Terms of Service

1. Introduction

Welcome to Collekto, a document collection platform provided by Meged Solutions ("the Platform," "we," "us," or "our"). These Terms of Service ("Terms") govern your access to and use of our platform, including any related services, features, and content (collectively, the "Service").

By accessing or using the Service, you agree to be bound by these Terms. If you do not agree to these Terms, you may not access or use the Service.

2. Description of Service

Collekto is a secure document and data collection platform for professionals and businesses. You decide what to collect from your clients, and the Service enables organizations to:

• Create and manage client accounts
• Define document categories and collection templates
• Collect and organize documents from clients
• Track document submission status
• Securely store and manage uploaded files

3. User Accounts

3.1 Account Registration

To access certain features of the Service, you must register for an account. You agree to provide accurate, current, and complete information during registration and to update such information to keep it accurate, current, and complete.

3.2 Account Security

You are responsible for safeguarding your account credentials and for all activities that occur under your account. You must notify us immediately of any unauthorized use of your account or any other breach of security.

3.3 Account Types

The Service supports different user roles including organization administrators and clients. Each role has specific permissions and access levels as determined by the organization administrator.

4. Paid Plans and Billing

Access to paid features is provided on a subscription basis. The plans, prices, and usage limits that apply to you are those presented at checkout and, where applicable, in a separate service agreement, which together govern your subscription. Applicable taxes are calculated and collected at the time of payment by our payment processor.

Subscription fees are billed in advance for each billing cycle. If payment is not made when due, we may suspend or limit access to paid features after providing notice and a reasonable opportunity to resolve the issue. Except where required by law, fees paid for a billing period that has already been used are non-refundable.

We may change our fees and plans from time to time. For any change that increases the fees you pay, we will provide at least thirty (30) days' advance notice, and the new fees will take effect on your next billing cycle or renewal following that notice. If you do not agree to a fee increase, you may cancel your subscription before it takes effect, in which case the increase will not apply to you.

5. Acceptable Use

You agree not to:

• Use the Service for any unlawful purpose or in violation of any applicable laws
• Upload, transmit, or distribute any content that is illegal, harmful, or violates the rights of others
• Attempt to gain unauthorized access to the Service or its related systems
• Interfere with or disrupt the integrity or performance of the Service
• Collect or harvest any information from the Service without authorization
• Use the Service to transmit malware, viruses, or other harmful code
• Impersonate any person or entity or misrepresent your affiliation

6. Intellectual Property

6.1 Our Intellectual Property

The Service and its original content, features, and functionality are owned by Meged Solutions and are protected by international copyright, trademark, patent, trade secret, and other intellectual property laws.

6.2 Your Content

You retain all rights to the documents and content you upload to the Service. By uploading content, you grant us a limited license to store, process, and transmit such content solely for the purpose of providing the Service.

7. Data Privacy and Data Protection Roles

Your use of the Service is also governed by our Privacy Policy, which describes how we collect, use, and protect your personal information. By using the Service, you consent to our collection and use of data as described in the Privacy Policy.

7.1 Data Owner and Platform Roles

Collekto provides the technology platform only: it stores the files you collect, enforces the access and permissions architecture you configure, and secures the data. In doing so it acts as a holder and processor of the data on your behalf, and does not determine which documents or personal data are collected, or for what purpose. As the business account holder, you are the owner and controller of the client data you collect through the Service: you define the document categories, descriptions, and purposes, you invite and manage your clients, and you download the data. You are the party that determines the purposes of processing, and responsibility for the content of those definitions, the types of data collected, and the lawfulness of collecting and using it rests solely with you. Storing the data on the platform's infrastructure does not transfer that responsibility to Collekto, and Collekto does not review or approve the content you configure.

7.2 Your Responsibilities as Data Controller

As the controller of your clients' data, you undertake to handle it responsibly and confidentially and to comply with the Protection of Privacy Law, 5741-1981, and the Privacy Protection (Data Security) Regulations, 5777-2017 (including Amendment 13). In particular, you undertake to:

• Collect and retain only the data necessary to provide the service, and use it solely for the purpose for which it was collected.
• Not disclose the data to any third party without a lawful basis or the data subject's consent.
• Honor your clients' rights to access, correct, and delete their data in a timely manner, and delete data that is no longer needed.
• Secure any data you download or store outside the Service, for which full responsibility passes to you from the moment of download.
• Inform your clients, as required by law, of the collection of their data and its purpose.

