TERMS OF SERVICE

1. Who We Are & Acceptance

1.1 The Provider

Art50 is operated by:

1.2 Binding Agreement

These Terms govern your access to and use of the website at art50compliance.eu, the Art50 application at app.art50compliance.eu, the public verification pages at verify.art50compliance.eu, and the Art50 API (together, the “Services”).

By creating an account, accepting these Terms, or using the Services, you enter into a binding contract with us. If you do not agree, do not use the Services.

1.3 Eligibility

• You are at least 18 years old and able to enter into a binding contract.
• You are not barred from using the Services under applicable law.

1.4 Acting for an Organisation

If you accept these Terms for a company or other legal entity, you warrant that you have authority to bind it. “You” then means both you and that entity.

2. What Art50 Does

2.1 The Services

Art50 keeps evidence of human review of AI-assisted work. It comprises:

• A Human Responsibility Ledger. A person records that they reviewed a piece of work and takes responsibility for it. The entry is hashed into an append-only chain.
• An AI Inventory. A versioned list of the AI systems you use, with a named person responsible for each.
• Public verification pages. A link you can share so a third party can check a record without an account.
• An API, on plans that include it, so reviews can be logged from your own systems.

2.2 Records Cannot Be Edited

This is a design property, not a limitation. Once an entry is appended it cannot be edited or removed by you, by your team, or by us. Mistakes are corrected by appending a linked correction; the original remains visible. If that does not suit your workflow, the Services are not the right tool for you.

2.3 Publication to a Public Transparency Log

The cryptographic fingerprint of sealed records is periodically published to Sigstore’s Rekor, an append-only public log operated by the Linux Foundation. Only the hash is published, never content or identifiers. Publication is irreversible and outside our control. See our Privacy Policy, section 6.

2.4 Changes to the Services

We may add, change or remove features. Where a change materially reduces functionality you are paying for, we will give you at least 30 days’ notice by email, and you may cancel with a pro-rata refund of the unused portion of your current billing period.

2.5 Feedback

If you send us feedback, suggestions or bug reports, you grant us a perpetual, irrevocable, worldwide, royalty-free right to use and implement it without compensation.

3. Accounts, Credentials & Security

• Provide accurate registration details and keep them current.
• You are responsible for safeguarding access to your account, and for everything done through it.
• Do not share or transfer your credentials.
• Tell us immediately at contact@art50compliance.eu if you suspect unauthorised access.
• We may suspend an account where we reasonably suspect a breach of these Terms or a threat to the security of the Services.

4. Plans, Payment & Billing

4.1 Plans

Current plans, their limits and their prices are set out on our pricing page, which forms part of these Terms.

• Free. No charge, no card, no time limit. Subject to the monthly record allowance and inventory limit shown on the pricing page. No API access.
• Paid plans. Billed per company, not per seat, in advance.

4.2 Billing Cycle & Renewal

• Paid plans are billed in advance for each billing period and renew automatically until cancelled.
• Payments are processed by Stripe. We do not receive or store your card details.
• Prices are shown exclusive of VAT unless stated otherwise. Any applicable taxes are added at checkout.

4.3 Cancellation

• You may cancel at any time from your account. Cancellation takes effect at the end of the current billing period.
• You keep full access until that date. We do not provide partial refunds for the remainder of a period already paid for, except where section 2.4 applies or where the law requires it.
• On cancellation your account reverts to the Free plan. Your records remain, and the Free plan’s allowances apply from then on.

4.4 Failed Payments

If a payment fails we may retry it. Where a subscription remains unpaid we may suspend paid features until payment succeeds. We will not delete your records for non-payment.

4.5 Price Changes

We may change prices. We will give at least 30 days’ notice by email before a change affects you, and the new price applies from your next billing period. If you do not accept it, you may cancel before it takes effect.

4.6 Effect of Downgrading

If you move from a paid plan to Free, API access stops and the Free plan’s record allowance applies. Records you have already created are unaffected and remain accessible and exportable.

