Terms of Service
0. Who we are
These Terms of Service ("Terms") govern access to and use of the Apronta platform (the "Service"), available at apronta.co and on the *.apronta.site subdomains, operated by Concealed, Unipessoal Lda, with the single registration and tax number 514 292 695 and share capital of €6,000, with its registered office at Rua da Fonte, nº13, Toledo, 2530-781 Vimeiro LNH.
By creating an account or publishing a site through Apronta, you accept these Terms on behalf of the business you represent ("Customer", "your business").
Apronta is a service for professionals and businesses (B2B): it is not intended for individual end consumers.
1. What the Service is
Apronta lets a business publish a site of its own (with a page, menu, bookings, orders and a customer list) from a link to an online presence it already has (for example, a Google Maps listing), or from scratch. Depending on the plan subscribed to, the Service includes: a site editor, bookings, catalogue/menu, orders placed by QR code, a customer list, visit statistics, and the additional features described on the pricing page at apronta.co/pricing.
Apronta is not a marketplace: the customers acquired through the site belong to the business, the address (domain) belongs to the business, and no competitors are listed beside the business’s name in the same space.
Google content. A site may show Google Maps features and content: the map, and the business’s rating, reviews and photographs on Google, which Google itself shows to whoever visits the site. Apronta neither stores nor alters that content. Its use is subject to the Google Maps/Google Earth Additional Terms of Service and the Google Privacy Policy.
2. Account and plans
2.1 Free plan. Any business may use Apronta on the free plan ("Montra"), with no time limit and no payment card. Montra includes publishing the site, with the limits shown at apronta.co/pricing and with the Apronta brand visible on the site. The paid plans ("Pro" and "Marca") add features and remove limits, as set out on the same page.
2.2 Plans and prices. The plans available, what each one includes, their limits (bookable resources, bookings and orders per month, site languages, SMS, statistics history) and their prices per location are those published at apronta.co/pricing at the time of subscribing. Apronta may change plan prices and limits with at least 30 days’ notice to customers with an active subscription; the change does not apply to a period already paid for.
2.3 What happens if the subscription ends or is not renewed. When a paid subscription ends, through cancellation or non-payment, the account moves to Montra. The site stays published, with Montra’s limits: the features exclusive to the paid plans stop being available, with their settings kept in case the Customer subscribes again, and a custom domain starts sending visitors to the business’s apronta.site address. The data of the business and of its customers is kept.
2.4 Invoicing and payment. The paid plans are sold through Link, by Stripe, which acts as the seller (merchant of record): Link charges the Customer, issues the receipts and invoices and accounts for the VAT, under its own terms, which the Customer accepts when paying. By subscribing to a paid plan, you authorise the recurring charge (monthly or yearly, as chosen) of the amount corresponding to the plan and the locations subscribed to. Yearly plans cost 10 months at the monthly price, charged in advance for 12 months of service. The set-up service ("Arranque"), when chosen on subscribing to a monthly plan, is sold by Apronta and charged once, on its own, through Stripe, and Apronta issues its invoice; on a yearly plan it is included. VAT at the legal rate in force is added to the published prices, where applicable, calculated at payment according to the Customer’s country and VAT number.
2.5 Cancellation and refunds. You may cancel the subscription at any time; cancellation takes effect at the end of the period already paid for, and the account then moves to Montra (section 2.3). No refund is given for unused prepaid periods, including on yearly plans cancelled before the end of the 12-month period, without prejudice to the refunds Link grants under its own terms.
3. Customer content and data
3.1 Ownership. The content you put on your site (business name, address, opening hours, photos, menu, prices, texts) is yours. Apronta claims no ownership of this content.
3.2 Responsibility for content. You are responsible for ensuring that:
- (a) you hold the necessary rights to the photographs and texts you publish;
- (b) the information that the law requires of your business (the Livro de Reclamações complaints book, the NIF tax number, address, allergen declaration where applicable, prices including VAT) is correct and up to date.
3.3 Your customers’ data. In the course of the Service, Apronta processes, on your behalf and under your instructions, personal data of your end customers (name, phone, email, booking/order history, notes). This processing is governed by the Data Processing Agreement (DPA), which forms an integral part of these Terms (see the annexed document).
3.4 No lock-in. There is no minimum term and no sign-up fee. Your business’s apronta.site address remains yours for as long as the account exists, on any plan. A custom domain registered by the Customer is and remains the Customer’s; connecting that domain to the site is included in the Pro and Marca plans. An export of your data may be requested at any time, under the terms of the DPA.
