Terms of Service

This annex forms part of the agreement between the company identified when the service is set up (the Client) and Amunt Software S.L., tax ID B-24773137, Calle Diputacio, 276, P. 1 Pta. 1, 08009 Barcelona, Spain, contact info@amunt.app (Amunt). The person accepting for the Client declares that they are authorised to represent it.

For personal data the Client introduces or manages for its corporate purposes, the Client is the controller and Amunt the processor. If the Client is itself a processor, it declares that it is authorised to appoint Amunt as a subprocessor and will convey the applicable instructions and obligations. Amunt separately acts as controller for its own purposes, including managing the contractual relationship, billing and legal compliance, as described in the privacy policy.

This annex prevails over incompatible general terms concerning processing on the Client’s behalf. It does not restrict data subjects’ rights, authorities’ powers or mandatory GDPR obligations or liability, and does not amend standard contractual clauses applicable to international transfers.

Purpose: provide cap-table, funding round, document and requested operation management, including the assistant when used.

Operations: collection, recording, organisation, consultation, calculation, storage, updating, transmission to authorised providers, return and erasure according to instructions.

Data subjects: shareholders, investors, directors, representatives, signatories, contacts and authorised users whose data the Client manages.

Data: identity and contact details; tax identifiers; roles and representation; equity holdings, contributions, round and negotiation terms; documents, signature statuses and audit trails; messages and tool results requested by the user.

Duration: provision of the service and the period needed to end it under section 8. Special-category data under Article 9 and criminal-offence data under Article 10 GDPR are excluded from intended use unless specifically agreed beforehand with appropriate safeguards.

The beta assistant retrieves records, calculates scenarios using the user’s assumptions and prepares operations. It does not provide personalised legal, tax, accounting or investment advice or make autonomous decisions about people. Human review and application permissions remain necessary; a simulation does not establish an operation’s legal validity.

The agreement, this annex, feature settings and operations requested by authorised users are documented instructions, including necessary transmissions to authorised subprocessors. Additional instructions must be sent in writing to Amunt’s contact. Amunt will immediately inform the Client if it considers an instruction unlawful and suspend its execution while it is clarified.

The Client establishes a valid legal basis, provides the required information to data subjects and limits data to what is necessary. Consent is not the only possible legal basis. Using the assistant does not authorise unrelated purposes or training general models on the data.

Amunt processes data only on documented instructions unless applicable law requires otherwise, in which case it will inform the Client beforehand unless the law prohibits this on important public-interest grounds.

Amunt limits access to authorised persons bound by confidentiality and maintains technical and organisational measures appropriate to risk: account, company and role access controls; credential management; communications protection; logical isolation; operation logs; vulnerability and incident management; and availability, recovery and regular assessment mechanisms. Their implementation will be documented and made available to the Client. No end-to-end encryption is promised for content the model must process.

The assistant uses the user’s permissions. Operations requiring confirmation remain subject to the application’s permissions mechanism. It does not send third-party communications, sign or pay for the Client. Assistant safeguards do not replace service-wide security obligations.

The Client generally authorises the subprocessors identified in the service provider register with their purposes and locations. The initial list is in section 10. They participate only in functions contracted or used.

Amunt will impose substantially equivalent data-protection obligations and remains responsible to the Client for the subprocessor’s compliance.

Amunt will give written notice of intended additions or replacements sufficiently in advance to allow a reasoned data-protection objection before the new processing. It will seek a reasonable alternative in response. If unresolved, it will not submit the Client’s data to that new subprocessor and will allow termination of the affected function, or the service if inseparable. A silent website update does not replace this notice.

Amunt will make transfers subject to GDPR Chapter V only under an applicable mechanism: an adequacy decision within its scope, standard contractual clauses or another lawful safeguard. Where required, it will document the transfer assessment and supplementary measures. The Client’s authorisation to use the service does not replace those safeguards.

The integrated assistant uses Anthropic’s commercial API. Contracting with Anthropic Ireland, Limited does not guarantee EU-only processing: US storage, global inference and access by entities or providers in other countries may occur. The privacy policy and provider register detail that processing. Necessary messages and query results sent for a task may identify people.

Anthropic’s commercial terms exclude model training on this content. Its retention is separate from Amunt’s: the commercial API regime normally allows up to 30 days, with documented security, legal, model or feature exceptions. Zero retention is not promised. Deleting an Amunt conversation does not instantly erase copies lawfully retained by the provider. Amunt will handle applicable deletion instructions and explain specific legal limitations, without using this provision to authorise indefinite retention.

External agents connected by a user of the Client follow the instructions and relationship of the Client or that user with their provider; they are not subprocessors of Amunt and are distinct from Anthropic as subprocessor of the integrated assistant. Any user with access to the company, including a read-only role, can connect one: the agent acts with that user’s permissions and can transmit to its provider the company data that user sees. With write access it changes records without the confirmation the integrated assistant asks for, although it cannot send communications to third parties, sign, pay, or issue or transfer shares by hand either. The Client decides which users it authorises, with which role, and whether they may connect external agents; Amunt does not yet offer a control to disable them per company.

Amunt will forward rights requests concerning this processing to the Client without undue delay and help it respond through appropriate measures. It will not decide on them independently except under instruction or a legal duty.

Amunt will notify the Client without undue delay of personal-data breaches it becomes aware of, with available information on their nature, affected people and records, consequences, measures and contact. It may provide information in stages and will not wait for a completed investigation before the first notice.

Considering the nature of processing and the information available, Amunt will assist with GDPR Articles 32–36, including impact assessments and prior consultation when required. This annex does not declare every use of the service to require an impact assessment.

At the end of processing, Amunt will return or erase the data at the Client’s choice and erase copies unless EU or Member State law requires retention. It will agree and document the procedure and timetable with the Client and confirm completion. Data subject to mandatory retention will be isolated and restricted to that purpose for the applicable period.

Closing an individual’s account does not end the company’s processing arrangement or erase records it must keep. Conversely, a technically immutable corporate ledger is not in itself a legal basis for indefinite retention: limitations must be justified and rights addressed according to law.

Assistant conversations in Amunt are erased after 90 days of inactivity under its policy, or through available deletion mechanisms. This period does not replace termination instructions or the AI provider’s separate retention regime.

Amunt will provide the information needed to demonstrate Article 28 compliance and allow and contribute to audits and inspections by the Client or an authorised auditor. It may organise them proportionately, protecting security and other clients’ confidentiality, without hollowing out that right or obstructing an authority’s requirements. Independent reports may be evidence but do not automatically exempt liability.

This initial list identifies authorised providers and functions. The privacy policy supplements information on locations and processing; the Client may request the operational register and applicable contractual information at info@amunt.app.

Vercel — hosting and application execution. Neon — database; Frankfurt region stated in the privacy policy. Cloudflare R2 — service files, with documents in private storage. Resend — transactional communications when sent. Anthropic Ireland, Limited — integrated assistant API, international processing described above and its own subprocessors under its DPA. Signaturit Solutions, S.L. — electronic signatures when the Client uses that integration. Sentry / Functional Software — service error diagnosis with minimised content.

Product analytics and billing are classified by their actual purposes in the privacy policy, not automatically included in this processing arrangement because an external provider is used. Anthropic’s subprocessor list does not make all of them Amunt’s direct providers.