Terms of Service

En vigueur depuis le 2 novembre 2026

1. About these Terms

1.1 These Terms of Service (the Terms) govern access to and use of the Skileo platform. They form a binding contract between Skileo and the Customer.

1.2 Skileo is Skileo Ltd, a company registered in the Bulgarian Commercial Register under UIC 203606546, with its registered office at 119 Oborishte Str., 1505 Sofia, Bulgaria, VAT number BG203606546, email hello@skileo.com.

1.3 Who these Terms apply to. These Terms apply to Customers: companies, sole traders and other organisations acting for professional purposes. Skileo does not sell Subscriptions to consumers. The person who signs up confirms that they act on behalf of an organisation and have authority to bind it. Authorised Users and Employees use the Service under the Customer’s Subscription and authority. Candidates who create a personal account use it under the separate Candidate Terms, which they accept when they create the account.

1.4 The contract consists of, in order of priority if they conflict:

1. any order form or written agreement signed by Skileo and the Customer;
2. the Data Processing Agreement in Annex A (the DPA);
3. these Terms;
4. the plan description and prices shown on the pricing page or at checkout when the Customer subscribes.

On data protection matters, the DPA prevails over every other document, including an order form, unless the order form expressly identifies the DPA provision it changes.

The Privacy Policy and the Cookie Policy explain how Skileo handles personal data as a controller. They are information notices, not contract terms.

1.5 The Customer accepts these Terms by ticking the acceptance box when creating a Workspace, by signing an order form, or by paying for a Subscription. Any purchase-order terms or general conditions of the Customer do not apply.

2. Definitions

Headings are for convenience only. “Including” means “including without limitation”.

3. The Service

3.1 Skileo provides an online platform for people and finance administration. Depending on the Subscription, the Service includes the following modules:

• Recruiting: job offers, public careers page, applications, CV database, hiring pipeline, interviews, ratings, comments and messages to Candidates;
• HR: employee records, contracts, documents, onboarding tasks and departures, leave and absence requests, timesheets, public holidays, employee directory and key dates, employee surveys and suggestion box;
• Accounting: quotes and invoices, online card payment of invoices, suppliers and purchase invoices, bank connections and reconciliation, equipment register and dashboard.

Shared tools (documents, tasks, calendar, messaging, notifications, recycle bin, exports and settings) are available across modules.

3.2 Skileo provides a tool. Skileo is not the Customer’s employer, recruitment agency, accountant, auditor, tax adviser, legal adviser, bank or payment institution. Skileo does not take part in the relationship between the Customer and its Candidates, Employees, clients or suppliers. The Customer remains solely responsible for its hiring, employment, accounting and tax decisions and filings, even where the Service helps prepare them.

3.3 Changes to the Service. Skileo may improve, change or remove features. During a paid billing period, Skileo will not remove or materially reduce the core functionality of a module, meaning the main features described in its documentation, unless the change is required by law, needed to address a security risk, or results from a change to a Third-Party Service or AI Feature under clause 9.5. If Skileo makes such a reduction for any other reason, the Customer may terminate the affected Subscription and receive a pro-rata refund of prepaid fees for the remaining period.

4. Accounts and users

4.1 Creating a Workspace. The Workspace Owner must provide accurate and complete information about the Customer and keep it up to date. Each Workspace belongs to one Customer.

4.2 Team Members. The Customer decides who to invite and which permissions each Team Member receives. The Customer is responsible for all acts and omissions of its Authorised Users as if they were its own. The Customer must remove access promptly when a Team Member leaves or no longer needs it.

4.3 Credentials and security. Accounts are personal and must not be shared. Authorised Users must keep their credentials confidential, use a strong password and enable two-factor authentication where the Customer’s settings or Skileo’s minimum security requirements make it mandatory. Skileo may set minimum security requirements, such as password rules or mandatory two-factor authentication for administrator accounts. The Customer must notify Skileo without delay at hello@skileo.com of any suspected unauthorised access. The Customer is responsible for unauthorised access caused by its failure to comply with this clause, such as shared credentials, a compromised password or an ignored security alert, except to the extent that Skileo’s breach of its own security obligations caused or contributed to it.

