Terms of use

Applicable to website, web app, desktop/mobile apps and related APIs (“Service”).

1. Provider, Contact, Scope

1.1 The provider of the Service is Weisscam GmbH, Osterwaldstr. 53, 80805 Munich, Germany, telephone +49 179/671 6336, email: datenschutz@weisscam.com (“Weisscam”).

1.2 These Terms of Use (“ToU”) apply to all users of the Service, in particular:

• private users (“consumers” within the meaning of Section 13 German Civil Code (BGB)),
• business customers (“entrepreneurs” within the meaning of Section 14 BGB), and
• public authorities and other organizations (together with business customers: “Customers”).

1.3 Deviating terms of the Customer shall not apply unless Weisscam expressly agrees to their validity in text form.

1.4 Supplementary documents form part of the contractual relationship if effectively incorporated during the ordering process or within the admin area:

• Privacy Policy (as of April 10, 2026; published separately),
• Data Processing Agreement / DPA (for Customers, where processing on behalf applies) pursuant to Art. 28 GDPR,
• Service description, pricing, and, where applicable, SLA/support guidelines (per plan/offer).

2. Definitions and Roles in the Workspace

2.1 “Organization” means a multi-tenant workspace (tenant) created and administered by a Customer.

2.2 “Org Admin” means a user role with administrative rights (e.g., user management, roles/access, security policies, export, billing).

2.3 “End User” means a user operating within an Organization.

2.4 “Guest” means an external user with limited rights (e.g., access to specific folders or spaces), where the Organization allows guests.

2.5 “Content” means all data uploaded or provided by users or on behalf of Customers within the Service (e.g., files, messages, metadata, inputs for AI functions).

3. Subject Matter of the Contract and Scope of Services

3.1 Weisscam provides a secure, unified workspace for knowledge management, task and project management, contact management, and data analysis, including features for storage, collaboration, communication, and—where enabled—AI-supported processing of user inputs.

3.2 The specific scope of features, limits (e.g., storage, number of users, rate limits), supported clients, support hours, and any SLA are defined in the respective plan, service description, or offer.

3.3 Weisscam owes the provision of the Service within the agreed scope, but not any specific economic or organizational success.

3.4 Weisscam is entitled to further develop the Service and modify features, provided the Service remains functional overall and changes are reasonable in accordance with Section 19 (Changes to the ToU).

4. Registration, Contract Formation, Requirements for Use

4.1 Private users generally conclude the contract through online registration and acceptance of the ToU (click-wrap), and, where applicable, by selecting a plan.

4.2 Customers conclude the contract via online order, offer/acceptance, or framework agreement. The initial admin warrants that they are authorized to represent the Customer.

4.3 Users must provide accurate information and keep it up to date.

4.4 Weisscam may reject registrations or orders for legitimate reasons (e.g., suspicion of misuse, sanctions/embargo risks, technical infeasibility).

5. Account Security, Authentication, 2FA, Access Control

5.1 Users are required to keep their access credentials confidential, use secure passwords, and protect devices/endpoints from unauthorized access.

5.2 Weisscam provides appropriate authentication mechanisms (e.g., password login, optionally SSO in certain plans). The specific configuration may evolve.

5.3 Two-factor authentication (2FA):

• Weisscam supports 2FA in the near future.
• Weisscam may require 2FA for privileged roles (especially Org Admins) or allow Customers to enforce it via policy, in line with a risk-based approach pursuant to Art. 32 GDPR.

5.4 Access control (RBAC/ACL):

• Customers manage permissions, roles, and sharing within their Organization.
• Customers are responsible for joiner/mover/leaver processes and for applying the “least privilege” principle.

5.5 Security and admin logs:

• Weisscam logs security-relevant events (e.g., logins, admin actions, security changes) as required for security, stability, and abuse prevention.
• Retention details are defined in the Privacy Policy and/or DPA.

6. Acceptable Use, Prohibitions, Content Moderation

6.1 Users may only use the Service in compliance with these ToU, the service description, applicable law, and third-party rights.

6.2 In particular, the following are prohibited:

• uploading, storing, sharing, or distributing unlawful content,
• infringing intellectual property, personality, data protection, or trade secret rights,
• use of malware, phishing, spam, unauthorized scanning, DoS/DDoS, or circumvention of security mechanisms,
• reverse engineering, decompilation, or circumvention of technical protection measures unless legally permitted,
• misuse of AI features to generate or distribute unlawful or harmful content,
• automated data extraction (“scraping”) that impairs the Service or circumvents safeguards.

6.3 Weisscam may restrict, block, or remove content or access if necessary to (a) mitigate security risks, (b) prevent legal violations, (c) comply with legal obligations, or (d) maintain service stability. Where reasonable and legally permissible, Weisscam will inform the Customer.

6.4 In case of repeated or serious violations, Weisscam may terminate the contract for cause (Section 17).

7. AI Functions, Model Usage, Outputs, Responsibility

7.1 Service description: AI features may process inputs, summarize content, generate suggestions, or improve discoverability. Outputs may be incorrect, incomplete, or unsuitable. Users must verify results before use.

7.2 No professional advice: AI outputs do not constitute legal, tax, medical, or safety advice.

7.3 Use of user inputs:

• Inputs are processed to generate AI outputs.
• AI inference is performed within the EU/EEA (currently: Netherlands).

7.4 Zero retention and no training (product/plan dependent, where enabled):

• Weisscam operates AI processing with no persistent storage of inputs/outputs (“Zero Data Retention”), where enabled.
• User inputs are not used to train AI models, where such settings apply.
• Weisscam uses exclusively open-source models according to its configuration (example: “gpt-oss-120b”).

