MetOry Accessibility and Assistance Statement
1. Scope and benchmark
1.1 This statement covers the public pages, account, billing and planning journeys of metory.net operated by SMARTEDTECH SL.
1.2 The Operator designs and tests the service against WCAG 2.2 level AA. This statement describes the current state of conformance measured by the Operator; it is not a third-party certificate.
2. Current status
2.1 Conformance status: partially conformant. The Operator records the known barriers, the affected journeys and the planned remediation in the accessibility register, which is updated at each release. A summary of known barriers is published in the versioned archive of this page.
2.2 Legal documents and acceptance controls (checkboxes, order buttons, withdrawal form) are operable by keyboard and labelled for assistive technology. If a control is not operable for you, you may complete the same action by email to support@metory.net and the Operator records your acceptance or request with the same evidential value (C03).
2.3 Weather bands, thresholds and warnings are conveyed by text and icon as well as colour.
3. Assistance
3.1 If you encounter a barrier, tell the Operator the page, the action you tried and the assistive technology you use at support@metory.net. The Operator acknowledges within 2 business days and offers an accessible alternative for any essential action (account access, cancellation, withdrawal, invoices, rights requests) within 15 business days.
3.2 Do not include passwords, payment credentials or special-category data in an accessibility message.
4. Enforcement and rights
4.1 Nothing in this statement limits your rights under Spanish accessibility law, consumer law or the European Accessibility Act as transposed. You may escalate an unresolved accessibility complaint through the complaints route in PUB-04 §11.
5. Review
5.1 A named accessibility owner reviews this statement at each release that changes a journey, theme, language or embedded third-party component, and at least once every 12 months.
Platform-specific terms
Data sources, forecasts and official warnings
1. Weather, environmental and model outputs are produced from the sources listed on the source page under their respective licences. They are not official warnings. Official warnings are issued by the competent national authority named on the alert, and the platform reproduces them with attribution.
2. Forecasts and scenarios are probabilistic; thresholds and decision windows are review triggers and the decision remains with you or your authorised decision-maker.
---
AI services: disclosure, limitations and human escalation
1. Disclosure. Where you interact with an AI system (chat, voice, agent, digital twin or generated content), the Operator tells you so at the start of the interaction and labels AI-generated or AI-manipulated content in accordance with Article 50 of Regulation (EU) 2024/1689. A voice or persona representing a real person is used only with that person's recorded permission.
2. Nature of outputs. AI outputs are generated from models and data that can be incomplete or wrong. They are information and assistance, not professional advice, and not a decision of the Operator. You remain responsible for decisions you take on the basis of an output. Where a decision has legal, financial, medical, educational or safety effect, the service routes it to a human reviewer or to you for decision, and the Operator does not make that decision automatically.
3. Human escalation. You may at any time request a human review of an AI interaction through «contacts.support.address» or the in-product escalation control; the Operator responds within 5 business days (consumer) or within the SLA (business).
4. Permitted use. You will not use AI features to impersonate a person without permission, to generate unlawful content, to circumvent safety controls, or to extract or reverse-engineer models. The Operator may suspend AI features for breach.
5. Recording and model use. Recordings, transcripts and uploads are used to provide the service to you. They are used to improve models only with your separate permission (purpose research_contribution), which you may withdraw at any time without affecting the service.
---
MetOry Cookies and Similar Technologies
1. Scope
1.1 This notice covers cookies, local storage, SDK identifiers, embedded media and equivalent storage or access on the device of a visitor to metory.net, including the public site, login, account and billing areas.
2. Position: strictly necessary technology only
2.1 metory.net loads only strictly necessary technology. No optional (analytics, advertising, profiling or social-media) cookie or script is loaded, so no consent banner is shown. This position is measured by test LGL-T01 on every release; if a non-essential technology is ever introduced, a consent banner with equal-weight "Reject optional", "Accept optional" and "Manage" controls is shown before it loads, and this notice is republished as a new version.
2.2 Usage measurement is performed server-side from request logs (hashed IP address, user agent, requested path, time), processed on the basis of the Operator's legitimate interest in securing and improving the service (GDPR Art. 6(1)(f)), without any identifier stored on your device. No third-party analytics tool is loaded in the browser.
3. Inventory
| Name / type | Provider | Purpose | Party | Expiry | Basis |
|---|
| Session cookie | metory.net (Operator) | Keep you signed in and protect forms against cross-site request forgery | First party | End of session or sign-out | Strictly necessary (LSSI Art. 22.2 exemption) |
| Payment session tokens | Payment service provider identified at checkout | Complete a payment you have started and prevent fraud on that payment | Third party, set only on the checkout page | As stated by the provider for the payment session | Strictly necessary for the requested checkout |
3.1 The inventory above is the registry value and is re-measured on each release. Exact cookie names and expiries as measured are published in the versioned archive of this page.
4. Your choices
4.1 Because only strictly necessary technology is used, there is nothing to opt out of. You may block or delete cookies in your browser; blocking the session cookie prevents sign-in and checkout.
4.2 A setting on metory.net does not apply to any other domain operated by the Operator.
5. Contact
Questions about this notice: privacy@metory.net. Privacy rights: PUB-02 §4.
6. Changes
The Operator may amend this notice for legitimate reasons: changes in law, in the service, in security or fraud prevention, in the payment provider, or to clarify wording. Material changes are notified at least 30 days before they take effect (immediately where required by law or security). Every version is archived with its date and content hash at /website/cookies/v/.
Platform-specific terms
Data sources, forecasts and official warnings
1. Weather, environmental and model outputs are produced from the sources listed on the source page under their respective licences. They are not official warnings. Official warnings are issued by the competent national authority named on the alert, and the platform reproduces them with attribution.
2. Forecasts and scenarios are probabilistic; thresholds and decision windows are review triggers and the decision remains with you or your authorised decision-maker.
---
AI services: disclosure, limitations and human escalation
1. Disclosure. Where you interact with an AI system (chat, voice, agent, digital twin or generated content), the Operator tells you so at the start of the interaction and labels AI-generated or AI-manipulated content in accordance with Article 50 of Regulation (EU) 2024/1689. A voice or persona representing a real person is used only with that person's recorded permission.
2. Nature of outputs. AI outputs are generated from models and data that can be incomplete or wrong. They are information and assistance, not professional advice, and not a decision of the Operator. You remain responsible for decisions you take on the basis of an output. Where a decision has legal, financial, medical, educational or safety effect, the service routes it to a human reviewer or to you for decision, and the Operator does not make that decision automatically.
3. Human escalation. You may at any time request a human review of an AI interaction through «contacts.support.address» or the in-product escalation control; the Operator responds within 5 business days (consumer) or within the SLA (business).
4. Permitted use. You will not use AI features to impersonate a person without permission, to generate unlawful content, to circumvent safety controls, or to extract or reverse-engineer models. The Operator may suspend AI features for breach.
5. Recording and model use. Recordings, transcripts and uploads are used to provide the service to you. They are used to improve models only with your separate permission (purpose research_contribution), which you may withdraw at any time without affecting the service.
---
MetOry Legal Notice
1. Operator identity
1.1 Operator. This website and the services described in it are operated by SMARTEDTECH SL, a company incorporated in Spain with tax identification number B66970831, registered office at Carrer Agricultura, 16, 1º, 9ª, 08320 El Masnou, Barcelona, Spain, and contact address at Carrer Agricultura, 16, 1º, 9ª, 08320 El Masnou, Barcelona, Spain (the Operator). Electronic contact: legal@metory.net. Telephone: +34 687 66 64 99.
1.2 Registry data. Registro Mercantil de Barcelona, Hoja B-501172.
1.3 Role. Unless a page or contract states otherwise, the Operator provides an information-society service as an intermediary platform. Where a third party (a provider, venue, professional, institution or seller) supplies goods or services to you, that third party is identified before you commit to any order, and that third party is the contracting party for that supply.
1.4 Precedence. Where a signed agreement exists between you and the Operator, the signed agreement prevails over this notice to the extent of any conflict.
1.5 MetOry subscriptions. For MetOry subscriptions, event packages and enterprise services sold on metory.net, the Operator is the seller and the contracting party. MetOry is a brand of SMARTEDTECH SL.
2. Service described on this site
2.1 MetOry provides weather evidence, operational preparation views and planning tools for venues, marinas, agriculture, municipalities and individual users, on free and paid subscription plans and under enterprise orders.
2.2 Forecasts, observations, model comparisons and preparation views are decision-support information. Official warnings are issued by the competent national authority named on the alert; the platform reproduces them with attribution. The detailed rule is in SEC-01 and MOD-01 (C24).
2.3 A demonstration, example page, enquiry form, provisional quotation or AI-assisted explanation is not a binding order, an official warning or a professional opinion. An order is formed only as described in PUB-04, CUS-01 or the signed enterprise order.
3. Contact routes
| Purpose | Route |
|---|
| Legal notices and contract questions | legal@metory.net |
| Privacy rights and data questions | privacy@metory.net |
| Support, cancellation, withdrawal and complaints | support@metory.net |
| Postal | Carrer Agricultura, 16, 1º, 9ª, 08320 El Masnou, Barcelona, Spain |
| Telephone | +34 687 66 64 99 |
3.1 Do not send passwords, full payment card details, identity documents or health records through a public enquiry form.
4. Website content and intellectual property
4.1 You retain ownership of content you upload. You grant the Operator a worldwide, non-exclusive, royalty-free licence to host, store, reproduce, adapt, display, distribute and create derivative works of your content for the purpose of operating, promoting (listing content only) and improving the service, for the term of your account plus the period required for backup and legal retention.
4.2 You warrant that your content does not infringe third-party rights and is not unlawful.
4.3 The Operator may remove or restrict content that it reasonably believes is unlawful, infringes these terms or creates a risk to users, and will inform you of the reason and the review route.
4.4 All platform software, designs, models, trade marks and data compilations are owned by the Operator or its licensors. No licence is granted except as stated.
4.5 Visitors may read and link to public pages and exercise lawful quotation rights. Third-party weather and environmental data shown on the site is subject to the licence of its source, which is named on the source page (MOD-01).
5. Complaints and competent authorities
5.1 Complaints may be sent to support@metory.net or submitted through /website/complaints. The Operator acknowledges within 2 business days and answers within 15 business days (one calendar month maximum under Spanish customer-service rules).
5.2 Consumers resident in Spain may use the consumer arbitration system (Sistema Arbitral de Consumo) or the consumer mediation services of their autonomous community. Consumers resident in the UK may use a certified ADR provider named in the complaints page; the Operator states on that page whether it has agreed to use that provider. The The The EU Online Dispute Resolution platform has been discontinued and is not used.
5.3 Nothing in this clause prevents you from bringing a claim in court.
5.4 Privacy complaints and supervisory-authority rights are described in PUB-02. The competent data protection authority for the Operator is the Agencia Española de Protección de Datos (AEPD).
6. Governing law
These terms are governed by Spanish law. You also benefit from any mandatory consumer protection provisions of the law of the country where you reside. Disputes are heard by the courts of your domicile; the Operator may bring proceedings in your domicile.
6.1 Business and enterprise contracts (CUS-03, ENT-01, ENT-02, PAR-01, DAT-01) carry their own governing-law clause under the EU-B2B pack.
Platform-specific terms
Data sources, forecasts and official warnings
1. Weather, environmental and model outputs are produced from the sources listed on the source page under their respective licences. They are not official warnings. Official warnings are issued by the competent national authority named on the alert, and the platform reproduces them with attribution.
