English version 2026-09-25. Versioned copy. For privacy and contractual questions: vegalysuae@gmail.com.

Vegalys | B2B Terms & Conditions

Version: 2026-09-25
Provider: ALTAIR CONNECT - F.Z.E
Language: English only
Publication date: 25 September 2026
Status: Published terms for new Orders. Existing contracts are not amended retroactively.

Terms & Conditions

Parties and business eligibility

These Terms govern the Vegalys services supplied by ALTAIR CONNECT - F.Z.E, a Free Zone Establishment - Limited Liability, licence and registration number 53850 issued by the Free Zones Authority of Ajman, with its registered address at B.C. 1301562, Ajman Free Zone C1 Building, Ajman Free Zone, Ajman, United Arab Emirates (the “Provider”, “we” or “us”). Our contractual, support and privacy contact is vegalysuae@gmail.com.

The “Customer” is the business identified in the accepted order or checkout. The initial commercial offering is directed to business customers in the United Arab Emirates and European Union. Services are offered exclusively for professional purposes; the individual accepting on the Customer’s behalf represents that they have authority to bind it. This eligibility restriction does not exclude any mandatory statutory protection that applies to the transaction.

Contract formation and documents

The contract consists of these Terms, the accepted order or checkout summary (“Order”), its completed service schedule and, where applicable, the Data Processing Addendum (“DPA”). The Order must identify the Customer, selected service, delivered functionality, limits, price, currency, taxes if applicable, monthly renewal date and the effective versions of the contractual documents.

A contract is formed when the Customer expressly accepts those documents and we confirm the Order electronically or in writing. Registration, an enquiry, viewing a draft or making an unrelated evaluation payment does not by itself create a commercial subscription. The Customer will receive a reproducible copy of the accepted documents and confirmation of the subscription period.

Mandatory law and any valid mandatory transfer clauses prevail. The DPA prevails for personal-data processing; otherwise a separately signed agreement expressly amending a provision prevails, followed by the Order and these Terms. The Privacy Notice is an information notice, not blanket consent or an expansion of our instructions to process Customer Data.

Contracted scope and service licence

“Service” means only the functionality expressly identified as available in the completed Order. “Customer Data” means the files, records and other content supplied by or on behalf of the Customer and its service-generated results.

During the paid subscription period, we grant the Customer a non-exclusive, non-transferable right to use the Service for its internal business purposes through authorised users, within the Order’s limits. Affiliate access, resale, managed services for third parties and additional organisations require express inclusion in the Order.

Roadmaps, prototypes, demonstrations and descriptions of planned capabilities are not delivery commitments. We may maintain and improve the Service, but may not materially reduce paid contracted functionality during a paid period without the Customer’s agreement or the remedies described under “Changes”.

Unless separately agreed, the Service excludes bespoke development, consulting, training, integrations, regulatory filings and actuarial or accounting certification. No availability percentage, resolution time, 24/7 support or specific recovery time is promised without a signed service-level schedule. Enquiries may be sent to the contact above; the absence of an SLA does not remove our obligations of reasonable care or our incident-notification obligations.

Email support is provided at vegalysuae@gmail.com with a first-response commitment of two Business Days after receipt. A first response means a substantive acknowledgement or initial assistance, not merely an automatic receipt and not guaranteed resolution within that period.

A “Business Day” means Monday to Friday, excluding UAE public holidays, with time assessed in Asia/Dubai. This ordinary support response period does not postpone security-incident or other legally required notifications.

Evaluation environments

Demonstration and evaluation environments are for fictitious data only unless a separate written pilot agreement expressly authorises otherwise. Evaluation access does not establish that a production module is available.

Any paid evaluation must disclose its amount, duration and refund conditions before acceptance. It does not automatically convert into a Standard or Premium subscription without separate express authorisation.

Accounts and acceptable use

The Customer must provide accurate business and billing details, designate an administrator, authorise and remove users appropriately, and protect credentials. It must promptly notify us of suspected compromise and cooperate reasonably in containment; it is not responsible for a security failure attributable to us merely because the incident affected its account.