4.7 EU Consumers: Right of Withdrawal

5. Free Access for Journalists, Non-Profits & Public Bodies

• We offer Art50 free of charge to independent journalists and newsrooms, registered charities, NGOs and civil society organisations, and public authorities and publicly funded institutions.
• Access is granted on application. We assess applications at our discretion and may ask for evidence of eligibility.
• This is not a trial and does not expire while eligibility continues.
• We may withdraw free access where eligibility no longer applies or where these Terms are breached. We will give reasonable notice and your records remain exportable.

6. Acceptable Use

6.1 Licence

Subject to these Terms, we grant you a limited, non-exclusive, non-transferable, revocable licence to use the Services for your own business purposes.

6.2 Prohibited Conduct

You must not:

• Falsify records. Submit deliberately false, misleading or fabricated review data with intent to create deceptive evidence or mislead a third party about human oversight. This is the most serious breach of these Terms and we will terminate for it.
• Automate abuse. Use scripts or bots to bypass rate limits, plan allowances, or the credit and entitlement systems. Logging records through the API on a plan that includes it is of course permitted.
• Reverse engineer the Services, or attempt to extract source code or database structures.
• Probe or attack our infrastructure, or attempt to breach authentication or security controls.
• Transmit malicious code through uploads or any other route.
• Resell or white-label the Services, the API, or generated records as your own service, except under our partner programme or another written agreement with us. See section 7.

7. Partners & Resellers

Advisers, consultancies and agencies may place clients on Art50 under our partner programme. Partner arrangements, including any margin or fee, are set out in a separate written agreement. Nothing in section 6.2 prevents activity carried out under such an agreement.

8. The API

• API access is included on plans that say so on the pricing page.
• API keys are shown once on creation and are not recoverable afterwards. You are responsible for storing them securely, and for all activity carried out with them. Revoke a key immediately if it may have been exposed.
• Requests are rate limited. We may adjust limits to protect the stability of the Services.
• If your plan ceases to include API access, existing keys stop working and requests are refused. The keys are not deleted and resume working if you return to a plan that includes the API.
• We may change the API. Where a change is not backwards compatible we will give reasonable notice.

9. Your Content & Intellectual Property

9.1 Our Intellectual Property

All rights in the Services, including software, design, branding, the Art50 name and logo, and record formats, remain ours or our licensors’. These Terms grant you no ownership.

9.2 Your Content

You retain full ownership of everything you submit. We claim no ownership of your documents, records or inventory.

9.3 Licence to Operate

You grant us a worldwide, non-exclusive, royalty-free licence to store, host, process, reproduce and cryptographically hash your content solely to provide the Services: generating and displaying your records, maintaining the chain, serving verification pages you have chosen to share, and publishing hashes to the public log.

9.4 Your Warranty

You warrant that you hold the rights needed to submit what you submit, and that doing so breaches no third-party rights, confidentiality obligation or privacy law.

10. Data Protection

• For the personal data you place into your ledger or inventory, including reviewer names and any personal data in reviewed content, you are the controller and we are the processor.
• You are responsible for having a lawful basis, for informing the individuals concerned, and for handling their rights requests.
• Our Data Processing Agreement, which meets Article 28(3) GDPR, applies to that processing and is incorporated into these Terms. A signed copy is available on request at contact@art50compliance.eu.
• How we handle your own account and billing data is set out in our Privacy Policy.

11. What a Record Is, and What It Is Not

11.1 Records Are Declarations, Sealed

Art50 is a record-keeping utility. A record is compiled from what the user declares: the reviewer named, the depth of review selected, the attestation signed, and the timestamps given. The Services:

• do not independently audit or verify whether a person actually read, edited or fact-checked the work;
• do not compare documents, grade accuracy, or monitor a reviewer’s screen; and
• do provide a tamper-evident, independently datable record of what was declared, and when.

That distinction is the product. We seal the claim; we do not certify the work behind it.

11.2 No Guarantee of Compliance

• A record does not guarantee compliance with the EU AI Act or any other law.
• A record does not confer immunity from regulatory penalties, civil claims or third-party actions.
• We are not a law firm, a regulator or a certification body, and we do not give legal advice.

11.3 Your Responsibility

You remain solely responsible for defining and enforcing your own oversight standards, for ensuring reviewers have the competence and time to do the work, and for the accuracy and lawfulness of anything you publish.

