Terms of Service

These Terms of Service ("Terms") govern access to and use of Decretum, a decision-register application provided by Sæle Digital ("Decretum", "we", "us"), whether as a cloud-hosted service at decretum.app (the "Cloud Service") or as software licensed for deployment on infrastructure you control ("Self-Hosted Deployment", together with the Cloud Service, the "Service"). By creating an account, deploying the software, or otherwise using the Service, you agree to these Terms on behalf of yourself and, if applicable, the organization you represent ("you", "Customer"). If you do not agree, do not use the Service.

1. Definitions

• Organization — a workspace within the Service under which Users and Content are grouped.
• User — an individual with an account under an Organization, including anyone invited by an Organization admin.
• Content — decisions, posts, comments, tags, attachments, and any other material Users submit to the Service.
• Admin — a User with administrative permissions over an Organization, including inviting and removing other Users.

2. The Service

Decretum is a structured, searchable record of decisions an organization makes: what was decided, who approved it, and why. The Cloud Service and Self-Hosted Deployment run the same application; this section describes how responsibility differs between them.

Cloud Service. We operate the infrastructure, and Customer's Organization data is hosted on infrastructure we select and manage (see the Security & Deployment page and our Privacy Policy for details on where and how).

Self-Hosted Deployment. Where Customer deploys the Service on infrastructure Customer controls (for example, via the provided Docker image), Customer is solely responsible for that infrastructure, its security, backups, and any regulatory obligations tied to operating it, including as a data controller under applicable data protection law. We grant Customer a non-exclusive, non-transferable, revocable license to run the software for Customer's own internal business purposes for the term of the applicable subscription or license agreement, subject to these Terms. Customer may not resell, sublicense, reverse-engineer beyond what applicable law permits, or remove proprietary notices from the software.

3. Accounts and Organizations

You must provide accurate information when creating an account and keep your credentials confidential. You are responsible for activity under your account. An Organization's first registrant (Cloud Service, un-invited signup) or first registrant on a Self-Hosted Deployment becomes that Organization's initial Admin and may invite, assign roles to, and remove other Users. Admins are responsible for who they grant access to and at what role.

You must be old enough to form a binding contract in your jurisdiction to use the Service.

A User may delete their own individual account at any time (see the Privacy Policy §7 for how this works, including the 14-day window to cancel). Deleting an individual account does not remove Content that User authored — that Content is owned by the Organization under Section 5 below and remains part of the Organization's record.

4. Acceptable Use

You agree not to:

• use the Service for any unlawful purpose or in violation of any third party's rights;
• upload malicious code, or attempt to gain unauthorized access to any account, Organization, or system;
• interfere with or disrupt the integrity or performance of the Service;
• attempt to circumvent an Organization's access controls, visibility restrictions, or approval requirements;
• use the Service to store or transmit content that is unlawful, defamatory, or infringing; or
• reverse-engineer, decompile, or attempt to extract source code from the Service except as expressly permitted by law.

5. Content and Data Ownership

As between Decretum and Customer, Customer owns all Content its Users submit. For the Cloud Service, Customer grants Decretum a limited license to host, process, and display Content solely to provide and support the Service. Decretum does not claim ownership of Customer Content and will not use it to train models or share it with third parties except as described in the Privacy Policy or as necessary to provide the Service (for example, sending an email notification through a configured mail provider).

Decretum and its licensors retain all rights, title, and interest in the Service itself — the software, design, and underlying technology — excluding Customer Content.

6. Data Processing

Where Decretum processes personal data on Customer's behalf in connection with the Cloud Service — principally, personal data Customer's Users choose to include within Content — the Data Processing Agreement made available at [PLACEHOLDER — publish at a stable URL, e.g. decretum.app/dpa, and reference it here; until then, the current version is available on request] (the "DPA") applies to that processing and is incorporated into these Terms by reference. The DPA does not apply to a Self-Hosted Deployment, for the reasons explained in the Privacy Policy. A Customer that requires a separately countersigned copy of the DPA may request one at support@decretum.app.

7. Third-Party Services

The Service integrates with third-party identity providers you may choose to enable (Google, Microsoft Entra ID) and, for email notifications, an SMTP provider Customer or Decretum configures. Use of those providers is also subject to their own terms. Decretum is not responsible for the availability or conduct of third-party services Customer chooses to connect.

