Terms of service

1. The Service

ARCA TAG is a team collaboration service for compliance teams. The Customer's people talk in channels organized by topic, reply in threads, mention each other, keep tasks with an assignee and a due date inside a channel, attach files to messages and tasks, search what was said and invite people from outside the organization as guests of specific channels.

The Service carries and keeps the conversation; it does not read, interpret or act on its contents. The Customer remains solely responsible for what its people write and attach, for whom it invites, for the tasks it assigns and for meeting the record-keeping obligations that apply to it. The Provider does not give legal advice.

2. Channels, messages and files

A public channel is open to every member of the Customer's organization; a private channel only to the people invited to it; a system channel carries the notices the Service itself posts. Messages can be edited and deleted by their author, and the Service keeps the record of when a message was edited or deleted. Files attached to messages and tasks, and the images inside notes, are stored encrypted at rest and served through links signed by the Service that expire within the hour. A note is read by whoever wrote it, the people it was shared with, the members of its notebook, or, when it is about a channel, a task or a record of another ARCA product, whoever may view that record.

The Service checks every attachment against its size limits and the file types it accepts, and generates previews where the type allows. It does not scan attachments for malware on the Customer's behalf [PENDING: malware scanning]; the Customer remains responsible for what its people attach.

3. Accounts

Accounts are created and managed on the ARCA Compliance platform, which authenticates every person who signs in to the Service, guests included. The Customer is responsible for the people it invites, for the roles it gives them, for keeping credentials confidential and for every action taken through its accounts, including the messages its people post and the guests they invite. The Customer must give accurate organization and contact details and keep them current.

4. Acceptable use

The Customer may use the Service only for the communication of its own activity, in compliance with applicable law, including data protection and intellectual property law.

The Customer must not post or attach unlawful content; share material it has no right to process; use the Service to distribute malware or spam; harass other people; interfere with the Service or its limits; attempt to access other customers' channels; or resell the Service.

5. External guests

A guest is a person from outside the Customer's organization who signs in with their own ARCA Compliance account and sees only the channels they were invited to, with what was posted there, its tasks and its files. A guest cannot see the organization's other channels, its members or its settings.

The Customer is responsible for the guests its people invite, for what they can see in the channels they are invited to and for removing a guest when their participation ends. The Service records every invitation and removal.

6. API

Access to the API uses credentials issued through the ARCA Compliance platform, limited by scopes (`tag:read`, `tag:write`). Requests are subject to rate limits, and the Idempotency-Key lets a retry return the original result instead of posting a message twice. The Provider may change the API with reasonable notice; breaking changes are announced in advance.

7. Subscription, limits and trial

Plans and prices are [PENDING: plans and prices]. Each plan sets limits on members, external guests, messages per month and storage for attachments; the limits warn at 80 % and 100 % and the Service may refuse new guests or attachments once a limit is exceeded [PENDING: limit enforcement]. Subscriptions, invoicing and payments are handled by the ARCA Compliance platform under its own terms. A subscription that lapses may limit or suspend the Service until it is renewed; the Customer's channels are kept as described in the Privacy policy.

8. Availability and no warranty

The Service is provided «as is» and «as available». The Provider makes reasonable efforts to keep it running and the conversation intact, keeps copies of the storage [PENDING: backup policy] and recovers from them when needed, but does not warrant uninterrupted availability or the immediate delivery of every message. The Customer is encouraged to keep its own copies of the decisions critical to its activity.

9. Limitation of liability

To the extent permitted by law, the Provider is not liable for indirect, incidental or consequential damages, lost profits, regulatory penalties or the consequences of a lost, delayed, altered or disclosed message or file arising from the use of or inability to use the Service, except where caused by the Provider's gross negligence or wilful misconduct. The Provider's total liability for any claim is limited to the fees the Customer paid for the Service in the twelve months before the event giving rise to the claim.

10. Termination

The Customer may stop using the Service at any time by closing its organization on the ARCA Compliance platform. The Provider may suspend or terminate access for breach of these terms, non-payment or legal requirement, with notice where practicable. After termination the Customer may export its channels, messages, tasks and files during a grace period of 30 days; they are then deleted in line with the Privacy policy.

11. Changes

The Provider may update these terms. Material changes are announced in the Service or by email at least 15 days before they take effect. Continued use after that date is acceptance of the new terms.

12. Governing law and contact

These terms are governed by the laws of [PENDING: jurisdiction], and any dispute is subject to the courts of [PENDING: jurisdiction], without prejudice to mandatory provisions that apply to the Customer. Questions about these terms go to [PENDING: contact email].