2. Forecasts and scenarios are probabilistic; thresholds and decision windows are review triggers and the decision remains with you or your authorised decision-maker.
---
AI services: disclosure, limitations and human escalation
1. Disclosure. Where you interact with an AI system (chat, voice, agent, digital twin or generated content), the Operator tells you so at the start of the interaction and labels AI-generated or AI-manipulated content in accordance with Article 50 of Regulation (EU) 2024/1689. A voice or persona representing a real person is used only with that person's recorded permission.
2. Nature of outputs. AI outputs are generated from models and data that can be incomplete or wrong. They are information and assistance, not professional advice, and not a decision of the Operator. You remain responsible for decisions you take on the basis of an output. Where a decision has legal, financial, medical, educational or safety effect, the service routes it to a human reviewer or to you for decision, and the Operator does not make that decision automatically.
3. Human escalation. You may at any time request a human review of an AI interaction through «contacts.support.address» or the in-product escalation control; the Operator responds within 5 business days (consumer) or within the SLA (business).
4. Permitted use. You will not use AI features to impersonate a person without permission, to generate unlawful content, to circumvent safety controls, or to extract or reverse-engineer models. The Operator may suspend AI features for breach.
5. Recording and model use. Recordings, transcripts and uploads are used to provide the service to you. They are used to improve models only with your separate permission (purpose research_contribution), which you may withdraw at any time without affecting the service.
---
MetOry Privacy Notice
1. Controller
1.1 SMARTEDTECH SL, B66970831, Carrer Agricultura, 16, 1º, 9ª, 08320 El Masnou, Barcelona, Spain, is the controller of personal data processed on metory.net (the Operator). Data protection contact: privacy@metory.net. Postal: the address above.
1.2 Platform data. The Operator is the controller of personal data processed to operate the platform: account, identity verification, acceptance records, payments, security, support, communications and analytics.
1.3 Provider supply data. Where a provider supplies services to a customer through the platform, the provider is an independent controller of the data it needs for that supply (booking, order, clinical, educational or professional records), and the Operator is a controller of the platform-level record of the transaction. Each party complies with its own obligations; neither acts for the other. On metory.net no third-party provider currently supplies services through the platform; this paragraph applies only if a provider relationship is enabled (MANIFEST: PRO-* NOT_APPLICABLE).
1.4 Processor services. Where the Operator processes personal data on behalf of a business customer under the customer's instructions (for example an enterprise tenant's employee data), the Data Processing Agreement (DAT-01) applies and governs; it is signed as part of the order.
1.5 Sharing between SET platforms. Personal data is not shared with any other platform operated by the Operator or its group unless you enable the specific destination in your settings. Enabling one destination does not enable others, and you may disable it at any time.
1.6 International transfers. Personal data is stored in the European Economic Area. Where a processor outside that area is used, the transfer is covered by Standard Contractual Clauses, listed in the subprocessor annex (DAT-02).
2. What we process, why, and on what basis
| Data class | Purpose | Legal basis (GDPR) | Retention |
|---|
| Enquiry and contact details (enquiry, demo, pilot and enterprise forms) | Answer the enquiry and prepare a proposal you asked for | Art. 6(1)(b) pre-contractual steps; Art. 6(1)(f) for corporate contacts | 12 months after the last interaction, then deleted (C16.2) |
| Identity, account and role (name, email, organisation, role, tenant) | Create and secure the account, verify representative capacity, restrict tenant access | Art. 6(1)(b) | Life of the account; deleted or anonymised within 90 days after closure (C16.1) |
| Orders, subscriptions, invoices | Deliver the plan, process payment and refunds, keep tax and accounting records | Art. 6(1)(b); Art. 6(1)(c) | Tax and accounting records 6 years |
| Site, location and planning inputs you enter (venue, marina, field, municipality locations; thresholds; event dates) | Produce the weather evidence and preparation views you request | Art. 6(1)(b) | Life of the account; export or delete on request |
| Acceptance and consent records (document ID, version, hash, time, method) | Prove which terms you accepted and which choices you made | Art. 6(1)(c); Art. 6(1)(f) | 5 years after the end of the relationship (C16.1) |
| Security and technical logs (hashed IP, user agent, request logs) | Prevent abuse, secure the service, investigate incidents | Art. 6(1)(f) | 12 months |
| Support communications | Answer your request, handle complaints and withdrawal | Art. 6(1)(b); Art. 6(1)(c) | 12 months after the ticket closes (C16.2) |
| Research cohort data (only if you join a study) | The purpose stated in the study notice (C34) | Art. 6(1)(a) consent, purpose research_contribution | The period stated in the study notice |
| Optional communications | Product news and offers | Art. 6(1)(a), purpose marketing_email | Until you unsubscribe |
2.1 Mandatory fields are marked on each form. Accepting the terms is not consent to any optional processing; each optional purpose has its own control in your account settings (Spec §4).
2.2 Special-category data is not requested by the service. Do not enter health, biometric or other special-category data in free-text fields or enquiry forms.
2.3 The service does not take decisions producing legal or similarly significant effects on you solely by automated means. Preparation views, bands and thresholds are review triggers; the decision remains with you or your authorised decision-maker (C24.2).
3. Recipients
| Recipient | Function | Location |
|---|
| Payment service provider identified at checkout (Stripe) | Card payment processing, subscription billing, invoices | As listed in the subprocessor annex (DAT-01 Annex C / DAT-02) |
| Hosting, email delivery and authentication processors | Running the service and sending transactional email | Listed by name and location in the subprocessor annex (DAT-01 Annex C / DAT-02), available at privacy@metory.net |
| Weather and environmental data sources | Supply observations and forecasts; they do not receive your personal data | Named on the source page |
| Public authorities | Where a legal obligation requires disclosure | Spain / EU |
3.1 The Operator does not store full payment card numbers. The Operator does not sell personal data and does not use it for third-party advertising.
4. Your rights
4.1 You may request access, rectification, erasure, restriction, portability and object to processing based on legitimate interest, and withdraw any consent prospectively as easily as you gave it, at privacy@metory.net, through /legal/privacy-rights, or by post to the address in section 1.
4.2 The Operator answers within one month; where a lawful extension is needed, it tells you the reason and the new date within the first month. Identity is verified proportionately to the request.
4.3 You may lodge a complaint with the Agencia Española de Protección de Datos (www.aepd.es) or with the supervisory authority of your habitual residence.
5. Retention and deletion
5.1 Account data is kept for the life of the account and deleted or anonymised within 90 days after closure, except where a longer period is required by law (tax and accounting records: 6 years; acceptance and consent records: 5 years after the end of the relationship, as evidence of compliance; records subject to a legal hold: until the hold ends).
5.2 Conversation logs, recordings and uploads not linked to an active contract are deleted no later than 12 months after the last interaction, and earlier on your request, unless a legal hold applies.
5.3 Backups are rotated on a cycle not exceeding 35 days; data deleted from production is removed from backups at the end of the cycle.
5.4 Where a provider is an independent controller, its own retention rules apply to its records.
6. Cookies
Only strictly necessary technology is used; there is no cookie banner because no optional technology is loaded. The inventory is in PUB-03.
7. Changes
7.1 The Operator may amend this notice for legitimate reasons: changes in law, in the service, in security or fraud prevention, in the payment provider, or to clarify wording. The Operator notifies you of material changes by email and in-product at least 30 days before they take effect (immediately where required by law or security).
7.2 A later version does not retroactively widen any consent you have given. A new purpose or recipient is notified before it is enabled.
7.3 Every version is archived with its date and content hash at /website/privacy/v/.
MetOry Website Terms
1. Scope
1.1 These terms govern your use of the public pages of metory.net, including the home page, pricing page, status page, trust page, credits page, example and widget pages and enquiry forms. They apply to every visitor.
1.2 Accounts are governed by ACC-01; AI-assisted features by ACC-02; paid consumer plans by CUS-01 and CUS-02; business and enterprise services by CUS-03, ENT-01 and ENT-02; data sources and models by MOD-01 and SEC-01. Where those documents apply, they prevail over these terms.
1.3 The Operator is identified in PUB-01 (C01). MetOry is a brand of SMARTEDTECH SL.
2. Nature of the information on the site
2.1 Weather, environmental and model outputs are produced from the sources listed on the source page under their respective licences. They are not official warnings. Official warnings are issued by the competent national authority named on the alert, and the platform reproduces them with attribution.
2.2 Forecasts and scenarios are probabilistic; thresholds and decision windows are review triggers and the decision remains with you or your authorised decision-maker.
2.3 Public pages, demonstrations, QR and widget example pages and sample reports are illustrations of the service. They are not a service commitment to a named venue, marina or municipality, and they are not tickets, endorsements or official pages of any venue shown.
3. Permitted use
3.1 You may read, link to and quote public pages within the limits of applicable law.
3.2 You will not: impersonate any person or organisation; bypass access controls; scrape, crawl or bulk-download data or pages except as permitted by robots directives and the source licences; upload malware; interfere with the availability of the service; use the site to produce or distribute unlawful content; or re-publish official warnings in a way that removes the issuing authority's attribution.
3.3 Enquiry, demonstration and pilot forms are enquiries. Submitting a form does not create an order, a subscription or an emergency report, and the Operator does not monitor forms as an emergency channel. In an emergency, contact the local emergency number.
4. AI-assisted features on public pages
4.1 Disclosure. Where you interact with an AI system (chat, voice, agent, digital twin or generated content), the Operator tells you so at the start of the interaction and labels AI-generated or AI-manipulated content in accordance with Article 50 of Regulation (EU) 2024/1689. A voice or persona representing a real person is used only with that person's recorded permission.
4.2 Nature of outputs. AI outputs are generated from models and data that can be incomplete or wrong. They are information and assistance, not professional advice, and not a decision of the Operator. You remain responsible for decisions you take on the basis of an output. Where a decision has legal, financial, medical, educational or safety effect, the service routes it to a human reviewer or to you for decision, and the Operator does not make that decision automatically.
4.3 Human escalation. You may at any time request a human review of an AI interaction through support@metory.net or the in-product escalation control; the Operator responds within 5 business days (consumer) or within the SLA (business).
4.4 Permitted use. You will not use AI features to impersonate a person without permission, to generate unlawful content, to circumvent safety controls, or to extract or reverse-engineer models. The Operator may suspend AI features for breach.
4.5 Recording and model use. Recordings, transcripts and uploads are used to provide the service to you. They are used to improve models only with your separate permission (purpose research_contribution), which you may withdraw at any time without affecting the service.
5. Content and intellectual property
5.1 You retain ownership of content you upload. You grant the Operator a worldwide, non-exclusive, royalty-free licence to host, store, reproduce, adapt, display, distribute and create derivative works of your content for the purpose of operating, promoting (listing content only) and improving the service, for the term of your account plus the period required for backup and legal retention.
5.2 You warrant that your content does not infringe third-party rights and is not unlawful.
5.3 The Operator may remove or restrict content that it reasonably believes is unlawful, infringes these terms or creates a risk to users, and will inform you of the reason and the review route.
5.4 All platform software, designs, models, trade marks and data compilations are owned by the Operator or its licensors. No licence is granted except as stated.
6. Data roles
6.1 Platform data. The Operator is the controller of personal data processed to operate the platform: account, identity verification, acceptance records, payments, security, support, communications and analytics.
6.2 Provider supply data. Where a provider supplies services to a customer through the platform, the provider is an independent controller of the data it needs for that supply, and the Operator is a controller of the platform-level record of the transaction. Each party complies with its own obligations; neither acts for the other.