From time to time we may offer optional beta or experimental features, including AI-assisted functionality, on an opt-in basis. Such a feature may involve processing Content through a third-party AI provider; before making any AI-assisted feature generally available, we will identify the provider and update this Section and our Privacy Policy accordingly. No AI-assisted feature is currently enabled on the Cloud Service.

8. Fees and Payment

[PLACEHOLDER — fill in once pricing/billing exists: fee schedule, billing cycle, taxes, late payment, auto-renewal, and refund terms. If the Cloud Service is currently offered free of charge or in a beta/trial period, that should be stated explicitly here, along with Decretum's right to introduce fees on notice.]

9. Term and Termination

These Terms remain in effect while you use the Service. You may stop using the Service, or an Admin may close an Organization's account, at any time. We may suspend or terminate access for a material breach of these Terms that is not cured within a reasonable time after notice, or immediately for conduct that creates legal liability or risk to other Users. On termination of the Cloud Service, we will make Customer Content available for export for a reasonable period [PLACEHOLDER — specify retrieval window, e.g. 30 days] before deletion, except where we are required to delete it sooner by law or by Customer's own request.

10. Disclaimers

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE." TO THE MAXIMUM EXTENT PERMITTED BY LAW, DECRETUM DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. WE DO NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, OR SECURE, OR THAT ANY CONTENT WILL BE PRESERVED WITHOUT LOSS. FOR A SELF-HOSTED DEPLOYMENT, CUSTOMER IS SOLELY RESPONSIBLE FOR BACKUPS AND AVAILABILITY OF ITS OWN INFRASTRUCTURE.

11. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, DECRETUM WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS, REVENUE, DATA, OR GOODWILL, ARISING FROM USE OF THE SERVICE. DECRETUM'S TOTAL LIABILITY FOR ANY CLAIM ARISING OUT OF THESE TERMS WILL NOT EXCEED THE AMOUNT CUSTOMER PAID DECRETUM FOR THE SERVICE IN THE [PLACEHOLDER — e.g. TWELVE MONTHS] PRECEDING THE CLAIM, OR [PLACEHOLDER — e.g. USD/EUR 100] IF NO FEES HAVE BEEN PAID. NOTHING IN THESE TERMS LIMITS LIABILITY THAT CANNOT BE LIMITED UNDER APPLICABLE LAW.

12. Indemnification

Customer will indemnify and hold Decretum harmless from claims arising out of Customer Content, Customer's breach of these Terms, or Customer's violation of applicable law, to the extent permitted by law.

13. Assignment

Neither party may assign or transfer these Terms, in whole or in part, without the other party's prior written consent, which will not be unreasonably withheld — except that Decretum may assign these Terms without Customer's consent to an affiliate, or in connection with a merger, acquisition, corporate reorganization, change in Decretum's legal form (for example, converting from a sole proprietorship to a limited company), or sale of all or substantially all of the assets relating to the Service, provided the assignee agrees in writing to assume Decretum's obligations under these Terms in full, including any Data Processing Agreement then in effect. Decretum will notify Customer of any such assignment. Customer may likewise assign these Terms without Decretum's consent to an affiliate or successor entity in connection with a comparable merger, acquisition, or corporate reorganization involving Customer, provided the assignee assumes Customer's obligations under these Terms. Any purported assignment in violation of this section is void. Subject to this section, these Terms bind and benefit each party's permitted successors and assigns.

14. Governing Law and Disputes

These Terms are governed by the laws of Norway, without regard to conflict-of-laws principles. Any dispute arising out of or relating to these Terms is subject to the exclusive jurisdiction of the Norwegian courts, with venue at the courts of the district where Decretum has its registered office, subject to any mandatory jurisdiction rules that cannot be waived under the Lugano Convention or other applicable law. [CONFIRM WITH COUNSEL — the Lugano Convention interaction, and whether any Customer's location requires additional consumer-protection or jurisdiction carve-outs that can't be waived by contract.]

15. Changes to These Terms

We may update these Terms from time to time. For material changes, we will provide reasonable notice (for example, by email to an Organization's Admins or a notice within the Service) before the change takes effect. Continued use of the Service after a change takes effect constitutes acceptance of the updated Terms.

16. Contact

Questions about these Terms can be sent to support@decretum.app.