Terms

Name

[Full legal name]

NIF

[NIF]

Address

[Street, postcode, city], Spain

Email

info@pinwel.com

These terms apply between us and the organization that uses Pinwel ("your organization"), and to everyone it invites. By setting your password you accept them. If you accept for your organization, you confirm you're allowed to.

• We set up each organization's accounts ourselves; there is no public sign-up.
• Your plan, fees and term are in your order or agreement. Prices exclude VAT unless it says otherwise.
• We improve Pinwel over time, and tell you before a change that takes away something you use.
• We work to keep Pinwel available, but promise no fixed uptime unless your agreement does.

• Accounts are personal. Keep your password to yourself; every sign-in also needs the code we email you.
• Tell us at once if you think someone else got into your account.
• Your organization's admin decides who has access, and is responsible for what its accounts do.

Don't:

• upload anything unlawful, or that you have no right to share
• try to reach accounts or data that aren't yours, or test our security without our written permission
• overload, copy, resell or reverse engineer Pinwel, or upload malware

Your organization needs a lawful basis for the personal data it puts in Pinwel, and must tell its people how it's used. Before anyone shares their location, it must inform them and, where the law requires, assess the impact and consult their representatives.

If an account breaks these rules, we may suspend it, and we'll tell you why.

Your organization keeps all rights to its layouts, pins, messages and photos. It lets us store, process and show them only to provide Pinwel. Pinwel itself (the software, design and brand) stays ours.

Suggest actions and Improve use an AI model (by Anthropic, on Microsoft Azure). We send it only what you type and your actions' names. Its answers can be wrong, so check them; nothing is saved until you approve it.

For the personal data in your organization's workspaces, your organization is the controller and we are its processor. This section is our processing agreement (GDPR art. 28).

• What: names, emails, photos, messages, work records and location points of the people your organization invites, stored and shown to provide Pinwel, for as long as it uses Pinwel.
• Instructions: we process it only as these terms and your use of Pinwel instruct, and tell you if an instruction seems to break data protection law.
• Confidentiality and security: everyone at Pinwel with access is bound to confidentiality. We protect the data with encryption in transit, hashed passwords, a second sign-in step, access by role and EU hosting.
• Sub-processors: you authorise those listed in the Privacy policy. We tell you 30 days before adding or replacing one, and you may object by ending the contract. Each is bound by the same duties, and we stay responsible for them.
• Help: we help you answer people's requests about their data, and with security, breach notices, impact assessments and consultations with the authority.
• Breaches: we tell you without undue delay, and within 48 hours of finding one.
• Audits: we give you what you need to show compliance, and allow audits with reasonable notice.
• At the end: we delete the data, or return it first if you ask, unless the law requires us to keep it.

You can end the contract or move to another provider at any time (EU Data Act).

• Tell us. The switch starts at the end of the notice period in your agreement, never more than 2 months later.
• Within the next 30 days we hand over your data: the layout files you uploaded, pins, messages, photos, quick actions, work records and people, in common formats (the original files, JSON and CSV). Pinwel's software isn't included.
• You then have 30 more days to download it. Switching and exporting are free.
• After that we delete your organization's data.

• Pinwel is a tool: check its results before acting on them.
• Our total liability in a year is limited to what your organization paid us in the 12 months before the claim.
• Neither of us is liable for lost profits or indirect damage.
• These limits don't apply to wilful misconduct, gross negligence, or anything else the law doesn't let us limit.

We tell your organization 30 days before a change to these terms that matters. If it doesn't agree, it can leave before the change applies, as above.

Spanish law applies. Disputes go to the courts of the city in our address above.