Users must not upload unlawful content, infringe third-party rights, distribute malware, bypass access controls or plan limits, disrupt the Service, or undertake security testing without written authorisation. Reverse engineering restrictions apply only to the extent permitted by mandatory law and applicable third-party licences.

The initial Service accepts only genuinely anonymised business datasets and associated business content. The Customer must anonymise content before upload, including identifying fields, filenames, metadata and free text, so that individuals are not identifiable using means reasonably likely to be used by the Customer, the Provider or another person. Removing names or replacing them with codes is insufficient where re-identification remains reasonably possible; pseudonymised personal data is not permitted under this initial scope. The Customer must not upload re-identification keys or attempt to re-identify individuals.

This dataset restriction does not prohibit the personal information necessarily and lawfully used for user accounts, authorised contacts, support or billing; those activities are governed separately by the Privacy Notice and any actually applicable DPA. Uploads of personal business records, including policyholder identifiers, personal claims or health records, are prohibited. Any future expansion to personal datasets requires a separately signed scope amendment, legal review and verified controls before upload; completing a routine schedule cannot silently authorise it.

If either party discovers personal data in a purportedly anonymised dataset, it will promptly inform the other, restrict the affected processing and arrange secure deletion or other lawful handling without continuing ordinary use. The Provider will assess any applicable incident or notification duties; the Customer’s anonymity statement does not excuse the Provider’s own obligations.

Fees, taxes and billing

Standard is EUR 1,000 per month excluding applicable taxes. Premium is EUR 1,750 per month excluding applicable taxes. Pro and separately scoped services require a quotation. These are monthly prices, not monthly instalments of an annual commitment; inclusion here does not activate an unavailable plan.

The first monthly period and renewal date are specified in the Order and confirmation. Fees are payable monthly in advance using the authorised payment method. The Customer authorises recurring charges only for the plan, amount and schedule expressly accepted, subject to any later valid change.

Taxes are charged only where legally due and correctly supported by the Provider’s tax position. These Terms do not state a VAT rate, claim a tax exemption or supply a tax registration number. Any applicable tax and the total payable must be disclosed before payment; a legally required invoice correction will be explained.

Payments may be handled by Stripe. Any third-party terms applicable directly to the Customer will be identified where relevant; they do not replace our obligations under this contract. Payment-provider charges do not authorise undisclosed subscription fees.

The Customer should notify billing disputes promptly, identifying the disputed amount and reason. We will investigate in good faith and will not suspend solely for a genuinely disputed amount while the Customer cooperates and pays undisputed amounts. This provision does not shorten any mandatory challenge period.

Monthly term, renewal and ordinary cancellation

Standard and Premium renew automatically for successive monthly periods unless cancelled before renewal. There is no annual commitment, minimum twelve-month term or additional cancellation notice period.

The Customer may cancel at any time through the billing portal where available or by emailing vegalysuae@gmail.com from an authorised business contact. A request received before the renewal timestamp prevents the next renewal, even if our acknowledgement is sent later; the renewal timestamp and time zone must be displayed in the account or confirmation. A cancellation received after renewal stops the following renewal, subject to mandatory rights and correction of any billing error.

Cancellation takes effect at the end of the current paid period. Access continues until then, subject to justified suspension or termination for cause. We will confirm the effective end date without undue delay.

Ordinary cancellation does not entitle the Customer to a prorated refund for unused time, except where required by law. This does not restrict refunds for our material breach, duplicate or unauthorised charges, unprovided services, or other express contractual remedies.

Plan changes and payment failures

Upgrades, downgrades and additional services require an explicit summary of the new scope, price, effective date and any proration before approval. Unless otherwise expressly agreed, a change takes effect at the next monthly renewal; no automatic overage or upgrade charge is authorised.

If a payment fails, we will notify the billing contact and allow seven calendar days to correct it before suspending paid access, unless urgent fraud or security concerns justify earlier action. Suspension must be proportionate. We will not knowingly continue successive paid renewals while providing no paid access solely because of an unresolved non-payment suspension; disputed, accrued and legally due sums remain subject to resolution.

