Prismaraby SovSec

Legal Prismara Personal Terms

SOV-LG-010

Prismara Personal Terms

Applies to Prismara Personal (free & Secure) users · Version 1.0 · 2 November 2026

Draft — pending legal review. These documents are being finalised. Fields shown as [TO BE COMPLETED] are not yet filled in, and the wording may change before it is legally binding.

1. About these terms and about us

1.1 These terms apply when you create a Prismara Personal account. They form a contract between you and SovSec Ltd, a private limited company registered in England and Wales under company number [COMPANY NUMBER], registered office [REGISTERED OFFICE ADDRESS] — and, from the date on which it assumes the contract by written notice, its Austrian subsidiary [SOVSEC FLEXCO NAME], registered in the Austrian commercial register (Firmenbuch) under FN [FN NUMBER], Landesgericht [COURT], seat [ADDRESS, AUSTRIA] (planned 2028) (SovSec, we, us). Prismara is SovSec's product brand.

1.2 Contact us at support@sovsec.com (support), billing@sovsec.com (billing), privacy@sovsec.com (privacy) or legal@sovsec.com (legal notices), or by post to our registered office. SovSec Ltd · Company no. [COMPANY NUMBER] (England and Wales) · VAT no. [UK VAT] · EU OSS / UID [NUMBER]; from 2028: [SOVSEC FLEXCO NAME], FN [FN NUMBER], UID ATU[NUMBER].

1.3 These terms are for consumers: individuals using Prismara for purposes outside their trade, business, craft or profession. If you use Prismara for your business, the Prismara Subscription & Software Licence Terms (SOV- LG-009) apply instead.

1.4 These terms incorporate the Acceptable Use Policy (SOV-LG-008). The Privacy Policy (SOV-LG-005) explains how we use your personal data; it is not part of the contract but you should read it.

1.5 We make these terms available in English (and a German translation). You can save or print them at any time from prismara.eu/legal; we also send them to you by email when you sign up.

2. Eligibility, invitation-only alpha and your account

2.1 Age. You must be at least 16 years old to create an account. By signing up you confirm that you are. To buy Personal Secure you must be at least 18, or a parent or guardian must buy it for you. If we learn that an account belongs to someone under 16, we will close it and delete its data.

2.2 Where you live. This edition applies if you live in a Member State of the European Union or the EEA. We may refuse sign-ups from places where we cannot lawfully provide the service.

2.3 Alpha status. Prismara Personal is currently an invitation-only alpha. You can only sign up with an invitation. During the alpha: features may be incomplete, change or be removed; there may be outages and bugs; and data

loss, while unlikely, is possible. Please keep your own copies of anything you cannot afford to lose. Personal Secure is not charged for until paid launch; we will tell you in advance and ask you to confirm before your first payment.

2.4 Your account. You must give accurate information, keep your password and second factor safe, and tell us promptly at security@sovsec.com if you think someone else has accessed your account. One person may hold one free account. Accounts are personal and may not be sold or transferred.

3. What you get

Personal Free Personal Secure

 Price                Free                                                       €7.90 per month, including VAT

 Prismara Identity    Yes — sign-in, passkeys, two-factor                        Yes

 Prismara Mail        name@prismara.eu mailbox                                   name@prismara.eu mailbox, higher limits

 Prismara Work        Documents, spreadsheets, presentations (web)               Yes

 Prismara Prism       —                                                          Password manager (apps and browser extensions)

 Prismara ZTNA        —                                                          Personal VPN

 Prismara Endpoint    —                                                          Device protection for your own devices

 Prismara Spaces      —                                                          File storage and sync

 Prismara Browser     —                                                          Yes

3.1 Current storage allowances, device limits, sending limits and supported platforms are shown on prismara.eu/ personal and in your account. Those details form part of the description of the service you buy.

