TracePlot Terms of Service

Last updated: April 5, 2026

These Terms of Service ("Terms") are a binding agreement between Ed4.One Corp, the operator of the TracePlot service ("TracePlot", "we", "us", or "our"), and the business customer that creates an account, accepts these Terms, or places an order for the Service ("Customer" or "you").

If you accept these Terms on behalf of a company or other legal entity, you represent that you have authority to bind that entity.

Plain-Language Summary

This summary is here to help you read the Terms. The full Terms below control if there is any conflict.

TracePlot is B2B software for due diligence workflows under the EU Deforestation Regulation, Regulation (EU) 2023/1115 (the "EUDR"). It helps collect supplier data, map plots, assess deforestation risk using satellite and other data, generate reports, prepare due diligence statement records, support the EU Trade Control and Expert System ("TRACES") where available, and keep compliance records.
TracePlot is a decision-support tool. It does not give legal advice, certify compliance, or guarantee that any product, shipment, supplier, plot, or filing complies with law. You remain responsible for your data, due diligence decisions, and filings.
Customer Data stays yours. We use it to provide, secure, support, and improve the Service, and any externally shared analytics or benchmarks use only aggregated or de-identified data.

Commercial Snapshot

Term and renewal: Your plan runs for the term in your Order Form and renews automatically unless cancelled in time.
Billing: Subscription fees are billed in advance. Usage-based fees are billed in arrears unless your Order Form says otherwise.
Refunds: Fees are generally non-refundable except where the law or an Order Form says otherwise.
Cancellation: You can cancel or choose not to renew using the billing workflows we provide. We will not require more than 2 months' notice.
If we end the Service for convenience: We will give 90 days' notice and refund any prepaid subscription fees covering the terminated remainder of the current subscription term.
Export after cancellation: You will have at least 30 days to export your data after a paid subscription ends.
Archive retention: If you use a compliance-record archive workflow, some records may need to be kept for legal or recordkeeping reasons even after cancellation.
Service levels: Any uptime target, support-response commitment, or service credits apply only if they are expressly stated in an Order Form or separate SLA.
Liability cap: Liability is limited as described in Section 17.

1. Who These Terms Apply To

TracePlot is offered only to businesses, government bodies, nonprofits, and other organizations acting in a professional capacity.
You must provide accurate company, billing, and contact information and keep it up to date.
Your account is for your legal entity. You may not share one paid account across unrelated legal entities unless we agree otherwise in writing.
You are responsible for all activity under your account, including activity by employees, contractors, invited users, API clients, and supplier portal users linked to your account.

2. Definitions

For these Terms:

"Customer Data" means data, files, documents, geolocation data, plot boundaries, supplier information, and other content submitted to the Service by or for Customer.
"DDS" means a due diligence statement prepared for EUDR workflows.
"EUDR" means Regulation (EU) 2023/1115 on deforestation-free products, together with related implementing acts, guidance, and official systems, as updated from time to time.
"Order Form" means an order, checkout flow, or other commercial document that sets pricing, plan, billing cycle, or other commercial terms.
"Output" means reports, dashboards, alerts, classifications, risk scores, suggested records, and other results generated by the Service from Customer Data and third-party data sources.
"Service" means the TracePlot platform, website, dashboards, APIs, supplier portal, reports, and related support and documentation we make available to Customer.
"Supplier Portal" means the part of the Service used by Customer's suppliers or other upstream participants to submit or confirm data for Customer's workflows.
"TRACES" means the EU Trade Control and Expert System or any successor government system used for relevant EUDR workflows.
"User" means an individual authorized by Customer to use the Service.

3. The Service

The Service is designed to help Customers collect and organize supply-chain data, map plots, assess deforestation risk using satellite and other data sources, generate reports, prepare DDS records, support TRACES submissions where available, and maintain compliance records.
The Service may include self-service features, APIs, supplier workflows, document generation, exports, and integrations with third-party systems.
We may improve, update, modify, or discontinue features from time to time. If we make a material change that significantly reduces core functionality for a paid plan, we will use reasonable efforts to give advance notice.
Some parts of the Service depend on third-party providers and public systems, including payment processors, email providers, satellite-data providers, and TRACES. We are not responsible for outages or failures of those external systems.
Any uptime commitment, service credit, or support-response commitment applies only if it is expressly stated in an applicable Order Form or separate service level agreement.