4. Acceptable use
You undertake not to use the Service for: content that is unlawful, misleading or that infringes the rights of third parties; sending SMS or unsolicited communications to people who are not your customers; attempts at unauthorised access to Apronta’s infrastructure; or any activity that breaches the Portuguese or EU law applicable to your business.
5. Availability of the Service
Apronta is offered at an early stage of its growth. No level of availability (SLA) is guaranteed at this time: reasonable efforts are made to keep the Service available, but there is no contractual uptime commitment and no penalty for unavailability. This section will be revised as the product matures.
6. Intellectual property in the platform
The software, design, trade marks ("Apronta", logo) and other elements of the platform are the property of Concealed, Unipessoal Lda or its licensors. Nothing in these Terms transfers those rights to the Customer.
7. Limitation of liability
[Standard clause below, not checked for compliance with the mandatory rules of Portuguese law applicable to B2B contracts. Accepted as it stands for now, by a deliberate decision not to commission a legal review before validation.]
To the fullest extent permitted by law, Apronta’s total liability to the Customer, for any reason related to the Service, is limited to the amount paid by the Customer in the 12 months before the event that gave rise to the claim. Apronta is not liable for indirect damage, loss of profits, or loss of data to the extent that they result from fortuitous events, force majeure, or the Customer’s failure to meet its obligations described in section 3.2.
8. Suspension and termination
Apronta may suspend or end access to the Service, with notice where reasonably possible, in the event of a breach of these Terms or of use that puts other customers or the Service’s infrastructure at risk. Non-payment of a paid plan does not suspend the site: it has the effect described in section 2.3.
9. Changes to these Terms
Material changes to these Terms will be notified at least 30 days in advance, by email to the associated account. Continued use of the Service after that date implies acceptance of the new Terms.
10. Governing law and jurisdiction
These Terms are governed by Portuguese law. Any dispute is to be settled by the courts of the judicial district in which Concealed, Unipessoal Lda has its registered office, without prejudice to mandatory provisions to the contrary.
11. Language
These Terms, including the Data Processing Agreement annexed to them, are published in Portuguese and in English. This English text is a translation: in case of any divergence between the two versions, the Portuguese version prevails.
12. Contact
For questions about these Terms: [email protected].
Annex: Data Processing Agreement
This DPA governs the processing, by Apronta, of the personal data of the end customers of each business that uses the platform. It forms an integral part of the Terms of Service.
1. Parties and scope
This Agreement is entered into between:
- Concealed, Unipessoal Lda, with the single registration and tax number 514 292 695 and share capital of €6,000, with its registered office at Rua da Fonte, nº13, Toledo, 2530-781 Vimeiro LNH, operator of the Apronta platform ("Processor"); and
- The business that uses the Apronta platform, on any plan ("Controller", "Customer"),
and applies to the processing, by the Processor, of personal data of the Customer’s end customers, in the course of providing the Service described in Apronta’s Terms of Service. In the event of a conflict between this Agreement and the Terms of Service regarding the processing of personal data, this Agreement prevails.
2. Subject matter, duration and nature of the processing
2.1 Subject matter. The Processor processes personal data of the Customer’s end customers solely to provide the features of the Service: management of bookings, orders, catalogue/menu, customer list, reminders by email or SMS (when enabled) and visit statistics.
2.2 Duration. The processing continues for as long as the Customer’s account exists, on any plan, and after its closure only during the retention period set out in section 8.
2.3 Data subjects. The business’s end customers (people who book, order or are registered as customers of the Customer).
2.4 Categories of personal data. Name, phone, contact number, email, booking/order history (dates, items, amounts, table/location), free-text notes and tags entered by the Customer, and the pseudonymised cross-shop identity identifier described in the Privacy Policy (an HMAC with Apronta’s own key, not a simple reversible hash).
2.5 Special categories of data. The Service was not designed to collect special categories of data (Article 9 GDPR). The Customer undertakes not to enter that kind of data in the Service’s free-text fields (notes).
3. Instructions and obligations of the Processor
The Processor undertakes to:
3.1 Process the personal data only on the Customer’s documented instructions (in particular, those expressed through the configuration and normal use of the Service), unless the law requires otherwise and, in that case, inform the Customer of that legal requirement before the processing, unless the law prohibits it.