3.2 Free mailbox. Your mailbox address is name@prismara.eu, subject to availability. Addresses that impersonate others, mislead, or infringe rights may be refused or withdrawn. To protect the service from spam, sending is limited (currently [200] messages a day and [100] recipients per message for Personal Free, and [500] and [100] for Personal Secure). We may lower limits temporarily for an account that appears to be compromised or sending spam.

3.3 Inactive free accounts. If you do not sign in to a Personal Free account for 12 months, we may close it. We will email you (to your mailbox and any recovery address) at least 30 days before, and signing in once keeps it open. Personal Secure accounts are not closed for inactivity while paid for. We do not give a closed address to anyone else.

4. Price, payment and renewal

4.1 Price. Personal Secure costs €7.90 per month, including VAT. If VAT in your country changes, or if we must apply a different VAT rate, we will not increase the price you pay during the current month; any change follows clause 9. The price you pay is shown before you confirm your order.

4.2 Payment. Payments are processed by Stripe (Stripe Payments Europe, Limited, Ireland). We do not see or store your full card details. You pay monthly in advance, starting on the day you subscribe (or on the paid-launch date, if you joined during the alpha and confirmed).

4.3 Automatic renewal. Personal Secure is a rolling monthly subscription. It renews automatically each month, and we charge your payment method on the renewal date, until you cancel. We will tell you clearly before you subscribe that it renews automatically, how much it costs and how to cancel.

4.4 Failed payments. If a payment fails, we will tell you and try again over 14 days. If it still fails, your account moves to Personal Free; Personal Secure features stop, but your data is kept for at least 60 days so that you can resubscribe or export it (see clause 11).

4.5 Receipts. We email a receipt for every payment. Your billing history is in your account.

5. Cancelling your subscription

5.1 You can cancel Personal Secure at any time, in your account under Subscription → Cancel, by emailing billing@sovsec.com from your account address, or by writing to us. No reason is needed and there is no cancellation fee.

5.2 Cancellation takes effect at the end of the month you have already paid for. You keep Personal Secure until then, after which the account becomes Personal Free. We do not refund part-months after the cancellation period in clause 6, unless the law or clause 9 requires it.

5.3 You can also close your whole account at any time in your account settings. Clause 11 explains what happens to your data.

6. Your right of withdrawal (14 days)

6.1 Withdrawal period. You have the right to withdraw from the contract for Personal Secure within 14 days without giving any reason (§ 11 of the Austrian Distance and Off-Premises Contracts Act, FAGG, and the corresponding law of your country of residence). The withdrawal period ends 14 days after the day the contract is concluded.

6.2 How to withdraw. To exercise your right, inform us (SovSec Ltd, [REGISTERED OFFICE ADDRESS], billing@sovsec.com) by an unequivocal statement: use the "Withdraw from contract" (Vertrag widerrufen) function in your account, which is available throughout the withdrawal period, send an email or write to us. You may use the model withdrawal form in the Annex, but you do not have to. If you use the online function, we will confirm receipt to you by email without delay, including the date and time. You meet the deadline if you send your withdrawal before the period ends.

6.3 Starting straight away. When you subscribe, we ask whether you want Personal Secure to start immediately, within the withdrawal period. If you expressly request this (§ 10 FAGG) and confirm that you know you must pay a proportionate amount if you withdraw, then, if you withdraw, you must pay an amount in proportion to the services supplied until you told us you were withdrawing, compared with the full scope of the contract (§ 16 FAGG). If you do not make that request, Personal Secure starts when the withdrawal period ends.

6.4 Consequences of withdrawal. If you withdraw, we refund all payments received from you, less any proportionate amount under clause 6.3, without undue delay and at the latest within 14 days from the day we receive your withdrawal. We use the same means of payment you used, unless you expressly agree otherwise; you will not be charged any fees for the refund.

6.5 Digital content. Your right of withdrawal does not lapse just because you have started using the service. Apps and extensions provided as part of Personal Secure are supplied with the service; if you withdraw, your right to use them ends. The exceptions in § 18 FAGG (for example for services fully performed at your express request) do not normally apply to a running monthly subscription.