4.4 Employees. The Customer may give Employees access to an employee area. Employees use it under the Customer’s authority and in line with the Customer’s internal rules. The Customer is responsible for informing Employees about the Service.

4.5 Candidates. Candidates may create a personal Skileo account to apply for jobs and reuse it with several employers. The data protection roles are:

• Skileo is an independent controller of the Candidate’s personal account: its login, authentication and the profile the Candidate keeps for future applications;
• each employer is the controller of the applications it receives and of the data it adds about the Candidate;
• Skileo processes those applications and that data as the employer’s processor, under the DPA.

Each employer sees only the applications made to it. If a Candidate deletes their personal account, applications already sent remain with the employers that received them; each employer decides how long to keep them, in line with its own legal obligations, and handles any request from the Candidate about them. Candidates must be at least 16 years old and old enough to work lawfully in the country of the job.

4.6 Free plan or trial. If Skileo offers a free plan or trial, it is provided “as is”, may be limited in features, storage or duration, and may be ended by Skileo on 30 days’ notice. Skileo’s total liability in connection with a free plan or trial is limited to EUR 100.

5. Subscription, prices and payment

5.1 Plans and prices. The plans, their structure (for example a fee per Workspace and a fee per user) and their prices are those shown on the pricing page or in the order form when the Customer subscribes. Prices are in euro and exclude VAT.

5.2 Billing period. The Customer chooses one of the billing periods offered at checkout, for example monthly or yearly. Fees are payable in advance at the start of each billing period.

5.3 Changes in the number of users. Users added during a billing period are charged as shown at checkout or in the Workspace settings, either pro rata for the rest of the period or from the next period. Removing users takes effect at the next renewal; no refund is due for the current period.

5.4 Payment method. Payment is made by one of the methods offered at checkout, such as card or SEPA Direct Debit, through Skileo’s payment provider (currently Stripe). The Customer authorises Skileo, through that provider, to charge the chosen payment method for every renewal and for any added users, without further approval for each charge. For SEPA Direct Debit, the pre-notification period stated in the mandate applies.

5.5 VAT and taxes. VAT is added at the applicable rate. For Customers established in another EU Member State with a valid VAT number, the reverse-charge mechanism applies and the Customer accounts for VAT. Skileo validates VAT numbers through the European Commission’s VIES system. The Customer must provide correct billing and tax details.

5.6 Invoices. Skileo issues electronic invoices, available in the Workspace and sent by email.

5.7 Late payment. If a payment fails or an invoice is unpaid on its due date, Skileo will notify the Customer and may retry the charge. Unpaid amounts bear late-payment interest and the fixed compensation for recovery costs provided by the law governing these Terms for commercial transactions. If an amount remains unpaid 14 days after notice, Skileo may restrict the Workspace to read-only access or suspend it under clause 18. Access is restored once all overdue amounts are paid.

5.8 Price changes. Skileo may change its prices by giving at least 30 days’ notice by email. New prices apply from the next renewal after the notice period. A Customer who does not accept the change may cancel before the renewal date.

5.9 Pricing errors. If a price shown at checkout contains an obvious error, Skileo may correct it before the order is confirmed. Skileo will not change the price of a confirmed billing period.

6. Duration, renewal, cancellation and refunds

6.1 Duration and renewal. Each Subscription runs for the billing period chosen and renews automatically for the same period unless cancelled. For yearly Subscriptions, Skileo sends the Workspace Owner a reminder at least 14 days before renewal, stating the renewal date, the amount and how to cancel. For monthly Subscriptions, the next charge date and amount are shown in the Workspace settings.

6.2 Cancellation by the Customer. The Workspace Owner may cancel at any time from the Workspace settings, where available, or by email to hello@skileo.com. Cancellation takes effect at the end of the current billing period.

6.3 Refunds. Fees already paid are not refundable, except where these Terms expressly provide otherwise (clauses 3.3, 15.1, 19.3 and 21.2) or where the law requires it.

6.4 Plan changes. An upgrade takes effect immediately and is charged pro rata. A downgrade takes effect at the next renewal. The Customer is responsible for any loss of features or data capacity caused by a downgrade, and should export data first.

7. Customer Data and data protection

7.1 Customer rights. The Customer retains all its rights in Customer Data. Skileo acquires no right to Customer Data other than the licence in clause 7.2. Personal data in Customer Data remains subject to the rights of the individuals concerned.