8. Data Security and Encryption

We apply industry-standard security measures to protect data stored in the Service. Documents that you and your clients upload are encrypted at rest using envelope encryption based on AES-256-GCM, with layered key management. Keys are managed so that data belonging to different organizations is cryptographically separated.

Access to stored data requires authentication and the role-based permissions you configure. No security system is completely impenetrable, and you remain responsible for safeguarding your account credentials and for any data you export or store outside the Service.

9. Service Availability

We strive to maintain high availability of the Service but do not guarantee uninterrupted access. We may suspend or restrict access to the Service for maintenance, updates, or other operational reasons. We will make reasonable efforts to provide advance notice of planned downtime.

10. Warranties and Limitation of Liability

The Service is provided on an "as is" and "as available" basis. To the maximum extent permitted by applicable law, and except as expressly stated in these Terms, Meged Solutions makes no warranties or representations of any kind, whether express or implied, including any implied warranty of merchantability, fitness for a particular purpose, or that the Service will be uninterrupted or error-free. We are not responsible for the content, accuracy, or lawfulness of documents and information uploaded by you or your clients, which remain your sole responsibility.

To the maximum extent permitted by applicable law, Meged Solutions shall not be liable for any indirect, incidental, special, consequential, or punitive damages, or any loss of profits or revenues, whether incurred directly or indirectly, or any loss of data, use, goodwill, or other intangible losses resulting from:

• Your access to or use of (or inability to access or use) the Service
• Any conduct or content of any third party on the Service
• Any content obtained from the Service
• Unauthorized access, use, or alteration of your transmissions or content

To the maximum extent permitted by applicable law, the total aggregate liability of Meged Solutions arising out of or relating to these Terms or the Service shall not exceed the total amounts you actually paid for the Service in the twelve (12) months preceding the event giving rise to the claim. This limitation does not apply to liability for willful misconduct or to any rights that cannot be waived or limited under applicable law.

11. Indemnification

You agree to indemnify, defend, and hold harmless Meged Solutions and anyone acting on its behalf from and against any claims, liabilities, damages, losses, and expenses arising out of or in any way connected with your access to or use of the Service or your violation of these Terms.

12. Confidentiality

Each party will keep confidential any non-public business or technical information of the other party that it receives in connection with the Service, and will use it only as needed to provide or use the Service. This obligation continues after these Terms end. It does not apply to information that becomes public through no breach of these Terms, or whose disclosure is required by law.

13. Termination

We may suspend or terminate your access to the Service if you materially breach these Terms and do not cure the breach within a reasonable time after notice, if you use the Service unlawfully or in a way that may harm the Service or other users, for non-payment as described above, or if we discontinue the Service with reasonable advance notice. You may stop using the Service at any time.

Upon termination for any reason, you will be given a reasonable opportunity to export your data. After that period, we may delete your data, including by destroying the encryption keys that protect it (crypto-shred), which renders the data permanently inaccessible. Your existing documents remain readable for export until they are deleted.

14. Force Majeure

Neither party will be liable for any failure or delay in performance caused by circumstances beyond its reasonable control, including communication or network failures, failures of third-party infrastructure or service providers on which the Service relies, natural disasters, or emergencies.

15. Changes to Terms

We reserve the right to modify these Terms at any time. We will notify users of any material changes by posting the new Terms on this page and updating the "Last updated" date. Your continued use of the Service after such changes constitutes acceptance of the new Terms.

16. Governing Law and Jurisdiction

These Terms shall be governed by and construed in accordance with the laws of the State of Israel, without regard to its conflict of law provisions. Any disputes arising from these Terms or the Service shall be subject to the exclusive jurisdiction of the courts located in Ramla, Israel.

17. Contact Information

If you have any questions about these Terms, please contact us at: app@collekto.megedit.com.