6.6 Personal Free. Personal Free costs nothing. Because you provide personal data when using it, you may also withdraw from it within 14 days; in practice, you can close your account at any time.

7. Your statutory rights

7.1 You have the statutory warranty rights (Gewährleistung) under the Austrian Consumer Warranty Act (VGG) and the corresponding law of your country of residence. Personal Secure must be in conformity with the contract throughout the period it is provided. If it is not, you may require us to bring it into conformity, and if we fail to do so, refuse to do so or the defect is serious, you may have the price reduced or terminate the contract.

7.2 Updates. Under § 7 VGG we provide, and tell you about, the updates — including security updates — needed to keep the service and the apps in conformity for the whole time you subscribe. If you do not install an update we have provided and told you about, we are not responsible for a defect caused solely by that, provided we explained the consequences of not installing it.

7.3 Burden of proof. For services provided continuously, if a lack of conformity becomes apparent during the subscription, we must prove that the service was in conformity.

7.4 Nothing in these terms limits these rights. Personal Free is provided without payment; where the VGG applies to it because you provide personal data, the same rights apply as far as the law requires.

8. Using the service

8.1 You must follow the Acceptable Use Policy (SOV-LG-008). In particular you must not use Prismara to send spam or malware, to attack or scan systems without permission, to infringe others' rights, or for anything illegal.

8.2 Personal VPN (ZTNA). The Prismara ZTNA personal VPN protects your connection; it does not make illegal activity lawful. You must not use it for unlawful purposes, to infringe copyright, to evade lawful sanctions, or in breach of the terms of other services you use. We keep only the minimum connection metadata needed to run and secure the service, for the periods stated in the Privacy Policy, and we do not log the content or destinations of your browsing. Using a VPN may be restricted in some countries you visit; you are responsible for complying with local law.

8.3 Endpoint. Prismara Endpoint may be installed only on devices you own or are authorised to protect. It collects security telemetry from those devices as described in the Privacy Policy.

8.4 Your content. You own what you create and store. You give us only the permission we need to store, process and transmit it to provide the service to you.

8.5 Our software. We give you a personal, non-transferable right to use our apps and extensions for as long as your account is open. Open-source components are licensed under their own licences, listed in each app.

9. Changes to the service, the price and these terms

9.1 Changes to the service. We improve Prismara continuously, especially during the alpha. We may change features if there is a valid reason (for example security, new laws, technical developments, or to reflect how the service is used), provided you incur no additional cost. If a change negatively affects your access to or use of Personal Secure in more than a minor way, we will tell you at least 30 days in advance, and you may cancel free of charge within 30 days of the change taking effect (or of being told, if later) and receive a refund for any period you have paid for but not used.

9.2 Price changes. We will only change the price of your existing subscription with your express agreement. We will ask you at least 30 days before the proposed change. If you do not agree, your subscription continues at the

current price until either of us ends it in line with these terms; we may then give notice to end the subscription at the end of a billing month, at least 30 days in advance.

9.3 Changes to these terms. We may update these terms for a valid reason, such as legal changes or changes to the service. We will tell you about material changes at least 30 days before they take effect. Changes that are not to your advantage and that affect the main obligations of the contract require your express agreement; for other changes, you can cancel before they take effect.

10. Suspension and termination by us

10.1 We may suspend your account, or part of it, if reasonably necessary: to deal with a security threat or a compromised account; to stop serious or repeated breaches of the Acceptable Use Policy; or if required by law. We will tell you why and, where possible, give you a chance to fix the problem first. Suspension lasts only as long as needed.

10.2 We may end your account with immediate effect for serious or repeated breaches of these terms or the Acceptable Use Policy (for example sending spam, distributing malware or illegal content). Otherwise, we may end Personal Free or Personal Secure by giving at least 60 days' notice for a valid reason, and we refund any amounts you have paid for periods after the end date.