4. Accounts, Supplier Access, and Security

You must keep login credentials and API keys confidential and use reasonable security measures to protect them. Each User must use their own login unless we expressly allow shared operational credentials in writing.
You must promptly notify us through the security contact listed in the applicable Order Form, account settings, or on the TracePlot website if you suspect unauthorized access, credential compromise, or misuse of your account.
We maintain reasonable technical and organizational measures designed to protect the Service and Customer Data against unauthorized access, disclosure, alteration, and destruction.
If you use the Supplier Portal, you are responsible for inviting suppliers, deciding what information to request from them, and ensuring you have a lawful basis and appropriate authority to collect, upload, and use that information in connection with the Service.
Supplier submissions through the Supplier Portal are made on your behalf and are treated as Customer Data unless separate portal terms expressly say otherwise.
We do not independently verify supplier-submitted GPS coordinates, plot boundaries, or other supplier-submitted information.
We may require supplier portal users to accept supplemental click-through terms that govern their use of the Supplier Portal. Those terms do not replace Customer's responsibilities under these Terms.
We may suspend or restrict access if necessary to prevent security incidents, protect the Service, stop unlawful conduct, or address a material breach of these Terms.

5. Free Trials and Beta Features

If we offer a free trial, it is limited to one trial per legal entity unless we agree otherwise.
Trials and beta features may have usage limits, feature limits, or expiration dates shown during signup or in the product.
Trials and beta features are provided "as is" and without any service level commitment.
We may modify or end a trial or beta feature at any time.
A free trial does not automatically convert into a paid subscription unless Customer affirmatively chooses a paid plan.
Unless we say otherwise during signup, trial data may be kept for up to 30 days after the trial ends so Customer can convert to a paid plan, after which it may be deleted under our normal deletion cycle unless law requires longer retention.

6. Fees, Billing, and Payment

Fees, billing cycle, and usage limits are stated in the applicable Order Form, checkout flow, or pricing page in effect when you subscribe.
Unless the applicable Order Form says otherwise:
- subscription fees are billed in advance;
- usage-based fees are billed in arrears; and
- invoices are due within 30 days of issue.
Payments may be processed by Stripe or another payment provider we designate. By paying through a third-party processor, you also agree to that processor's applicable terms.
Fees are exclusive of VAT, GST, sales tax, withholding tax, and similar taxes. You are responsible for those taxes except taxes based on TracePlot's net income.
Except as required by law or expressly stated in these Terms, fees are non-refundable.
If payment fails or an invoice becomes overdue, we may retry payment, charge lawful late fees or interest, suspend access after notice, or downgrade the Service until payment is made.
We may change pricing with at least 30 days' notice before the change takes effect. Price changes apply at the next renewal or next billing period after the notice period.
You must notify us in writing of a good-faith billing dispute within 30 days after the invoice date or charge date. Undisputed amounts remain payable when due.
We will provide export functionality in standard, machine-readable formats that we make generally available and will not impose technical barriers or punitive switching fees that prevent you from moving your data to another provider, to the extent prohibited by applicable law.

7. Customer Responsibilities

Customer is responsible for:

the accuracy, legality, completeness, and timeliness of Customer Data and supplier-provided data;
obtaining all rights, consents, and permissions needed to upload or use Customer Data in the Service;
maintaining the internal due diligence, review, and approval processes needed to use the Service;
reviewing elevated-risk, flagged, or uncertain cases before relying on them;
reviewing each due diligence statement before submission and confirming that it is complete and accurate;
complying with the EUDR, other applicable laws, and any industry-specific obligations that apply to your business.

If Customer is an "operator" or "trader" as those terms are used in the EUDR, those legal obligations remain Customer's, including the obligations in Articles 3, 4, 9, and 12 and any successor or implementing rules.

8. Acceptable Use

You must not, and must not allow others to:

use the Service for unlawful, fraudulent, deceptive, or misleading activity;
upload malware, malicious code, or content that interferes with the Service;
reverse engineer, decompile, copy, scrape, or attempt to extract source code or underlying models except to the limited extent that applicable law prohibits this restriction;
share credentials or API keys in an unauthorized way;
use the Service to fabricate compliance records, misrepresent compliance status, or submit information you know is false;
use the Service in connection with sanctioned parties, prohibited goods, bribery, corruption, or violations of export-control laws;
exceed rate limits or use automated access outside documented and authorized API use; or
resell, sublicense, or use the Service to build a competing product without our prior written consent.

We may suspend or terminate access immediately for serious violations of this section.