6.3 Processor services. Where the Operator processes personal data on behalf of a business customer under the customer's instructions (for example an enterprise tenant's employee data), the Data Processing Agreement (DAT-01) applies and governs; it is signed as part of the order.
6.4 Sharing between SET platforms. Personal data is not shared with any other platform operated by the Operator or its group unless you enable the specific destination in your settings. Enabling one destination does not enable others, and you may disable it at any time.
6.5 International transfers. Personal data is stored in the European Economic Area. Where a processor outside that area is used, the transfer is covered by Standard Contractual Clauses, listed in the subprocessor annex.
7. Enforcement
7.1 The Operator may restrict access to the site or to a feature where it reasonably believes these terms are breached or a legal obligation requires it. The Operator gives a reason and a review route (support@metory.net) except where urgent security action must precede notice.
8. Changes
8.1 The Operator may amend these terms for legitimate reasons: changes in law, in the service, in security or fraud prevention, in the payment provider, or to clarify wording. The Operator notifies you of material changes by email and in-product at least 30 days before they take effect (immediately where required by law or security).
8.2 If you do not accept a material change, you may terminate before it takes effect and receive a pro-rata refund of any prepaid period affected. Continued use after the effective date is acceptance; for major changes the service asks you to confirm acceptance at your next sign-in.
8.3 Every version is archived with its date and content hash at /website/terms/v/.
9. Liability
9.1 The Operator is liable for damage caused by its breach of these terms, by its negligence, or under mandatory law. The Operator is not liable for loss that was not foreseeable at the time of contracting, for loss caused by a provider's supply where the provider is the contracting party, for your breach of these terms, or for events outside its reasonable control.
9.2 Nothing in these terms excludes or limits liability for death or personal injury caused by negligence, for fraud, for wilful misconduct or gross negligence, or for any liability that cannot be limited by law.
10. Governing law and forum
These terms are governed by Spanish law. You also benefit from any mandatory consumer protection provisions of the law of the country where you reside. Disputes are heard by the courts of your domicile; the Operator may bring proceedings in your domicile.
11. Complaints and out-of-court resolution
11.1 Complaints may be sent to support@metory.net or submitted through /website/complaints. The Operator acknowledges within 2 business days and answers within 15 business days (one calendar month maximum under Spanish customer-service rules).
11.2 Consumers resident in Spain may use the consumer arbitration system (Sistema Arbitral de Consumo) or the consumer mediation services of their autonomous community. Consumers resident in the UK may use a certified ADR provider named in the complaints page; the Operator states on that page whether it has agreed to use that provider. The The The EU Online Dispute Resolution platform has been discontinued and is not used.
11.3 Nothing in this clause prevents you from bringing a claim in court.
MetOry AI and Identity Use Policy
1. Scope
1.1 This policy applies to every AI-assisted feature of MetOry: explanations and summaries of weather evidence, assistant conversations, generated reports, automated preparation suggestions and any future agent feature. It forms part of ACC-01.
1.2 MetOry does not create voice clones, digital twins or likeness representations of users. If such a feature is ever enabled, it is governed by a new MAJOR version of this policy and by purpose likeness_persona (Spec §4), which is off by default.
2. AI disclosure, limitations and human escalation
2.1 Disclosure. Where you interact with an AI system (chat, voice, agent, digital twin or generated content), the Operator tells you so at the start of the interaction and labels AI-generated or AI-manipulated content in accordance with Article 50 of Regulation (EU) 2024/1689. A voice or persona representing a real person is used only with that person's recorded permission.
2.2 Nature of outputs. AI outputs are generated from models and data that can be incomplete or wrong. They are information and assistance, not professional advice, and not a decision of the Operator. You remain responsible for decisions you take on the basis of an output. Where a decision has legal, financial, medical, educational or safety effect, the service routes it to a human reviewer or to you for decision, and the Operator does not make that decision automatically.
2.3 Human escalation. You may at any time request a human review of an AI interaction through support@metory.net or the in-product escalation control; the Operator responds within 5 business days (consumer) or within the SLA (business).
2.4 Permitted use. You will not use AI features to impersonate a person without permission, to generate unlawful content, to circumvent safety controls, or to extract or reverse-engineer models. The Operator may suspend AI features for breach.
2.5 Recording and model use. Recordings, transcripts and uploads are used to provide the service to you. They are used to improve models only with your separate permission (purpose research_contribution), which you may withdraw at any time without affecting the service.
3. AI outputs and weather evidence
3.1 Weather, environmental and model outputs are produced from the sources listed on the source page under their respective licences. They are not official warnings. Official warnings are issued by the competent national authority named on the alert, and the platform reproduces them with attribution.
3.2 Forecasts and scenarios are probabilistic; thresholds and decision windows are review triggers and the decision remains with you or your authorised decision-maker.
3.3 An AI explanation keeps the source, observation or forecast time, confidence band and any missing or conflicting input visible. An AI output never states or implies that an official warning has been issued or lifted; it links to the authority's alert.
3.4 AI features do not execute operational actions (closing a venue, stopping work, issuing an evacuation notice, sending a public alert). Any action feature requires a named human with the configured authority to confirm it, and the confirmation is recorded in the audit log.
4. Tool scope and tenant boundary
4.1 AI features operate only on the sites, thresholds and data of your account or tenant. They do not read another tenant's data, and they do not use your private inputs to answer another user.
4.2 Tool access granted to an AI feature is purpose- and tenant-scoped, revocable in settings and recorded in the audit log.
5. Research participation
5.1 Participation in research cohorts is voluntary and governed by the participant notice for the specific study, which states purpose, data, duration, sponsor and withdrawal rights. Withdrawal at any time is effective for future processing and does not affect services.
5.2 Aggregated or statistical results may be published; no result identifies a participant.
5.3 Where a study involves special-category data, it proceeds only under an explicit consent form and, where required, ethics approval stated in the notice.
5.4 Joining a cohort is a separate unticked control (purpose research_contribution) shown with the study notice; it is never part of signup or checkout.
6. Reporting an unsafe output
6.1 Report an unsafe, misleading or unlawful output through the in-product control or support@metory.net. The Operator reviews the report with a person, answers within 5 business days and records the outcome.
MetOry Member Account Terms
1. Parties and scope
1.1 These terms are a contract between you and SMARTEDTECH SL (the Operator, identified in PUB-01) for a MetOry account. They apply to free accounts and to the account that holds a paid plan; the paid plan itself is governed by CUS-01 and CUS-02 (consumers) or by CUS-03 / ENT-02 (business customers).
1.2 An account gives you access to the MetOry functions enabled for your plan and role: saved sites and locations, weather evidence views, preparation views, thresholds and alerts, event packages, reports and, where enabled, API or widget access. An account does not make you a provider, a licensed professional or a signatory for an organisation.
2. Contract formation
2.1 A contract for the platform service is formed when the Operator records your acceptance of the applicable terms through the acceptance control shown to you (an unticked checkbox, an order button labelled with an obligation to pay, or an electronic signature) and, for paid services, when the payment provider confirms payment.
2.2 The Operator keeps an append-only record of the document identifier, version, content hash, date, time and acceptance method. You may request a copy of the record and of the accepted version at any time at legal@metory.net. Each version is archived at /website/account-terms/v/<version>.
2.3 Acceptance by a person acting for an organisation is a representation that the person is authorised to bind that organisation. Where the Operator requires verification of that authority, the service for the organisation is not activated until verification is complete.
2.4 The Operator may rely on an electronic signature produced through its signature provider as the signature of the signatory under Regulation (EU) No 910/2014.
2.5 The signup screen shows this exact version through a direct link. The acceptance checkbox is unticked by default. Privacy information (PUB-02) is provided alongside and is not a consent; optional communications, research participation and sharing to another SET platform are separate controls, each off by default.
3. Eligibility and your obligations
3.1 You must be at least 18 years old, or act for an organisation that has authorised you. The service is not directed at minors.
3.2 You will keep your registration details accurate, protect your credentials, enable multi-factor authentication where offered, use only the tenant and role scope assigned to you, and notify support@metory.net without delay of any suspected compromise.
3.3 You will not share accounts, create accounts for another person without their knowledge, or accept terms, orders or signatures on behalf of a person or organisation without authority.
3.4 An invitation from an organisation (enterprise tenant) grants you only the role the tenant administrator assigned. The organisation's agreement (CUS-03 / ENT-01) governs that tenant.
4. Using weather evidence and preparation views
4.1 Weather, environmental and model outputs are produced from the sources listed on the source page under their respective licences. They are not official warnings. Official warnings are issued by the competent national authority named on the alert, and the platform reproduces them with attribution.
4.2 Forecasts and scenarios are probabilistic; thresholds and decision windows are review triggers and the decision remains with you or your authorised decision-maker.
4.3 You remain responsible for the thresholds you configure, for the operational decisions you take and for your own contingency and emergency arrangements. The service is not an emergency alerting or rescue service. Alerts are delivered on a best-effort basis through the channels you enable; a missed, late or absent alert is not a work-stop or safety instruction. SEC-01 and MOD-01 apply to the use of sources and outputs.
5. AI-assisted features
5.1 ACC-02 applies to every AI-assisted feature in the account (explanations, summaries, assistants). The AI label is shown at the first interaction.
6. Content and intellectual property
6.1 You retain ownership of content you upload. You grant the Operator a worldwide, non-exclusive, royalty-free licence to host, store, reproduce, adapt, display, distribute and create derivative works of your content for the purpose of operating, promoting (listing content only) and improving the service, for the term of your account plus the period required for backup and legal retention.
6.2 You warrant that your content does not infringe third-party rights and is not unlawful.
6.3 The Operator may remove or restrict content that it reasonably believes is unlawful, infringes these terms or creates a risk to users, and will inform you of the reason and the review route.
6.4 All platform software, designs, models, trade marks and data compilations are owned by the Operator or its licensors. No licence is granted except as stated.
6.5 Weather and environmental data shown in the account is licensed to you for your own use under MOD-01; redistribution, resale and bulk extraction are permitted only where MOD-01 or your order says so.
7. Data roles
7.1 Platform data. The Operator is the controller of personal data processed to operate the platform: account, identity verification, acceptance records, payments, security, support, communications and analytics.
7.2 Provider supply data. Where a provider supplies services to a customer through the platform, the provider is an independent controller of the data it needs for that supply, and the Operator is a controller of the platform-level record of the transaction. Each party complies with its own obligations; neither acts for the other.
7.3 Processor services. Where the Operator processes personal data on behalf of a business customer under the customer's instructions (for example an enterprise tenant's employee data), the Data Processing Agreement (DAT-01) applies and governs; it is signed as part of the order.
7.4 Sharing between SET platforms. Personal data is not shared with any other platform operated by the Operator or its group unless you enable the specific destination in your settings. Enabling one destination does not enable others, and you may disable it at any time.
7.5 International transfers. Personal data is stored in the European Economic Area. Where a processor outside that area is used, the transfer is covered by Standard Contractual Clauses, listed in the subprocessor annex.
8. Suspension and closure
8.1 You may close your account at any time from account settings or by email to support@metory.net. Closing the account does not by itself cancel a paid plan's current period or an unpaid business invoice; CUS-01 §4 and CUS-03 explain each remaining obligation and the cancellation route, and the service shows them before closure is confirmed.
8.2 The Operator may suspend or close an account for breach of these terms, unlawful use, non-payment after notice, or a threat to the security of the platform. The Operator gives a reason and a review route (support@metory.net), except where urgent security action must precede notice.
