Terms of Service

These Terms form a contract between Vygard Ltd ("we", "us") and the organisation identified at signup ("Customer"). By creating an account, completing a trial, or making payment, the Customer accepts these Terms. Individual users (workers, admins) of the Customer's tenant are bound by the Customer's internal policies and by our Privacy Policy.

We provide a hosted lone-worker safety platform comprising: an admin web console; sector-themed worker apps (iOS, Android, web); a monitoring + alerting back-end; and integrations with Twilio (SMS/voice/WhatsApp), Stripe (billing) and (where enabled) Anthropic (AI welfare-sweep + responder ranking). Feature inventory is published on the public marketing site and in the customer admin console; features may be added, modified, or deprecated with reasonable notice.

• Pricing is per active worker per month, billed monthly in arrears via Stripe.
• Plan tiers (Starter / Pro / Enterprise) and prices are published on /pricing; Enterprise pricing is quoted bespoke.
• 14-day no-card-required trial is available for new customers.
• An "active worker" is one with a non-revoked record in the Customer's tenant during the billing period.
• Quantity changes during a billing period are pro-rated automatically (Stripe proration).
• Late payment may result in suspension after 14 days' notice; data is retained for 90 days post-suspension.

• Maintain the security of admin credentials and revoke access of departing staff promptly.
• Comply with all UK laws applicable to your operations, including UK GDPR, HSE / RIDDOR, sector-specific regulations.
• Provide accurate worker data and obtain any consents required from your workforce for the processing described in our DPA.
• Configure escalation policies and notification recipients appropriately for your operational context.
• Not attempt to reverse-engineer, scrape at scale beyond the documented API, or use the service to harass, surveil, or otherwise harm individuals.

• Provide the service substantially as described, with the security measures detailed in our DPA Schedule C.
• Target 99.5% monthly uptime on the API, excluding planned maintenance announced in advance.
• Apply security patches promptly; notify affected customers of confirmed security incidents within 72 hours of awareness.
• Honour all data-subject rights requests routed via the Customer.

Important — safety-critical caveat: the service is a safety aid, not a substitute for the Customer's own duty of care under the Health & Safety at Work etc Act 1974 and Management Regulations 1999. Cellular, GPS, Bluetooth, satellite, and Wi-Fi connectivity is outside our control; alerts depend on those networks operating. The Customer must maintain independent contingency procedures.

The parties' respective data-protection roles, sub-processor list, technical and organisational measures, and breach notification obligations are set out in the separate Data Processing Agreement, which is incorporated into these Terms by reference.

We retain all rights to the platform, its source code, branding, and documentation. The Customer retains all rights to the data they ingest (worker records, incident reports, location pings, etc.) — see DPA. The Customer grants us a non-exclusive licence to process that data solely as needed to deliver the service.

To the maximum extent permitted by law, neither party shall be liable to the other for: (a) loss of profits, goodwill, business opportunity, anticipated savings; (b) indirect, special, consequential or punitive damages; (c) loss or corruption of data beyond what could have been recovered from our most recent backup.

Each party's total aggregate liability in any 12-month period shall not exceed the fees paid by the Customer in that period. Neither party excludes liability for: death or personal injury caused by negligence, fraud or fraudulent misrepresentation, breach of statutory implied terms regarding title, or any liability that cannot lawfully be limited.

We will defend the Customer against any third-party claim that the platform infringes a UK or EU intellectual property right, and pay any costs or damages finally awarded, provided the Customer notifies us promptly and grants us control of the defence.

The Customer will defend us against any third-party claim arising from the Customer's data, the Customer's breach of these Terms, or the Customer's use of the platform in a manner not permitted.

• Either party may terminate for convenience with 30 days' written notice (subscription terminates at end of current billing period).
• Either party may terminate for cause on the other's material breach not remedied within 30 days of written notice.
• On termination, we will provide a JSON export of the Customer's tenant data within 14 days and delete the tenant within 90 days, subject to legal retention obligations.

Each party will treat the other's non-public information disclosed under these Terms as confidential and use it solely for the purposes of the agreement. Customer data is always confidential to the Customer.

We may revise these Terms with 30 days' notice posted on this page and sent to the Customer's billing contact. Continued use after the effective date constitutes acceptance. Material adverse changes give the Customer the right to terminate without penalty within the notice period.

These Terms are governed by the law of England and Wales. The parties submit to the exclusive jurisdiction of the courts of England and Wales, except that we may bring proceedings in the courts of the Customer's jurisdiction to recover overdue fees.

The parties will use reasonable endeavours to resolve disputes through good-faith negotiation between senior representatives before commencing litigation.

• Commercial: sales@vygard.com
• Support: support@vygard.com
• Privacy: privacy@vygard.com
• Security: security@vygard.com