7.2 Licence to Skileo. The Customer grants Skileo a non-exclusive, worldwide, royalty-free licence, for the duration of the contract and the retention periods in clause 20, to host, copy, transmit, display and process Customer Data only as needed to provide, secure and support the Service, and to comply with the law.

7.3 Roles under the GDPR. For personal data contained in Customer Data, the Customer is the controller and Skileo is its processor. Skileo processes that data only on the Customer’s documented instructions, as set out in the DPA, which forms part of these Terms and meets Article 28 of the GDPR. For data about Authorised Users’ accounts, billing, support, security and website use, Skileo acts as controller, as described in its Privacy Policy.

7.4 Sub-processors. The Customer gives general authorisation for Skileo to use the sub-processors listed in the Annex to the Privacy Policy. Skileo will give at least 30 days’ notice of a new or replacement sub-processor, during which the Customer may object on reasonable data-protection grounds, as set out in the DPA.

7.5 Aggregated data. Skileo may compile statistics on the use and performance of the Service, provided they do not identify the Customer or any individual. Skileo does not sell Customer Data and does not use it for advertising.

7.6 Backups. Skileo backs up the Service regularly for disaster recovery and keeps backups for a limited period. Backups are not a record-keeping or archiving service. The Customer remains responsible for keeping its own copies of data it must retain by law, using the export tools. If data is deleted or altered by an Authorised User, Skileo may, where technically possible and within the backup retention period, restore it on the basis of a quote accepted in advance. Restoration is free where the loss is attributable to Skileo.

8. Customer obligations

8.1 Lawful use. The Customer must use the Service in compliance with all laws that apply to it, including data protection, employment, anti-discrimination, accounting, invoicing and tax law in each country where it operates.

8.2 Legal basis and information. As controller, the Customer is responsible for having a legal basis for each processing of personal data it carries out in the Service, and for informing Candidates, Employees and other individuals about it. In particular, the Customer must:

1. inform Candidates whom it adds to the Service without an application (manually, by import or from a sourcing list) as Article 14 GDPR requires: within a reasonable period and at the latest one month after obtaining their data, or earlier, at the first communication with them;
2. inform Employees about the processing of their data, including timesheets, absence records and the audit trail, and consult employee representatives where local law requires it;
3. obtain any consent required by law, for example for keeping a Candidate’s profile for future vacancies;
4. answer data-subject requests addressed to it. Skileo will forward any request it receives about Customer Data to the Customer and assist as set out in the DPA.

8.3 Health data and national identification numbers. HR use of the Service may involve health data, for example a medical certificate attached to an absence request. Health data is a special category of personal data under Article 9 GDPR. Candidate and Employee records may also contain national identification numbers, such as social-security numbers, whose use Member States may regulate under Article 87 GDPR. The fields for this data are optional. The Customer may process such data in the Service only where it is necessary and permitted by applicable law, and must:

• rely on an exception under Article 9(2) GDPR for health data, for example obligations under employment or social-security law, and comply with any national conditions for identification numbers;
• restrict access to the Authorised Users who need it, using the permission settings;
• not collect such data where local law prohibits it, for example at the application stage of recruitment.

8.4 Anonymous surveys and suggestions. When a survey or the suggestion box is set to anonymous, the Service does not show the Customer who wrote an answer. The answers are not anonymous in the strict legal sense: the Service keeps a technical link between each answer and its author’s account, for example to prevent duplicate answers, and Skileo does not use that link to identify authors unless the law requires it. An author may also be identifiable from the content of an answer or within a very small group. The Customer must not try to identify authors, should not run anonymous surveys on very small groups, and must describe the feature to Employees in these terms.

8.5 Accuracy of financial records. The Customer is responsible for the content of its quotes, invoices, purchase records and accounting entries, including amounts, VAT treatment, mandatory invoice mentions, numbering and any e-invoicing or reporting obligation in its country. Calculations, templates and reconciliation suggestions are aids and must be checked by the Customer.

8.6 Employment and HR decisions. Leave balances, timesheets, public-holiday calendars and contract templates are configured by the Customer. The Customer must check that they comply with applicable law and collective agreements.

