Terms of Service

Gjall is a vendor risk monitoring platform that tracks public status pages, CVE feeds (NVD, CISA KEV), and security incident reports for vendors you configure. The Service delivers alerts through Slack, Microsoft Teams, email, and webhooks, and generates compliance evidence reports for SOC 2 and ISO 27001 programs.

Gjall monitors only publicly availableinformation sources. We do not access your vendors' internal systems, networks, or non-public data on your behalf.

You agree not to use the Service to:

• ·Violate any applicable law or regulation.
• ·Attempt to gain unauthorized access to the Service or its underlying infrastructure.
• ·Resell, sublicense, or redistribute the Service without written permission.
• ·Use the Service to monitor competitors for purposes unrelated to your own vendor risk program.
• ·Submit false, misleading, or malicious vendor data.
• ·Interfere with or disrupt the integrity or performance of the Service.

We reserve the right to suspend or terminate accounts that violate these terms without prior notice.

Free trial: All plans include a 14-day free trial. No credit card is required to start. At the end of the trial period, you will be asked to enter billing information to continue.

Auto-renewal: Subscriptions are billed monthly and automatically renew at the end of each billing period. You will receive an email reminder 7 days before renewal on annual plans.

Cancellation: You may cancel at any time from your account settings or by contacting legal@gjall.io. Cancellation takes effect at the end of the current billing period. We do not offer prorated refunds for partial months except where required by law.

Price changes:We will provide at least 30 days' notice before increasing subscription prices. Continued use after the price change effective date constitutes acceptance.

Payments are processed by Stripe. We do not store payment card information.

Our collection and use of your data is described in detail in our Privacy Policy, which is incorporated by reference into these Terms. Key points:

• ✓We collect only what is necessary to deliver the Service.
• ✓Alert logs are retained for 90 days (Starter) or 1 year (Enterprise).
• ✓Customer data is deleted within 30 days of cancellation upon request.
• ✓We do not sell or share your data with third parties for their own marketing.

The Service, including its software, design, and content, is owned by Gjall and protected by copyright, trademark, and other intellectual property laws. These Terms do not grant you any ownership rights.

You retain all rights to the vendor lists, configurations, and reports you create using the Service. You grant us a limited license to process that data solely to provide the Service.

We aim for high availability but do not guarantee uninterrupted access. Planned maintenance will be communicated in advance via email and our status page.

Enterprise customers with a signed Service Level Agreement (SLA) are entitled to the uptime commitments and remedies specified in that agreement.

To the fullest extent permitted by applicable law, Gjall and its officers, directors, employees, and agents shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including lost profits, lost data, or business interruption, arising from your use of or inability to use the Service.

Our total liability to you for any claim arising from these Terms or your use of the Service shall not exceed the greater of (a) the amount you paid us in the 12 months preceding the claim or (b) $100 USD.

The Service is provided “as is” and “as available” without warranties of any kind, express or implied, including warranties of merchantability, fitness for a particular purpose, or non-infringement.

You agree to indemnify and hold harmless Gjall from any claims, damages, losses, or expenses (including reasonable attorneys' fees) arising from your violation of these Terms or your use of the Service in a manner not authorized by these Terms.

These Terms are governed by and construed in accordance with the laws of the State of Texas, without regard to its conflict of law principles.

Any dispute arising from these Terms shall be resolved through binding arbitration administered by JAMS under its Streamlined Arbitration Rules. The arbitration shall take place in Austin, Texas. You waive the right to participate in class action litigation.

Notwithstanding the above, either party may seek injunctive or other equitable relief in a court of competent jurisdiction to protect intellectual property or confidential information.

Either party may terminate the agreement at any time. We may suspend or terminate your access immediately if you breach these Terms. Upon termination, your right to use the Service ceases and we will handle your data as described in the Privacy Policy.

We may revise these Terms from time to time. When we do, we will update the effective date and notify active customers by email at least 14 days before the changes take effect. Continued use of the Service after the effective date constitutes acceptance of the revised Terms.

Questions about these Terms? Contact us at legal@gjall.io.