Terms & conditions.

1. The agreement

These terms govern your use of the Klaimed detection feed, vision model APIs, scraping pipeline, and any related software or services (together, the "Service") provided by Klaimed SRL, a Belgian private limited company (société à responsabilité limitée / besloten vennootschap) with its registered office in Brussels, Belgium ("Klaimed", "we", "us"). Klaimed sells data — not a workflow product. Customers are typically brand-protection platforms, IP management vendors (IPMS), and marketplaces that consume our detection records inside their own software. By creating an account, signing an order form, or sending an API request authenticated with a Klaimed key, you ("Customer") agree to these terms on behalf of the organization you represent.

Where you have signed a separate written agreement with Klaimed, the terms of that agreement supersede this document to the extent of conflict.

2. Use of the service

Klaimed grants Customer a non-exclusive, non-transferable, revocable license to consume the Klaimed detection feed for the sole purpose of identifying counterfeit, infringing, or otherwise unauthorized listings against products or brands for which Customer (or Customer's downstream client) has authority to act.

Customer agrees not to:

• Use the Service to surveil natural persons, perform facial recognition, or build profiles of individuals.
• Reverse-engineer the vision models, attempt to extract training data, or build a competing visual-detection feed using Klaimed outputs.
• Re-sell raw detection records to third parties except under a written OEM or platform-integration agreement.
• Use the Service against any brand for which Customer or its downstream client cannot demonstrate authority on request.

3. Accounts & access

Customer is responsible for safeguarding API keys, restricting access to authorized personnel, and rotating credentials when team members depart. Klaimed will provide reasonable assistance with key rotation but is not liable for losses arising from a Customer's failure to protect its keys.

4. Your data

Reference catalogs, attribute schemas, brand fingerprints, and detection results generated for Customer are Customer's property. Klaimed processes this data solely to deliver the Service, will not sell it, and will not use it to train models that serve other customers without an explicit written grant.

Aggregated, de-identified statistics about model performance (latency distributions, confidence histograms, surface coverage) may be retained indefinitely for the purpose of operating and improving the Service.

5. Scraping & third-party content

The Klaimed ingestion pipeline retrieves publicly-accessible listings from marketplaces, social commerce surfaces, and the open web. We respect robots.txt directives, do not log into gated surfaces, do not bypass paywalls, and rate-limit our crawlers to be a polite citizen of the surfaces we touch.

Customer acknowledges that scraped content remains the intellectual property of its publishers, that Klaimed makes no representations about the lawfulness of using a specific scraped item in a takedown notice, and that the legal sufficiency of any takedown remains Customer's responsibility.

6. Intellectual property

The Service, the underlying models, model weights, training data, reasoning pipelines, and all related software are and remain the exclusive property of Klaimed. Nothing in these terms transfers ownership of any Klaimed IP to Customer.

Customer grants Klaimed a limited, non-exclusive license to process the reference materials, brand assets, and listing URLs Customer submits, solely as needed to perform the Service.

7. Fees

Fees are set out in the applicable order form. Production tier fees are invoiced monthly in advance and are non-refundable except as expressly stated. Usage-based overages are invoiced in arrears. Invoices are payable within 30 days of issue; late payment automatically incurs interest at the rate set out in the Belgian Act of 2 August 2002 on combating late payment in commercial transactions, plus a fixed indemnity of €40 per invoice in accordance with that Act. All fees are exclusive of VAT and any other applicable taxes; Customer is responsible for VAT and similar taxes applicable in Customer's jurisdiction.

8. Warranties & disclaimers

Klaimed undertakes a best-efforts obligation (obligation de moyens / middelenverbintenis) to provide the Service in a professional manner, consistent with the SLA in the applicable order form. To the maximum extent permitted by Belgian law, and except for this undertaking, the Service is provided "as is" and Klaimed excludes all other warranties, express or implied, including fitness for a particular purpose and non-infringement. Nothing in these terms excludes or limits liability for fraud (dol) or any other liability that cannot be excluded under Belgian law.

A detection record is a model output. It is not a legal determination of counterfeit, infringement, or any other claim. Customer is solely responsible for the takedown, enforcement, or commercial decisions it (or its downstream clients) takes based on Klaimed's data.

9. Limitation of liability

Except for amounts owed under indemnification obligations, breaches of confidentiality, and any liability that cannot be limited under Belgian law (including fraud and gross negligence), each party's aggregate liability under these terms is capped at the fees paid by Customer to Klaimed in the twelve months preceding the event giving rise to the claim. Neither party is liable for indirect or consequential damages, including loss of profit, loss of revenue, loss of data, or reputational harm.

10. Termination

Either party may terminate for material breach upon 30 days written notice if the breach is not cured within that period. In accordance with Article 1184 of the (former) Belgian Civil Code and the corresponding provisions of the new Civil Code on contracts (Book 5), termination for material breach does not require prior judicial intervention. Upon termination, Customer's access to the Service ceases, and Klaimed will, on request, return or destroy Customer's reference catalogs and detection history within 30 days.

11. Governing law

These terms are governed exclusively by Belgian law, to the exclusion of its conflict-of-laws rules and of the United Nations Convention on Contracts for the International Sale of Goods (CISG). Any dispute arising out of or in connection with these terms that cannot be resolved amicably will be submitted to the exclusive jurisdiction of the French-speaking courts of Brussels (Tribunaux francophones de Bruxelles), without prejudice to either party's right to seek interim or protective measures before any competent court.

12. Privacy notice

Klaimed processes two categories of data: (a) operational data submitted by Customer (reference catalogs, listing URLs, attribute schemas, API keys); and (b) scraped content retrieved from publicly-accessible surfaces.

We do not collect or process personal data about end-consumers of the surfaces we scrape. Where a listing incidentally contains seller information (display name, avatar), that information is retained only as part of the listing record needed to deliver a takedown notice and is not used for any other purpose.

For Customer team members who access the dashboard, we collect name, work email, and authentication metadata. We retain access logs for 12 months for security purposes.

13. Data processing addendum

As a Belgium-based controller and processor, Klaimed processes personal data in accordance with Regulation (EU) 2016/679 (GDPR) and the Belgian Act of 30 July 2018 on the protection of natural persons with regard to the processing of personal data. Our lead supervisory authority is the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit), Rue de la Presse 35, 1000 Brussels.

For customers processing data subject to the GDPR or the UK GDPR, Klaimed will execute its standard Data Processing Addendum on request to legal@klaimed.ai. The DPA incorporates the EU Standard Contractual Clauses (Commission Implementing Decision (EU) 2021/914) for any cross-border transfers and names Klaimed as a processor acting on Customer's documented instructions.

14. Security

Klaimed operates a security program aligned with the controls of ISO/IEC 27001 and the data-protection requirements of the GDPR. We encrypt data in transit (TLS 1.2+) and at rest (AES-256), enforce SSO and MFA for all production access, log production activity, and run a coordinated vulnerability disclosure program. A summary of our technical and organisational measures (TOMs) is available on request as part of our DPA.

Suspected vulnerabilities can be reported to security@klaimed.ai. We commit to acknowledging reports within one business day and to keeping reporters in the loop until resolution.