Project agreement

Included terms — version 2026-10-25

1. An individual order comes first

These terms apply together with a completed project schedule identifying the legal seller, client and authorised signatory, deliverables, exclusions, acceptance tests, delivery method, dates, revisions, price, currency, applicable taxes and operating costs. A project begins only after the parties agree that schedule in writing. A brand name alone is not a substitute for the seller identity required by law. There is no obligation to pay merely for viewing, filling or printing this form.

2. Scope, delivery and changes

Only agreed deliverables are included. The client supplies accurate instructions, lawful source assets and necessary access. Changes to scope, integrations, content or deadlines require written agreement on their effect on price and timing. Delivery and review periods are stated in the schedule. Report failures against the agreed acceptance criteria so they can be reviewed and corrected. Silence does not waive statutory rights, and a defect or non-conformity is not automatically treated as a paid change request.

3. AI disclosure and intellectual property

Work may be partly or fully created using AI, including OpenAI, Google Gemini and Anthropic Claude. AI output can contain errors, resemble other output and may not qualify for exclusive copyright protection. We do not promise exclusive ownership of raw AI output. Subject to full payment, the rights we can lawfully grant in agreed bespoke deliverables pass as described in the schedule. Existing tools, open-source code, third-party assets, fonts and model services retain their applicable licences. We identify material licence or usage restrictions relevant to the delivery. You warrant that supplied materials and instructions may lawfully be used for the project. Publication of your confidential work or logo as a portfolio example requires separate permission.

4. Privacy and confidential information

The Privacy Notice is part of the information supplied with your order. Relevant material may be processed by the named AI, hosting, email, administration and payment providers described there. Confidentiality and data minimisation remain necessary. Do not supply sensitive or third-party personal data without an agreed processing scope and any required data-processing/transfer agreements. The AI acknowledgement confirms the production method; it is not a waiver of privacy rights or permission for unrelated disclosure.

5. Price and payment after completion

The schedule must state the total price, currency and tax treatment, not merely an hourly guess. Unless that schedule expressly agrees otherwise, payment is requested after the agreed work is completed and delivered for acceptance. A PayPal goods/services invoice or verified payment link may then be provided. No payment is collected by this website. Marketplace work must remain within the platform's contract and payment rules; these terms do not authorise evading those rules. Domain renewals, hosting, model usage and external subscriptions are included only if expressly priced. No card details or PayPal password should be emailed to us.

6. Israeli consumer cancellation rights

Where Israel's Consumer Protection Law applies to a remote consumer transaction, the general cancellation period is 14 days from the legally relevant date. For services it is generally measured from the agreement or receipt of the required transaction document, whichever is later. For a non-continuous service, the statutory right is subject to notice at least two non-rest days before the scheduled service. Continuous services have different rules and proportionate payment for service already provided may apply.

A qualifying person with a disability, a consumer aged 65 or above, or a qualifying new immigrant may have four months, rather than 14 days, where the transaction included a conversation, including electronic communication, and the statutory conditions are met. We do not impose a general 60-day limit. Do not send medical records with a cancellation request; any legally permitted proof request will be limited to what is necessary.

The law includes specific exclusions, including certain goods made especially for the consumer following the transaction and certain computer information. Whether an exclusion applies depends on the actual transaction and law. Calling a website, design or programming service “custom-made” does not, by itself, remove every cancellation, defect or non-performance remedy. No blanket “custom work is never refundable” rule applies under these terms.

Where cancellation fees are legally permitted, they will not exceed the lower of 5% of the transaction price or NIS 100, subject to the applicable legal rules. Defect, non-conformity, late/non-delivery or other breach may require cancellation without such a fee. Refunds are made within the applicable statutory deadline, generally 14 days for a qualifying Israeli remote-sale cancellation. Mandatory rights override inconsistent schedule terms.

7. EEA consumer withdrawal and early work

Where mandatory EEA consumer distance-contract rules apply, a service consumer normally has 14 days from conclusion to withdraw. Starting work early requires a separate express request. Where lawful, withdrawal after such a request may require payment proportionate to the service actually supplied. Loss of the service withdrawal right on full performance requires the applicable prior express consent and acknowledgement. Beginning work alone does not automatically remove the right.

Non-tangible digital content has separate express-consent and acknowledgement rules, which must be addressed specifically if that is the transaction. Personalised-goods exceptions do not automatically apply to all digital services. If no valid early-start request is given, work should be scheduled after the applicable period. Business-to-business orders may have different contractual cancellation terms, subject to mandatory law.

8. How to cancel

Send an unambiguous cancellation notice to dev@viridlabs.de or by post to ViridLabs, 28 Derech Abba Hillel, Ramat Gan 5253202, Israel. You may use any additional cancellation channel required by applicable law and disclosed in your completed order. Include your name, order reference and contact details. No special wording, signature or use of our form is required to exercise a statutory cancellation right. We will confirm receipt and explain the applicable settlement. Contact details required for the legal seller must be completed before contracting.

9. Reliability, remedies and support

Software and AI output need testing in the intended environment. Hosting, maintenance, response times, backups and ongoing support apply only as stated in the schedule. No search ranking, revenue, error-free AI answer or uninterrupted third-party service is guaranteed. These statements do not exclude liability or remedies that cannot lawfully be excluded. Any project-specific liability allocation must be expressly agreed and remain subject to mandatory consumer and privacy law.

