Terms of Service

1. The agreement

These terms are the agreement between TurtleTask ("we", "us") and the organisation that signs up for the service ("you"). The person who creates an organisation confirms they are authorised to accept these terms on its behalf. Our privacy policy and the data processing terms below are part of this agreement. Questions: [email protected].

2. Your organisation

• Admins are in charge. Your admins decide who is a member, who is an admin, whether single sign-on is connected, whether two-factor sign-in is required, and which API keys exist. Members are added by your admins or by your identity provider under the rules your admins set.
• You are responsible for what your members and API keys do in the service, for keeping credentials confidential, and for telling us promptly if you think an account or key has been compromised.

3. Plans and billing

• Free plan. Up to 3 active users, 250 active tasks and 250 MB of attachments, for as long as you like, at no charge.
• Team plan. Priced per active user per month at the rate shown on the pricing page when you subscribe. An active user is an account in your organisation that has not been deactivated; deactivated accounts are never billed.
• Payment is collected by Stripe against the card or method you register. Invoices show the seat count for the period. We store no card details.
• Price changes take effect no sooner than 30 days after we email your admins, and never mid-period.

4. Refunds and billing questions

If a charge was caused by a defect in TurtleTask, we refund it in full. If an admin adds someone by mistake and deactivates them within 7 days, we credit the seat. If an invoice looks wrong for any other reason, email us within 60 days of the invoice and we'll put it right.

5. Your data

• Ownership. Everything you put into TurtleTask is yours. We get only the licence needed to run the service for you. We do not sell it, use it for advertising, or use it to train models.
• Export. An admin can export the entire organisation at any time in an open format (a zip of JSON plus the attachment files), and any view as CSV.
• Retention. When an organisation is closed, its data is kept for 30 days so you can still export it, then deleted from live systems. Backup copies expire on a fixed schedule after that.
• Deletion on request. At any time an admin may ask us to delete the organisation's data. We delete it from live systems within 30 days and confirm in writing.

6. Data processing

Where the data you put into TurtleTask includes personal data, these terms apply and constitute our data processing agreement under UK GDPR and, where applicable, EU GDPR.

• Roles. You are the controller of the personal data in your organisation; we are your processor. The subject matter is the provision of the TurtleTask service, for the term of this agreement plus the retention period in section 5; the data concerned is typically the names, work email addresses and work activity of your members and the people named in your plan.
• Instructions. We process personal data only to provide the service as documented and on your written instructions, unless the law requires otherwise.
• Confidentiality. Everyone who can access customer data on our side is bound by confidentiality obligations, and access is limited to what operating the service requires.
• Subprocessors. We use a small number of providers for hosting, backup storage, payment processing and email delivery. The current list is available on request, and we give 30 days' notice by email before adding one.
• Breaches. We tell you without undue delay if we confirm a personal-data breach affecting your data.
• Return and deletion. On termination or request, we return (by export) and delete personal data as set out in section 5.
• International transfers. Where personal data leaves the UK or EEA, we rely on the UK International Data Transfer Addendum or EU Standard Contractual Clauses as appropriate.

7. Acceptable use

Don't use TurtleTask to break the law, to attack the service or other customers, or to store material you have no right to store. We may suspend an organisation that does, and will tell you why. If you find a security problem, please tell us at [email protected].

8. Availability, support and termination

• Availability. We run the hosted service to be available continuously and announce maintenance in advance where it affects you. We don't offer an uptime guarantee.
• Support. Email support for all plans; on the Team plan we reply within one business day.
• Cancelling. Team plan subscriptions renew monthly. Cancel at any time from your organisation settings; it takes effect at the end of the current period, and there are no termination fees. If we materially breach these terms, you may terminate at once and we refund the unused part of any period you have paid for.
• Closure by us. We may close an organisation for material breach of these terms after notice and a chance to remedy, or for non-payment after 30 days' notice. The export and retention rights in section 5 still apply.

9. Liability

• Our liability to you for anything arising from this agreement in any 12-month period is limited to the fees paid or payable by you under the Team plan in the 12 months before the event.
• Neither of us is liable for indirect or consequential loss, loss of profit or business, anything the other party caused, or a failure to perform caused by events beyond our reasonable control. Nothing in this agreement limits liability for death or personal injury caused by negligence, for fraud, or for anything that cannot be limited by law.

10. General

• Changes. We may update these terms with at least 30 days' notice by email to your admins. If you don't accept a change you may cancel before it takes effect.
• Governing law. This agreement is governed by the law of England and Wales, and the courts of England and Wales have exclusive jurisdiction.
• Entire agreement. These terms and the privacy policy are the whole agreement. If any part is unenforceable the rest stands. Neither party may assign this agreement without the other's consent, except to a successor of its business.
• Notices to us go to [email protected]; notices to you go to your admins' email addresses.