Terms of Service

01 Acceptance of Terms

By creating an account, uploading files, or otherwise using NodalDoc ("the Service"), you enter into a binding agreement with NodalDoc AS, reg. no. [ORG-NR], with its registered address in Norway. These Terms apply in addition to our Privacy Policy and any supplemental terms for paid plans.

If you are using the Service on behalf of a company or other legal entity, you represent that you have the authority to bind that entity to these Terms.

02 Age Requirement and Legal Capacity

The Service is not intended for children under the age of 16. In jurisdictions where applicable law sets a higher age threshold for the processing of personal data — including 18 years in certain regions — the higher age requirement applies.

If we become aware that a user is below the applicable age threshold, the account will be deleted and personal data removed without undue delay in accordance with GDPR Article 17.

03 Account Registration and Security

You are responsible for providing accurate and complete information upon registration and for keeping that information up to date. You are responsible for safeguarding your password and for all activity that occurs under your account.

You must notify us immediately at security@nodaldoc.io if you suspect any unauthorised access to your account. NodalDoc cannot be held liable for any loss resulting from unauthorised use of your account.

04 Permitted Use

The Service is intended for the lawful storage, sharing, and collaboration on documents and files. You agree to use the Service only in compliance with applicable law in your jurisdiction, these Terms, and generally accepted standards of professional conduct.

05 Prohibited Content and Conduct

It is strictly prohibited to use the Service to upload, share, distribute, or otherwise make available:

• Content that infringes third-party copyright, trademark rights, patents, trade secrets, or other intellectual property rights.
• Child sexual abuse material (CSAM) or content that promotes the sexual exploitation of minors — such content will result in immediate reporting to the relevant authorities.
• Hate speech, threats, or content that incites violence against individuals or groups based on race, ethnicity, religion, gender, sexual orientation, nationality, or disability.
• Malware, viruses, ransomware, spyware, or any other malicious code.
• Content that is unlawful under Norwegian law, EU law (including the Digital Services Act), the DMCA, or other applicable international regulations.
• Files containing personal data of third parties without a lawful basis for their processing.
• Spam, bulk unsolicited communications, or phishing material.

Violations of these prohibitions will result in immediate account suspension and may be reported to law enforcement or other relevant authorities.

06 Copyright and Intellectual Property

You retain all rights to the content you upload ("User Content"). By uploading content, you grant NodalDoc a limited, non-exclusive, worldwide, royalty-free licence to store, reproduce, and display that content solely to the extent necessary to provide the Service.

This licence terminates when you delete the content or close your account, unless the content has been shared with other users who still have access to it.

The Service's software, design, branding, and all other content developed by NodalDoc is protected by copyright and belongs to NodalDoc AS. No part of the Service may be copied, reproduced, or redistributed without prior written consent.

07 Moderation, Notice-and-Takedown, and DSA

NodalDoc is an intermediary service ("hosting provider") within the meaning of the EU Digital Services Act (DSA) and the Norwegian Electronic Commerce Act. We do not pre-screen user-uploaded content, but we are committed to acting promptly upon notification of illegal content.

To report illegal content (DMCA, copyright infringement, DSA notices), please submit a written request to:

A valid DMCA notice must include: (i) identification of the copyrighted work claimed to have been infringed; (ii) identification of the allegedly infringing material and its URL; (iii) your contact information; (iv) a statement of good-faith belief; and (v) your signature. We will process notices without undue delay and notify the affected user unless legally prohibited from doing so. Repeat infringers will be permanently banned.

08 Privacy and Processing of Personal Data (GDPR / CCPA)

NodalDoc AS is the data controller for personal data you provide. All processing takes place in accordance with the EU General Data Protection Regulation (GDPR) and — for users in California — the California Consumer Privacy Act (CCPA/CPRA).

We process the following categories of personal data:

• Identity data: name, email address, profile picture.
• Technical data: IP address, browser type, device identifiers, log data.
• Usage data: interactions with the Service, upload history, timestamps.
• Payment data (processed by a third-party payment provider — we do not store card numbers).

