Vault2Trust Terms and Conditions

These Terms and Conditions govern the use of the Vault2Trust platform available at https://vault2trust.com.

By creating an account, ticking the acceptance box, accessing the Platform, inviting users, uploading data, using the services or purchasing a subscription, the Client confirms that they have read, understood and accepted these Terms, the Privacy and Security Policy (including the Processor Terms in Section 8 of that Policy), the Acceptable Use rules in Section 13 and any other documents incorporated by reference.

If you do not accept these Terms, you must not create an account, use the Platform or transmit data through it.

1. Provider Information

Legal name: "Zei Code AI" LLC
Registered office: str. Mihai Viteazul 4, mun. Chișinău, Republic of Moldova
Web: https://vault2trust.com
Support email: [email protected]

In these Terms, "Zei Code AI" LLC is the "Provider", and the natural person or legal entity using the Platform is the "Client" or the "Beneficiary".

2. Definitions

Platform means the Vault2Trust online software application through which the Client may manage users, clients, documents, activities, tasks, invoices, cases, notifications, subscriptions and other digital functionalities.

Account Administrator means the person who creates, manages or controls the Client's account and may add users, configure permissions, upload documents, enter data and manage the subscription.

Authorised User means any person invited or authorised by the Client to access the Platform.

Client Data means all data, documents, information, files, texts, images, personal data and commercial, accounting, legal, financial or operational data uploaded, entered, generated or transmitted through the Platform by the Client or its Authorised Users.

Subscription means the temporary, limited, revocable and non-exclusive right to use the Platform for the paid period or, where offered, free of charge.

Consumer means a natural person who uses the Platform for purposes outside their trade, business, craft or profession.

3. Scope of the Services

3.1. Vault2Trust provides access, for a fee or free of charge as applicable, to a SaaS CRM platform for companies, professionals and organisations. The service includes, without limitation: management of clients, cases and recurring activities; generation of documents and invoices; storage for documents; management of teams, roles and permissions; a client portal for exchanging documents; management of tasks, deadlines and notifications; online payment of subscriptions by bank card; and other digital functionalities available in the Platform.

3.2. The service is 100% digital and no physical goods are delivered. The Client accesses the Platform from any Internet-connected device.

3.3. The Platform is a technical tool for organising, managing, storing and communicating. It does not constitute legal, accounting, tax, financial, audit, professional consulting or any other regulated service. The Client is solely responsible for how it uses the Platform, the data entered, the documents generated, its decisions, and compliance with the laws applicable to its own activity.

3.4. The Platform is intended primarily for professional use. Mandatory consumer rights are preserved where the Client is a Consumer.

4. Acceptance, Capacity and Electronic Contract

4.1. The contract is concluded electronically, at a distance, in accordance with Law No. 284/2004 on Information Society Services and Law No. 91/2014 on Electronic Signature and Electronic Document. Acceptance by ticking the box or by using the Platform has the effect of a signed agreement.

4.2. The Client declares that they are at least 18 years old and have full legal capacity. Where the person creating the account acts for a company or organisation, they represent and warrant that they have the authority to bind that entity, which is then the "Client". Without such authority, they may not create an account or use the Platform.

4.3. The Provider may retain technical evidence of acceptance: date and time, IP address, email, account identifier, version of the accepted documents, browser, operating system and related metadata.

4.4. These Terms are available in Romanian, English and Russian. In case of discrepancy, the Romanian version prevails, unless mandatory law requires otherwise.

5. Client Account

5.1. To use the Platform, the Client may need to create an account and provide true, accurate and current information (first and last name, company name, email, telephone, IDNO/IDNP or other tax identification number, address) needed for service provision, invoicing, identification or support.

5.2. The Client keeps access credentials confidential and is responsible for all actions carried out through its account, including by employees, collaborators, subcontractors, clients or other invited users.

5.3. The Client must immediately notify the Provider of any suspected unauthorised access, password compromise, misuse or security incident.

6. Invited Users

6.1. The Client may invite Authorised Users and is responsible for their acts and omissions as for its own. Each user must comply with these Terms, the Privacy and Security Policy, the Client's instructions and applicable law.

6.2. The Provider may suspend or restrict an invited user's access where there are reasonable grounds to suspect unauthorised access, a security breach, fraud, abuse or violation of law or of these Terms.

