Terms of Service

The Veytrio website and Services are provided by Junaid Mahmood, a sole trader trading as Veytrio, established in the United Kingdom (“Veytrio”, “we”, “us”). You can contact us at contact@veytrio.com.

The Services are provided solely for business use. By using them, you confirm that you are acting in the course of a trade, business or profession and not as a consumer, and that you will use the Services only for your internal business purposes. Veytrio does not offer the Services to consumers, and these Terms are not intended to grant consumer rights.

These Terms form part of your agreement with us, together with the applicable Order Form (including any accepted online plan selection), the Data Processing Agreement (DPA), the Acceptable Use Policy (AUP), and any documents they incorporate by reference. If those documents conflict, the order of precedence is: Order Form, then DPA, then these Terms, then schedules, then policies (including the AUP).

You accept these Terms by clicking to accept, by confirming an Order Form that references them, or by accessing or using the Services — whichever happens first. The person accepting confirms they are authorised to bind the customer organisation. If we have signed a separate Master Services Agreement with you covering the same Services, that agreement applies instead of these Terms.

Veytrio is AI-governance software that records and classifies employees’ interactions with supported AI tools (currently ChatGPT, Claude, Gemini and Microsoft Copilot, subject to browser limitations) and presents governance information to a customer’s administrators. It includes the dashboard, the browser extension, the Microsoft 365 Copilot connector (where licensed), APIs and related support.

The Services are a monitoring and audit control — they record and classify AI interactions; they do not prevent, delay or alter them, and they are not a data-loss-prevention or blocking control. You must not represent them as a blocking or quarantine tool.

The Services are offered on the following plans, as further described in the published plan descriptions and your Order Form: Free trial, Starter, Professional, Business, Enterprise and Custom. Each plan includes the seat and event allowances and support level stated in the plan description at the time of order; feature availability differs by plan.

Seat and event allowances are contractual limits, not technical cut-offs: the Services meter usage and show warnings as limits are approached, but do not automatically block activity at the limit. If your usage persistently exceeds your plan, we may ask you to move to an appropriate plan or agree overage charges from the next billing period, on notice. Any retention value shown for a plan is descriptive of the tier; actual data retention is governed by your configured settings.

You will pay the fees stated in your Order Form for each billing period (monthly or annual, as selected). There is currently no card payment or self-service checkout: fees are payable by bank transfer (or another method agreed in writing) against invoice, within the period stated on the invoice or Order Form. Except as expressly stated, fees are non-refundable and payment obligations are non-cancellable for a billing period already invoiced. We may charge interest on overdue sums as permitted by law.

Fees are stated exclusive of any applicable taxes. Veytrio is not currently registered for VAT, so no VAT is charged; this will be revisited if the VAT-registration threshold is reached.

Unless your Order Form states otherwise, your subscription renews automatically for successive billing periods of the same length. Either party may cancel renewal by written notice within the notice period stated in the Order Form; cancellation takes effect at the end of the then-current billing period, for which fees remain payable. Renewal is administered manually and confirmed in writing. Either party may terminate for the other’s uncured material breach (30 days’ notice) or insolvency.

We may change our fees and plan descriptions from time to time. A change to the fees for an existing subscription takes effect only from the next renewal date and only after we have given you reasonable prior written notice. If you do not wish to renew at the changed price, you may cancel renewal.

We may suspend access to all or part of the Services where permitted for non-payment, where you or an authorised user materially breaches the AUP, where suspension is reasonably necessary to address a security risk, or where required by law or a regulator. During suspension, new capture stops, the dashboard becomes read-only, plan-gated features are withheld, and stored data is retained unchanged. We will give prior notice where reasonably practicable, limit suspension to what is necessary, and restore access promptly once the cause is resolved.

On termination or expiry, your right to use the Services ends, we disable new capture by suspending and then archiving your tenant, and plan-gated features are withdrawn. For 30 days after termination, and on request, we will make the Services’ export capabilities available to you (CSV and SIEM-format exports of records). Exports contain redacted content and metadata; raw prompt text, where stored under your configured setting, is not retrievable through any product interface and is not included in exports.

On your written request following archival, or otherwise within a reasonable period after termination, we will permanently delete your tenant and the data it contains from the live database and confirm deletion in writing. Deletion is irreversible. Certain records are not removed by tenant deletion and are retained as described in the DPA and Privacy Policy — including sign-in and platform-level audit records, operational and hosting-provider logs, and our own business records (such as billing and legal records) — and deletion is subject to any legal hold or records we are required by law to keep.

You must comply, and ensure your authorised users comply, with our Privacy Policy and our Acceptable Use Policy, which is incorporated into these Terms by reference. Among other things, you must not: use the Services to monitor anyone other than your own employees, workers or contractors whom you have informed; attempt to access another customer’s tenant or probe or test the Services without our written consent; resell or sublicense the Services or operate them as a monitoring bureau for third parties; or use the Services in breach of applicable law, including data protection law. You are responsible for your and your users’ compliance with the terms of the AI platforms you use with the Services; we do not warrant that any platform’s terms permit capture, and recommend enabling capture only for employer-managed AI accounts.

