Terms of Service

1. Acceptance of Terms, Eligibility & Corporate Authority

By accessing or using the Concord Documentation Engine (“Service”), operated by Concord Software Ltd (“Company”, “we”, “us”, or “our”), you agree to be bound by these Terms of Service (“Terms”). If you are entering into these Terms on behalf of a company, organization, or legal entity (“Customer”), you represent and warrant that you have the legal authority to bind that entity and its workspace members to these Terms.

Age Eligibility: You must be at least 16 years of age (or at least 13 years of age if you reside in the United States, in compliance with the U.S. Children’s Online Privacy Protection Act, 15 U.S.C. §§ 6501–6506, and Article 8 of the UK/EU GDPR) and capable of forming a binding contract to use the Service.

2. Content Ownership, Git Repository Rights & Zero AI Training

You retain 100% ownership and intellectual property rights over all Markdown files, source code, diagrams, images, and documentation synchronized from your GitHub repositories or migrated from Atlassian Confluence (“Customer Content”).

You grant Concord a limited, non-exclusive, revocable, worldwide, royalty-free license solely to fetch, parse, index, cache, render, and commit authorized edits to Customer Content as necessary to provide the Service to your authorized workspace members.

Zero AI Training & Zero Lock-In Guarantee: Concord never sells, sublicenses, or trains external machine learning or foundation models on your private repository documentation. Because your canonical documentation is stored as standard Markdown directly inside your GitHub repositories, you may disconnect Concord at any time without losing a single file or revision.

3. Acceptable Use & Security Policy

You agree not to misuse the Service, including but not limited to:

• Attempting to access private repositories, documents, or organization workspaces without authorization.
• Abusing GitHub API rate limits, forging webhook signatures, or targeting internal/private network hosts via the Confluence migration engine.
• Uploading malicious scripts, cross-site scripting (XSS) payloads, malware, or unlawful material via the Markdown editor.
• Circumventing seat quotas, billing limits, or role-based access controls (ADMIN, EDITOR+, EDITOR, VIEWER).

5. Enterprise Data Processing Agreement (GDPR Art. 28) & Security

To the extent that Concord processes personal data contained within Customer repositories or workspace membership records on behalf of a Customer subject to the UK GDPR, EU GDPR, or U.S. state privacy laws, Customer acts as the Data Controller (or “Business”) and Concord Software Ltd acts as the Data Processor (or “Service Provider”) pursuant to Article 28 of the GDPR.

Concord implements industry-standard technical and organizational safeguards, including TLS 1.2/1.3 encryption in transit, AES-256 encryption at rest, timing-safe HMAC-SHA256 webhook verification, strict multi-tenant workspace isolation, and HTML sanitization. Enterprise customers may request a counter-signed Data Processing Addendum (DPA) incorporating the EU Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum (IDTA) by contacting [email protected].

6. Copyright & DMCA Takedown Policy (17 U.S.C. § 512 & EU DSA)

Concord respects intellectual property rights and complies with the U.S. Digital Millennium Copyright Act (17 U.S.C. § 512), the UK Electronic Commerce (EC Directive) Regulations 2002, and the EU Digital Services Act (Regulation (EU) 2022/2065). If you believe that public documentation hosted via Concord infringes your copyright, please send a written notice containing: (a) identification of the copyrighted work; (b) the exact Concord URL of the allegedly infringing material; (c) your contact details; (d) a good-faith statement that the use is unauthorized; and (e) a statement under penalty of perjury that the notice is accurate and you are authorized to act on behalf of the copyright owner, signed physically or electronically, to our Designated Agent at [email protected].

7. Warranties, Disclaimers & Limitation of Liability

Because your canonical documentation resides directly in your GitHub repositories, your files remain accessible on GitHub even during scheduled maintenance. Except as expressly stated herein, the Service is provided “as is” and “as available” without warranties of any kind, whether express, implied, or statutory, including implied warranties of merchantability, fitness for a particular purpose, and non-infringement.

To the maximum extent permitted by applicable law, Concord Software Ltd shall not be liable for any indirect, incidental, special, consequential, or punitive damages, or loss of profits or revenues, and our aggregate liability arising out of or relating to these Terms shall not exceed the greater of (a) the total subscription fees paid by Customer to Concord in the twelve (12) months preceding the event giving rise to the claim, or (b) $100 USD. Nothing in these Terms excludes or limits liability for death or personal injury caused by negligence, fraud, fraudulent misrepresentation, or any statutory rights that cannot be excluded under the UK Consumer Rights Act 2015, EU consumer law, or applicable U.S. law.

8. Export Control & Sanctions Compliance (US OFAC, UK OFSI & EU)

You represent and warrant that neither you nor your organization is located in, ordinarily resident in, or organized under the laws of any country or territory subject to comprehensive embargoes by the United States, the United Kingdom, or the European Union, nor are you listed on the U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) Specially Designated Nationals (SDN) List, the U.S. Commerce Department’s Denied Persons or Entity List, the UK Office of Financial Sanctions Implementation (OFSI) Consolidated List, or the EU Consolidated Financial Sanctions List.

9. Governing Law, Jurisdiction & Corporate Disclosures

These Terms and any dispute or claim arising out of or in connection with them shall be governed by and construed in accordance with the laws of England and Wales, without prejudice to mandatory consumer protection provisions applicable in your jurisdiction of residence in the United States, the United Kingdom, or the European Union.