Terms of service.

1. About these terms

These terms ("Terms") govern your use of the UberVisor platform: the wallet app, the issuer "Certify" app, the construction site companion app, the AppSync GraphQL API, and the ubervisor.app website (together, the "Service"). The Service is operated by UberVisor Ltd., a company registered in England and Wales (company number 14829112) ("UberVisor", "we", "our").

By creating an account or otherwise using the Service, you agree to these Terms. If you are using the Service on behalf of an organisation, you confirm that you have authority to bind that organisation, and "you" refers to both you and that organisation.

2. Definitions

3. Your account

• You must be at least 16 years old to create an account. The Service is a workplace platform and is not intended for children.
• You must give us accurate information (name, email, role) and keep it up to date. You can correct it at any time from Profile → Privacy & Data → Edit profile.
• You are responsible for keeping your sign-in credentials safe and for activity that occurs under your account.
• You must tell us promptly if you suspect your account has been compromised. Email security@ubervisor.app.

4. The role of Issuers, Holders, and UberVisor

UberVisor is the platform provider. For credentials issued to Holders by Issuers, the Issuer is the controller of the credential's personal data and UberVisor acts as processor. UberVisor does not award certifications or sit in the certification decision — that authority remains with the Issuer.

Where UberVisor itself acts as a certifying body (for any UberVisor-branded scheme), UberVisor operates that scheme under ISO/IEC 17024 §8.3.

5. Acceptable use

You agree not to:

• use the Service for unlawful purposes or in a way that breaches a third party's rights;
• attempt to impersonate another Holder, Issuer, or Verifier;
• issue credentials without the authority of the certifying scheme;
• attempt to bypass the cryptographic verification, holder-binding, or revocation mechanisms of the Service;
• extract, scrape, or build derivative datasets of Holder data outside the export and API mechanisms we provide;
• use the Service to send unsolicited messages or to enrich third-party marketing databases;
• upload malware, exploit code, or content you know to be unlawful;
• reverse-engineer, decompile, or attempt to derive the source code of any part of the Service, except to the extent permitted by mandatory law;
• circumvent any security control, rate limit, or authorisation check.

We may suspend or terminate access (in whole or in part) where we reasonably believe a breach has occurred. We will be proportionate and, where practical, give notice first.

6. Credential validity and revocation

A credential's authoritative status is determined by checking its signature against the Issuer's published key and verifying that it does not appear on the Issuer's revocation status list. The Service exposes both to Verifiers in real time.

UberVisor is not responsible for the substance of the certification a credential represents. If you believe a credential has been issued incorrectly, raise it with the Issuer; revocation, re-issuance, and correction sit with them.

7. The platform wallet

The Holder wallet stores your credentials on your device and in our eu-west-2 backend. Credentials remain useable only while you have a working account and the Issuer has not revoked them. If you add a credential to Apple Wallet or Google Wallet, the copy in those wallets is governed by Apple's or Google's terms, which we cannot control.

8. Fees

During the Pilot the Service is provided to selected customers without charge. After the Pilot, pricing for paid plans will be published at pricing.html. We will give existing customers at least 60 days' notice before any plan moves from free to paid. Continued use after the notice period constitutes acceptance of the new pricing.

9. Intellectual property

We own (or license) the Service, including all software, designs, logos, and content we publish. You get a non-exclusive, non-transferable, revocable licence to use the Service for its intended purpose during your subscription or trial.

You retain all rights in the data you upload — your name, your photo, your credentials, your audit log. By using the Service you grant us the permissions necessary to operate the Service for you (host, process, transmit, back up, and present) and to comply with applicable law and ISO/IEC 17024 record-keeping.

10. Privacy

How we handle personal data is covered in detail in our Privacy notice. By using the Service you confirm you have read it.

11. Service availability

We aim for high availability and run the Service across redundant AWS infrastructure in eu-west-2. During the Pilot, no specific uptime is guaranteed. We may schedule maintenance windows and emergency outages. Published SLAs will accompany paid plans.

12. Warranties and disclaimers

To the maximum extent permitted by law, the Service is provided "as is" and we exclude all implied warranties — including warranties of merchantability, fitness for a particular purpose, and non-infringement.

We do not warrant that the Service will be uninterrupted, error-free, or free from third-party interference; that any specific credential will be accepted by any third party; or that a Verifier reader, network, or device outside our control will function correctly.

Nothing in these Terms limits any rights you have under the Consumer Rights Act 2015 if you are a UK consumer.

13. Liability

To the maximum extent permitted by law:

• We are not liable for indirect, incidental, special, consequential, or punitive damages, or for loss of profits, revenue, goodwill, or anticipated savings.
• Our total aggregate liability under or in connection with these Terms in any 12-month period is limited to the greater of (a) the fees you paid to us in that period, or (b) £100.
• Nothing in these Terms limits our liability for: death or personal injury caused by our negligence; fraud or fraudulent misrepresentation; or any other liability that cannot be limited by law.

14. Indemnity (business users only)

If you are using the Service on behalf of an organisation, you agree to indemnify UberVisor against claims, damages, and reasonable legal costs arising out of (a) your or your users' breach of these Terms, (b) credentials your organisation issued through the Service, or (c) content you uploaded that infringes a third-party right.

This clause does not apply to individuals using the Service in a personal capacity.

15. Termination

You can stop using the Service at any time. You can delete your account from Profile → Privacy & Data → Delete my account. Where we are required by ISO/IEC 17024 §8.3 to retain certification records, those records will be retained in redacted form (see the Privacy notice §6).

We may terminate or suspend your access on notice if you materially breach these Terms (including the acceptable use clause), or immediately for serious breaches such as fraud, security incidents, or repeated misuse.

16. Changes to the Terms

We may update these Terms from time to time. If we make a material change, we will publish the new version and give notice in the app and on this page at least 30 days before it takes effect. Continued use of the Service after that period means you accept the change. Past versions are available on request.

17. Governing law and jurisdiction

These Terms and any non-contractual obligations arising from them are governed by the laws of England and Wales. The courts of England and Wales have exclusive jurisdiction to settle any dispute arising from them, except that, if you are a UK consumer, you may also bring proceedings in the courts of the part of the UK where you live.

18. Contact

General questions: support@ubervisor.app. Legal notices: legal@ubervisor.app. Security disclosures: security@ubervisor.app.

Postal: UberVisor Ltd., Company No. 14829112, registered office in England & Wales (full address available on request from Companies House).