Terms of Service

These terms govern your use of the TrustDeck websites and application (the "Service"). The Service is operated by GRIDOS (Pty) Ltd, registration number 2026/269762/07 ("TrustDeck", "we", "us"). By creating an account, accepting an invitation into a data room, or otherwise using the Service, you agree to them. If you use the Service on behalf of an organisation, you confirm you are authorised to bind that organisation, and "you" includes it.

If you do not agree with these terms, do not use the Service.

TrustDeck provides virtual data rooms: secure workspaces for sharing documents with internal teams and external counterparties, with permissions, watermarking, Q&A workflows, diligence checklists, NDA gating, and tamper-evident audit trails. Features vary by subscription tier as described on the pricing page.

You must provide accurate account information and keep your credentials confidential. You are responsible for activity under your account. We strongly recommend enabling multi-factor authentication, which is available on every tier. Notify us immediately via the contact form if you suspect unauthorised access.

• Pricing is published on the pricing page. Paid plans bill monthly or annually in advance through Paddle, our authorised reseller and Merchant of Record, which handles payment, invoicing, applicable taxes, and refunds for every transaction.
• Annual contracts lock the price for the contract term. For monthly plans, we give at least 60 days’ notice of any price change.
• The free tier requires no payment card. A paid plan begins only when you choose to subscribe.
• Upgrades take effect immediately and are prorated; downgrades take effect at the next renewal.
• You can cancel at any time by contacting us, and cancellation stops future charges. Paid plans are backed by a 30-day money-back guarantee: request a refund within 30 days of any charge and we refund it in full. See our Refund Policy.
• Prices exclude applicable taxes, which are added where required.

You retain all rights to the documents and other content you place in the Service ("Customer Content"). You grant TrustDeck a limited licence to host, process, transmit, and display Customer Content solely to operate and secure the Service. We claim no other rights in it.

You are responsible for Customer Content: that you have the right to upload and share it, that it is lawful, and that sharing it with the counterparties you invite is appropriate. We do not review Customer Content unless required for support (at your request), security, or by law.

You can export Customer Content, metadata, and audit logs at any time. On cancellation, we provide a clean data export within 48 hours.

The Service lets you present NDA templates to counterparties and records acceptance evidence — including a frozen copy of the document as accepted, the acceptor’s identity, IP address, and timestamp.

TrustDeck is not a law firm and provides no legal advice. NDA templates, including any starter content we supply, are working drafts: you are responsible for their terms and enforceability, and we recommend review by your own counsel. Any NDA accepted through the Service is between you and your counterparty; TrustDeck is not a party to it.

People you invite into a data room (lenders, advisors, bidders, investors) access the Service under these terms. You are responsible for deciding what they can see and for the permissions you grant them. Counterparty access can be revoked or time-limited by your workspace administrators at any moment.

You must not, and must not permit anyone to:

• Use the Service for unlawful purposes or to store or share unlawful content.
• Upload malware or content designed to compromise the Service or its users.
• Infringe the intellectual property, confidentiality, or privacy rights of others.
• Attempt to access another customer’s workspace, probe or circumvent security controls, or test the platform without written authorisation.
• Resell or white-label the Service without an agreement that permits it.
• Place disproportionate load on the platform or interfere with other customers’ use.

We may suspend access that we reasonably believe breaches this section, and will tell you why unless the law prevents it. Suspected vulnerabilities should be reported under our responsible disclosure process.

Our Privacy Policy explains how we handle personal data. Where your organisation is a controller of personal data processed in the Service, our Data Processing Agreement applies.

TrustDeck and its licensors own the Service — the software, design, templates we author, and documentation. These terms grant you a non-exclusive, non-transferable right to use the Service for your internal business purposes during your subscription; they transfer no ownership.

If you send us feedback or suggestions, we may use them without restriction or obligation.

Each party will protect the other’s confidential information with at least the care it applies to its own, and use it only as needed to perform under these terms. This obligation survives termination. Nothing here limits the operation of any separate NDA between you and your counterparties.

You may stop using the Service and cancel at any time. We may suspend or terminate your access for material breach of these terms, where required by law, or for non-payment after notice.

After termination, we provide the 48-hour data export described above. Audit logs and NDA acceptance evidence may be retained for up to 7 years after the workspace closes, reflecting their evidentiary purpose, after which they are deleted.

The Service is provided "as is" and "as available". Except as expressly stated in these terms or required by law, we make no warranties — express or implied — including fitness for a particular purpose and non-infringement. Uptime commitments and service-level remedies apply only where set out in an Enterprise agreement.

To the maximum extent the law allows: neither party is liable for indirect, incidental, special, or consequential damages, or for loss of profits, revenue, or data; and each party’s total aggregate liability under these terms is limited to the fees paid or payable by you for the Service in the 12 months before the event giving rise to the claim.

Nothing in these terms excludes liability that cannot lawfully be excluded, including liability for fraud or for death or personal injury caused by negligence.

You will indemnify TrustDeck against third-party claims arising from Customer Content or your breach of the "Acceptable use" or "Your content" sections, except to the extent the claim results from our own breach of these terms.

We may update the Service and these terms. Material changes to the terms are announced by email or in-app notice at least 30 days before they take effect; continued use after that date constitutes acceptance. We will not retroactively reduce commitments you have already paid for.

These terms are governed by the laws of South Africa, without regard to conflict-of-law rules, and disputes are subject to the exclusive jurisdiction of the South African courts. Enterprise agreements may specify a different governing law and forum in the order form.