8.7 Content. The Customer is responsible for all Customer Data, including its lawfulness, accuracy and the rights needed to use it, and for messages sent through the Service. Job offers must not contain discriminatory criteria.

9. Online payments and bank connections

9.1 Online payment of invoices. The Customer may let its own clients pay invoices by card online. These payments are processed by Stripe, under an account that the Customer opens with Stripe and Stripe’s own terms, which the Customer must accept. Any fee for online payments is shown in the Workspace before the Customer activates them. Skileo never receives or holds the funds. Stripe, not Skileo, is responsible for executing payments, payouts, refunds, chargebacks and the related identity checks. Any dispute about a payment is between the Customer, its client and Stripe.

9.2 Bank connections. The Customer may connect its business bank accounts to import transactions. The connection is provided by licensed account information service providers (currently Powens and GoCardless), under their own terms, which the Customer accepts when it connects an account. The Customer authenticates directly with its bank; Skileo does not see or store bank login credentials. Access to account information is read-only. Skileo cannot initiate payments from connected accounts. Banks typically require the Customer to renew its consent periodically (often every 180 days).

9.3 Availability. Skileo is not responsible for the unavailability, errors or delays of banks, Stripe or account information providers, or for incomplete transaction data they supply.

9.4 Other Third-Party Services. Where the Service connects to other Third-Party Services, they are governed by their providers’ terms. Skileo may stop supporting a Third-Party Service if the provider changes its terms or service in a way that makes continued support impractical. Skileo will give reasonable notice where possible.

9.5 Changes to Third-Party Services and AI Features. Third-Party Services and AI Features depend on Skileo’s contracts with their providers. Skileo may replace a provider with one offering equivalent features, without a price increase. Skileo may change or withdraw such a feature for a legitimate reason, including the provider ceasing or defaulting, the end or change of Skileo’s contract with it, a legal requirement, technical impossibility or a security risk. Skileo will notify the Customer at least 30 days in advance where circumstances allow, otherwise as soon as possible. Data created through the feature remains accessible and exportable. Any amount paid specifically for that feature and not yet used is refunded pro rata. Where the provider is a sub-processor, the DPA also applies.

10. AI Features

10.1 What they do. AI Features help draft job offers, read purchase invoices from PDF files to pre-fill their fields, and structure postal addresses. To provide them, Skileo sends the relevant content (for example, the job-offer draft or the uploaded invoice) to its AI provider, listed in the Annex to the Privacy Policy. Content is sent only when an Authorised User uses the feature.

10.2 Review required. AI output may be inaccurate or incomplete. It is a suggestion, not a decision. The Customer must review and correct any AI output before using, publishing or recording it. Skileo is not responsible for decisions the Customer makes on the basis of unreviewed AI output.

10.3 No evaluation of people. The AI Features are not designed to evaluate, score, rank, select or reject Candidates or Employees, and the Customer must not use them for that purpose. Any decision about a Candidate or Employee must be taken by a person who has reviewed the relevant information. If Skileo introduces an AI Feature that assesses people, it will inform Customers beforehand and apply the rules of the EU Artificial Intelligence Act (Regulation (EU) 2024/1689) that govern such systems.

10.4 Provider terms. Skileo uses AI providers whose terms for business customers do not allow them to use the content sent through the AI Features to train their models. A provider may keep that content for a limited period for abuse monitoring, as stated in the Privacy Policy.

10.5 Usage limits. Skileo may set reasonable limits on the use of AI Features per plan or per period, and may change or withdraw an AI Feature if its provider changes or stops its service.

10.6 Customer choice. The Customer may ask its Authorised Users not to use AI Features, or disable them where the Workspace settings allow it.

11. Public pages

11.1 The Service lets the Customer publish content outside the Workspace: careers pages, job offers, and quotes and invoices shared with its clients by link. The Customer decides what it publishes and is responsible for it, including the accuracy of job offers and compliance with recruitment advertising and non-discrimination rules.

11.2 Anyone who has a sharing link can open the shared document. The Customer must share links only with the intended recipients. Where the Service allows it, the Customer can revoke a link or set it to expire.

11.3 Skileo may remove or disable public content that it reasonably considers unlawful or in breach of clause 12, and will inform the Customer of the reasons.