12. Public Verification Pages

• Sharing a record is your choice, made record by record. You choose which fields appear.
• A shared page is accessible to anyone holding the link, without an account.
• You are responsible for having a lawful basis to publish any personal data a page contains, including the reviewer’s.
• You may revoke a share link at any time, which removes the page. Copies already taken, or search engine caching that occurred while it was live, are outside our control.
• We will keep verification pages available for as long as the record exists and the share link is active. We will not place existing verification pages behind a paywall.

13. Availability & Your Data

13.1 Availability

We work to keep the Services available and secure. We do not guarantee uninterrupted or error-free operation, and we may suspend access for maintenance, upgrades or emergency fixes. Where planned maintenance will cause material downtime we will give notice where reasonably practicable.

13.2 Your Data Stays Yours

You can export your full ledger and inventory at any time, in a self-describing format that can be verified independently of us. We encourage you to keep your own copies of anything you rely on for compliance.

We maintain backups and take the integrity of your records seriously; they are the thing you are paying us for. Nothing in these Terms excuses us from the security obligations in Article 32 GDPR or from our contractual duty to provide the Services with reasonable skill and care.

13.3 Force Majeure

Neither party is liable for failure or delay caused by events beyond reasonable control, including natural disasters, acts of government, war, terrorism, network or power failures, denial-of-service attacks, or major outages at cloud infrastructure providers.

14. Warranties

To the maximum extent permitted by law, and except as expressly stated in these Terms, the Services are provided without warranties of any kind, including implied warranties of merchantability, fitness for a particular purpose, or that records will be accepted as conclusive evidence by any auditor, court or regulator.

This does not exclude any warranty or right that cannot lawfully be excluded, including the statutory rights of consumers.

15. Liability & Indemnity

15.1 Excluded Losses

To the fullest extent permitted by law, we are not liable for indirect or consequential loss, loss of profit, revenue, business opportunity or goodwill, or for regulatory fines or penalties arising from your own content, your oversight practices, or your reliance on AI-generated output.

15.2 Cap

Our total aggregate liability for all claims arising from these Terms or your use of the Services is limited to the greater of:

• €500; or
• the total amount you paid us in the 12 months immediately before the event giving rise to the claim.

15.3 What Cannot Be Limited

Nothing in these Terms excludes or limits liability for death or personal injury caused by negligence, for fraud or fraudulent misrepresentation, for intentional misconduct or gross negligence, or for any other liability that cannot lawfully be excluded. Nothing affects the mandatory rights of consumers.

15.4 Indemnity

You agree to indemnify us against third-party claims, losses and reasonable legal costs arising from your submission of false or deceptive record data, your publication of AI-generated content that causes harm, or your breach of these Terms or of applicable law.

16. Termination

16.1 By You

You may cancel a paid plan or close your account at any time from your account settings, or by writing to contact@art50compliance.eu. Export anything you need first: closing the account deletes your records.

16.2 By Us

We may suspend or terminate your account, with notice where reasonable, if you materially breach these Terms, if we must do so by law, or if your use endangers other users or the Services. Where we terminate without cause we will refund the unused portion of any period you have paid for.

16.3 After Termination

Obligations incurred before termination survive it, as do sections 9, 11, 14, 15 and 17. Hashes already published to the public transparency log remain there; see section 2.3.

17. Governing Law & Disputes

• Business users: these Terms and any non-contractual obligations arising from them are governed by the laws of Estonia. Disputes are subject to the exclusive jurisdiction of Harju County Court in Tallinn.
• EU consumers: you keep the protection of the mandatory laws of your country of residence and may bring a claim in your local courts.

18. General

• Changes to these Terms. We may update these Terms. For material changes we will give notice in the app or by email before they take effect. Continuing to use the Services afterwards means you accept them; if you do not, you may cancel.
• Severability. If any provision is held unenforceable, the rest remains in force.
• Assignment. You may not assign these Terms without our consent. We may assign them to a successor in connection with a merger, acquisition or sale of assets, on notice to you.
• Entire agreement. These Terms, together with the Privacy Policy, the pricing page and our Data Processing Agreement, form the entire agreement between us regarding the Services.