8.3 After closure you may export your sites, thresholds and reports for 30 days; data is then deleted under PUB-02 §5 (C16).
9. Changes
9.1 The Operator may amend these terms for legitimate reasons: changes in law, in the service, in security or fraud prevention, in the payment provider, or to clarify wording. The Operator notifies you of material changes by email and in-product at least 30 days before they take effect (immediately where required by law or security).
9.2 If you do not accept a material change, you may terminate before it takes effect and receive a pro-rata refund of any prepaid period affected. Continued use after the effective date is acceptance; for major changes the service asks you to confirm acceptance at your next sign-in.
9.3 Every version is archived with its date and content hash at /website/account-terms/v/.
10. Liability
10.1 The Operator is liable for damage caused by its breach of these terms, by its negligence, or under mandatory law. The Operator is not liable for loss that was not foreseeable at the time of contracting, for loss caused by a provider's supply where the provider is the contracting party, for your breach of these terms, or for events outside its reasonable control.
10.2 Nothing in these terms excludes or limits liability for death or personal injury caused by negligence, for fraud, for wilful misconduct or gross negligence, or for any liability that cannot be limited by law.
11. Governing law and forum
These terms are governed by Spanish law. You also benefit from any mandatory consumer protection provisions of the law of the country where you reside. Disputes are heard by the courts of your domicile; the Operator may bring proceedings in your domicile.
11.1 Where you hold the account as an employee or member of a business customer's tenant, the business customer's agreement (EU-B2B pack) governs the commercial relationship with that customer; these terms govern your personal use of the account.
12. Complaints and out-of-court resolution
12.1 Complaints may be sent to support@metory.net or submitted through /website/complaints. The Operator acknowledges within 2 business days and answers within 15 business days (one calendar month maximum under Spanish customer-service rules).
12.2 Consumers resident in Spain may use the consumer arbitration system (Sistema Arbitral de Consumo) or the consumer mediation services of their autonomous community. Consumers resident in the UK may use a certified ADR provider named in the complaints page; the Operator states on that page whether it has agreed to use that provider. The The The EU Online Dispute Resolution platform has been discontinued and is not used.
12.3 Nothing in this clause prevents you from bringing a claim in court.
Platform-specific terms
AI services: disclosure, limitations and human escalation
1. Disclosure. Where you interact with an AI system (chat, voice, agent, digital twin or generated content), the Operator tells you so at the start of the interaction and labels AI-generated or AI-manipulated content in accordance with Article 50 of Regulation (EU) 2024/1689. A voice or persona representing a real person is used only with that person's recorded permission.
2. Nature of outputs. AI outputs are generated from models and data that can be incomplete or wrong. They are information and assistance, not professional advice, and not a decision of the Operator. You remain responsible for decisions you take on the basis of an output. Where a decision has legal, financial, medical, educational or safety effect, the service routes it to a human reviewer or to you for decision, and the Operator does not make that decision automatically.
3. Human escalation. You may at any time request a human review of an AI interaction through «contacts.support.address» or the in-product escalation control; the Operator responds within 5 business days (consumer) or within the SLA (business).
4. Permitted use. You will not use AI features to impersonate a person without permission, to generate unlawful content, to circumvent safety controls, or to extract or reverse-engineer models. The Operator may suspend AI features for breach.
5. Recording and model use. Recordings, transcripts and uploads are used to provide the service to you. They are used to improve models only with your separate permission (purpose research_contribution), which you may withdraw at any time without affecting the service.
---
MetOry Business Service Terms
1. Parties scope and formation
SMARTEDTECH SL supplies the MetOry service defined in an executed ENT-02 order. The business customer is the legal person and verified signatory identified in that order. No contract is formed for an unpriced or disabled feature merely through a website enquiry. The order must specify services, users/tenants, territory, duration, delivery milestones, fees, taxes and dependencies. A signed statement of work controls bespoke deliverables; these terms control the general relationship; a DPA governs processing-specific duties.
2. Delivery acceptance and changes
Use objective acceptance criteria and a review period in the order. Rejection must identify a material failure to meet that criterion; silence is not deemed acceptance unless a valid negotiated mechanism is explicit. Additional work requires an agreed scope/price change. The customer supplies authorized access and accurate instructions; the operator identifies dependencies and does not promise a third-party outcome it cannot control.
3. Charges and operations
Only the signed order's plan/milestone/usage fees apply. An estimate is not unlimited authorization. Invoices identify the real supplier and tax treatment. Bank transfer is offered only through verified invoice instructions; never rely on an email-only account change. Pay undisputed amounts as agreed while investigating disputed charges. No custody/escrow service is implied. Support, uptime, response, recovery targets and credits must be expressly agreed from evidence; none is invented here.
4. Security exit and professional boundaries
Tenant staff are managed by authorized administrators. Integrations and data sharing use the agreed scope; no unrestricted access to another tenant or private Core source is granted. A DPA is completed before personal data is processed on behalf of the customer. End-of-term export, format, assistance charges and deletion/hold schedule are agreed before go-live. Regulated professional work requires a separately identified licensed provider and authority workflow.
Platform-specific terms
Fees, taxes, payment provider and invoicing
1. Prices are those shown on the price page or order summary at the time of order. Prices for consumers are shown including applicable VAT; prices for business customers are shown excluding VAT unless stated. The Operator may change prices for future periods with at least 30 days' notice; a price change does not affect a period already paid.
2. Payments are processed by the payment service provider identified at checkout. The Operator does not store full card numbers. Bank transfer is available only where the order summary states so and only to the account stated on the invoice issued by the payee.
3. Where a provider is the seller, the provider's price, taxes, fees and refund rule apply to that supply; the Operator's platform fee, if any, is shown separately.
4. Invoices are issued electronically to the billing email on the account. Business customers agree to receive electronic invoices.
5. Overdue business invoices accrue interest at the statutory commercial late-payment rate and reasonable recovery costs; the Operator may suspend the service for a business customer on 7 days' written notice of non-payment.
---
Term, renewal and cancellation of subscriptions
1. The initial term and renewal term are those stated in the order. The subscription renews automatically for successive renewal terms unless either party gives written notice of non-renewal at least 30 days before the end of the current term.
2. Fees for a term are non-refundable except as expressly stated in the SLA credit clause. Annual prepaid fees are not refundable on early termination by the customer for convenience.
3. Either party may terminate for material breach not cured within 30 days of written notice. The Operator may terminate immediately for non-payment after notice, unlawful use or a threat to the security of the platform.
---
Service levels (B2B)
1. Monthly uptime target: 99.5% measured at the API edge excluding scheduled maintenance (notified 48 hours in advance, max 8 hours/month) and force majeure.
2. Service credits: 99.0–99.49% → 5% of monthly fee; 98.0–98.99% → 10%; below 98.0% → 20%. Credits are claimed within 30 days and applied to the next invoice. Credits are the sole remedy for availability shortfalls.
3. Support: business days 09:00–18:00 CET; P1 response 1 hour, P2 4 hours, P3 next business day.
4. Data export on termination: available in a machine-readable format for 30 days after termination; thereafter deleted under C16.
---
Standard contract terms
Content, licence to Operator, moderation
1. You retain ownership of content you upload. You grant the Operator a worldwide, non-exclusive, royalty-free licence to host, store, reproduce, adapt, display, distribute and create derivative works of your content for the purpose of operating, promoting (listing content only) and improving the service, for the term of your account plus the period required for backup and legal retention.
2. You warrant that your content does not infringe third-party rights and is not unlawful.
3. The Operator may remove or restrict content that it reasonably believes is unlawful, infringes these terms or creates a risk to users, and will inform you of the reason and the review route.
4. All platform software, designs, models, trade marks and data compilations are owned by the Operator or its licensors. No licence is granted except as stated.
---
Data roles
1. Platform data. The Operator is the controller of personal data processed to operate the platform: account, identity verification, acceptance records, payments, security, support, communications and analytics.
2. Provider supply data. Where a provider supplies services to a customer through the platform, the provider is an independent controller of the data it needs for that supply (booking, order, clinical, educational or professional records), and the Operator is a controller of the platform-level record of the transaction. Each party complies with its own obligations; neither acts for the other.
3. Processor services. Where the Operator processes personal data on behalf of a business customer under the customer's instructions (for example an enterprise tenant's employee data), the Data Processing Agreement (DAT-01) applies and governs; it is signed as part of the order.
4. Sharing between SET platforms. Personal data is not shared with any other platform operated by the Operator or its group unless you enable the specific destination in your settings. Enabling one destination does not enable others, and you may disable it at any time.
5. International transfers. Personal data is stored in the European Economic Area (or, for wellbridge.uk, the United Kingdom). Where a processor outside those areas is used, the transfer is covered by Standard Contractual Clauses or the UK Addendum/IDTA, listed in the subprocessor annex.
---
Changes to the terms
1. The Operator may amend these terms for legitimate reasons: changes in law, in the service, in security or fraud prevention, in the payment provider, or to clarify wording. The Operator notifies you of material changes by email and in-product at least 30 days before they take effect (immediately where required by law or security).
2. If you do not accept a material change, you may terminate before it takes effect and receive a pro-rata refund of any prepaid period affected. Continued use after the effective date is acceptance; for major changes the service asks you to confirm acceptance at your next sign-in.
3. Every version is archived with its date and content hash at «public_route»/v/.
---
Liability
1. Except for the excluded liabilities in paragraph 3, each party's total aggregate liability arising out of or in connection with the agreement in any contract year is limited to the fees paid or payable by the customer to the Operator under the agreement in the 12 months preceding the event giving rise to the claim.
2. Neither party is liable for indirect or consequential loss, loss of profit, revenue, business, goodwill, anticipated savings, or loss or corruption of data (except for the Operator's obligation to restore from its last available backup).
3. The limits do not apply to: death or personal injury caused by negligence; fraud or fraudulent misrepresentation; wilful misconduct or gross negligence; the customer's payment obligations; a party's breach of confidentiality; a party's indemnity for infringement caused by its own content; or any liability that cannot be limited by law.
4. Service credits under the SLA are the customer's sole and exclusive remedy for service availability shortfalls.
---
Governing law and forum
This agreement is governed by Spanish law, excluding its conflict-of-law rules and the UN Convention on Contracts for the International Sale of Goods. The courts of the city of Barcelona have exclusive jurisdiction, without prejudice to either party seeking interim relief in any competent court.
MetOry Consumer Subscription Terms
1. Seller and scope
1.1 These terms govern paid MetOry plans and event packages bought by a consumer on metory.net. The seller and contracting party is SMARTEDTECH SL (the Operator, identified in PUB-01). ACC-01 governs the account; CUS-02 governs withdrawal, cancellation and refunds; MOD-01 and SEC-01 govern the use of data sources and outputs.
1.2 If you buy for a business, the business terms (CUS-03) apply instead and the checkout asks you to identify the business.
2. Plans, prices and order summary
2.1 Prices are those shown on the price page or order summary at the time of order. Prices for consumers are shown including applicable VAT; prices for business customers are shown excluding VAT unless stated. The Operator may change prices for future periods with at least 30 days' notice; a price change does not affect a period already paid.
2.2 Payments are processed by the payment service provider identified at checkout. The Operator does not store full card numbers. Bank transfer is available only where the order summary states so and only to the account stated on the invoice issued by the payee.
2.3 Where a provider is the seller, the provider's price, taxes, fees and refund rule apply to that supply; the Operator's platform fee, if any, is shown separately.
