Terms of Service

These Terms form a binding agreement between you and Niriis S.A., a company registered in Greece (GEMI 173456789, VAT EL801234567) with its registered office at Patision 132, 112 57 Athens, Greece ("we", "us"). By creating a ComplAI account or using the platform, you agree to these Terms. If you are using ComplAI on behalf of an organisation, you represent that you have authority to bind that organisation to these Terms.

ComplAI is a software-as-a-service platform that helps organisations assess, generate, and maintain documentation, registers, and evidence relevant to GDPR and ISO 27001 compliance. The service is provided "as is". We do not provide legal or audit advice; nothing the platform produces should be relied on as a substitute for advice from a qualified professional.

Some features generate text, drafts, and assessments using third-party AI models. AI output may be inaccurate, incomplete, or out of date. You are responsible for reviewing every AI-generated artefact before relying on it, publishing it, or using it as evidence in an audit. We do not warrant the accuracy of AI output.

You are responsible for: (a) keeping your authentication credentials confidential, (b) all activity that takes place under your account, and (c) notifying us of any unauthorised access. Each subscription is for the named organisation; sharing logins across separate organisations breaches these Terms.

• Plans, prices, and feature limits are listed at /dashboard/billing. Prices are exclusive of VAT.
• Subscriptions renew automatically until cancelled. You can cancel anytime; cancellation takes effect at the end of the current billing period.
• Credit top-up packs are non-refundable but never expire.
• If a payment fails, we will retry; if retries fail, your subscription will be downgraded to the Free plan, but your data remains accessible.
• We may change pricing with 30 days' notice. Existing customers retain their current price for at least the remainder of their billing cycle.

You agree not to: (a) reverse-engineer or attempt to extract source code, (b) use the service to violate any law or third-party right, (c) introduce malware, (d) use the service to send spam or unsolicited communications, (e) probe, scan, or attempt to bypass our security mechanisms (other than via our published bug-bounty programme if one exists), or (f) use the service to generate content that infringes intellectual-property rights or that is illegal in your or our jurisdiction.

You retain ownership of all content you upload or generate (your "Org Data"). You grant us the limited licence necessary to host, process, and display your Org Data so that we can provide the service. We do not use your Org Data to train AI models. Our handling of personal data is governed by ourPrivacy Policy.

Each party will protect the other's confidential information using measures at least as protective as those it uses for its own confidential information of similar sensitivity, and never less than reasonable care.

We aim for 99.5% monthly uptime for paid plans. We do not guarantee uninterrupted access. Scheduled maintenance is announced in advance where practical. Free-plan users do not receive an SLA.

You may delete your account at any time. We may suspend or terminate accounts that breach these Terms or that have not paid for an extended period, with reasonable notice where possible. On termination we will delete your data per our retention rules in the Privacy Policy.

To the maximum extent permitted by law, our aggregate liability under these Terms is capped at the fees you paid in the 12 months preceding the claim. We are not liable for indirect or consequential losses, including loss of profit, data, or audit outcomes. Nothing in these Terms limits liability that cannot be limited by law (death, personal injury, fraud, gross negligence).

We may update these Terms. Material changes will be communicated by email and via an in-app notice at least 30 days before they take effect. Continued use after the effective date constitutes acceptance.

These Terms are governed by the laws of Greece, with exclusive jurisdiction of the courts of Athens, except where mandatory consumer-protection laws of your country of residence apply.

Questions about these Terms: legal@hotelbrain.com. Postal correspondence: Niriis S.A., Patision 132, 112 57 Athens, Greece.