Terms of Service

This agreement is entered into between the trader that provides the Qlara service via https://getqlara.com ("Qlara", "we") and the legal entity or sole trader that creates an account or pays for the service (the "Customer", "you").

Qlara is a cloud-based workflow tool that helps companies answer security, privacy, and procurement questionnaires from a knowledge base approved by the Customer. The service includes, among other things, a knowledge base, templates, cited drafts, review, export, and a public trust page. Qlara is not a law firm, an auditor, a certification body, or a security consultancy.

For contractual matters, contact legal@getqlara.com.

The service is offered exclusively to traders acting in the course of business (B2B). You represent that you are not contracting as a consumer within the meaning of Section 1 of the Swedish Consumer Sales Act (konsumentköplagen (2022:260)) or Section 1 of the Swedish Act (2005:59) on Distance Contracts and Off-Premises Contracts (lagen om distansavtal och avtal utanför affärslokaler).

The Consumer Sales Act, the Distance Contracts Act, and the associated right of withdrawal do not apply. The 14-day withdrawal period that applies to consumer distance contracts is therefore not available. Refunds and termination are governed solely by these terms and by Stripe's customer portal.

If a natural person creates an account, they do so as an authorized representative of a company. Qlara may refuse, close, or terminate accounts used for private purposes.

The agreement is formed when you (a) create an account and accept the terms, and/or (b) complete Stripe Checkout for a paid subscription. The person who clicks represents that they have authority to bind the Customer.

The privacy policy at /privacy is incorporated into this agreement by reference.

You are responsible for users, passwords, logins, and all activity within your organization. You must keep login credentials confidential and notify us if you suspect unauthorized access.

You are responsible for ensuring that material you upload (policies, controls, questionnaires, answers, and personal data relating to your employees or subcontractors) is lawful and accurate, and that you have the right to process it. You may not upload special categories of personal data under Article 9 GDPR without a written agreement, and you may not upload content that infringes third-party rights.

Qlara may produce drafts, summaries, gaps, and suggestions by searching your knowledge base and, where you have enabled it, by using models from subprocessors. The drafts are decision support, not finished attestations.

• You must review, edit, and approve each answer before it is sent to a customer, a public authority, an auditor, or any other third party.
• Qlara does not warrant that a draft is complete, current, legally correct, or compliant with ISO 27001, SOC 2, GDPR, NIS2, or any other framework.
• If the knowledge base has no source, the row must be treated as a gap. You may not present Qlara's drafts as a certification, an audit, or a legal opinion.
• Final responsibility for questionnaires, contracts, dealings with public authorities, procurement processes, and professional review always rests entirely with the Customer.

To the extent permitted by applicable mandatory law, Qlara disclaims liability for direct and indirect loss, lost profit, lost business, delayed procurement, contractual penalties, incorrect statements of certification, a personal data incident at the Customer, or claims by the Customer's customers arising from how you use drafts generated by the service.

You retain all rights in material you input (the knowledge base, questionnaires, and your edited answers) and in the output generated for your organization. Qlara is granted a limited, non-exclusive right to process that material solely in order to provide, secure, and improve the service for you.

Qlara and its licensors retain all rights in the platform, source code, models, templates supplied by Qlara, documentation, the Qlara trademark, and the visual identity. You may not copy, resell, decompile, scrape, or circumvent technical limitations except to the extent mandatory law permits.

Template questions (for example CAIQ-lite, GDPR Article 28, ISO 27001, Swedish public sector, VSA-Core, SOC 2, DORA, and NIS2) are working materials in the service. They are not legal advice and are not official standard texts issued by the relevant publishers.

Prices are stated in euro exclusive of value added tax, unless checkout indicates otherwise. VAT, if charged, is handled by Stripe under the rules in force at the relevant time.

Payment, card details, invoices, receipts, promotional codes, and the customer portal are handled by Stripe. Qlara does not store complete card numbers. By completing Checkout, you also accept Stripe's terms applicable to you as a cardholder.

• The first month is billed when checkout completes.
• The subscription renews automatically each month at the then-current price until you cancel.
• Cancellation and card updates are made in the Stripe Customer Portal, which is reachable from billing in the service. Cancellation takes effect at the end of the current period unless the portal states otherwise.
• Failed payment may result in the engine and other paid features being blocked (past due) until payment succeeds or the subscription ends.

A period that has already begun is not refunded, except where mandatory law requires otherwise. Price changes are notified in the service or by email and take effect from the next period.

The service is provided "as is" and "as available". Qlara gives no warranties of 100% uptime, unlimited capacity, error-free AI, or fitness for any particular procurement requirement.

Planned maintenance, failures at subprocessors (hosting, database, AI, payment), or force majeure may cause interruptions. No service-credit schedule (SLA) is included unless agreed in writing in a separate order.

Each party shall keep the other party's non-public business information confidential and shall use it only for the purposes of this agreement. This does not apply to information that is public, already known, independently developed, or that must be disclosed by law or by order of a public authority. Qlara may use anonymized and aggregated usage statistics to operate and improve the service.

For account details, billing, and operation of the platform, Qlara is the controller under the privacy policy. For content you upload relating to your own employees, customers, or suppliers, you are in general the controller and Qlara is the processor. The data processing agreement (Article 28 GDPR) is published at /dpa. The Swedish text of that agreement is binding.

To the extent permitted by mandatory law, Qlara's aggregate liability under this agreement is limited to the fees you actually paid to Qlara during the three months preceding the loss. Qlara is not liable for indirect loss, consequential loss, lost profit, loss of data on your side, or third-party claims, except in cases of intent or gross negligence.

Nothing in this agreement limits liability that cannot lawfully be disclaimed, including loss caused intentionally.

Qlara may suspend or terminate the agreement with immediate effect in the event of material breach, non-payment, misuse, a security risk, or use of the service in violation of law. You may terminate in accordance with section 7. On termination, the right to use the service ends. You may export your answers for as long as the account is not locked. After termination, customer data is deleted or anonymized within a reasonable time, normally within 30 days, unless law requires a longer retention period.

Qlara may update these terms. Material changes are notified in the service or by email at least 14 days before they take effect, except where a change is required by law or for security reasons. Continued use after the effective date constitutes acceptance. The version published at https://getqlara.com/terms is the governing version.

This agreement is governed by Swedish law, without regard to conflict-of-law rules. Disputes shall in the first instance be resolved by negotiation. If you are a trader, any dispute shall be determined by the Swedish general courts, with Stockholm District Court (Stockholms tingsrätt) as the court of first instance.

This agreement constitutes the parties' entire regulation of the service and supersedes prior representations on the same subject. An invalid provision shall be adjusted so that its purpose is preserved. Qlara may engage subprocessors. You may not assign this agreement without our written consent. Qlara may assign the agreement in connection with a reorganization or a transfer of the business.