7. Fees and Payment

7.1. Monthly fees are published on the "Plans" page or within the Platform. Prices are in Moldovan lei (MDL) unless another currency is expressly indicated. VAT and other taxes are applied in accordance with the applicable legislation. Clients outside the Republic of Moldova are responsible for taxes, duties and withholdings applicable in their own jurisdiction, except taxes on the Provider's income.

7.2. Payment is made online by Visa or Mastercard through the secure system of VictoriaBank or another payment processor designated by the Provider. Transactions are processed exclusively on the bank's or processor's infrastructure; the Provider does not receive or store the full card number, CVV code or other sensitive card data.

7.3. The monthly subscription is renewed manually by the Client by a payment made before the expiry date. No automatic card charge is made without the Client's explicit confirmation, unless the Client expressly accepts an automatic renewal mechanism in the future.

7.4. Non-payment may lead to suspension, restriction or termination of access.

7.5. The Provider may change prices, plans, limits, functionalities and commercial conditions. Material changes are notified in advance by email, Platform notification or another reasonable method, and apply to the next billing period; the Client may terminate before then without penalty.

8. Cancellation and Refunds

8.1. The Client's rights regarding cancellation and refund are protected, to the extent applicable, by Law No. 105 of 13 March 2003 on Consumer Protection of the Republic of Moldova and other mandatory provisions, including consumer protection laws of the Consumer's country of residence where they cannot be excluded by contract (for example, the 14-day withdrawal right under Directive 2011/83/EU for Consumers in the EU, subject to its exceptions for digital services fully performed with the Consumer's prior express consent).

8.2. Cancellation immediately after payment. The Client may request cancellation and a full refund within 14 calendar days of the payment date, provided that the Platform has not been effectively used. Where the Client asks to begin using the service during the 14-day period, a Consumer acknowledges that the proportional price for the service already provided may be deducted, as permitted by law.

8.3. Cancellation after use. Where the Platform has been used, a proportional refund for the unused part of the current month may be granted on a reasoned request. The Provider decides within five business days of receiving all necessary information.

8.4. How to request. Send the request to [email protected] with the order number, the email associated with the account and the reason.

8.5. Refund method. Refunds are made only to the card used for the original payment or by another method allowed by the bank or processor. The amount may appear on the card within 3–10 business days, depending on the issuing bank and processor.

8.6. Administrative cancellation. The Provider may cancel a transaction and refund the amount in cases of fraud or suspected fraud, breach of these Terms, illegal use, payment errors or other circumstances creating legal, technical or financial risk.

8.7. As the service is digital, there is no physical location for returns. The Provider's registered address is used only for official correspondence; operational requests must be sent to [email protected].

9. Client Obligations

The Client undertakes to:

a) provide true, accurate and current information at registration and keep it updated;

b) keep access credentials confidential and not give access to unauthorised persons;

c) use the Platform only for lawful purposes and comply with the law of the Republic of Moldova and the laws applicable to its own activity;

d) pay the subscription on time;

e) not reproduce, copy, modify, decompile, reverse-engineer or attempt to access the Platform's source code;

f) not compromise the security, integrity, availability or performance of the Platform;

g) not enter data, documents or materials that are unlawful, fraudulent, false, defamatory or infringe third-party rights;

h) obtain all consents, authorisations and legal grounds, and give all notices, required for the personal data and documents entered;

i) correctly configure the roles, permissions and access rights of invited users;

j) notify the Provider of any unauthorised access, security incident or misuse.

10. Provider Obligations

The Provider undertakes to:

a) provide access to the Platform according to the plan chosen by the Client;

b) use reasonable efforts to keep the Platform available, with a target monthly availability of at least 99%, excluding planned maintenance announced in advance and events outside its reasonable control;

c) protect Client Data in accordance with the Privacy and Security Policy;

d) implement reasonable technical and organisational security measures;

e) give advance notice of material changes to fees or functionalities;

f) respond to support requests within a reasonable period;

g) not sell Client Data to third parties;

h) restrict internal access to Client Data to persons who need it for support, security, technical operations, legal obligations or performance of the agreement.

The Provider does not guarantee uninterrupted, error-free or fully secure operation and will use reasonable efforts to remedy incidents within a reasonable time.

11. Ownership of Client Data

11.1. The Client retains all rights in Client Data; the Provider acquires no ownership.

11.2. The Client grants the Provider a limited, non-exclusive right to host, process, transmit, temporarily copy and display Client Data exclusively as needed to provide the Platform, maintain security, provide support, create backups, prevent fraud, comply with legal obligations and perform this agreement.

