Terms of Service

DutyStack is offered to organisations and their authorised users. A person creating an organisation confirms that they are at least 18 and have authority to bind that organisation. These terms do not create consumer rights where the service is acquired wholly for business purposes.

The organisation owner controls the primary account and may appoint administrators. The customer is responsible for invitations, role assignments, access reviews and timely removal of users who no longer require access. Users must follow the customer's policies and these terms.

The customer is responsible for the legality, accuracy and quality of records it uploads or creates; for required privacy notices and permissions; for its workforce and safety decisions; and for maintaining suitable independent business-continuity arrangements.

DutyStack assists with record keeping and operational compliance. It does not replace the customer's legal, health and safety, employment, tax, professional or regulatory responsibilities, nor the judgement of a competent person.

• Do not misuse, disrupt, probe or attempt unauthorised access to the service or another customer's data.
• Do not upload unlawful, infringing, malicious or unnecessarily sensitive material.
• Keep credentials and devices secure, use access only for authorised purposes and notify us promptly of suspected compromise.
• Do not reverse engineer or circumvent limits except where applicable law expressly permits it.

As between the parties, the customer retains ownership of its customer data. The customer grants Digital Solutions Hub Limited and its subprocessors a limited licence to host, copy, transmit, transform and otherwise process that data only as needed to provide, secure and support DutyStack and comply with law.

Digital Solutions Hub Limited and its licensors own DutyStack, its software, designs, documentation and service improvements. The customer receives a limited, non-exclusive, non-transferable right for authorised users to use the service during the subscription.

Plan features, usage limits and prices are those shown at purchase or in an agreed order. Free plans or trials may have reduced limits and may change or end on reasonable notice. Paid fees are billed through the configured payment provider and are exclusive of VAT unless expressly stated otherwise.

The checkout or order form must state the billing period and renewal basis. Upgrades may take effect immediately with an appropriate charge. Downgrades or cancellation normally take effect at the end of the paid period unless the purchase flow says otherwise. The customer remains responsible for accrued fees.

If a plan limit, overdue payment or lifecycle restriction applies, DutyStack may prevent new writes, uploads or premium actions while preserving read-only access where the implemented service state allows it. Read-only access is not guaranteed where security, legal or technical reasons require full suspension.

We may suspend access where reasonably necessary to protect the service or data, respond to unlawful use, enforce material payment defaults, meet legal requirements or contain a security incident. Where practical, we will give notice and an opportunity to remedy.

An organisation owner should request, download and review the complete organisation export before scheduling deletion. Scheduling locks normal access immediately and starts the implemented 30-day pending-deletion period. The owner may cancel during that period. After permanent purge, customer data may not be recoverable.

Either party may terminate as allowed by the order, these terms or applicable law. On termination, access ends in accordance with the applicable lifecycle. The customer is responsible for obtaining required exports before deletion. Limited records may be retained for billing, fraud prevention, disputes, legal obligations or legal holds.

DutyStack may be changed, maintained or temporarily unavailable. We will use reasonable care in operating the service but do not promise uninterrupted or error-free availability unless a separate signed service level agreement says otherwise.

DutyStack depends on third-party infrastructure and integrations. Each party must protect the other's confidential information using reasonable care and may disclose it only to authorised people, suppliers or authorities with a need and lawful basis.

To the fullest extent permitted by law, implied warranties are excluded. Liability exclusions and caps must be set in the final signed terms after legal review; nothing excludes liability that cannot lawfully be excluded, including liability for fraud or fraudulent misrepresentation.

Any customer indemnity should be limited to third-party claims arising from unlawful customer data, the customer's infringement of third-party rights or deliberate misuse of the service, and remains subject to the final solicitor-reviewed liability framework.

We may update the service and propose changes to these terms. Material contractual changes will be notified reasonably and will not retrospectively remove accrued rights. The intended governing law is England and Wales, with its courts having jurisdiction, subject to final legal review and any signed agreement.