10.3 End of the alpha. If we end Prismara Personal, or the alpha, we will give you at least 60 days' notice and the chance to export your data.

11. Your data, export and deletion

11.1 Our Privacy Policy (SOV-LG-005) explains how we process your personal data. Your data is hosted on dedicated servers in a data centre in Vienna, Austria, and stays in the EU/EEA, except where you send it elsewhere (for example an email to a recipient outside the EU).

11.2 Export. You can export your data at any time, free of charge, in common formats (for example mail as MBOX/ EML, contacts as vCard, calendars as iCalendar, documents in OpenDocument or Office formats, and vault items as an encrypted or CSV export).

11.3 When you close your account, your data stays available for export for 30 days, and you can reopen the account during that time. We then delete it from our live systems within 30 days and from backups within a further 35 days. Payment and tax records are kept for as long as the law requires (generally seven years under § 132 of the Austrian Federal Fiscal Code (BAO), and ten years for VAT One-Stop-Shop sales records).

11.4 When Personal Secure ends but your account continues as Personal Free, data above the free allowances (for example Spaces files) remains read-only and exportable for at least 60 days. We will remind you before we delete anything.

Y O U R P R I S M VA U LT A N D L O S T M A S T E R PA S S W O R D S

Your Prism vault is encrypted on your device with a key derived from your master password. We never see your master password or the key. If you forget your master password and have not set up a recovery method (a recovery code, a trusted device or emergency access), we cannot recover your vault or its contents. Please set up recovery when you create your vault and keep your recovery code safe. The same applies to other data you encrypt with keys only you hold.

12. Our responsibility to you

12.1 We are liable without limitation for damage caused intentionally or by gross negligence, for personal injury (including death and damage to health), and under the Austrian Product Liability Act and other mandatory law.

12.2 For damage caused by slight negligence, other than personal injury, we are liable for breach of essential contractual obligations (obligations whose fulfilment makes proper performance of the contract possible in the first place and on which you may regularly rely), limited to the typical damage foreseeable when the contract was made.

12.3 These terms do not exclude or limit your warranty rights under the VGG or any other right you have under mandatory consumer law (including § 6 and § 9 KSchG).

12.4 Security tools reduce risk but cannot stop every threat. Using Prismara Endpoint, ZTNA or Prism does not guarantee that your devices or accounts cannot be compromised.

13. Complaints and dispute resolution

13.1 If you have a complaint, please contact support@sovsec.com. We will acknowledge it within 2 working days and aim to resolve it within 14 days.

13.2 If we cannot resolve your complaint, you can contact a consumer alternative dispute resolution body, for

example     the       Internet   Ombudsstelle   (ombudsstelle.at)         or   Schlichtung   für   Verbrauchergeschäfte
(verbraucherschlichtung.at) in Austria, or the competent body in your country. We are willing to participate in
conciliation proceedings before these Austrian bodies (see our Legal Notice, SOV-LG-014).

13.3 The European Commission's online dispute resolution (ODR) platform was discontinued on 20 July 2025 and
is no longer available. The European Consumer Centre in your country (in Austria: europakonsument.at) can help
with cross-border complaints.

13.4 Your rights to make a complaint to a data protection authority (Datenschutzbehörde (DSB) or the authority
where you live) are described in the Privacy Policy.

14. Governing law and courts

14.1 These terms are governed by Austrian law, excluding its conflict-of-law rules and the UN Convention on Contracts for the International Sale of Goods. This choice of law does not deprive you of the protection of the mandatory provisions of the law of the country in which you have your habitual residence (Article 6 Rome I Regulation).

14.2 You may bring proceedings against us in Austria or in the courts of the place where you live. We may bring proceedings against you only in the courts of the country where you live (Articles 17 to 19 Brussels Ia Regulation; § 14 KSchG).