Data, intellectual property and confidentiality

The Customer retains its rights in Customer Data, including its proprietary inputs and results, subject to any third-party rights and our pre-existing software rights. It grants us only the rights necessary to perform the contract, follow documented instructions, secure the Service and comply with applicable law. No right to sell Customer Data, use it for advertising or train general-purpose AI models is granted.

We and our licensors retain rights in the Service, software, documentation and pre-existing materials. Bespoke deliverables require a written statement of ownership; no transfer is implied by a subscription. We will not use the Customer’s name or logo as a public reference without permission.

Each party must protect the other’s non-public information using reasonable care, at least equivalent to that used for its own similar information, and disclose it only to persons who need it for the contract and are bound to confidentiality. These duties do not cover information demonstrably public without breach, previously lawfully known, independently developed, or lawfully received without restriction.

Compelled disclosure must be limited to what is legally required, with advance notice where permitted and reasonable cooperation on protective measures. Confidentiality continues for five years after termination, and longer for trade secrets while they remain protected and for personal data as required by applicable law and the DPA.

Personal-data processing and exit

Where we process personal data on the Customer’s behalf, the DPA governs. The Customer is responsible for the lawfulness of its collection, instructions and disclosures; we remain responsible for our own processor obligations.

Production processing requires completed processing, recipient, security, transfer and retention schedules. This contract does not promise that all processing occurs in one country or region. Sensitive infrastructure details need not be public, but necessary contractual and statutory disclosures must be supplied.

Anonymised business datasets and their associated non-personal results are retained during the active subscription and for twelve months from the effective end of the final paid subscription period, unless the Customer validly requests earlier deletion or a lawful hold requires different treatment. The clock starts when paid access ends, not when a cancellation request is sent. At the end of that period the content is deleted in accordance with the completed exit schedule; backup arrangements must be aligned with that deadline rather than silently extending it.

This limited exit archive does not extend ordinary product access, authorise a new charge or promise a currently unbuilt recovery/export function. The Order must state the supported authenticated return/export method and exit assistance. The non-personal business-content policy in Schedule D of the accompanying data-handling package is to be incorporated into the Order even if the processor clauses of the DPA are not applicable to those datasets.

Personal account, support, billing and security records follow their separate purpose-based retention rules; the twelve-month business-content archive does not automatically govern them. Where the Provider actually processes personal data for the Customer, the DPA and applicable legal return/deletion duties govern that processing.

Performance and professional responsibility

We will provide the contracted Service with reasonable care and skill and substantially in accordance with the agreed service description. On notice of a material non-conformity, we will investigate and use reasonable efforts to correct it; termination and refund rights for unresolved material breach remain available.

The Customer must check the suitability of its inputs, assumptions and outputs before operational or regulatory reliance. Vegalys is not a substitute for independent actuarial, legal, accounting or regulatory judgement and does not confer any certification or guarantee compliance with a named framework. These limitations do not excuse a failure to provide the contracted functionality.

Third-party intellectual-property claims

We will defend a third-party claim that the unmodified Service, used as authorised, infringes that party’s intellectual-property rights and pay damages and reasonable settlements finally awarded or approved by us, subject to “Liability”. This excludes claims caused by Customer Data, unauthorised modifications or combinations, or use outside the contract, to the extent those circumstances caused the claim.

The Customer will provide equivalent protection for a third-party claim that Customer Data it supplied infringes that party’s intellectual-property rights, to the extent caused by the Customer’s breach of its rights obligations and not by our unauthorised use.

The protected party must promptly notify the other, allow control of the defence and cooperate reasonably at the defending party’s expense. Delay reduces protection only to the extent it materially prejudices the defence. No settlement may admit fault, impose non-monetary duties or fail to release the protected party without its consent, not to be unreasonably withheld.

For an affected Service, we may obtain continued rights or provide a materially equivalent non-infringing replacement. If neither is reasonably feasible, either party may terminate the affected Service and we will refund prepaid fees for the unused period, without removing accrued claim rights.

Liability

Subject to the exceptions below, each party’s aggregate liability arising from the contract is limited to the greater of (a) fees paid or payable under the affected Order for the twelve months preceding the first event giving rise to the claim and (b) three monthly subscription fees at the rate applicable immediately before that event.