11.4 Reporting unlawful content. Anyone may report content published through the Service that they consider unlawful, such as a fraudulent or discriminatory job offer, by writing to hello@skileo.com with the URL of the content, the reasons, and their name and email. Skileo will review reports diligently, act on them where the content is unlawful or breaches these Terms, and inform the reporter and the Customer of its decision and the reasons for it. The same address is Skileo’s contact point for authorities and users about content on the Service.

12. Acceptable use

The Customer and its Authorised Users must not:

1. use the Service for any unlawful, fraudulent or discriminatory purpose, including issuing false invoices or publishing fake job offers;
2. upload malware, or content that is unlawful, defamatory or infringes third-party rights;
3. send unsolicited bulk messages or use the Service to contact people without a lawful basis;
4. access or attempt to access another Workspace, account or data without authorisation, or probe, scan or test the Service’s security without Skileo’s prior written consent;
5. bypass usage limits, access controls or two-factor authentication;
6. use bots, scrapers or other automated means to access the Service, except through interfaces that Skileo makes available for that purpose, if any;
7. overload or disrupt the Service or its infrastructure;
8. resell, sublicense or provide the Service to third parties, except to Authorised Users for the Customer’s own internal purposes, or as agreed in writing with Skileo;
9. copy, modify, decompile or reverse engineer the Service, except to the extent the law expressly allows it;
10. use Skileo’s software, documentation or confidential information to develop a competing product.

Skileo may investigate suspected breaches and act under clause 18.

13. Intellectual property

13.1 Skileo’s rights. Skileo and its licensors own all rights in the Service, including software, design, documentation, templates and trademarks. These Terms grant no ownership rights to the Customer.

13.2 Right to use. Subject to these Terms and payment of the fees, Skileo grants the Customer a non-exclusive, non-transferable right, for the term of the Subscription, to allow its Authorised Users and Employees to use the Service for the Customer’s internal business purposes. This includes installing Skileo’s mobile application, where available, on devices they use for that purpose. The terms of the app store from which it is downloaded also apply.

13.3 Customer materials. The Customer keeps all rights in Customer Data, including its logo and job offers. It allows Skileo to display its logo and name on its public pages as configured by the Customer.

13.4 Feedback. If the Customer sends suggestions for improving the Service, Skileo may use them freely, without obligation to the Customer. This does not give Skileo any right in Customer Data or confidential information.

13.5 References. Skileo may name the Customer as a customer in its marketing only with the Customer’s prior consent at any time.

14. Availability, security and support

14.1 Availability. Skileo uses reasonable efforts to keep the Service available 24 hours a day, 7 days a week. Skileo does not guarantee uninterrupted availability, unless an order form sets a service level. Availability may be interrupted by planned maintenance, announced in advance where possible and scheduled outside business hours (CET) where possible, by urgent security fixes, or by events outside Skileo’s reasonable control.

14.2 Security. Skileo implements the technical and organisational measures described in Appendix 1 to the DPA and keeps them appropriate to the risk. Skileo will notify the Customer of any personal data breach affecting Customer Data as set out in the DPA.

14.3 Support. Support is available on business days through the channels shown in the Service, including email at hello@skileo.com. Support hours, languages and response times may depend on the plan.

15. Warranties

15.1 Skileo warrants that the Service will perform materially as described in its documentation during the Subscription. The Customer must report any failure promptly, with enough detail to reproduce it. Skileo will use reasonable efforts to correct it, according to its severity. If a reported defect substantially prevents the use of a module and Skileo has neither corrected it nor provided a reasonable workaround within 60 days of the report, the Customer may terminate the affected Subscription and receive a pro-rata refund of prepaid fees for the remaining period. This is the Customer’s sole remedy for breach of this warranty, without prejudice to clause 16.

15.2 To the extent permitted by law, Skileo gives no other warranty, express or implied. In particular, Skileo does not warrant that the Service will be error-free or uninterrupted, that AI output or bank data will be accurate or complete, or that the Service will meet legal requirements specific to the Customer’s country or sector unless expressly stated.

16. Liability

16.1 Cap. Each party’s total liability arising out of or in connection with the contract, in any calendar year, is limited to the fees paid and payable by the Customer for the Service in the 12 months before the event giving rise to the claim.

