Terms of Service

These Terms of Service ("Terms") govern access to and use of Velqory services, AI systems, web systems, cybersecurity training, documentation, delivered work, and related support (collectively, the "Services"). By signing a proposal, statement of work, service agreement, or using any Service, you agree to be bound by these Terms.

If you are entering into these Terms on behalf of a company or other legal entity, you represent that you have the authority to bind that entity. If you do not agree, do not use the Services.

Velqory designs, builds, secures, and operates AI-powered systems. The Services may include, where contracted:

• AI solutions development, agentic operations, document intelligence, and workflow automation
• Websites, portals, dashboards, internal tools, integrations, and client-facing systems
• Cybersecurity training, AI adoption training, secure usage policies, and threat modelling
• Runbooks, monitoring, human-in-the-loop handoff, and operational support
• Security, privacy, and compliance preparation where defined in writing

AI inference, model provider, and data-location options depend on the written proposal, statement of work, DPA, customer environment, and project scope. Where third-party providers are used, they must be identified in the applicable agreement, subprocessor list, or project documentation.

Velqory is developing its own software. There is no commercial offer for it yet; when there is, it will have its own terms.

We may update, modify, or discontinue features with 30 days' written notice. Critical security updates may be applied immediately.

You are responsible for maintaining the confidentiality of your credentials and for all activity that occurs under your account. You must:

• Provide accurate, complete registration information.
• Notify us immediately of any unauthorized access.
• Not share account credentials across individuals - use role-based access instead.

We reserve the right to suspend accounts that violate these Terms or pose a security risk.

A Blog account is a free public-community identity for profiles and comments on Blog articles. It is technically and contractually separate from Client Access and never grants access to a customer organisation, project, support record, or customer data.

• The Blog community is for people aged 16 or over. We ask for a separate age attestation and deliberately do not collect a date of birth. Do not create an account if you are under 16.
• Email verification is required. Your chosen display name, handle, profile note, and published comments are public; your email and sign-in method remain private.
• You retain ownership of your contribution and give Velqory only the limited permission needed to store, moderate, reproduce, and publicly display it as part of the Blog until it is removed or anonymised.
• Do not publish personal or confidential data, unlawful material, impersonation, harassment, malware, spam, undisclosed advertising, or content that infringes another person's rights.

A first contribution may await review. We may publish, reject, hide, restore, or remove content to enforce these rules, protect people, or comply with law, and we keep a reasoned audit record. You can report a comment in context or ask for review at suporte@velqory.com. Account deletion removes the external sign-in identity, ends all Blog sessions, and anonymises the public profile and contributions; it does not alter Client Access.

You retain all rights, title, and interest in the data, configurations, and content you provide to Velqory ("Your Data"). You grant Velqory a limited, non-exclusive license to process Your Data solely for the purpose of delivering and improving the services you have requested.

We do not claim ownership of Your Data. We do not share Your Data with third parties except as described in our Privacy Policy.

Storage location, access, export format, and return or deletion procedure are defined by the written proposal, statement of work, DPA, or service agreement. Where Velqory-operated infrastructure is used, Your Data remains exportable in open or original formats unless the applicable agreement states a different lawful retention requirement.

Ownership of and licences to deliverables, including any pre-existing Velqory technology, are set out in the proposal or contract for each project.

You agree not to use the Services to:

• Violate any applicable law or regulation.
• Infringe on intellectual property rights of others.
• Distribute malware, viruses, or malicious code.
• Attempt to gain unauthorized access to other accounts or systems.
• Reverse-engineer, decompile, or disassemble any delivered system except where expressly allowed in writing.
• Use automated means to scrape or extract data beyond API rate limits.
• Resell or sublicense access to Velqory work without written authorization.

Commercial work is governed by a written proposal, statement of work, or service agreement that defines scope, timeline, fees, support terms, and data processing responsibilities. We issue Portuguese legal invoices (faturas) by email. Amounts are stated in euros (EUR) unless a written agreement says otherwise. VAT is added where applicable. Fees are non-refundable except where required by law or expressly stated in the signed agreement.

• Scope and price are set in writing before any work starts.
• Milestones and payment dates are defined in the proposal, invoice, acceptance note, or agreement.
• Scope changes require written approval before they affect price, timeline, deliverables, or support obligations.
• Third-party costs, hosting, licences, hardware, travel, or recurring support are handled separately where applicable.

Velqory is bound only by prices, timelines, warranties, and support commitments approved in writing by an authorized representative.

Service availability targets and support response times are defined by proposal, statement of work, contract, or SLA addendum:

• Project support applies only to the scope, channels, and dates stated in the written agreement.
• Managed operation requires explicit monitoring, response, and handoff terms.
• Training delivery is governed by the agreed calendar, materials, and acceptance criteria.

Scheduled maintenance windows, exclusions, credits, and remedies apply only where written in the applicable contract or SLA addendum.

Velqory operates the Services with attention to GDPR, NIS2, ISO/IEC 27001, and SOC 2 preparation principles, without claiming certification or report status unless supported by valid documentation. A Data Processing Agreement (DPA) is used where the contracted service requires personal data processing on behalf of a customer.

Data location, transfers, AI inference, and subprocessors are defined by the written proposal, DPA, customer environment, and project scope.

Relevant security or privacy documentation may be requested from suporte@velqory.com, subject to customer status, scope, and confidentiality requirements.

To the maximum extent permitted by law, Velqory's total aggregate liability under these Terms shall not exceed the amounts paid by you in the 12 months preceding the event giving rise to the claim.

In no event shall Velqory be liable for indirect, incidental, special, consequential, or punitive damages, including loss of profits, data, or business opportunity, regardless of whether we were advised of the possibility of such damages.

Nothing in these Terms limits liability that cannot be limited under applicable law (including liability for gross negligence, willful misconduct, or violation of mandatory consumer protection rights).

Either party may terminate this agreement with 30 days' written notice. We may suspend or terminate your access immediately if you breach these Terms or if continued access poses a security risk.

You may request export or return of Your Data during the active engagement and any transition period stated in the applicable agreement, in open or original formats where technically available. There are no export fees unless a signed agreement states otherwise.

Following termination, the export, return, deletion, and backup timelines are governed by the applicable agreement, DPA, and legal retention requirements.

These Terms are governed by Portuguese law. The parties will first seek an amicable resolution. For business customers, the courts of the district of Lisbon have jurisdiction. For consumers, the mandatory rules on jurisdiction and consumer protection apply.

We may revise these Terms from time to time. Material changes will be announced via email or agreed project communication channel at least 30 days before they take effect. Continued use after the effective date constitutes acceptance of the revised Terms.

For questions about these Terms:

• Email: suporte@velqory.com
• Service provider: BOUNCY ALGORITHM - UNIPESSOAL LIMITADA, Portuguese tax number (NIF) 519421574, which uses the Velqory brand.