CurAI-it

1. Master Terms & Conditions (SaaS Agreement)

This SaaS Master Services Agreement ("Agreement") is entered into by and between Blue Squirrel Software Ltd (registered in England & Wales, "Company", "we", "us") and the customer organisation accessing or using the platform ("Customer", "Organisation", "you").

1. Service Overview & Infrastructure Residency

• 1.1 Service Scope: Blue Squirrel Software Ltd provides access to CurAI-it ("Service"), a cloud-based Software-as-a-Service (SaaS) application targeting museums, heritage collections, archives, public sector bodies, and commercial institutions for digital cataloguing, OCR text extraction, hierarchical taxonomy management, and AI-assisted metadata enrichment.
• 1.2 UK & EU Data Residency: The core application APIs, transactional databases, search indices, and primary media storage repositories are hosted within high-availability Microsoft Azure cloud infrastructure and Company-managed servers located exclusively within the United Kingdom (UK) and European Union (EU) regions.
• 1.3 Credit System: Artificial intelligence workflows (including description auto-generation, title creation, entity extraction) and OCR processing consume digital processing credits allocated under your subscription tier or purchased via on-demand credit top-ups.

2. Service Level Aim & Availability

• 2.1 Target Uptime Goal: We aim to maintain a high service availability target of 99.5% uptime for the core Service during standard operating windows, excluding scheduled maintenance.
• 2.2 Operational Target (No Automatic Service Credits): The 99.5% uptime target represents an operational performance goal and does not constitute a financial uptime guarantee. We do not issue automatic service credits, fee refunds, or financial compensation for service interruptions under standard subscriptions.
• 2.3 Custom Enterprise SLAs: Contractual financial remedies or uptime guarantees are applicable only where explicitly negotiated, executed, and appended under a bespoke Enterprise SLA Agreement.

3. Account Lifecycle, Payment & Data Deletion Schedules

To protect system performance, security, and storage integrity, the Company enforces formal account lifecycle rules regarding inactive or non-paying accounts:

4. Customer Data Ownership & IP Rights

• 4.1 Customer Ownership: The Customer retains 100% ownership of all uploaded collection items, cataloguing metadata, scanned archives, media assets, and custom taxonomies ("Customer Content").
• 4.2 Operational Licence: The Customer grants Blue Squirrel Software Ltd a non-exclusive, worldwide, limited licence solely to host, process, OCR, index, and transmit Customer Content as strictly necessary to deliver the Service.

5. Artificial Intelligence Non-Training Guarantee

6. Payment Terms & Billing

• 6.1 Billing Providers: Payments are processed via Stripe (Credit/Debit Cards) or GoCardless (BACS Direct Debit).
• 6.2 Credit Allocation: Monthly subscription credits renew at each billing cycle and do not roll over. On-demand top-up credits remain valid for 12 months from purchase.

7. Limitation of Liability & Law

• 7.1 Limitation of Liability Cap:

  To the maximum extent permitted by applicable law, Blue Squirrel Software Ltd’s total aggregate liability arising out of or in connection with the Service or this Agreement -whether in contract, tort (including negligence), breach of statutory duty, or otherwise—shall be strictly limited to the total subscription fees actually paid by the Customer to the Company in the three (3) months immediately preceding the event giving rise to the claim.

  In no event shall the Company be liable for any indirect, special, incidental, punitive, or consequential damages, including loss of data, loss of profits, or business interruption.

• 7.2 Jurisdiction: This Agreement is governed by the laws of England and Wales, subject to the exclusive jurisdiction of the courts of England and Wales.

2. Privacy Policy & UK/EU GDPR Data Processing Addendum (DPA)

This Privacy Policy & Data Processing Addendum outlines how Blue Squirrel Software Ltd processes personal data within the CurAI-it platform.

1. Regulatory Framework & Data Roles

• Blue Squirrel Software Ltd as Data Controller: Controls account registration data, administrative credentials, telemetry, and billing records.
• Blue Squirrel Software Ltd as Data Processor: Processes historical archives, documents, donor lists, and metadata uploaded into CurAI-it by your Organisation ("Customer Personal Data").

2. Sub-Processor Schedule & Data Transfer Mechanisms

CurAI-it utilizes vetted third-party infrastructure and sub-processors to deliver security, database hosting, payment handling, and AI processing:

3. Data Retention Summary

4. Archival & Public Interest Processing

Where your Organisation processes historical collection items containing personal data, processing is supported under Schedule 1, Part 6 of the UK Data Protection Act 2018 (Archiving in the public interest, scientific or historical research) and Article 89 of the EU GDPR. CurAI-it provides tenant isolation, role-based access control (RBAC), and metadata field controls to manage access rights.

5. Platform Security Standards

• Tenant Isolation: Strict SQL database query filtering enforces mandatory TenantId boundaries to prevent cross-tenant data leakage.
• Encryption: AES-256 encryption at rest for databases and blob storage; TLS 1.3 encryption in transit.
• Time-Limited Shared Access Signatures: Media assets and PDF documents are accessed strictly via short-lived SAS tokens.

6. Contact & Data Rights

To exercise data subject rights (access, correction, portability, deletion) or submit data protection inquiries, contact Blue Squirrel Software Ltd at [email protected].