16.2 Excluded losses. Neither party is liable for loss of profit, revenue, business, goodwill or anticipated savings, or for any indirect or consequential loss. If Customer Data is lost or corrupted through Skileo’s fault, Skileo will first restore it from its most recent backup at its own cost. Any further liability for that loss is subject to clause 16.1.

16.3 Exceptions. Nothing in these Terms limits or excludes liability for intent or gross negligence, for death or personal injury caused by negligence, for fraud, or for any other liability that cannot be limited under applicable law. Clauses 16.1 and 16.2 do not limit the Customer’s obligation to pay fees, or its liability under clauses 12 and 17.1. Nothing in these Terms affects the right of individuals to compensation under Article 82 GDPR.

16.4 Third parties. Skileo is not liable for the acts or omissions of Third-Party Services that the Customer chooses to use (clause 9), beyond its obligations in the DPA for its own sub-processors.

17. Indemnity

17.1 By the Customer. The Customer will defend and indemnify Skileo against any third-party claim, and any fine or penalty imposed on Skileo, including reasonable legal costs, to the extent it results from Customer Data that is unlawful or infringes third-party rights, from content the Customer publishes, or from the Customer’s breach of clauses 8 or 12.

17.2 By Skileo. Skileo will defend and indemnify the Customer against any third-party claim that the Service, used in accordance with these Terms, infringes that third party’s intellectual property rights. This does not apply to claims caused by Customer Data, by a Third-Party Service, or by a combination or modification not made by Skileo. If such a claim arises, Skileo may modify or replace the affected feature, obtain the right for the Customer to keep using it, or, if neither is reasonably possible, terminate the affected Subscription and refund prepaid fees for the remaining period.

17.3 Procedure. The indemnified party will notify the other party promptly, let it control the defence and settlement, and cooperate reasonably at the indemnifying party’s cost. No settlement that admits fault on the part of the indemnified party may be made without its consent.

18. Suspension

18.1 Skileo may suspend all or part of a Workspace or an account, with prior notice where reasonably possible, if:

1. an amount remains unpaid as described in clause 5.7;
2. the Customer or an Authorised User seriously breaches clause 12;
3. suspension is needed to prevent a security threat or serious harm to the Service, other customers or third parties; or
4. a court or authority requires it.

18.2 Skileo will limit the suspension to what is necessary and lift it as soon as the cause is resolved. Fees remain payable during a suspension caused by the Customer.

19. Termination

19.1 For convenience. Either party may end the Subscription with effect at the end of the current billing period, under clause 6.2 for the Customer, and on at least 60 days’ notice for Skileo.

19.2 For breach. Either party may terminate the contract by written notice if the other party materially breaches it and does not remedy the breach within 30 days of notice, or immediately if the breach cannot be remedied. Either party may also terminate immediately if the other becomes insolvent or ceases business, to the extent permitted by law.

19.3 Refund. If the Customer terminates under clause 19.2, or Skileo terminates under clause 19.1, Skileo will refund prepaid fees for the period after termination.

19.4 Survival. Clauses that by their nature continue after termination remain in force, including clauses 7, 13, 16, 17, 20 and 22.

20. Data export and deletion

20.1 During the Subscription. The Customer can export its data at any time using the export tools (CSV/Excel) and by downloading its documents.

20.2 After the end. When the Subscription ends, the Customer has a retrieval period of 30 days, during which the Customer can still access the Workspace, in read-only mode where applicable, to export its data. After the retrieval period, Skileo deletes Customer Data from its production systems within 30 days. Remaining copies are erased from backups as they are overwritten, within a further 30 days. All Customer Data is therefore erased no later than 90 days after the Subscription ends, except data Skileo must keep by law. Skileo will confirm the erasure on request.

20.3 Customer’s retention duties. The Customer, not Skileo, must keep its accounting records, invoices, payroll and HR documents for the periods required by its national law. The Customer must export them before deletion.

20.4 Candidate accounts. Deleting a Workspace does not delete a Candidate’s personal account. It deletes the applications and data the Customer held about that Candidate.