9. API Terms

If we provide API access to Customer:

API access is limited to the scope, permissions, documentation, and rate limits we specify.
API keys are confidential and may not be shared outside Customer's organization except as expressly authorized by us.
We may throttle, suspend, rotate, revoke, or otherwise manage API credentials if needed to protect the Service, investigate misuse, or enforce rate limits.
We may modify or deprecate API endpoints from time to time. For material breaking changes, we will use reasonable efforts to give prior notice.
Customer may not use the API to replicate, repackage, or commercially substitute the Service or to build a competing product without our prior written consent.

10. Compliance Boundaries

TracePlot is a decision-support tool designed to assist Customers with EUDR due diligence workflows. It does not replace Customer's own legal, regulatory, or compliance obligations.

In particular:

TracePlot does not provide legal advice.
TracePlot does not certify that a plot, shipment, supplier, commodity, or due diligence statement is compliant with the EUDR or any other law.
TracePlot does not take on the legal responsibilities that the EUDR places on operators or traders.
TracePlot does not guarantee that a regulator, auditor, customer, or other third party will agree with an Output or accept Customer's records.
TracePlot does not guarantee that a due diligence statement prepared or transmitted through the Service will be accepted by TRACES or any other government system.

Customer remains responsible for its own due diligence judgments and legal compliance, including:

deciding whether to source, place, make available, or export a product;
determining whether additional checks, documents, or mitigation steps are needed;
determining whether Customer's due diligence is sufficient under applicable law.

11. Satellite Data and Analysis Limitations

The Service may use publicly available satellite imagery and related data sources, including modified Copernicus Sentinel data.
Where required, reports and other Output may include source attribution such as "Contains modified Copernicus Sentinel data 2026" or equivalent year-specific wording.
Satellite and automated analysis has inherent limitations. Results can be affected by cloud cover, haze, smoke, image resolution, seasonal effects, timing gaps between observations, data-source interruptions, plot-boundary errors, and false positives or false negatives in classification.
Risk scores, flags, confidence scores, and similar Output are informational indicators based on the data and methodology available at the time of assessment. They are not guarantees or final legal determinations.
We use commercially reasonable efforts to improve our methods, but we do not warrant that any assessment is error-free, complete, or fit for a particular regulatory outcome.
We may update our methodologies, models, algorithms, and data sources over time. As a result, risk scores and other Output may change over time for the same or similar inputs. If we make a material methodology change that is reasonably likely to affect customer workflows, we will use reasonable efforts to provide notice.
Copernicus and similar public data sources may be provided without express or implied warranty, including warranties of quality or fitness for a particular purpose. TracePlot does not provide any broader warranty than those data sources themselves provide.

12. TRACES and Other Third-Party Systems

The Service may help prepare data for TRACES or, where supported, transmit data to TRACES.
TRACES and other third-party systems are operated outside TracePlot's control. We are not responsible for downtime, API changes, validation errors, rejection of a submission, or delayed processing by authorities or third-party providers.
You are responsible for reviewing each submission and confirming whether it was successfully received and accepted.

13. Data Ownership, Licenses, and Privacy

As between the parties, Customer owns Customer Data.
TracePlot owns the Service, including the software, interfaces, APIs, documentation, algorithms, models, workflow design, and all related intellectual property rights.
Subject to these Terms, we grant Customer a limited, non-exclusive, non-transferable right to access and use the Service during the subscription term for Customer's internal business purposes.
Subject to these Terms, Customer may use reports and other Output generated for its own data for internal business, audit, and compliance purposes. TracePlot retains all rights in the underlying methodologies and platform IP.
Customer grants TracePlot a worldwide, non-exclusive license to host, process, transmit, analyze, and otherwise use Customer Data as necessary to provide, secure, support, and improve the Service and to comply with law.
We may use data derived from Customer Data only in aggregated or de-identified form that does not identify Customer, individual users, suppliers, or specific plots as belonging to Customer. We may use that data to improve the Service, produce analytics or benchmarks, and test, validate, or improve our models and workflows. We do not use Customer names, supplier identities, or identifiable plot records in externally shared analytics or benchmarks.
Supplier data submitted through the Supplier Portal is treated as Customer Data. Customer is responsible for its suppliers and for the authority to collect and submit that data.
If TracePlot processes personal data on Customer's behalf, the applicable data processing agreement ("DPA") provided by TracePlot is incorporated by reference and forms part of the agreement between the parties. The DPA governs processor obligations, subprocessors, security measures, cross-border transfers, breach notification, and deletion or return of personal data.
Customer is responsible for determining whether Customer Data includes personal data and for ensuring it has a lawful basis to collect, upload, share, and instruct TracePlot to process that data.

14. Data Export, Retention, and Deletion

This section explains the normal post-cancellation timeline for Customer Data.