You are the controller of your employees’ personal data processed through the Services and you determine the purposes of monitoring. Before enabling capture, you must: complete a data protection impact assessment; identify and document a lawful basis (and, because free-text content may reveal special-category or criminal-offence data, the applicable condition in advance); and inform affected staff, clearly and before capture begins, what is captured, why, and what rights they have. Covert monitoring is permitted only in the exceptional circumstances recognised by the Information Commissioner’s guidance and at your risk.

You must not take any disciplinary, dismissal or other significant decision affecting an individual based solely on the Services’ outputs: every such decision requires meaningful human review by someone with the competence, information and authority to change the outcome. The Services provide no employee-facing notice or appeal mechanism, so these must be operated through your own processes. You acknowledge that consent will rarely be an appropriate lawful basis for workplace monitoring, and that documenting monitoring in a policy does not by itself make it lawful.

Each party will comply with applicable data protection law. Our processing of personal data within your data, as your processor, is governed by the DPA (covering security, sub-processors, international transfers, assistance, breach notification and deletion). We process our own operational data (account, billing, security, sign-in and support records) as an independent controller, as described in our Privacy Policy. You acknowledge that captured content is free text and may include personal, special category, criminal-offence and third-party data; that metadata (such as page titles and risk reasons) is not redacted; that we operate a platform-owner role with logged cross-tenant administrative access, and that personnel operating the underlying infrastructure can access stored data at database level; and that the Services record and classify AI interactions but do not prevent, delay or alter them.

We provide the Services on a reasonable-endeavours basis. No availability level or service credit is committed under these Terms unless your Order Form incorporates a separate service level agreement. The Services depend on third-party hosting platforms and on the interfaces of the supported AI platforms, which may change without notice; if a supported AI platform changes its interface or blocks capture, the resulting loss of capture for that platform is not a breach, and we will use reasonable endeavours to restore support where practicable. We may perform maintenance and may improve or modify the Services, provided we do not materially reduce their core functionality during a paid billing period.

Support is provided at the level included in your plan, by email to the support address in the Support Policy. Unless your Order Form states otherwise, no response or resolution time is guaranteed.

Each party warrants that it has authority to enter into the agreement, and we warrant that we will provide the Services with reasonable skill and care and materially in accordance with the documentation. Except as expressly stated, and to the extent permitted by law, the Services are provided “as is” without other warranties. In particular, we do not warrant that: the Services will detect or record every relevant interaction, or classify every interaction correctly (capture is triggered by submission heuristics and classification is keyword-based and primarily calibrated for English); that automated redaction will remove any particular content; or that the Services will be uninterrupted or error-free. The Services do not constitute legal, HR or compliance advice, are not a certification of compliance, and do not perform emotion recognition or biometric categorisation.

Nothing in these Terms excludes or limits either party’s liability for death or personal injury caused by negligence, for fraud, or for any other liability that cannot lawfully be excluded. Subject to that, neither party is liable for loss of profits, revenue, anticipated savings or goodwill, or for indirect or consequential loss; and each party’s total liability under the agreement is limited to the amount set out in the Order Form or Agreement. You are responsible for the lawfulness of your monitoring, your configuration choices, and your use of the Services’ outputs.

We and our licensors retain all intellectual property rights in the Services, the extension, the documentation, and all content on this website — including its text, graphics, design, layout, logos and source code. We grant you a non-exclusive, non-transferable licence for the term to use the Services for your internal business purposes. You retain all rights in your data and grant us a licence to host and process it solely to provide the Services and as instructed under the DPA. You may not copy, republish, distribute or create derivative works from the website without our prior written permission.

“Veytrio” and the Veytrio logo are trade marks of Veytrio. Third-party names such as ChatGPT, Claude, Gemini and Microsoft Copilot are trade marks of their respective owners and are used for identification only.

Each party will keep the other’s confidential information confidential, use it only for the purposes of the agreement, and disclose it only to personnel and advisers who need it and are bound by confidentiality, or as required by law. These obligations do not apply to information that is or becomes public other than through breach, was already lawfully held, is independently developed, or is lawfully received from a third party.

Notices under the agreement must be in writing and in English, sent by email to contact@veytrio.com for us and to the billing or administrative contact on your account for you. We may update these Terms from time to time; for changes that are material and adverse to you, we will give reasonable prior notice, and if you object you may terminate before the change takes effect. Continued use of the Services after a change takes effect means you accept the updated Terms.

Neither party may assign the agreement without the other’s consent, except that we may assign it to a successor to our business (including on incorporation of the Veytrio business as a limited company), on notice to you. Neither party is liable for failure caused by events beyond its reasonable control. The agreement is the entire agreement between the parties for the Services and supersedes prior discussions. No one other than the parties may enforce it under the Contracts (Rights of Third Parties) Act 1999. A failure to enforce a right is not a waiver, and if any provision is unenforceable the remainder continues in force.

These Terms, and any dispute or claim (including non-contractual disputes) arising out of or in connection with them or the use of the Veytrio website, are governed by the law of England and Wales, and the courts of England and Wales have exclusive jurisdiction — except that either party may seek injunctive relief in any competent court to protect its confidential information or intellectual property.

Questions about these Terms? Contact contact@veytrio.com.