3.2 Ensure that the persons authorised to process the data are bound by a duty of confidentiality.
3.3 Adopt technical and organisational measures appropriate to the risk (Article 32 GDPR). [TO CONFIRM the actual list of measures with engineering before publishing: see Annex B.]
3.4 Respect the conditions set out in section 4 for engaging sub-processors.
3.5 Assist the Customer, insofar as reasonable and taking into account the nature of the processing, in fulfilling its obligation to respond to requests from data subjects to exercise their rights.
3.6 Notify the Customer without undue delay, and at the latest within 72 hours of becoming aware of it, of any personal data breach affecting the data processed under this Agreement, providing the information reasonably available for the Customer to meet its own notification obligations (in particular to the CNPD, the Portuguese data protection authority).
3.7 Make available to the Customer the information necessary to demonstrate compliance with the obligations in this Agreement, and allow for and contribute to audits, including inspections, conducted by the Customer or by an auditor it mandates, on reasonable notice. [TO CONFIRM: the practical mechanism, given the company’s early stage, probably a questionnaire/documentation rather than an on-site audit, to be defined.]
3.8 Delete or return all personal data at the end of the provision of the services relating to the processing, under section 8, unless the law requires it to be kept.
4. Sub-processors
4.1 General authorisation. The Customer gives a general authorisation for the Processor to use the sub-processors listed in Annex A.
4.2 Changes. The Processor undertakes to notify the Customer reasonably in advance [TO CONFIRM the period, suggestion: 15 days] before adding or replacing a sub-processor, giving the Customer the opportunity to object on data protection grounds. Failing agreement, either party may terminate the contract in respect of the affected service.
4.3 The Processor ensures that each sub-processor is bound by data protection obligations equivalent to those of this Agreement.
5. International transfers
[TO CONFIRM before publishing: the actual location of the servers (Hetzner) and of the sub-processors (Stripe, Twilio, Resend, Cloudflare). Should any processing take place outside the European Economic Area, this Agreement will incorporate the European Commission’s Standard Contractual Clauses (SCC) or another valid transfer mechanism, to be identified in Annex A.]
6. Assistance with impact assessments
The Processor provides the Customer, insofar as reasonable, with the information necessary to carry out data protection impact assessments (DPIA) and prior consultations with the supervisory authority, where applicable.
7. Rights of data subjects
If an end customer of the Customer contacts the Processor directly to exercise their rights (access, rectification, erasure, portability, objection), the Processor forwards the request to the Customer without undue delay, and does not respond directly unless instructed by the Customer or required otherwise by law.
8. Deletion of data at the end of the contract
After the Customer’s account is closed or these Terms end, the personal data processed under this Agreement is kept for 90 days (a recovery period in case of accidental closure) and, once that period has passed, permanently deleted, except records that the Processor is legally required to keep for a different period (for example, records relating to invoicing). The end of a paid subscription does not close the account: the account moves to Montra (Terms, section 2.3) and the processing continues.
9. Liability
Each party’s liability under this Agreement follows the limitation of liability set out in the Terms of Service. [Note: liability clauses under the GDPR have their own rules (joint and several liability towards the data subject, Article 82 GDPR), which cannot be entirely excluded by contract between Processor and Controller.]
Annex A: Authorised sub-processors
| Sub-processor | Function | Location | Status as of this draft |
|---|---|---|---|
| Stripe | Payment processing | [TO CONFIRM] | Active |
| Resend | Transactional email | [TO CONFIRM] | Not configured in production |
| Twilio | SMS | [TO CONFIRM] | Not configured in production |
| Cloudflare | CDN, protection, storage (R2) | [TO CONFIRM] | Proxy active; storage [TO CONFIRM] |
| Hetzner | Hosting | [TO CONFIRM] | Active |
Annex B: Technical and organisational measures
[TO CONFIRM with engineering before publishing. What is documented and confirmed in the code as of this draft:
- Cross-shop identity pseudonymised via HMAC with its own secret key (
IDENTITY_SALT), not a simple hash. - Request rate limiting via Redis.
- Changes to the database made exclusively through versioned migrations, never by changing the schema directly.
- No third-party analytics running on visitors’ data.
- Automatic error alerts to an internal channel (Slack), inactive until configured for production.
Not confirmed in this draft, to be validated before publishing: encryption at rest, end-to-end encryption in transit, backup policy, control of the team’s access to production data.]