Export window. When a paid subscription ends, Customer will have at least 30 days to export Customer Data in standard, machine-readable formats that we make generally available. During that period, we may provide read-only access or another reasonable export workflow.
Active-system deletion. After the export period ends, we may deactivate the account. We generally delete Customer Data from active systems within 90 days after the export period ends, unless a longer period is needed for security, fraud prevention, legal hold, or documented technical recovery processes.
Limited system retention. Ordinary backups, security logs, billing records, fraud-prevention records, and legal-hold copies may remain for the period required by law or our standard recovery and security processes.
Restricted archive. We may keep a restricted, read-only archive of compliance-related records, such as audit trails, plot data, risk assessments, and due diligence statements, only where:
- Customer has enabled or purchased TracePlot's compliance-record retention workflow;
- Customer has instructed us to keep those records under the DPA or another written agreement;
- retention is required by law; or
- retention is reasonably necessary to establish, exercise, or defend legal claims.
If none of those circumstances applies, we will not keep a separate compliance archive after the active-system deletion process described above.
Archive duration. If compliance-related records are archived to support EUDR-style recordkeeping, we will generally keep that archive for up to 5 years from the date the relevant record was created, unless a longer period is required by law, legal hold, or written agreement. Archived records are not part of the full live product experience and may be available only through a limited export or support workflow.
Early deletion requests. If Customer asks us to delete archived compliance-related records before the applicable retention period ends, we may refuse where retention is legally required or where we are contractually required to keep the archive for the agreed service. If earlier deletion is legally permitted and operationally feasible, we may honor the request after warning Customer that deletion may affect Customer's own recordkeeping and compliance obligations.

15. Confidentiality

Each party may receive non-public information from the other that is marked confidential or that a reasonable person would understand to be confidential.
The receiving party will use that information only to perform or receive the Service and will protect it with reasonable care.
These obligations do not apply to information that is publicly available without breach, was already known without restriction, was independently developed, or was lawfully received from a third party without confidentiality obligations.
We may disclose Customer information if required by law, court order, or a competent authority. Where legally permitted, we will use reasonable efforts to notify Customer first.
This section survives termination for 3 years, except for trade secrets, which remain protected for as long as they qualify as trade secrets under applicable law.

16. Warranties Disclaimer

Except where we expressly promise something in these Terms, an applicable Order Form, or a separate service level agreement, the Service is provided "as is" and "as available."

To the maximum extent permitted by law, TracePlot disclaims all implied warranties, including implied warranties of merchantability, fitness for a particular purpose, title, non-infringement, and any warranty that the Service will be uninterrupted, error-free, or achieve a particular compliance, commercial, or regulatory result.

17. Liability Limits

This section limits each party's financial exposure under these Terms.

To the maximum extent permitted by law, TracePlot's total aggregate liability arising out of or related to the Service or these Terms will not exceed the total fees paid by Customer to TracePlot for the Service in the 12 months immediately before the event giving rise to the claim.
If Customer used only a free trial and paid no fees, TracePlot's total aggregate liability is limited to EUR 100.
To the maximum extent permitted by law, neither party will be liable for indirect, incidental, special, consequential, exemplary, or punitive damages, or for loss of profits, revenue, goodwill, business opportunity, anticipated savings, or business interruption.
TracePlot is not liable for regulatory fines, penalties, product holds, confiscation, market exclusion, customs delays, procurement consequences, or similar enforcement outcomes imposed on Customer or any affiliate, supplier, or customer.
Nothing in this section limits or excludes liability to the extent that the limitation or exclusion is prohibited by applicable law, including liability for fraud, fraudulent misrepresentation, willful misconduct, gross negligence, or death or personal injury caused by negligence where those liabilities cannot be limited or excluded by law.
Some Order Forms, DPAs, or separate agreements may apply different liability rules for confidentiality, data protection, intellectual property, or other specifically negotiated topics. If so, those terms control for that subject matter.
This section does not limit Customer's obligation to pay fees owed under these Terms.

18. Indemnities

Customer will defend, indemnify, and hold harmless TracePlot and its affiliates, officers, employees, and contractors against third-party claims, damages, fines, penalties, and costs (including reasonable legal fees) arising out of or related to:
- Customer Data or supplier-submitted data;
- Customer's breach of these Terms or violation of law;
- Customer's inaccurate, misleading, or unlawful due diligence statements or other regulatory filings;
- Customer's misrepresentation of compliance status; or
- Customer's use of the Service or any Output in a manner inconsistent with these Terms or applicable law.
TracePlot will defend Customer against third-party claims that the Service, excluding Customer Data and third-party materials, directly infringes that third party's intellectual property rights. TracePlot will pay resulting damages finally awarded by a court or agreed in settlement by TracePlot, provided that Customer promptly notifies TracePlot of the claim, allows TracePlot to control the defense and settlement, and reasonably cooperates.
TracePlot will have no obligation under this section for claims arising from Customer Data, Customer instructions, combinations not provided by TracePlot, or use of the Service in violation of these Terms.
If the Service becomes, or we reasonably believe it may become, the subject of an infringement claim, we may modify the Service, obtain a license, or terminate the affected part of the Service and refund prepaid fees for the unused remainder of the affected term.