20.5 Switching to another provider. The Customer may ask to move its data to another provider or to its own systems, in line with the EU Data Act (Regulation (EU) 2023/2854) where it applies to the Service:

1. Notice. The Customer may request switching at any time, with a notice period of up to 2 months.
2. Transition. During a transition period of up to 30 days after the notice period, Skileo keeps the Service running, provides reasonable assistance, and exports the exportable data. If 30 days is technically impossible, Skileo will explain why within 14 working days and set a transition period of up to 7 months.
3. Exportable data. All Customer Data entered, uploaded or generated in the Workspace, exported in a structured, commonly used and machine-readable format: such as CSV or Excel for records and the original format for uploaded files. Skileo’s software, internal configuration and trade secrets are not exportable.
4. Fees. Skileo charges no switching fee.
5. End of contract. The contract ends once switching is complete. The retrieval and deletion periods in clause 20.2 then apply.

21. Changes to these Terms

21.1 Skileo may change these Terms. It will notify the Workspace Owner by email and in the Service at least 30 days before a material change takes effect. The notice will summarise the change.

21.2 If the Customer does not accept a material change, it may terminate the Subscription before the change takes effect and receive a pro-rata refund of prepaid fees for the remaining period. Otherwise, the new Terms apply from the effective date, and from the next renewal for Customers with an order form.

21.3 Changes required by law, or that only add features or correct errors, may take effect immediately.

22. Governing law and disputes

22.1 These Terms and any non-contractual obligations arising from them are governed by the laws of Bulgaria.

22.2 The parties will first try to resolve any dispute amicably. A party must notify the other in writing, and the parties will discuss it in good faith for 30 days.

22.3 If the dispute is not resolved, the competent courts of Sofia, Bulgaria have exclusive jurisdiction. Either party may still seek urgent interim measures from any competent court.

23. General provisions

23.1 Confidentiality. Each party will keep confidential the non-public information it receives from the other in connection with the contract, use it only to perform the contract, and disclose it only to staff and advisers who need it and are bound by confidentiality. This does not apply to information that is public, already known, independently developed or must be disclosed by law. This obligation lasts for the contract and 5 years after it ends. Customer Data is also protected by the DPA.

23.2 Force majeure. Neither party is liable for a delay or failure caused by events beyond its reasonable control, such as natural disasters, war, epidemics, large-scale network or power failures, or acts of authorities. This does not apply to payment obligations. If the event lasts more than 30 days, either party may terminate the affected Subscription.

23.3 Assignment. The Customer may not transfer the contract without Skileo’s prior written consent. Skileo may transfer it to an affiliate or to a successor of its business, provided the Customer’s rights under these Terms and the DPA are not reduced. Skileo will inform the Customer.

23.4 Subcontracting. Skileo may use subcontractors and remains responsible for them under these Terms.

23.5 Notices. Unless a clause requires a specific method, notices to the Customer are sent to the Workspace Owner’s email address or shown in the Service. Notices to Skileo are sent to hello@skileo.com or to its registered office. Email is a valid form of written notice.

23.6 Electronic acceptance. The parties agree that acceptance of these Terms online and electronic invoices and notices have the same value as signed paper documents.

23.7 Language. These Terms are drafted in English. Translations are provided for convenience. If they conflict, the English version prevails, unless mandatory law requires otherwise.

23.8 Entire agreement. The contract described in clause 1.4 is the entire agreement between the parties about its subject matter and replaces any prior agreement on it.

23.9 Severability and waiver. If a provision is found invalid, the rest remains in force, and the parties will replace it with a valid provision closest to its purpose. Failure to enforce a right is not a waiver of it.

23.10 Independent parties. Nothing in these Terms creates a partnership, employment, agency or joint venture between the parties.

24. Contact

Skileo Ltd, 119 Oborishte Str., 1505 Sofia, Bulgaria · UIC 203606546 · VAT BG203606546 · hello@skileo.com

Annex A — Data Processing Agreement

This Data Processing Agreement (DPA) forms part of the Terms. It applies to personal data in Customer Data that Skileo processes on behalf of the Customer. Terms defined in the Terms have the same meaning here. If the DPA and the Terms conflict on data protection, the DPA prevails.