7.5 Customer responsibilities: Customers are responsible for ensuring that AI usage complies with their internal requirements (e.g., confidentiality, regulatory compliance, works councils, public sector rules).

8. User Content, IP Rights, License to Weisscam

8.1 Content remains the property of the user/Customer.

8.2 Users/Customers grant Weisscam a non-exclusive, worldwide, term-limited license to store, reproduce, transmit, display, and technically process content as necessary to provide the Service (including indexing, transfer to authorized recipients, caching, backups, and restoration).

8.3 Users/Customers warrant that they are authorized to grant such rights and that content does not infringe third-party rights.

8.4 Feedback: Users may voluntarily provide feedback. Weisscam may use it free of charge to improve the Service.

9. Open Source Components

9.1 The Service may include open-source software. Where open-source licenses impose specific rights/obligations, these prevail.

9.2 Weisscam will, where practicable, provide an overview of relevant open-source components.

10. Data Protection, Data Categories, Subprocessors, Data Locations

10.1 Roles:

• Weisscam acts as controller for account, contract, support, and billing data.
• Weisscam acts as processor for Customer content data within an Organization; a DPA pursuant to Art. 28 GDPR will be concluded.

10.2 Data subject rights apply vis-à-vis the respective controller (e.g., Customer for organizational data; Weisscam for account/billing).

10.3 Data locations:

• Hosting in Germany (IONOS; Berlin data center).
• AI processing within the EU (Netherlands).
• No third-country transfers currently take place; any changes will be reflected in the Privacy Policy.

10.4 Subprocessors:

• Weisscam uses hosting and AI providers as described in the Privacy Policy.
• Changes follow the DPA framework, including notification/objection rights.

11. Security, Encryption, Backups, Logging

11.1 Weisscam implements appropriate technical and organizational measures to protect data.

11.2 Measures follow a risk-based approach under Art. 32 GDPR.

11.3 Security measures may evolve without reducing protection levels.

11.4 Customer obligations: Customers must implement appropriate security measures on their side (devices, roles, passwords, 2FA where available).

12. Security Incidents, Incident Response, Notifications

12.1 Weisscam maintains processes for detecting, containing, and resolving incidents.

12.2 GDPR notifications:

• Controllers must notify breaches without undue delay and, where feasible, within 72 hours.
• Weisscam, as processor, notifies Customers without undue delay.

12.3 Weisscam provides sufficient information to enable compliance.

13. Availability, Maintenance, SLA, Disaster Recovery

13.1 Weisscam aims for high availability; binding SLAs apply only if explicitly agreed.

13.2 Maintenance will be announced in advance where possible.

13.3 Backups:

• Weisscam uses backup mechanisms.
• Customers remain responsible for their own compliance-related backups.

14. Pricing, Trial, Payment, Refunds

14.1 Pricing is defined in the applicable price list or offer.

14.2 Trial: Any trial period details are shown during checkout; no automatic conversion without active selection.

14.3 Payments:

• Processed via external providers (currently VR Payment).
• Billing data may be subject to statutory retention.

14.4 Late payment: Weisscam may restrict access after notice.

14.5 Refunds:

• B2B/B2G: generally no pro-rata refunds unless agreed.
• Consumers: statutory rights apply.

15. Suspension and Termination for Cause

15.1 Weisscam may suspend accounts to address misuse, security risks, legal violations, or payment defaults.

15.2 Weisscam will inform the Customer where possible before suspension.

16. Term and Ordinary Termination

16.1 Term and notice periods depend on the selected plan.

16.2 Termination may occur via admin console or in text form.

16.3 Consumer rights remain unaffected.

17. Data Export, Termination, Deletion, Retention

17.1 Export: Customers can export data during the contract; a limited export window may be provided after termination.

17.2 Deletion: Data is deleted after the export window unless retention obligations apply.

17.3 Retention obligations: Accounting records may be retained as required by law.

17.4 Processing: Deletion/return of personal data follows the DPA.

18. Liability, Warranty, Indemnification

18.1 Unlimited liability for intent, gross negligence, and personal injury.

18.2 For slight negligence, liability is limited to essential obligations and foreseeable damage.

18.3 B2B limitation possible, except in cases of Section 18.1.

18.4 Indemnification: Users/Customers indemnify Weisscam against third-party claims arising from unlawful use.

18.5 AI disclaimer: No warranty for AI output accuracy.

19. Compliance, Export Control, Government Requests, Monitoring

19.1 Users must comply with applicable law.

19.2 Weisscam may disclose data if legally required.

19.3 Logging is used for security and abuse prevention.

20. Accessibility, Non-Discrimination

20.1 Weisscam supports accessibility requirements where applicable.

20.2 No discrimination; enforcement measures may apply for safety.

21. Minors

21.1 Service not intended for users under 16.

21.2 Consent may be required for minors under 18.

22. Changes to Terms

22.1 Weisscam may amend these ToU as necessary.

22.2 Users will be informed in advance.

22.3 Material changes grant termination rights where applicable.

23. Final Provisions, Governing Law, Jurisdiction

23.1 German law applies.

23.2 Place of jurisdiction: Munich (for businesses).

23.3 Invalid provisions do not affect the remainder.

24. Legal Notice and Links

24.1 Legal notice is available on the website.

24.2 Privacy Policy and DPA are accessible via weisscam.com or admin/legal section.