11.3. The Provider does not sell Client Data and does not use it for behavioural advertising, commercial profiling or transfer to third parties for their own purposes, except where the law requires or the Client expressly agrees.

12. Personal Data and Responsibility for Entered Data

12.1. The Client is responsible for the lawful collection, entry, upload, use and transmission of Client Data. It represents that it holds all rights, consents, legal grounds, authorisations and notices required to enter personal, employee, client, accounting, legal, tax or commercial data.

12.2. The processing of personal data is governed by the Privacy and Security Policy and applicable law, including Law No. 195/2024 on Personal Data Protection and, where applicable, Regulation (EU) 2016/679 (GDPR). For Client Personal Data the Client is the controller and the Provider is the processor, acting on the Client's documented instructions under Art. 28 of Law 195/2024 and Art. 28 GDPR, and the Processor Terms in the Policy form part of this agreement.

12.3. The Client must not enter special-category data (Art. 9) or data on criminal convictions (Art. 10) unless it has a clear legal basis and appropriate safeguards.

12.4. The Provider is not liable for access granted by the Client to its own employees, collaborators, subcontractors, clients or other invited users.

13. Acceptable Use

The Client and its users must not:

a) use the Platform for illegal, fraudulent, abusive or misleading activities or activities contrary to public order;

b) upload malware, viruses, harmful code, unauthorised automated scripts or materials that compromise security;

c) attempt unauthorised access to accounts, servers, databases, source code or the Provider's infrastructure;

d) copy, modify, reverse-engineer, decompile, sell, sublicense or exploit the Platform without the Provider's written consent;

e) use the Platform for spam, phishing, fraud, unlawful data collection or surveillance, or infringement of others' rights;

f) upload sensitive or special-category personal data without a clear legal basis and the necessary safeguards;

g) compromise the availability, integrity, performance or security of the Platform;

h) use the Platform in a way that may expose the Provider to legal liability.

The Provider may immediately suspend access in case of a serious violation or security risk, without prejudice to its right to terminate the agreement or notify the competent authorities.

14. Sanctions, Export Controls and Anti-Corruption

The Client represents that it, its beneficial owners and its Authorised Users are not subject to sanctions of the United Nations, the European Union, the United States, the United Kingdom or the Republic of Moldova, and will not use the Platform in breach of applicable sanctions, export control, anti-money-laundering or anti-corruption laws. The Provider may suspend or terminate access where compliance requires it.

15. Suspension and Termination

15.1. The Provider may suspend access fully or partly in case of: non-payment; breach of these Terms; security risk or unauthorised access; illegal or fraudulent use; request of a competent authority; need to prevent harm to the Provider, other clients or third parties; breach of data protection obligations; false or incomplete information; or attempted unauthorised access to the infrastructure. For non-payment, access may be restricted after the paid period and any grace period communicated to the Client.

15.2. The Client may stop using the Platform and terminate the subscription at any time, without affecting amounts already due.

15.3. Termination does not affect obligations already accrued, payment obligations, confidentiality, limitation of liability, intellectual property, data protection, governing law and jurisdiction, and other clauses intended to survive.

16. Export and Deletion of Data

16.1. After termination, the Client may request export of Client Data in a format technically available in the Platform within 30 calendar days after access ends.

16.2. After that period, the Provider may delete or anonymise Client Data, except data that must be retained by law (accounting and tax records, security, fraud prevention, defence of rights).

16.3. Backups may remain stored for a limited period under internal technical policies and are then overwritten or deleted in the ordinary course.

17. Third-Party Services and Sub-processors

The Platform may use third-party providers for hosting, cloud infrastructure, email, notifications, payments, analytics, security, backups and support. The Provider is not liable for unavailability, errors, changes, fees or incidents caused exclusively by third-party providers, banks, payment processors, Internet providers, data centres, authorities, external networks or other systems beyond its reasonable control. The list of principal sub-processors is available as provided in the Privacy and Security Policy.

18. Confidentiality

Each party keeps confidential all non-public commercial, technical, financial, operational and legal information received from the other. This does not apply to information that is public, was lawfully known before, was lawfully received from a third party, or must be disclosed by law or at the request of a competent authority. The Provider may access Client Data only as necessary to provide the Platform, give support, maintain security, investigate incidents, comply with law or defend its rights.

19. Intellectual Property

The Platform, software, source code, interface, database structure, design, trademarks, name, logos, texts, documentation, workflows, know-how and related rights belong to the Provider or its licensors. The Client receives only a limited, revocable, non-exclusive, non-transferable and non-sublicensable right to use the Platform for the duration of the subscription. Nothing in these Terms transfers any intellectual property rights to the Client.