19. Term, Renewal, Suspension, and Termination

Your subscription starts when you accept these Terms or place an order and continues for the term stated in the applicable Order Form.
Unless an Order Form says otherwise, subscriptions renew automatically for successive terms equal to the initial term.
Customer may cancel by giving notice through the account settings, billing workflow, or the billing contact listed in the applicable Order Form or on the TracePlot website. We will not require more than 2 months' notice to terminate or not renew.
Unless an Order Form says otherwise, cancellation takes effect at the end of the then-current billing term after the applicable notice period.
We may suspend or terminate the Service immediately if Customer:
- fails to pay undisputed fees after notice and a reasonable opportunity to cure;
- materially breaches these Terms and does not cure the breach within 30 days after notice;
- uses the Service in a way that threatens security, availability, or legal compliance; or
- becomes insolvent, enters bankruptcy proceedings, or ceases business operations.
We may also terminate the Service for convenience on 90 days' written notice. If we do, we will refund any prepaid subscription fees covering the terminated remainder of the then-current subscription term.
On termination, Customer's right to use the Service ends, except for any limited export access or workflow we provide under Section 14. Sections 7, 10 through 18, 21, and 22, and any provisions that by their nature should survive, will survive.
Termination does not relieve Customer of fees owed for the period before termination takes effect.

20. Changes to the Terms

We may update these Terms from time to time.
If we make a material change, we will give notice by email, in-product notice, or both at least 30 days before the change takes effect, unless a shorter period is required to comply with law or address a security risk.
If Customer does not agree to a material change that has a significant adverse effect on Customer, Customer may terminate the affected subscription before the change takes effect by notifying us in writing.
Continued use of the Service after the effective date of updated Terms means Customer accepts the updated Terms.

21. Governing Law and Disputes

Unless an applicable Order Form or other written agreement between the parties states otherwise, these Terms and any dispute arising out of or related to them are governed by the laws of the state of incorporation of Ed4.One Corp, excluding its conflict-of-laws rules.
Unless an applicable Order Form or other written agreement between the parties states otherwise, the state or federal courts located in the state of incorporation of Ed4.One Corp will have exclusive jurisdiction over disputes arising out of or related to these Terms, except that either party may seek injunctive or equitable relief in any court with competent jurisdiction to protect confidential information or intellectual property rights.
Before filing a claim, each party will use reasonable efforts to resolve the dispute informally by sending notice to the other party and allowing at least 30 days for discussion.

22. General Terms

Force majeure. Neither party is liable for delay or failure caused by events beyond its reasonable control, including natural disasters, war, civil unrest, labor disputes, internet outages, sanctions, government action, satellite-data interruptions, or TRACES outages or changes.
Assignment. Customer may not assign these Terms without TracePlot's prior written consent, except in connection with a merger or sale of substantially all of Customer's assets. TracePlot may assign these Terms in connection with a merger, reorganization, or sale of substantially all of its assets.
Notices. Legal notices to TracePlot must be sent to legal@traceplot.com unless the applicable Order Form or checkout flow lists a different legal notice contact. We may send notices to the email address associated with Customer's account.
Entire agreement. These Terms, the applicable Order Form, any incorporated service level agreement, and the applicable DPA are the entire agreement between the parties about the Service and replace prior discussions or agreements on the same subject.
Order of precedence. If there is a conflict, the Order Form controls over these Terms, and the DPA controls for personal-data processing issues.
Severability. If any provision is unenforceable, the rest of the Terms remain in effect, and the unenforceable provision will be enforced to the maximum extent permitted by law.
No waiver. A failure to enforce any provision is not a waiver.
Independent contractors. The parties are independent contractors. These Terms do not create a partnership, agency, fiduciary, or employment relationship.

Contact

For legal notices or questions about these Terms, email legal@traceplot.com or support@traceplot.com.

The TracePlot contracting entity is Ed4.One Corp. If Customer needs current formal-notice instructions or a postal notice address, contact legal@traceplot.com.