A.1 Roles. The Customer is the controller. Skileo is the processor. This DPA sets out the content required by Article 28(3) GDPR. It does not apply to data Skileo processes as controller, described in its Privacy Policy, including Candidates’ personal accounts (clause 4.5 of the Terms).

A.2 Description of the processing

A.3 Instructions. Skileo processes personal data only on the Customer’s documented instructions. These are the Terms, the Customer’s configuration and use of the Service, and any other written instructions agreed by the parties. Skileo will inform the Customer if it considers an instruction infringes data protection law, and may suspend that instruction until it is confirmed or changed. Where EU or Member State law requires other processing, Skileo will inform the Customer first, unless that law prohibits it.

A.4 Confidentiality. Skileo ensures that persons authorised to process the data are bound by confidentiality, have received data protection training, and access the data only as needed for their tasks.

A.5 Security. Skileo implements the technical and organisational measures listed in Appendix 1. Skileo may update them, provided the overall level of protection is not reduced.

A.6 Sub-processors.

1. The Customer gives general authorisation for Skileo to use the sub-processors listed in the Annex to the Privacy Policy.
2. Skileo will notify the Customer by email or in the Service at least 30 days before adding or replacing a sub-processor. The Customer may object in writing, with reasons, during that period.
3. If the parties find no reasonable solution, the Customer may terminate the affected Subscription, without penalty, with effect from the change. Skileo will refund prepaid fees for the remaining period.
4. Where a replacement is needed urgently because of a sub-processor’s failure, the end of its service or a security risk, Skileo may proceed without waiting 30 days. It will inform the Customer as soon as possible, and points 2 and 3 still apply.
5. Skileo imposes on each sub-processor, by contract, data protection obligations equivalent to this DPA, and remains liable to the Customer for its sub-processors.

A.7 Transfers outside the EEA. Skileo transfers personal data outside the EEA only under a safeguard recognised by Chapter V GDPR, as stated for each sub-processor in the Annex to the Privacy Policy.

A.8 Assistance. Taking into account the nature of the processing, Skileo will:

• forward to the Customer without undue delay any request it receives from a data subject about Customer Data, and not answer it without the Customer’s instructions;
• provide tools to access, correct, export and delete data, and other reasonable help to answer data subjects;
• help the Customer comply with Articles 32 to 36 GDPR, including by providing information needed for a data protection impact assessment.

A.9 Personal data breach. Skileo will notify the Customer without undue delay, and where possible within 48 hours, after becoming aware of a breach affecting Customer Data. The notice will describe, as far as known: the nature of the breach, the categories and approximate number of data subjects and records concerned, the likely consequences, the measures taken or proposed, and a contact point. Skileo will provide further information as it becomes available, cooperate with the Customer, and record the breach.

A.10 Return and deletion. At the end of the contract, the Customer can export its data and Skileo deletes it as set out in clause 20 of the Terms, unless EU or Member State law requires storage. On request, Skileo will confirm the deletion in writing.

A.11 Audit. Skileo will make available the information needed to demonstrate compliance with this DPA, starting with documentation: Appendix 1, its security policies, and any certification or independent audit report it holds. If that information is not sufficient, the Customer may carry out an audit, including an inspection, once a year with 30 days’ written notice. Shorter notice and additional audits are allowed where objectively justified, in particular after a personal data breach affecting Customer Data or at the request of a supervisory authority. Audits are carried out at the Customer’s cost, by the Customer or an independent auditor bound by confidentiality who is not a competitor of Skileo, during business hours, without access to other customers’ data and without unreasonably disrupting Skileo’s operations.

A.12 Customer obligations. The Customer complies with clause 8 of the Terms. It ensures that its instructions are lawful and that data subjects are informed that it uses Skileo as a processor.

A.13 Third-party tools authorised by the Customer. If the Customer connects a third-party tool to its Workspace, where the Service allows it, that tool acts for the Customer and is not Skileo’s sub-processor. The Customer is responsible for its contract with that provider and any resulting transfer.

A.14 Liability and term. Each party’s liability under this DPA is subject to clause 16 of the Terms, to the extent permitted by law. This DPA lasts as long as Skileo processes Customer Data. Confidentiality obligations survive its end.

Appendix 1 to the DPA — Technical and organisational measures

Skileo implements at least the following measures and may improve them over time.