2.4 Invoices are issued electronically to the billing email on the account. Business customers agree to receive electronic invoices.
2.5 Overdue business invoices accrue interest at the statutory commercial late-payment rate and reasonable recovery costs; the Operator may suspend the service for a business customer on 7 days' written notice of non-payment.
2.6 The order summary shows, before you confirm: the plan name and its included functions and limits (sites, locations, users, alerts, API or widget access, event dates), the currency, the total including VAT, the billing interval, the start date, the trial end date and first charge where a trial applies, the renewal rule, the cancellation route and the withdrawal rule. A price card on the pricing page is an invitation to order, not an order.
2.7 Usage above the plan limits is not charged automatically. Where an add-on or higher plan is needed, the service shows its price and asks you to confirm a new order before any additional charge.
3. Term, renewal and cancellation
3.1 A subscription runs for the period shown at checkout and renews automatically for the same period at the price in force at renewal unless you cancel before the renewal date. The Operator sends a reminder at least 15 days before each renewal stating the price and the cancellation method.
3.2 You may cancel at any time from your account settings or by email to support@metory.net; cancellation takes effect at the end of the current paid period. Fees for the current period are not refunded except where the statutory withdrawal right or a legal warranty applies.
3.3 Free trials convert to a paid subscription at the end of the trial unless cancelled; the trial end date and the first charge are shown before you start the trial and in the confirmation email.
3.4 Where a trial is started without a payment method, no charge is made at the end of the trial; the account reverts to the free plan unless you add a payment method and confirm the paid plan through the order summary.
3.5 Cancellation is available through the same channel as signup and takes no more steps than signup. The service confirms the cancellation and the end date by email.
3.6 An event package with a fixed date range ends at the end of that range and does not renew.
4. Withdrawal, refunds and durable confirmation
4.1 Your statutory right of withdrawal and the digital-content exception are set out in CUS-02 (C06). The order summary collects your express request for immediate access and your acknowledgment of the consequences through a separate unticked control; without that control the plan starts after the 14-day period.
4.2 After payment is confirmed by the payment provider, the Operator sends a durable confirmation email with the order reference, the plan, the total, the renewal period and price, the cancellation route, the withdrawal instructions, and the identifiers, versions and hashes of the documents you accepted, with a link to the versioned archive.
4.3 Payment confirmation by the payment provider, not a success screen in the browser, activates the plan.
4.4 Cancelling renewal and closing the account are separate actions; the service explains both before you confirm either.
5. Service
5.1 The plan supplies the functions listed in the order summary. Every plan uses the same weather sources and forecast quality; plans differ in limits, locations, alert channels, history, reports and support, as shown on the pricing page.
5.2 Weather, environmental and model outputs are produced from the sources listed on the source page under their respective licences. They are not official warnings. Official warnings are issued by the competent national authority named on the alert, and the platform reproduces them with attribution.
5.3 Forecasts and scenarios are probabilistic; thresholds and decision windows are review triggers and the decision remains with you or your authorised decision-maker.
5.4 The service is not an emergency alerting or rescue service; alerts are delivered on a best-effort basis through the channels you enable. The Operator's availability information is published on the status page.
5.5 Where an upstream source withdraws or restricts data that a plan depends on, the Operator tells you, substitutes an equivalent source where one exists and, where a function you paid for is no longer available, refunds the affected part of the current period pro rata (MOD-01 §5).
5.6 Statutory remedies for lack of conformity of digital content and digital services apply and are not limited by these terms.
6. Content and intellectual property
6.1 You retain ownership of content you upload. You grant the Operator a worldwide, non-exclusive, royalty-free licence to host, store, reproduce, adapt, display, distribute and create derivative works of your content for the purpose of operating, promoting (listing content only) and improving the service, for the term of your account plus the period required for backup and legal retention.
6.2 You warrant that your content does not infringe third-party rights and is not unlawful.
6.3 The Operator may remove or restrict content that it reasonably believes is unlawful, infringes these terms or creates a risk to users, and will inform you of the reason and the review route.
6.4 All platform software, designs, models, trade marks and data compilations are owned by the Operator or its licensors. No licence is granted except as stated.
7. Data roles
7.1 Platform data. The Operator is the controller of personal data processed to operate the platform: account, identity verification, acceptance records, payments, security, support, communications and analytics.
7.2 Provider supply data. Where a provider supplies services to a customer through the platform, the provider is an independent controller of the data it needs for that supply, and the Operator is a controller of the platform-level record of the transaction. Each party complies with its own obligations; neither acts for the other.
7.3 Processor services. Where the Operator processes personal data on behalf of a business customer under the customer's instructions, the Data Processing Agreement (DAT-01) applies and governs; it is signed as part of the order.
7.4 Sharing between SET platforms. Personal data is not shared with any other platform operated by the Operator or its group unless you enable the specific destination in your settings. Enabling one destination does not enable others, and you may disable it at any time.
7.5 International transfers. Personal data is stored in the European Economic Area. Where a processor outside that area is used, the transfer is covered by Standard Contractual Clauses, listed in the subprocessor annex.
8. Changes
8.1 The Operator may amend these terms for legitimate reasons: changes in law, in the service, in security or fraud prevention, in the payment provider, or to clarify wording. The Operator notifies you of material changes by email and in-product at least 30 days before they take effect (immediately where required by law or security).
8.2 If you do not accept a material change, you may terminate before it takes effect and receive a pro-rata refund of any prepaid period affected. Continued use after the effective date is acceptance; for major changes the service asks you to confirm acceptance at your next sign-in.
8.3 Every version is archived with its date and content hash at /website/subscription-terms/v/.
9. Liability
9.1 The Operator is liable for damage caused by its breach of these terms, by its negligence, or under mandatory law. The Operator is not liable for loss that was not foreseeable at the time of contracting, for loss caused by a provider's supply where the provider is the contracting party, for your breach of these terms, or for events outside its reasonable control.
9.2 Nothing in these terms excludes or limits liability for death or personal injury caused by negligence, for fraud, for wilful misconduct or gross negligence, or for any liability that cannot be limited by law.
10. Governing law and forum
These terms are governed by Spanish law. You also benefit from any mandatory consumer protection provisions of the law of the country where you reside. Disputes are heard by the courts of your domicile; the Operator may bring proceedings in your domicile.
11. Complaints and out-of-court resolution
11.1 Complaints may be sent to support@metory.net or submitted through /website/complaints. The Operator acknowledges within 2 business days and answers within 15 business days (one calendar month maximum under Spanish customer-service rules).
11.2 Consumers resident in Spain may use the consumer arbitration system (Sistema Arbitral de Consumo) or the consumer mediation services of their autonomous community. Consumers resident in the UK may use a certified ADR provider named in the complaints page; the Operator states on that page whether it has agreed to use that provider. The The The EU Online Dispute Resolution platform has been discontinued and is not used.
11.3 Nothing in this clause prevents you from bringing a claim in court.
Platform-specific terms
Statutory withdrawal and refunds
1. Right of withdrawal. As a consumer you may withdraw from a distance contract within 14 calendar days from the day of conclusion (services and digital content) or from the day you receive the goods, without giving any reason, by sending an unambiguous statement to «contacts.support.address» or by using the model form published at «public_route»/withdrawal-form. Refunds are made within 14 days of receipt of your withdrawal using the original payment method.
2. Services started during the period. If you ask the Operator to start the service during the withdrawal period and later withdraw, you pay a proportionate amount for the service provided up to the date of withdrawal.
3. Digital content not on a tangible medium. Where you expressly request immediate delivery of digital content (including AI outputs, reports, model access, generated media) and acknowledge that you thereby lose the right of withdrawal, the right of withdrawal does not apply once delivery has begun. This request and acknowledgment are collected through a separate unticked control at checkout and recorded under C03.
4. Excluded contracts. The right of withdrawal does not apply to accommodation, transport, catering or leisure services with a specific date or period of performance, to goods made to your specification, or to other contracts excluded by Article 103 of Royal Legislative Decree 1/2007. Where such an exclusion applies, the provider's cancellation policy shown at booking applies instead.
5. Legal guarantees. Nothing in these terms limits your statutory guarantees for conformity of digital content, digital services and goods.
MetOry Cancellation, Withdrawal and Refunds
1. Scope
1.1 This policy applies to consumers who buy a MetOry plan or event package from SMARTEDTECH SL (the Operator) on metory.net. Business orders are governed by CUS-03 §3 and ENT-02; no withdrawal right applies to them.
1.2 The Operator is the seller of every plan sold on metory.net. No third-party provider sells through the platform.
2. Statutory withdrawal and refunds
2.1 Right of withdrawal. As a consumer you may withdraw from a distance contract within 14 calendar days from the day of conclusion (services and digital content) or from the day you receive the goods, without giving any reason, by sending an unambiguous statement to support@metory.net or by using the model form published at /website/withdrawal-form. Refunds are made within 14 days of receipt of your withdrawal using the original payment method.
2.2 Services started during the period. If you ask the Operator to start the service during the withdrawal period and later withdraw, you pay a proportionate amount for the service provided up to the date of withdrawal.
2.3 Digital content not on a tangible medium. Where you expressly request immediate delivery of digital content (including AI outputs, reports, model access, generated media) and acknowledge that you thereby lose the right of withdrawal, the right of withdrawal does not apply once delivery has begun. This request and acknowledgment are collected through a separate unticked control at checkout and recorded under C03.
2.4 Excluded contracts. The right of withdrawal does not apply to accommodation, transport, catering or leisure services with a specific date or period of performance, to goods made to your specification, or to other contracts excluded by Article 103 of Royal Legislative Decree 1/2007. Where such an exclusion applies, the provider's cancellation policy shown at booking applies instead.
2.5 Legal guarantees. Nothing in these terms limits your statutory guarantees for conformity of digital content, digital services and goods.
3. How the exception is applied on MetOry
3.1 A MetOry subscription is a digital service supplied continuously. Checkout shows the control: "I ask MetOry to start my plan now, during the 14-day withdrawal period. I understand that if I withdraw, I pay for the days already supplied." Ticking it means §2.2 applies (proportionate charge); the right of withdrawal itself remains for the 14 days.
3.2 One-off digital content (a downloadable report, a data export, a generated media file) is subject to §2.3. Checkout shows the control: "I ask for immediate delivery of this digital content and I acknowledge that I lose my right of withdrawal once delivery begins." The control is unticked by default and is recorded with the document version and hash.
3.3 Neither control is required to place the order. If you leave them unticked, the plan or content is supplied after the 14-day period ends, or earlier if you withdraw the pause from your account settings.
3.4 A trial started without a payment method is free and creates no payment; the withdrawal period for a paid plan starts on the day you confirm the paid order.
4. Cancelling renewal (outside the withdrawal period)
4.1 You may cancel renewal at any time from account settings or by email to support@metory.net. Cancellation takes effect at the end of the current paid period; the plan stays active until then. Fees for the current period are not refunded except under §2, §5 or a legal warranty (C05.2).
4.2 The Operator confirms the cancellation and the end date by email within 2 business days.
5. Refunds outside withdrawal
5.1 Where the service does not conform to the contract and is not brought into conformity within a reasonable time, you may obtain a proportionate price reduction or terminate the contract and receive a refund for the non-conforming period, under the statutory conformity rules for digital services.
5.2 Where a function you paid for is withdrawn because an upstream data source is no longer available and no equivalent is substituted, the Operator refunds the affected part of the current period pro rata (CUS-01 §5.5).
