# Terms of Service — DPP Bangladesh

**Effective date:** _to be set on launch_
**Last updated:** 2026-04-29

> ⚠️ Template — replace `{PLACEHOLDER}` fields and have counsel licensed in
> Bangladesh + an EU jurisdiction review before publishing. The clauses
> below are aligned with EU Digital Services Act, ESPR Art. 9-14, and EU
> consumer-protection norms. They are NOT a substitute for legal advice.

## 1. Parties and acceptance

These Terms ("Terms") form a binding contract between {COMPANY_LEGAL_NAME}, a company incorporated in Bangladesh with registered office at {COMPANY_REGISTERED_ADDRESS_BANGLADESH} ("Company", "we", "us"), and the legal entity that creates an account on the DPP Bangladesh platform at https://{YOUR_DOMAIN} ("Customer", "you").

By creating an account, accessing the platform, or using any API, you accept these Terms. If you do not agree, you may not use the service. If you accept on behalf of an organisation, you represent that you have authority to bind that organisation.

## 2. The service

DPP Bangladesh ("Service") provides a SaaS platform that helps manufacturers create, publish and maintain Digital Product Passports under EU Regulation 2024/1781 (ESPR). Detailed feature scope and any tier limits are listed in your subscription order or at https://{YOUR_DOMAIN}/pricing.

## 3. Account, registration and authority

You agree to provide accurate, current, complete information at registration and keep it updated. You are responsible for all activity under your account, including activity by your employees and contractors. You must enable two-factor authentication on any administrator account and notify us promptly of any suspected unauthorised access via security@{YOUR_DOMAIN}.

## 4. Subscription, fees and payment

Fees are stated on the pricing page at the time of subscription and may include a free trial. Recurring fees are charged in advance per billing cycle (monthly or annual). Payment is via Stripe (cards) or bKash (Bangladesh) and is non-refundable except where required by mandatory law. We will give you 30 days' prior notice of price changes; you may cancel before the increase takes effect.

## 5. Customer content and data

You retain all rights to data you upload, including DPP product data and uploaded files ("Customer Data"). You grant us a worldwide, non-exclusive, royalty-free licence to host, copy, transmit, display and process Customer Data only as needed to provide the Service, comply with legal obligations (including ESPR Art. 9 publication and Art. 14 authority access), and to improve the Service in aggregate, anonymised form.

You represent that you have all rights necessary to upload Customer Data, including consent of any individuals named in conformity declarations or audit reports.

## 6. Acceptable use

You will not, and will not permit any third party to:

- Use the Service to publish a DPP for a product you do not have authority to certify
- Falsify ESPR-required information (fibre composition, chemical content, repairability score)
- Reverse-engineer, decompile or attempt to derive the source code, except as permitted by law
- Use the Service to send unsolicited bulk communication, host malware, or run a competing DPP service from our infrastructure
- Circumvent any rate limits, security measures or audit logging
- Submit false or misleading information to third-party databases (ECHA SCIP, EU Registry) via our endpoints

We may suspend or terminate accounts engaged in conduct above on reasonable notice (immediate notice for security or legal reasons).

## 7. Intellectual property

The Service, software, documentation, design, branding and aggregated insights are our intellectual property. We grant you a non-exclusive, non-transferable, revocable licence to use the Service in accordance with these Terms during your subscription. No rights are granted by implication or estoppel.

## 8. Service levels and availability

We commit to the service-level objectives in the Service Level Agreement (SLA) at https://{YOUR_DOMAIN}/legal/sla. Service credits for downtime exceeding the SLA are your sole remedy for availability issues.

## 9. Data protection

Each party will comply with applicable data protection law, including EU GDPR. Where we process personal data on your behalf, the Data Processing Addendum at https://{YOUR_DOMAIN}/legal/dpa applies and is incorporated by reference. Sub-processors are listed at https://{YOUR_DOMAIN}/legal/subprocessors.

## 10. ESPR and regulatory submissions

You acknowledge that you, not the Company, are the responsible economic operator under ESPR. The Company provides the technical infrastructure to capture, validate, publish and submit DPPs but does not certify the accuracy of the information you provide. Submissions to the EU DPP Registry, ECHA SCIP or other regulators are made on your behalf using credentials and identifiers (EOID, facility ID, GLN) you provide.

## 11. Confidentiality

Each party will protect the other's non-public information ("Confidential Information") with the same care it uses for its own confidential material, and at minimum reasonable care. Confidential Information may be disclosed only to personnel and contractors with a need to know and bound by equivalent confidentiality obligations.

## 12. Warranties and disclaimer

Each party warrants that it has authority to enter into these Terms. The Company further warrants that the Service will substantially conform to its documentation and will be performed with reasonable skill and care.

EXCEPT AS EXPRESSLY STATED, THE SERVICE IS PROVIDED "AS IS". WE DISCLAIM ALL OTHER WARRANTIES, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND ANY WARRANTY THAT THE SERVICE WILL BE UNINTERRUPTED OR ERROR-FREE.

## 13. Indemnity

You will indemnify and hold us harmless from third-party claims arising out of (a) your Customer Data, (b) your violation of these Terms, or (c) misrepresentation of products in DPPs you publish through the Service. We will indemnify you against third-party claims that the Service as supplied infringes any patent, copyright or trademark, subject to your prompt notice and our control of the defence.

## 14. Limitation of liability

Neither party is liable for indirect, incidental, special, consequential or punitive damages or for lost profits or revenue. Each party's aggregate liability for any claim arising from these Terms is limited to the fees paid by you to us in the 12 months preceding the claim. Nothing limits liability for fraud, wilful misconduct, death or personal injury caused by negligence, or other liability that cannot be excluded under applicable law.

## 15. Term and termination

These Terms continue while you have an active subscription. Either party may terminate for material breach not cured within 30 days of written notice. We may suspend the Service immediately if you fail to pay or breach Section 6. On termination, your access ends; we will retain Customer Data per the retention schedule in our Privacy Policy and the ESPR 10-year retention obligation for published DPPs.

## 16. Export of data

On request before or within 30 days after termination, we will provide an export of your Customer Data in JSON format via the existing `GET /api/me` and DPP-list endpoints.

## 17. Notices

Legal notices to the Company go to legal@{YOUR_DOMAIN}. Notices to you go to the email associated with your account.

## 18. Governing law and disputes

These Terms are governed by the laws of Bangladesh. Disputes will be resolved by the courts of Dhaka, Bangladesh. EU consumers retain the right to bring claims in the courts of their country of residence under mandatory consumer-protection law.

## 19. Changes to these Terms

We may update these Terms by posting the revised version and notifying you by email at least 30 days before they take effect. Continued use of the Service after that date constitutes acceptance.

## 20. Miscellaneous

These Terms together with the Privacy Policy, DPA, SLA and Order Form are the entire agreement and supersede prior negotiations. If a clause is unenforceable, the rest remains in effect. Neither party may assign without the other's consent except to an affiliate or successor in a merger or asset sale.
