payments are non-refundable unless required by mandatory law or in case of a manifest billing error.
- Subscriptions renew automatically unless cancelled at least 24 hours before the end of the current period.
- Applicable taxes (GST, QST) are added to the listed price.
4. Client commitments
You agree to use the service lawfully and in particular to:
- comply with applicable laws, including data protection laws;
- not upload illegal, defamatory, infringing or otherwise harmful content;
- not attempt to access another client’s account or data (cross-tenant);
- not perform penetration tests without prior written authorization;
- obtain, where required, informed consent from data subjects before importing their information into the platform.
5. Client data
You remain the controller of the data in your registers. Conformaze acts as processor within the meaning of article 18.3 of Law 25 / article 28 GDPR. Conformaze’s commitments in that capacity are set out in our Data Processing Addendum (DPA), which is incorporated into these Terms for Clients who execute it.
6. Intellectual property
Conformaze (software, templates, documentation, brand) is and remains the property of Conformaze. You receive a non-exclusive, non-transferable, revocable licence to use the platform for the duration of your subscription.
You retain full ownership of the content you upload or generate (“Client Content”). You grant Conformaze a limited licence solely for operating the service, providing support and improving it (security, aggregated telemetry).
7. Availability and service levels
We use commercially reasonable means to ensure service availability and data backup. Conformaze does not guarantee absolute availability; planned downtime may occur for maintenance, with notice when feasible.
8. Limitation of liability
To the extent permitted by law, Conformaze’s total liability, all heads of damage combined, shall not exceed the amount paid by the Client during the twelve (12) months preceding the event giving rise to liability. Conformaze is not liable for indirect damages (loss of profits, data loss caused by Client fault, reputational harm, etc.).
9. Suspension and termination
- You may terminate your account at any time from your settings or by emailing dpo@conformaze.com.
- Conformaze may suspend or terminate an account in case of material breach of these Terms, abusive use, payment default or request from a competent authority.
- Upon termination, you have 30 days to export your data. Thereafter, data will be destroyed or anonymized in accordance with our retention policy, subject to mandatory legal retention obligations.
10. Changes to these Terms
We may amend these Terms. Any substantial change is notified by email and/or in-app at least 30 days before its effective date. Continued use after that date constitutes acceptance of the new Terms.
11. Governing law and jurisdiction
These Terms are governed by the laws in force in the Province of Quebec and applicable federal laws of Canada. Any dispute falls within the exclusive jurisdiction of the courts of the judicial district of Montreal, subject to mandatory consumer protection rules.
12. Contact
For any question regarding these Terms: dpo@conformaze.com.