14.3 If any part of these terms is invalid, the rest remains in force. We may transfer the contract to our affiliate (including our planned Austrian subsidiary) if this does not reduce your rights; we will tell you, and you may cancel. You may not transfer your rights without our consent.

15. Annex — Model withdrawal form

(If you want to withdraw from the contract, please fill out and return this form. Model form under Annex I, Part B of the Austrian FAGG and Annex I, Part B of Directive 2011/83/EU. You can also use the "Withdraw from contract" function in your account.)

To: SovSec Ltd, [REGISTERED OFFICE ADDRESS], billing@sovsec.com I/We (*) hereby give notice that I/We (*) withdraw from my/our (*) contract of sale of the following goods (*)/ for the provision of the following service (*), Ordered on (*)/received on (*), Name of consumer(s), Address of consumer(s), Signature of consumer(s) (only if this form is notified on paper), Date (*) Delete as appropriate.

Account email / Prismara address (to help us find your contract): ______________________________

Drafting notes — remove before publication

  • Company placeholders: [COMPANY NUMBER], [REGISTERED OFFICE ADDRESS] (also in the model form), [VAT NUMBER], EU OSS registration, Art. 27 GDPR representative.
  • €7.90/month incl. VAT: confirm whether a single EU-wide gross price is kept when OSS VAT rates differ by Member State (margin absorbs difference) — clause 4.1 assumes yes.
  • Mailbox limits ([200]/[500] per day, [100] recipients), 12-month inactivity rule, VPN metadata retention, record-retention and backup deletion periods to be confirmed and aligned with the Privacy Policy (SOV-LG-005).
  • Withdrawal button: Directive (EU) 2023/2673 (Art. 11a CRD) is implemented in Austria by § 13a FAGG (VerbRÄG 2026) for contracts concluded after 30 September 2026 (per WKO guidance). Label 'Vertrag widerrufen', confirm via 'Widerruf bestätigen', always visible during the period, receipt on a durable medium. Confirm wording, the English label, and transposition in other Member States.
  • Austrian conciliation bodies (Internet Ombudsstelle; Schlichtung für Verbrauchergeschäfte): confirm whether SovSec will participate and the AStG § 19 information wording. ODR platform discontinued 20 July 2025 (Regulation (EU) 2024/3228) — verified; no ODR link included.
  • Price-change clause 9.2 uses express consent because Austrian Supreme Court case law (e.g. on streaming-service price clauses) treats unilateral or deemed-consent price adjustments in consumer standard terms as void under § 6(1)(5) and § 6(3) KSchG and § 879(3) ABGB. Confirm. Also confirm clause 10.2 'valid reason' for termination by us and clause 12 liability wording under § 6(1)(9) KSchG.
  • Free tier and personal data as counter-performance: confirm the scope of withdrawal and warranty rights for Personal Free (EU: FAGG/VGG apply where personal data is provided; UK: CRA digital-content rights for free content are limited).
  • Minimum age 16: confirm against GDPR Art. 8 / UK age of digital consent (13 in the UK, 14 in Austria) — 16 is above all thresholds; confirm UK Online Safety Act implications for Talk/Mail as user-to-user services, if any.

End of SOV-LG-010 Prismara Personal Terms v1.0 (EU edition). SovSec Ltd · Company no. [COMPANY NUMBER] (England and Wales) · VAT no. [UK VAT] · EU OSS / UID [NUMBER]; from 2028: [SOVSEC FLEXCO NAME], FN [FN NUMBER], UID ATU[NUMBER].

Questions about this document? Contact us. SovSec Ltd — Sovereignty is Security.

Prismara

Sign in to your workspace

or

You enter your password and second factor only on Prismara Identity's own page, never here. Administrators use Admin login.
Prismara Admin Console

Administrator sign-in

Passkey required
Separate session from your user account
Every action recorded in the audit trail
or

Continues to Prismara Admin at admin.prismara.eu. Not an administrator? Use User login.