5.3 Overcharges and charges after a confirmed cancellation are refunded in full within 14 days of your notice.
5.4 Refunds are made by the original payment method unless you expressly agree to another method; no fee is charged for a refund.
6. How to withdraw or cancel
6.1 Send your statement to support@metory.net, use the model form, or use the cancellation control in account settings. State your order reference and the email on your account; never send full card details.
6.2 The Operator acknowledges receipt within 2 business days and confirms the refund amount and date.
7. Model withdrawal form
To: SMARTEDTECH SL, Carrer Agricultura, 16, 1º, 9ª, 08320 El Masnou, Barcelona, Spain — support@metory.net
I hereby give notice that I withdraw from my contract for the following service: ____________________
Ordered on: ____________________ · Order reference: ____________________
Name of consumer: ____________________
Address of consumer: ____________________
Signature of consumer (only if this form is notified on paper): ____________________
Date: ____________________
7.1 Use of this form is optional.
8. Complaints
8.1 Complaints may be sent to support@metory.net or submitted through /website/complaints. The Operator acknowledges within 2 business days and answers within 15 business days (one calendar month maximum under Spanish customer-service rules).
8.2 Consumers resident in Spain may use the consumer arbitration system (Sistema Arbitral de Consumo) or the consumer mediation services of their autonomous community. Consumers resident in the UK may use a certified ADR provider named in the complaints page; the Operator states on that page whether it has agreed to use that provider. The The The EU Online Dispute Resolution platform has been discontinued and is not used.
8.3 Nothing in this clause prevents you from bringing a claim in court.
9. Governing law and forum
These terms are governed by Spanish law. You also benefit from any mandatory consumer protection provisions of the law of the country where you reside. Disputes are heard by the courts of your domicile; the Operator may bring proceedings in your domicile.
MetOry Institution Master Service Agreement
1. Institution and authorized order
The contracting institution and SMARTEDTECH SL execute ENT-02 for the actual MetOry service: weather evidence, operational preparation, venue/marina/agriculture planning and paid individual or organization subscriptions. Specify legal personality, public/private status, country, signatory delegation, procurement/funding reference and authorized users. An employee account or generic partner checkbox does not bind a ministry, hospital, university, school, foundation or association.
2. Common institutional obligations
The institution defines lawful instructions, user entitlements, accessibility needs, permitted purposes and internal decision authority. The operator provides only the agreed functions, support and evidence, not a transfer of statutory powers or professional accountability. Use one isolated tenant boundary; configure approved departments/branches without cross-tenant leakage. Data processing schedules, integrations, hosting and exit must be agreed before real confidential records enter the service.
3. Education schedule
For a school/university customer, identify learner ages, guardian/capacity rules, child safeguarding, assessment and staff vetting, recording, accessibility, academic-integrity process and the body legally entitled to award credentials. A simulated faculty identity or catalogue label does not establish accreditation. Employment/admissions or other high-stakes decisions need the relevant human and legal safeguards. Do not open tuition/enrolment until the actual contracting and refund terms are approved.
4. Healthcare schedule
For a hospital/clinic customer, identify the clinical controller, authorized clinicians, Article 6 and Article 9 conditions, record retention, care protocols, emergency escalation, device/regulatory classification and DPIA. The platform does not become a clinician through this agreement. Staff access and data sharing require the appropriate licence, care authority and purpose. No guaranteed monitoring/triage service is implied by an AI tool.
5. Foundation association and NGO schedule
Identify the legal organization, governance/signatory powers, vulnerable beneficiaries, restricted donations/grants, audit/accountability and any fundraising registration. A subscription discount is not charitable registration or a tax-deductible gift. Funds and beneficiary data may not be diverted to unrelated purposes or commercial lead scoring. Consent and safeguarding for beneficiary stories/images are independently assessed.
6. Government and public authority schedule
Record the lawful procurement route, delegation, budget, security classification, records/accessibility and statutory disclosure obligations, approved subcontractors and audit/exit rights. Do not promise confidentiality that contradicts access-to-information law. No software acceptance delegates a statutory decision, enforcement or benefits power. Public-law jurisdiction and mandatory terms override the standard Barcelona business clause where required.
7. Data performance and exit
DAT-01 applies to genuine processing on behalf, with completed security, recipient and transfer schedules. Independent-controller duties remain separate. ENT-02 sets real, measurable service/support/recovery commitments; service levels and credits are those in clause C26 as completed in the signed order. Set data export formats, migration assistance, deletion and lawful holds before go-live. Preserve necessary acceptance/audit proof without retaining sensitive content indefinitely.
Platform-specific terms
Contract formation and acceptance evidence
1. A contract for the platform service is formed when the Operator records your acceptance of the applicable terms through the acceptance control shown to you (an unticked checkbox, an order button labelled with an obligation to pay, or an electronic signature) and, for paid services, when the payment provider confirms payment.
2. The Operator keeps an append-only record of the document identifier, version, content hash, date, time and acceptance method. You may request a copy of the record and of the accepted version at any time at «contacts.legal.address». Each version is archived at «public_route»/v/«version».
3. Acceptance by a person acting for an organisation is a representation that the person is authorised to bind that organisation. Where the Operator requires verification of that authority, the service for the organisation is not activated until verification is complete.
4. The Operator may rely on an electronic signature produced through its signature provider as the signature of the signatory under Regulation (EU) No 910/2014 and, for the UK, the UK eIDAS regulation.
---
Service levels (B2B)
1. Monthly uptime target: 99.5% measured at the API edge excluding scheduled maintenance (notified 48 hours in advance, max 8 hours/month) and force majeure.
2. Service credits: 99.0–99.49% → 5% of monthly fee; 98.0–98.99% → 10%; below 98.0% → 20%. Credits are claimed within 30 days and applied to the next invoice. Credits are the sole remedy for availability shortfalls.
3. Support: business days 09:00–18:00 CET; P1 response 1 hour, P2 4 hours, P3 next business day.
4. Data export on termination: available in a machine-readable format for 30 days after termination; thereafter deleted under C16.
---
Standard contract terms
Content, licence to Operator, moderation
1. You retain ownership of content you upload. You grant the Operator a worldwide, non-exclusive, royalty-free licence to host, store, reproduce, adapt, display, distribute and create derivative works of your content for the purpose of operating, promoting (listing content only) and improving the service, for the term of your account plus the period required for backup and legal retention.
2. You warrant that your content does not infringe third-party rights and is not unlawful.
3. The Operator may remove or restrict content that it reasonably believes is unlawful, infringes these terms or creates a risk to users, and will inform you of the reason and the review route.
4. All platform software, designs, models, trade marks and data compilations are owned by the Operator or its licensors. No licence is granted except as stated.
---
Data roles
1. Platform data. The Operator is the controller of personal data processed to operate the platform: account, identity verification, acceptance records, payments, security, support, communications and analytics.
2. Provider supply data. Where a provider supplies services to a customer through the platform, the provider is an independent controller of the data it needs for that supply (booking, order, clinical, educational or professional records), and the Operator is a controller of the platform-level record of the transaction. Each party complies with its own obligations; neither acts for the other.
3. Processor services. Where the Operator processes personal data on behalf of a business customer under the customer's instructions (for example an enterprise tenant's employee data), the Data Processing Agreement (DAT-01) applies and governs; it is signed as part of the order.
4. Sharing between SET platforms. Personal data is not shared with any other platform operated by the Operator or its group unless you enable the specific destination in your settings. Enabling one destination does not enable others, and you may disable it at any time.
5. International transfers. Personal data is stored in the European Economic Area (or, for wellbridge.uk, the United Kingdom). Where a processor outside those areas is used, the transfer is covered by Standard Contractual Clauses or the UK Addendum/IDTA, listed in the subprocessor annex.
---
Changes to the terms
1. The Operator may amend these terms for legitimate reasons: changes in law, in the service, in security or fraud prevention, in the payment provider, or to clarify wording. The Operator notifies you of material changes by email and in-product at least 30 days before they take effect (immediately where required by law or security).
2. If you do not accept a material change, you may terminate before it takes effect and receive a pro-rata refund of any prepaid period affected. Continued use after the effective date is acceptance; for major changes the service asks you to confirm acceptance at your next sign-in.
3. Every version is archived with its date and content hash at «public_route»/v/.
---
Liability
1. Except for the excluded liabilities in paragraph 3, each party's total aggregate liability arising out of or in connection with the agreement in any contract year is limited to the fees paid or payable by the customer to the Operator under the agreement in the 12 months preceding the event giving rise to the claim.
2. Neither party is liable for indirect or consequential loss, loss of profit, revenue, business, goodwill, anticipated savings, or loss or corruption of data (except for the Operator's obligation to restore from its last available backup).
3. The limits do not apply to: death or personal injury caused by negligence; fraud or fraudulent misrepresentation; wilful misconduct or gross negligence; the customer's payment obligations; a party's breach of confidentiality; a party's indemnity for infringement caused by its own content; or any liability that cannot be limited by law.
4. Service credits under the SLA are the customer's sole and exclusive remedy for service availability shortfalls.
---
Governing law and forum
This agreement is governed by Spanish law, excluding its conflict-of-law rules and the UN Convention on Contracts for the International Sale of Goods. The courts of the city of Barcelona have exclusive jurisdiction, without prejudice to either party seeking interim relief in any competent court.
MetOry Order Form and Service Schedules
Completion and signature rule
This is a controlled execution form, not a signed contract. Complete each applicable field with the actual parties before activation; do not treat an empty field as consent, zero price, unlimited liability, an agreed processor or a default SLA. The platform-specific clauses elsewhere in these documents are incorporated by document ID/version/hash. A material missing schedule blocks the related service only; it cannot be invented by an AI.
| Required field | Completion instruction |
|---|
| Order identifier and execution date | Assign a unique immutable order reference and actual date |
| Operator and counterpart | Registered legal names, IDs, addresses, representatives and capacity evidence |
| Contract category | Consumer, business, provider, channel partner, school, healthcare, government, foundation or association |
| Services and boundary | Named enabled features, territory, users/sites, deliverables, explicit exclusions and professional provider |
| Timing and acceptance | Start/end, renewal, milestones, objective acceptance criteria and human signoff |
| Fees and taxes | Currency, total/net/tax, plan or rates, usage/overage, commission/referral if relevant, invoice dates |
| Merchant and payment | Actual seller/PSP/recipient; any verified transfer instructions in a restricted invoice, never copied into public policies |
| Cancellation and remedies | Applicable statutory schedule, deposits, refund route and lawful agreed remedies |
| Data roles and annexes | Controller/processor split, categories/purposes/retention, subprocessor/location list, transfers, TOMs and rights routes |
| Support and availability | Actual channel/hours, severity definitions, evidence-backed response/recovery targets, maintenance and remedies |
| Security and authority | Tenant/role scope, licence/mandate refs, incident contacts, approved integrations and human gate |
| Exit and records | Export format, assistance, deletion deadlines, legally required holds and private evidence storage |
| Signatures | Each authorized signatory's actual signature/date and validation trail; no automated prefilled signature |
Precedence
Mandatory law controls. For processing obligations the executed DPA controls; a signed specific order may vary commercial provisions only expressly, not silently override statutory privacy or sector safeguards. Public marketing does not replace signed scope. Record all incorporated document versions and provide each party an unchanged copy.
Platform-specific terms
Fees, taxes, payment provider and invoicing
1. Prices are those shown on the price page or order summary at the time of order. Prices for consumers are shown including applicable VAT; prices for business customers are shown excluding VAT unless stated. The Operator may change prices for future periods with at least 30 days' notice; a price change does not affect a period already paid.