20. Warranties and Limitation of Liability

20.1. The Platform is provided "as available". The Provider uses reasonable efforts to maintain availability, security and continuity but does not guarantee uninterrupted, error-free or fully secure operation.

20.2. To the extent permitted by law, the Provider's total aggregate liability arising out of or in connection with the agreement is limited to the fees paid by the Client in the 12 months preceding the event giving rise to the claim.

20.3. The Provider is not liable for indirect or consequential losses, loss of profit, revenue or opportunity, business interruption, reputational damage, losses caused by improper use of the Platform or by acts of the Client, invited users or third-party services, incorrectly entered data, documents generated from incorrect information, incorrect configurations, access wrongly granted, compromised passwords, or business, legal, tax or accounting decisions taken on the basis of Platform data.

20.4. Nothing in these Terms excludes or limits liability that cannot be excluded or limited by law, including liability for intent or gross negligence, for death or personal injury, or mandatory consumer rights.

21. Indemnification

The Client (when acting in a professional capacity) shall indemnify, defend and hold harmless the Provider against claims, losses, fines, costs, expenses, damages or liabilities resulting from: (a) data entered unlawfully or without authorisation; (b) the Client's breach of data protection law; (c) infringement of third-party rights; (d) use of the Platform contrary to these Terms; (e) acts of users invited by the Client; (f) failure to obtain consents, give notices or establish legal grounds for data entered; (g) use of the Platform for illegal, fraudulent or abusive activities.

22. Force Majeure

Neither party is liable for failure or delay caused by events beyond its reasonable control, including natural disasters, war, hostilities, terrorism, pandemics, acts of public authorities, power or telecommunications failures, cyber-attacks despite reasonable protection, and failures of third-party infrastructure. The affected party notifies the other without undue delay and takes reasonable steps to limit the effects. Payment obligations for services already provided are not suspended.

23. Governing Law and International Use

23.1. This agreement is governed by the law of the Republic of Moldova, except for mandatory provisions applicable to Consumers or data subjects in other jurisdictions that cannot lawfully be excluded by contract.

23.2. A Client who uses the Platform outside the Republic of Moldova or enters data about persons in other countries may be subject to additional obligations under local legislation, including data protection, consumer protection, taxation, document archiving, regulated professional services and electronic commerce law. The Client is responsible for verifying and complying with the legislation applicable to its own activity, clients and users.

24. Amendments to the Terms

24.1. The Provider may amend these Terms to reflect legal, technical, commercial, operational or security changes. The current version is always available at https://vault2trust.com/terms.

24.2. Material amendments are notified by email, Platform notification or another reasonable method at least 14 days before they take effect, except urgent amendments required by law, security or Platform operation.

24.3. Continued use after the effective date constitutes acceptance, unless the law requires express consent. For material amendments concerning personal data processing, prices, liability or essential functionalities, the Provider may require re-acceptance by ticking an electronic box. If the Client does not accept, it may terminate before the amendment takes effect.

25. Dispute Resolution

25.1. Disputes shall first be sought to be resolved amicably. Complaints, requests and notices may be sent to [email protected]; the Provider responds within 30 days.

25.2. Where a dispute cannot be resolved amicably, it is submitted to the competent courts of Chișinău municipality, Republic of Moldova, under the law of the Republic of Moldova, except where mandatory provisions applicable to Consumers or data subjects require another jurisdiction.

26. General Provisions

26.1. Entire agreement. These Terms, the Privacy and Security Policy and the documents incorporated by reference constitute the entire agreement between the parties on their subject matter.

26.2. Severability. If a provision is void or unenforceable, the rest remains valid and the provision is replaced by a valid one closest to its purpose.

26.3. Assignment. The Client may not assign its rights or obligations without the Provider's written consent. The Provider may assign the agreement to an affiliate or successor, with notice to the Client.

26.4. No waiver. Failure to exercise a right is not a waiver of it.

26.5. Notices. Notices are validly given by email to the address associated with the account (to the Client) or to [email protected] (to the Provider), or by Platform notification.

27. Contact

For questions, cancellation or refund requests, support requests or complaints:

Email: [email protected]
Office: str. Mihai Viteazul 4, mun. Chișinău, Republic of Moldova
Web: https://vault2trust.com

All operational requests concerning the account, payments, refunds, technical support or access to the Platform must be sent to [email protected]. Personal data requests must be sent to [email protected].