10. Governing law and evidence

Israeli law governs the agreement to the extent permitted, without depriving a consumer of mandatory protections or available courts in their place of residence. An individual agreement records the exact policy version and project schedule. Each party should retain an identical dated copy. Preparing a document on this site is not proof that a contract was received, signed or accepted. We confirm receipt and agreement separately in writing.

Included privacy notice — version 2026-10-25

Who to contact

ViridLabs is the service brand. Contact dev@viridlabs.de or write to 28 Derech Abba Hillel, Ramat Gan 5253202, Israel, for enquiries, cancellations and privacy requests. The full legal seller/controller identity and applicable identification details must be stated in your individual order before it is accepted. This page does not represent that ViridLabs is an incorporated company.

Information and purposes

We process contact details, your organisation and role, project instructions, files you choose to provide, correspondence, agreement and signature records, deliverables, payment references and technical security information. We use these to answer enquiries, scope and perform work, maintain security, administer payments, meet legal obligations and resolve disputes. Supplying an enquiry is voluntary. Without necessary contact, scope or billing information we may be unable to quote, contract or deliver. Do not send passwords, identity documents, health information or production customer data in an initial enquiry.

Website and agreement forms

Our calculator, brand explorer and scripted assistant run in your browser. The quote form opens a draft in your email application. The agreement form prepares a printable document locally. These forms do not automatically submit their contents to our server, record signatures centrally or store form values in browser storage. You choose whether to send an email or signed document. This website uses no advertising trackers, analytics cookies or account cookies. Infrastructure may process IP addresses and request details for delivery and security.

Lawful grounds and your instructions

Where GDPR applies, processing may be necessary for steps you request before a contract and performance of that contract (Article 6(1)(b)), legal obligations (6(1)(c)), or legitimate interests in business correspondence, security and legal claims (6(1)(f)), subject to your rights. If separate consent is required for a particular use, it will be requested specifically and can be withdrawn without affecting prior lawful processing. Accepting an order is not blanket consent to unrelated uses, marketing or unrestricted AI training.

AI-assisted and fully AI-generated work

Deliverables may be partially or entirely generated using AI. We may use OpenAI tools, Google Gemini and Anthropic Claude for coding, design, drafting and analysis. Relevant prompts, project instructions, selected files, code and correspondence may be disclosed to the selected provider to carry out your requested work. Only relevant information should be shared. Do not supply third-party personal data or confidential production datasets for AI use unless the project expressly authorises that processing and the required safeguards have been agreed.

Provider retention, model-training use, location and subprocessors depend on the product, account and settings used. We do not promise zero retention, no training or EU-only processing across all products. A project requiring those restrictions must identify the approved products/settings and written terms before that information is used. Our use of AI does not remove our responsibility to provide the agreed service. No automated decision with legal or similarly significant effects is offered by the demonstration assistant.

Recipients, storage and international transfers

Our project website and primary VPS services are hosted with Netcup in European datacentres. Business email is processed on our mail server and forwarded to Gmail. Google Drive/Sheets may hold project administration records and selected business correspondence. OpenAI, Google and Anthropic may receive relevant work material when their tools are used. PayPal or the relevant marketplace handles payment information directly. Authorised collaborators, advisers and authorities may receive information where necessary for the stated purposes or required by law.

European hosting does not mean that all information stays in Europe. Access from Israel and the operations of email, AI, payment and cloud providers may involve Israel, the United States or other countries. Where required, a transfer must rely on an applicable adequacy decision or appropriate safeguards, such as standard contractual clauses and a transfer assessment, and comply with Israeli overseas-transfer regulations. A client signature alone does not replace those safeguards or a processor agreement. Ask dev@viridlabs.de about the arrangements relevant to your project before transferring restricted information.

Client personal data and processor arrangements

If we handle personal data for your organisation rather than our own administration, the parties must first agree the controller/processor roles, documented instructions, data categories and people affected, confidentiality, security, subprocessors, incident assistance, rights requests, return/deletion and any international-transfer arrangements. An Article 28 GDPR data-processing agreement is required where applicable. This general notice is not a substitute for that agreement. Avoid providing live personal datasets until it is in place.

Retention and security

We retain enquiry information while it is needed to respond and assess the opportunity, and review inactive enquiries after 12 months. Project materials are retained for delivery, agreed support and reasonable dispute handling, then reviewed for deletion or return. Contracts, invoices and payment records may be retained longer where tax, accounting, legal limitation periods or a legal hold require it. The project schedule should record any specific retention/deletion requirements. Provider copies and backups follow the applicable service arrangements; do not assume instantaneous deletion.

We use access restrictions, HTTPS and authenticated mail submission for these services. No system is risk-free. Security measures, backups and recovery requirements for client applications must be agreed in the project scope. We will address and report incidents as applicable law requires; where acting as a processor we notify the client without undue delay after becoming aware of a relevant breach.

Your rights and complaints

Depending on the law and circumstances, you may request access, correction, deletion, restriction, portability, object to legitimate-interest processing or withdraw specific consent. Israeli law provides access and correction rights, and deletion rights in applicable cases. Rights are subject to lawful exceptions, including necessary record retention. Email dev@viridlabs.de with enough information to locate your records. We may reasonably verify identity without routinely asking for a full identity document. GDPR requests are normally answered within one month, with an explained extension where legally permitted. You may complain to the Israeli Privacy Protection Authority or an appropriate EEA data protection authority, and use other legal remedies.

Updates

This notice describes version 2026-10-25. A materially different project data use must be explained before it takes place. Changes to this webpage do not silently amend an already signed project agreement.