1. Agreement to terms

By accessing or using CanaryLine ("the Service"), you agree to be bound by these Terms of Service. If you are using the Service on behalf of an organisation, you represent that you have the authority to bind that organisation to these terms.

2. Description of service

CanaryLine provides a cloud-based whistleblower reporting platform designed to help organisations comply with EU Directive 2019/1937 and applicable member state transposition laws. The Service includes anonymous reporting channels, case management tools, audit trails, and compliance dashboards.

3. Subscriptions and billing

Subscriptions are billed monthly or annually in advance.
All prices are in EUR and exclude applicable VAT.
You may cancel at any time. Cancellations take effect at the end of the current billing period.
We offer a 14-day free trial. No credit card is required to start a trial.
We reserve the right to change pricing with 30 days' written notice.

4. Your responsibilities

You are responsible for maintaining the security of your account credentials.
You must configure and use the Service in compliance with applicable laws, including the EU Whistleblower Directive and GDPR.
You must not use the Service for any unlawful purpose or to process data beyond the scope agreed in the Data Processing Agreement.

5. Data processing

When processing whistleblower reports, you are the data controller and CanaryLine acts as data processor. A Data Processing Agreement (DPA) in accordance with GDPR Art. 28 is included with every subscription. All data is processed and stored within the EEA (Germany).

6. Availability and support

We target 99.9% uptime for the Service. Planned maintenance windows will be communicated at least 48 hours in advance. Enterprise customers receive an SLA with defined uptime guarantees and support response times.

7. Intellectual property

All intellectual property rights in the Service remain with CanaryLine. You retain all rights to the data you input into the Service. We do not access, use, or share your data except as necessary to provide the Service or as required by law.

8. Limitation of liability

To the maximum extent permitted by law, CanaryLine's total liability under these terms shall not exceed the fees paid by you in the 12 months preceding the event giving rise to the claim. We are not liable for indirect, consequential, or punitive damages.

9. Termination

Either party may terminate the agreement with 30 days' written notice. Upon termination, we will make your data available for export for 30 days, after which it will be securely deleted in accordance with our retention policies.

10. Governing law

These terms are governed by the laws of the European Union and the member state in which CanaryLine is incorporated. Any disputes shall be resolved in the courts of that jurisdiction.

11. Contact

For questions about these terms, contact us at: legal@canaryline.com