Digitool.dev – Service & Compliance Addendum

Last updated: May 15, 2025

This Addendum supplements our Privacy Policy and Terms & Conditions by defining our Cookie Policy, Data‐Processing & Subprocessor rules, Acceptable Use Policy, Service-Level Commitment, and Refund & Cancellation terms - all in one place.

1. Cookie Policy

1.1 Cookie Types & Purpose

●  Strictly Necessary:  
        • Session and authentication cookies to keep you logged in and secure.  
        • Consent‐banner cookies to remember your cookie choices.

●  Performance & Analytics:  
        • Google Analytics cookies to measure page views, load times, and user flows.  
        • Retention: data aggregated and anonymised after 14 months.

●  Marketing & Functional (Opt-in):  
       • Tracking cookies for A/B tests, newsletter pop-ups, and personalised content.  
       • Retention: up to 12 months, subject to your consent.

1.2 Your Choices

●  On first visit, you’ll see our cookie banner - toggle each category on/off.

●  You can revisit your choices via the “Cookie Settings” link in the footer.

●  Disabling non-essential cookies may break certain widgets (e.g., live chat).

2. Data-Processing & Subprocessor Policy

2.1 Data Processing Agreement (DPA)

Upon request, we’ll sign a DPA that:

●  Confirms your role as Data Controller and Digitool.dev as Data Processor.

●  Lists security measures (see Privacy Policy).

●  Requires us to process Personal Data only on your documented instructions.

●  Describes breach-notification timelines (within 48 hours).

2.2 Authorised Subprocessors

We engage only GDPR- and ISO-certified subprocessors. Current list:

Subprocessor Function Location Notice Period
Xano Backend, database & API hosting EU & US
WeWeb Frontend application builder EU
Stripe Payment processing Global
Pipedrive CRM, email & newsletter delivery EU
Zapier Workflow integrations EU & US

We’ll notify you 30 days before adding any new subprocessor. You may object in writing; if we cannot come to an agreement, you may terminate your subscription.

3. Acceptable Use Policy (AUP)

You agree not to use our services or dashboard for:

1.  Illegal or Harmful Content: Hate speech, fraud, intellectual-property infringement.

2.  Spam & Unsolicited Messaging: Bulk emails or phone calls to unwilling recipients.

3.  Security Attacks: Malware distribution, DDoS, port scanning, or unauthorised access attempts.

4.  Privacy Violations: Collecting or exposing PII without consent.


Enforcement:

●  Violation notice: We’ll ask you to cure within 7 days.

●  Continued breach: immediate suspension or termination without refund.

4. Service-Level Commitment (SLA)

4.1 Dashboard Availability

●  Target Uptime: 99.5% measured monthly (excludes scheduled maintenance).

●  Maintenance Windows: Up to 4 hours/month, typically on Sundays 00:00–04:00 CEST.

4.2 Support & Response

Priority Definition Response Time Resolution Goal
Critical Production down, major business impact ≤ 4 hours ≤ 24 hours
High-Priority Major feature broken, workaround exists ≤ 8 hours ≤ 48 hours
Standard Minor bug, general question ≤ 24 hours ≤ 5 business days

Note: All response times are based on our business hours (Monday - Friday, 08:00-18:00 CEST).

4.3 Remedies

If we miss our SLA targets, you may request a service credit equal to 5% of that month’s fee, capped at 25%. Credits apply only to your next invoice.

5. Refund & Cancellation Policy

5.1 Cancellation Notice

●  Give 30 days’ written notice via email to [email protected].

5.2 Pro-Rata Credits

●  If you cancel mid-cycle after prepayment, we’ll credit you for unused days at your standard rate.

5.3 Non-Refundable Fees

●  Third-party platform fees (e.g., Xano, WeWeb licenses) and one-time setup fees are non-refundable.

5.4 Offboarding & Data Return

●  Upon subscription end, we’ll deliver all project assets (code exports where available, documentation, DB backups) within 7 business days.

●  You assume responsibility for any ongoing third-party hosting or platform costs from the go-live date onward.

Questions or Requests?

Contact us at [email protected]. We’ll provide DPAs, subprocessor updates, or help you tailor any of these policies to your needs.