For breaches of confidentiality, data-protection obligations and the third-party intellectual-property protection above, a higher aggregate cap of twice that amount replaces the ordinary cap. The caps are not cumulative; related events constitute one series, and all amounts recovered count toward the applicable aggregate ceiling.

Neither party is liable for indirect or consequential loss or loss of anticipated profits, to the extent lawfully excludable. Reasonable direct costs of restoring affected data, investigating a breach and making legally required notifications are not excluded solely by being described as data-related loss, but remain subject to the applicable cap.

No cap or exclusion applies to fraud, wilful misconduct, gross negligence, death or personal injury where limitation is prohibited, or any other liability that cannot lawfully be limited. Payment of correctly due fees is not capped as damages. Nothing limits a data subject’s rights against either party, a regulator’s powers, or mandatory transfer-clause rights; neither party is required to reimburse a fine where unlawful.

Suspension and termination for cause

We may restrict access where reasonably necessary to contain an actual security threat, unlawful use or material breach. We will limit the scope and duration, notify the Customer and allow correction where practicable; urgency or law may require action before notice. We will restore access when the justification ceases.

Either party may terminate an affected Order if the other fails to remedy a material breach within fifteen calendar days after written notice describing it, or immediately where the breach is incapable of remedy or continued performance would be unlawful.

If the Customer terminates for our unremedied material breach, or we discontinue a paid Service without Customer breach, we will refund prepaid fees for the period after termination. Ordinary cancellation’s no-prorated-refund rule does not override this clause. Termination does not remove accrued rights, confidentiality, data-exit duties or other provisions intended to survive.

Changes and events beyond reasonable control

We will give at least thirty calendar days’ written notice of a proposed price increase or material change to these Terms. Such a change cannot take effect before the first renewal after that notice period, cannot apply retroactively and remains subject to any legally required acceptance. The Customer may cancel before it takes effect without an additional penalty.

A materially reduced paid service requires agreement or the option to terminate the affected service with a refund of unused prepaid fees. Changes urgently required by law or security will be explained as soon as reasonably possible; they do not remove mandatory remedies. Merely editing a webpage does not amend an existing contract.

A party affected by an event beyond its reasonable control must notify the other, mitigate and resume performance promptly. A preventable security failure or ordinary lack of funds is not automatically such an event. If material non-performance continues for thirty days, either party may terminate the affected Order; we will refund prepaid fees for unprovided services, without duplicate recovery.

Notices and general provisions

Contractual notices must be sent to vegalysuae@gmail.com for us and the Customer’s nominated business contact for the Customer. Email notice is effective on receipt by the recipient’s system unless a delivery failure is returned; cancellation is additionally governed by its specific clause. Each party must keep contact information current.

Neither party may transfer the contract without the other’s consent, not unreasonably withheld, except as part of a genuine reorganisation or business transfer where obligations and protections are maintained, advance notice is given and mandatory requirements are met. Subprocessing remains subject to the DPA.

Invalidity of one provision does not invalidate the remainder to the extent it can operate lawfully. Failure to enforce is not a waiver, and this contract creates no agency or partnership. The agreed documents supersede prior discussions for their subject matter, but do not exclude liability for fraud or mandatory protection against misleading representations.

Governing law, disputes and language

Subject to mandatory law and mandatory transfer clauses, the contract is governed by the applicable federal laws of the United Arab Emirates and applicable laws of the Emirate of Ajman. Disputes are submitted to the competent courts of Ajman.

Before proceedings, the parties will seek good-faith resolution through their designated contacts for thirty days from written notice of the dispute. This does not prevent urgent protective relief, mandatory complaints or action needed to preserve a limitation period.

This contract is prepared in English. Any later translation must identify its status and the prevailing text; the use of English does not displace mandatory Arabic-language, translation or disclosure requirements, or the prevailing text of mandatory transfer clauses.

Order schedule to complete before acceptance

Customer-specific entries below are completed in the Order or checkout; they are not pre-signed or fabricated customer details. The Standard service and limits are described in the Service Schedule. Premium is not currently available for purchase.