2. Payments are processed by the payment service provider identified at checkout. The Operator does not store full card numbers. Bank transfer is available only where the order summary states so and only to the account stated on the invoice issued by the payee.
3. Where a provider is the seller, the provider's price, taxes, fees and refund rule apply to that supply; the Operator's platform fee, if any, is shown separately.
4. Invoices are issued electronically to the billing email on the account. Business customers agree to receive electronic invoices.
5. Overdue business invoices accrue interest at the statutory commercial late-payment rate and reasonable recovery costs; the Operator may suspend the service for a business customer on 7 days' written notice of non-payment.
---
Service levels (B2B)
1. Monthly uptime target: 99.5% measured at the API edge excluding scheduled maintenance (notified 48 hours in advance, max 8 hours/month) and force majeure.
2. Service credits: 99.0–99.49% → 5% of monthly fee; 98.0–98.99% → 10%; below 98.0% → 20%. Credits are claimed within 30 days and applied to the next invoice. Credits are the sole remedy for availability shortfalls.
3. Support: business days 09:00–18:00 CET; P1 response 1 hour, P2 4 hours, P3 next business day.
4. Data export on termination: available in a machine-readable format for 30 days after termination; thereafter deleted under C16.
---
MetOry Channel and Strategic Partner Agreement
1. Appointment and scope
SMARTEDTECH SL and the partner named and countersigned in ENT-02 agree only the listed MetOry referral, integration, distribution or strategic activities. Territory, named products, exclusivity if any, permitted brand assets, lead attribution and approved claims must be specified. A referral is not a general agency, regulated-professional licence, reseller appointment or power to bind another party.
2. Marketing lead and financial conduct
Use accurate approved product descriptions, availability and limitations. Do not promise accreditation, diagnosis, guaranteed savings, safety, funding or legal outcome. Referral/revenue-share rates, qualified lead definition, attribution window, reversals, invoice/tax and anti-bribery rules must be completed before payment accrues. Public procurement and institutional officials cannot be offered improper incentives. No partner obtains production admin access by default.
3. Data and integrations
Identify the lead recipient and purpose before any handoff. Personal contact data is not a transferable asset merely because a partner made an introduction. Record an appropriate lawful basis, disclosures and a scoped authorization where required. Cross-platform sharing is OFF; revoke scopes and propagate the change. Independent controllers need their own notices and an appropriate sharing arrangement; processors need DAT-01. Integration/API rights are limited to the documented endpoints and tenant scope, not private Core source.
4. Oversight exit and order
The partner cooperates on complaints and substantiates advertising and commission records. A proportionate compliance review is limited to relevant records, confidentiality and data-minimization safeguards. Termination stops new representations; agreed lawful earned commissions and existing customer duties are reconciled. Brand assets, credentials and unauthorized data are removed/returned. The signed ENT-02 supplies identity, term, fees, notices and authorized signatures.
Platform-specific terms
Fees, taxes, payment provider and invoicing
1. Prices are those shown on the price page or order summary at the time of order. Prices for consumers are shown including applicable VAT; prices for business customers are shown excluding VAT unless stated. The Operator may change prices for future periods with at least 30 days' notice; a price change does not affect a period already paid.
2. Payments are processed by the payment service provider identified at checkout. The Operator does not store full card numbers. Bank transfer is available only where the order summary states so and only to the account stated on the invoice issued by the payee.
3. Where a provider is the seller, the provider's price, taxes, fees and refund rule apply to that supply; the Operator's platform fee, if any, is shown separately.
4. Invoices are issued electronically to the billing email on the account. Business customers agree to receive electronic invoices.
5. Overdue business invoices accrue interest at the statutory commercial late-payment rate and reasonable recovery costs; the Operator may suspend the service for a business customer on 7 days' written notice of non-payment.
---
Contract formation and acceptance evidence
1. A contract for the platform service is formed when the Operator records your acceptance of the applicable terms through the acceptance control shown to you (an unticked checkbox, an order button labelled with an obligation to pay, or an electronic signature) and, for paid services, when the payment provider confirms payment.
2. The Operator keeps an append-only record of the document identifier, version, content hash, date, time and acceptance method. You may request a copy of the record and of the accepted version at any time at «contacts.legal.address». Each version is archived at «public_route»/v/«version».
3. Acceptance by a person acting for an organisation is a representation that the person is authorised to bind that organisation. Where the Operator requires verification of that authority, the service for the organisation is not activated until verification is complete.
4. The Operator may rely on an electronic signature produced through its signature provider as the signature of the signatory under Regulation (EU) No 910/2014 and, for the UK, the UK eIDAS regulation.
---
Standard contract terms
Content, licence to Operator, moderation
1. You retain ownership of content you upload. You grant the Operator a worldwide, non-exclusive, royalty-free licence to host, store, reproduce, adapt, display, distribute and create derivative works of your content for the purpose of operating, promoting (listing content only) and improving the service, for the term of your account plus the period required for backup and legal retention.
2. You warrant that your content does not infringe third-party rights and is not unlawful.
3. The Operator may remove or restrict content that it reasonably believes is unlawful, infringes these terms or creates a risk to users, and will inform you of the reason and the review route.
4. All platform software, designs, models, trade marks and data compilations are owned by the Operator or its licensors. No licence is granted except as stated.
---
Data roles
1. Platform data. The Operator is the controller of personal data processed to operate the platform: account, identity verification, acceptance records, payments, security, support, communications and analytics.
2. Provider supply data. Where a provider supplies services to a customer through the platform, the provider is an independent controller of the data it needs for that supply (booking, order, clinical, educational or professional records), and the Operator is a controller of the platform-level record of the transaction. Each party complies with its own obligations; neither acts for the other.
3. Processor services. Where the Operator processes personal data on behalf of a business customer under the customer's instructions (for example an enterprise tenant's employee data), the Data Processing Agreement (DAT-01) applies and governs; it is signed as part of the order.
4. Sharing between SET platforms. Personal data is not shared with any other platform operated by the Operator or its group unless you enable the specific destination in your settings. Enabling one destination does not enable others, and you may disable it at any time.
5. International transfers. Personal data is stored in the European Economic Area (or, for wellbridge.uk, the United Kingdom). Where a processor outside those areas is used, the transfer is covered by Standard Contractual Clauses or the UK Addendum/IDTA, listed in the subprocessor annex.
---
Changes to the terms
1. The Operator may amend these terms for legitimate reasons: changes in law, in the service, in security or fraud prevention, in the payment provider, or to clarify wording. The Operator notifies you of material changes by email and in-product at least 30 days before they take effect (immediately where required by law or security).
2. If you do not accept a material change, you may terminate before it takes effect and receive a pro-rata refund of any prepaid period affected. Continued use after the effective date is acceptance; for major changes the service asks you to confirm acceptance at your next sign-in.
3. Every version is archived with its date and content hash at «public_route»/v/.
---
Liability
1. Except for the excluded liabilities in paragraph 3, each party's total aggregate liability arising out of or in connection with the agreement in any contract year is limited to the fees paid or payable by the customer to the Operator under the agreement in the 12 months preceding the event giving rise to the claim.
2. Neither party is liable for indirect or consequential loss, loss of profit, revenue, business, goodwill, anticipated savings, or loss or corruption of data (except for the Operator's obligation to restore from its last available backup).
3. The limits do not apply to: death or personal injury caused by negligence; fraud or fraudulent misrepresentation; wilful misconduct or gross negligence; the customer's payment obligations; a party's breach of confidentiality; a party's indemnity for infringement caused by its own content; or any liability that cannot be limited by law.
4. Service credits under the SLA are the customer's sole and exclusive remedy for service availability shortfalls.
---
Governing law and forum
This agreement is governed by Spanish law, excluding its conflict-of-law rules and the UN Convention on Contracts for the International Sale of Goods. The courts of the city of Barcelona have exclusive jurisdiction, without prejudice to either party seeking interim relief in any competent court.
MetOry Data Processing Agreement
1. Parties instructions and applicability
This DPA applies only where the customer/controller identified in an executed ENT-02 instructs SMARTEDTECH SL as processor for MetOry. For the operator's own account, billing, security or statutory purposes it may instead be a controller. Independent providers/institutions remain responsible for their own processing. Annex A must identify subject matter, duration, nature, purpose, data categories, data subjects, controller instructions and permitted locations before processing starts. No blank annex authorizes unrestricted processing.
2. Documented purpose and confidentiality
The processor acts only on documented instructions, including transfers, unless binding law requires otherwise; it informs the controller of that requirement where legally permitted. It promptly flags an instruction it reasonably considers unlawful. Only personnel needing access are authorized, trained and bound by confidentiality. No advertising, onward sale, unrelated model training, cross-platform enrichment or private data publication follows from this DPA.
3. Security and authorized access
Use risk-appropriate measures under Article 32 documented in Annex B: tenant isolation/RLS, least privilege and MFA for privileged access, encryption and key management where actually implemented, secrets masking, patch/vulnerability handling, tested restore and recovery, scoped integrations, upload controls, incident escalation and proof integrity. These are contractual requirements to be evidenced, not a certification that every measure has already passed. Explain and correct material deviations before production processing. No private content is written into immutable consent logs; use minimized references and lawful retention.
4. Subprocessors and transfers
Annex C identifies every actual subprocessor, purpose, location, data access and approval basis. Under general written authorization notify intended additions/replacements and allow a reasonable agreed objection process; resolve or stop the affected processing if lawful safeguards cannot be agreed. Impose equivalent processing duties and remain responsible as required by Article 28. Restricted transfers require the actual valid instrument and assessment in DAT-02. A vendor logo or API setting is not an executed DPA or transfer safeguard.
5. Rights and incidents
Assist the controller with data-subject requests using proportionate authentication and scoped search/export/correction/deletion. Do not independently decide the response unless authorized or required by law. Notify the controller of a personal-data breach without undue delay after awareness, with available facts, categories/approximate numbers, likely effects, mitigation and contact. Supply staged updates and preserve relevant evidence; do not wait for a perfect report. The controller's 72-hour supervisory notification duty is distinct from processor notification and does not automatically attach to every security alert. Parties coordinate affected-person notifications without blocking statutory deadlines.
6. Assessments audit and authorities
Provide information reasonably necessary for Article 28 compliance, relevant security evidence, assistance with DPIAs and prior consultation, and proportionate audits/inspections subject to confidentiality, security and others' rights. Limit access to relevant data; never demand raw secrets or unrelated tenants' records. Statutory regulator access is preserved. Do not refuse essential audit cooperation merely because a certificate is unavailable.
7. End of service and retention
At the controller's choice return or delete personal data and existing copies at end of the instructed service, unless binding law requires particular retention. Agree actual export format, timing, backup expiry and deletion verification in Annex D. Restrict any legally held records to the specific purpose and duration. The append-only proof requirement does not authorize retaining identifiable content forever; minimize or cryptographically separate payloads consistent with approved law and technical design.
8. Execution annexes
Annex A uses the service/subject/purpose fields in ENT-02; Annex B is the evidence-backed TOMs list; Annex C is the actual recipients/location/change-notice register; Annex D states retention/export/deletion and incident contacts. They remain missing facts until completed from the tenant/service configuration. Sign by the actual controller and processor. Statutory processing obligations and mandatory rights take precedence over inconsistent commercial terms.