The legal bases for processing are: (a) performance of a contract (GDPR Art. 6(1)(b)); (b) legitimate interests for security and abuse prevention (Art. 6(1)(f)); (c) your consent for marketing communications (Art. 6(1)(a)). We do not transfer personal data to third countries without adequate safeguards (Standard Contractual Clauses or equivalent).

For full details, please see our Privacy Policy.

09 Your Rights as a Data Subject

Under the GDPR you have the following rights, which you may exercise by contacting privacy@nodaldoc.io:

• Right of access (Art. 15) — You may request a copy of the personal data we hold about you.
• Right to rectification (Art. 16) — You may request that inaccurate data be corrected.
• Right to erasure ("right to be forgotten") (Art. 17) — You may request deletion of your data, unless we have a legal obligation to retain it.
• Right to restriction (Art. 18) — You may request that processing be restricted in certain circumstances.
• Right to data portability (Art. 20) — You may request your data in a machine-readable format.
• Right to object (Art. 21) — You may object to processing based on legitimate interests.
• Right to withdraw consent — Where consent is the legal basis, you may withdraw it at any time without affecting the lawfulness of prior processing.

California users additionally have the right to know whether personal data is sold (we do not sell personal data) and the right to non-discrimination for exercising CCPA rights.

You have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet, datatilsynet.no) or your local supervisory authority if you believe we have processed your data in breach of the GDPR.

10 Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, and destruction, including encryption in transit (TLS) and at rest, access controls, and regular security audits.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay in accordance with GDPR Article 34. Notification to the supervisory authority will occur within 72 hours of becoming aware of the breach.

11 Service Availability and Changes

We strive for high availability but do not guarantee uninterrupted service. We reserve the right to modify, suspend, or discontinue all or part of the Service with reasonable notice. For paid plans, we will provide at least 30 days' notice of material changes or discontinuation and offer a pro-rated refund where applicable.

12 Limitation of Liability

NodalDoc is a passive hosting provider and does not pre-screen User Content. To the fullest extent permitted by applicable law, NodalDoc disclaims all liability for indirect, incidental, or consequential damages, including loss of profits, loss of data, or loss of goodwill, arising from your use of — or inability to access — the Service.

This limitation does not apply to damages caused by gross negligence or wilful misconduct, personal injury, or where applicable law does not permit limitation of liability.

13 Indemnification

You agree to indemnify and hold harmless NodalDoc AS, its employees, directors, and suppliers from and against any claims, losses, liabilities, costs, and expenses (including reasonable legal fees) arising from (a) your User Content, (b) your use of the Service in breach of these Terms, or (c) your infringement of any third-party rights.

14 Termination and Account Deletion

You may delete your account at any time via account settings or by contacting support@nodaldoc.io. Upon deletion, your personal data will be erased within 30 days, except for data we are legally obligated to retain (e.g. financial records under applicable accounting law).

We reserve the right to suspend or terminate your account immediately and without prior notice if you breach these Terms, in particular by uploading unlawful content. You will receive notification by email unless this is legally impossible or unreasonable.

15 Changes to These Terms

We may update these Terms from time to time. For material changes, we will notify you by email or via a prominent notice on the Service at least 30 days before the changes take effect. Your continued use of the Service after the effective date constitutes acceptance of the updated Terms.

If you do not accept the changes, you may close your account within the notice period at no cost.

16 Governing Law, Jurisdiction, and Dispute Resolution

These Terms are governed by the laws of Norway. Any dispute arising in connection with these Terms shall first be sought resolved amicably. If that is not possible, the Oslo District Court shall have jurisdiction in the first instance.

For consumers in the EU/EEA: In addition to your rights under Norwegian law, you retain rights under the mandatory consumer protection laws of your country of residence. The European Commission's Online Dispute Resolution platform is available at ec.europa.eu/consumers/odr.

17 Contact Information