Platform-specific terms
Data roles
1. Platform data. The Operator is the controller of personal data processed to operate the platform: account, identity verification, acceptance records, payments, security, support, communications and analytics.
2. Provider supply data. Where a provider supplies services to a customer through the platform, the provider is an independent controller of the data it needs for that supply (booking, order, clinical, educational or professional records), and the Operator is a controller of the platform-level record of the transaction. Each party complies with its own obligations; neither acts for the other.
3. Processor services. Where the Operator processes personal data on behalf of a business customer under the customer's instructions (for example an enterprise tenant's employee data), the Data Processing Agreement (DAT-01) applies and governs; it is signed as part of the order.
4. Sharing between SET platforms. Personal data is not shared with any other platform operated by the Operator or its group unless you enable the specific destination in your settings. Enabling one destination does not enable others, and you may disable it at any time.
5. International transfers. Personal data is stored in the European Economic Area (or, for wellbridge.uk, the United Kingdom). Where a processor outside those areas is used, the transfer is covered by Standard Contractual Clauses or the UK Addendum/IDTA, listed in the subprocessor annex.
---
MetOry Rights Retention and Incident Procedure
1. Intake and authentication
Receive rights, privacy and service complaints at the monitored route identified for metory.net and at the Legal Notice correspondence address. Acknowledge and assign a case reference. Route professional complaints to the actual provider while retaining responsibility for platform matters. Verify identity and representative/guardian capacity proportionately and avoid excessive document collection.
2. Assessment and deadlines
Identify the exact controller, request type and data scope. For applicable GDPR requests, respond ordinarily within one month; where a lawful extension is needed notify the reason and extension within the first month. Explain refusal/limits and complaint rights. A data processor assists its controller promptly rather than giving an unauthorized independent response. Keep a limited request/decision proof without duplicating all sensitive content.
3. Retention and legal holds
Maintain a schedule by data class, purpose, legal basis, actual period/trigger, owner, deletion/export job and backup expiry. Retain active service data only as necessary; separately restrict invoice, professional record or claim material subject to specific mandatory duties. A legal hold needs owner, ground, scope, review and expiry. No blanket forever ledger retention overrides erasure or storage limitation. Use a new minimized correction/revocation event instead of editing protected proof, and design lawful separation of personal payload from integrity evidence.
4. Security incidents
Staff report suspected incidents immediately to the assigned incident lead. Contain and preserve necessary evidence, assess affected tenants, access, confidentiality/integrity/availability and risks, and involve the competent controller. Notify processors/controllers without undue delay as required. A controller assesses supervisory notification within 72 hours after awareness where the GDPR threshold applies, and affected persons without undue delay for the relevant high risk unless a lawful exception applies. Keep reasons for reporting or not reporting; no invented fixed private notification deadline is represented as statutory law.
5. Review and appeal
Give a reasoned resolution, remedy/escalation route and applicable independent authority/court route. Preserve fair review for supplier restrictions and illegal-content decisions where required. Staff cannot unilaterally finalize high-stakes clinical, legal or statutory decisions. Logs and case files are tenant scoped and access is audited; routine denied requests do not flood M10, while proof/approval/exception and SEV-class events follow the established rail policy.
Platform-specific terms
Retention and deletion (ceiling wording)
1. Account data is kept for the life of the account and deleted or anonymised within 90 days after closure, except where a longer period is required by law (tax and accounting records: 6 years; acceptance and consent records: 5 years after the end of the relationship, as evidence of compliance; records subject to a legal hold: until the hold ends).
2. Conversation logs, recordings and uploads not linked to an active contract are deleted no later than «retention.conversations» (default: 12 months) after the last interaction, and earlier on your request, unless a legal hold applies.
3. Backups are rotated on a cycle not exceeding 35 days; data deleted from production is removed from backups at the end of the cycle.
4. Where a provider is an independent controller, its own retention rules apply to its records.
Implementation note: the renderer prints the registry value; the retention job must run at or before the printed ceiling (LGL-T aligned job), which is why the clause uses “no later than”.
---
MetOry International Transfer Schedule
1. Map the actual transfer
Identify exporter, importer, controller/processor role, country, recipient function, categories/subjects, frequency, onward access and hosting/support access. No default assumption is made that a Spanish domain stays in the EEA or that a UK domain uses a UK-established operator. If no restricted transfer occurs, record that fact and maintain a change trigger rather than attaching irrelevant SCCs.
2. Select and execute the instrument
Use a current applicable adequacy decision only within its scope and validity. Otherwise select the correct EU SCC module and complete its parties, annexes, technical/organizational measures and subprocessor details; keep the Commission's mandatory clauses intact. For a UK restricted transfer use the appropriate current UK IDTA or approved UK Addendum and complete its tables. This explanatory schedule is not itself a signed SCC/IDTA and does not replace their operative text.
3. Assessment and controls
Assess actual destination law, government access, data sensitivity and practical safeguards. Document access controls, encryption/key control, minimization, pseudonymization, complaint/redress and onward-transfer limits where relevant. Reassess material vendor, country or legal changes. If an instruction cannot be lawfully fulfilled, pause that transfer and seek a compliant alternative; do not paper over it with generic consent.
4. Release condition
No transfer is marked approved until the data map, importer identity, executed instrument, annexes, impact/risk assessment and supplementary measures are recorded. Data subjects retain the instrument's enforceable rights; disclose a lawful way to obtain relevant safeguards without disclosing others' secrets.
Platform-specific terms
Data sources, forecasts and official warnings
1. Weather, environmental and model outputs are produced from the sources listed on the source page under their respective licences. They are not official warnings. Official warnings are issued by the competent national authority named on the alert, and the platform reproduces them with attribution.
2. Forecasts and scenarios are probabilistic; thresholds and decision windows are review triggers and the decision remains with you or your authorised decision-maker.
---
AI services: disclosure, limitations and human escalation
1. Disclosure. Where you interact with an AI system (chat, voice, agent, digital twin or generated content), the Operator tells you so at the start of the interaction and labels AI-generated or AI-manipulated content in accordance with Article 50 of Regulation (EU) 2024/1689. A voice or persona representing a real person is used only with that person's recorded permission.
2. Nature of outputs. AI outputs are generated from models and data that can be incomplete or wrong. They are information and assistance, not professional advice, and not a decision of the Operator. You remain responsible for decisions you take on the basis of an output. Where a decision has legal, financial, medical, educational or safety effect, the service routes it to a human reviewer or to you for decision, and the Operator does not make that decision automatically.
3. Human escalation. You may at any time request a human review of an AI interaction through «contacts.support.address» or the in-product escalation control; the Operator responds within 5 business days (consumer) or within the SLA (business).
4. Permitted use. You will not use AI features to impersonate a person without permission, to generate unlawful content, to circumvent safety controls, or to extract or reverse-engineer models. The Operator may suspend AI features for breach.
5. Recording and model use. Recordings, transcripts and uploads are used to provide the service to you. They are used to improve models only with your separate permission (purpose research_contribution), which you may withdraw at any time without affecting the service.
---
MetOry Model and Data Licence
1. Subject and licence
This schedule covers the data, source labels and models used for weather evidence, operational preparation, venue/marina/agriculture planning and paid individual or organization subscriptions. The actual source owner retains underlying data rights; the operator grants only the use rights it is entitled to grant under the customer's plan and source licences. The order identifies permitted users/sites, territory, download/API access, redistribution and attribution limits. Public availability of a dataset is not automatically a commercial redistribution licence.
2. Provenance and limitations
Keep original provider, observation/forecast time, update frequency, licence and known limitations visible. Distinguish official warnings from platform analysis and recommendations. No weather forecast, cohort output, digital twin or model score is guaranteed truth or a substitute for a competent authority/professional. Missing/conflicting inputs remain labelled; never imply official endorsement through attribution alone.
3. Use and safety
Use outputs for the expressly agreed decision-support scope with the applicable human review. Do not re-identify aggregated individuals, remove provenance, train unauthorized systems on restricted material, resell data outside licence or automate a prohibited high-stakes decision. The user remains responsible for an operational contingency plan; no guaranteed emergency alert or rescue service is supplied unless an independently verified order lawfully says so.
4. Changes and provider licences
An upstream withdrawal, outage or licence restriction requires prompt disclosure and a lawful alternative/refund remedy where applicable. Contributor or data-partner licences separately define provenance, rights, lawful collection, purpose, quality, compensation if any and deletion/revocation handling. The source register must be completed from actual production dependencies; no invented vendor or model training right is supplied.
Platform-specific terms
Data sources, forecasts and official warnings
1. Weather, environmental and model outputs are produced from the sources listed on the source page under their respective licences. They are not official warnings. Official warnings are issued by the competent national authority named on the alert, and the platform reproduces them with attribution.
2. Forecasts and scenarios are probabilistic; thresholds and decision windows are review triggers and the decision remains with you or your authorised decision-maker.
---
MetOry Service Specific Terms
Sources and official warnings
Forecasts, observations, model comparisons and official warnings remain distinct. Name the issuing authority and original time/source. Attribution never implies agency endorsement. MetOry display bands or thresholds are not probabilities, official warnings, guaranteed risk or legal work-stop decisions.
Operational sectors
Venue, marina, agriculture and municipal users remain responsible for lawful operational thresholds, competent human review and emergency arrangements. A preparation view cannot guarantee safe boating, spraying, public evacuation or event operation. Any authorized operational action must be individually scoped, validated and approved under the existing authority/A5 controls.
Plans and partners
Current actual plan catalogue and PSP price govern billing; enterprise/data/SSO functions require a quoted signed order and actual SLA. A pilot/demo form does not create an order or promise a callback. QR/widget example pages are not tickets or endorsed pages of the named venue. Institutional branding and integrations require permission.
Data licences
Record exact source licences, update and outage/redistribution restrictions before commercial reuse. An open-data endpoint is not automatically a right to resell it in every jurisdiction. Data partner and customer licences must match actual recipients and use scope.
Platform-specific terms
Data sources, forecasts and official warnings
1. Weather, environmental and model outputs are produced from the sources listed on the source page under their respective licences. They are not official warnings. Official warnings are issued by the competent national authority named on the alert, and the platform reproduces them with attribution.
2. Forecasts and scenarios are probabilistic; thresholds and decision windows are review triggers and the decision remains with you or your authorised decision-maker.
---
AI services: disclosure, limitations and human escalation
1. Disclosure. Where you interact with an AI system (chat, voice, agent, digital twin or generated content), the Operator tells you so at the start of the interaction and labels AI-generated or AI-manipulated content in accordance with Article 50 of Regulation (EU) 2024/1689. A voice or persona representing a real person is used only with that person's recorded permission.
2. Nature of outputs. AI outputs are generated from models and data that can be incomplete or wrong. They are information and assistance, not professional advice, and not a decision of the Operator. You remain responsible for decisions you take on the basis of an output. Where a decision has legal, financial, medical, educational or safety effect, the service routes it to a human reviewer or to you for decision, and the Operator does not make that decision automatically.
3. Human escalation. You may at any time request a human review of an AI interaction through «contacts.support.address» or the in-product escalation control; the Operator responds within 5 business days (consumer) or within the SLA (business).
4. Permitted use. You will not use AI features to impersonate a person without permission, to generate unlawful content, to circumvent safety controls, or to extract or reverse-engineer models. The Operator may suspend AI features for breach.
5. Recording and model use. Recordings, transcripts and uploads are used to provide the service to you. They are used to improve models only with your separate permission (purpose research_contribution), which you may withdraw at any time without affecting the service.
---
