Endora · Legal

These GTC apply to all digital services, consulting, and technical solutions under “Endora”. Services are primarily B2B and may include guest-facing components for accommodation providers (“Clients”).

Endora (B2B): GDPR-aligned chat & automations; vouchers/QR flows; recommendations; webhooks/integrations.

Implementation & Consulting: setup, customization, n8n workflows, light training, docs.

Optional Add-ons: affiliate routing, follow-ups, dashboards.

Hosting (EU): Core services hosted in the EU. See Privacy for the minimal technical disclosure.

Contract: concluded via checkout/signed quote/written confirmation upon payment.

Prices & Payment: as shown at checkout/quote; subscriptions billed in advance; applicable taxes indicated.

Roles & Access: Client manages its third-party accounts and lawful basis for guest data; provides accurate content.

Technical Changes: Upstream provider changes/outages may affect features and are not a defect per se.

SLA: No guaranteed uptime unless a separate SLA is signed; maintenance with reasonable notice.

Acceptable Use: lawful use; no prohibited/illegal/misleading content; valid vouchers/offers.

IP: Endora retains IP to software, templates, workflows; Client retains its content/trademarks.

AI Disclaimer: AI outputs can be inaccurate; verify before consequential use; not professional advice.

Liability: Intent/gross negligence per law; simple negligence limited to typical foreseeable damages; mandatory liabilities unaffected.

Data Protection: see Privacy Policy; Art. 28 DPA available for Client processing.

Termination/Withdrawal: subs cancel at period end; digital withdrawal may expire upon performance (§ 312g BGB); termination for cause possible.

Confidentiality: both parties keep confidential information secret.

Law/Jurisdiction: German law; Mainz jurisdiction where permissible; severability applies.

Applies to B2B Clients, guests using Endora chat/widgets/vouchers, and visitors to Endora pages.

Controller (own purposes): Marco Luyckx – Endora, Mozartstr. 12, 65462 Ginsheim-Gustavsburg, Germany · info@endora.io

Processor role: For guest data processed on Client instructions, Endora acts as Processor; a DPA (Art. 28 GDPR) applies.

Controller (own): contact inquiries, business comms, billing data (via Merchant of Record), basic telemetry (timestamp, URL, UA, truncated IP).

Processor (Client): guest chat content, technical metadata, optional contact (only as instructed by Client).

Minimal Technical Disclosure (EU-hosted)

• Hosting Provider: Hetzner Online GmbH (EU)
• Domain & DNS Security: Cloudflare, Inc.
• Encryption: SSL/TLS (HTTPS)
• Data Storage: self-hosted Nextcloud (EU)
• Database: PostgreSQL (EU)
• Automation: self-hosted n8n (EU)
• AI (optional): Microsoft Azure OpenAI in EU regions, only if enabled by Client/project.

Transfers: Core stack EU-hosted; third-country transfers only if Client mandates non-EU tools with safeguards (SCCs).

Retention: operational logs ≤ 14 days; guest chat defaults ≤ 30 days (unless contractually adjusted); invoices/correspondence 6–10 years per law.

Legal bases: Art. 6(1)(b) contract; Art. 6(1)(f) legitimate interests; Art. 6(1)(a) consent; Art. 6(1)(c) legal obligations.

Recipients: EU infrastructure as listed above; payment processor/Merchant of Record; advisors/authorities where required.

Rights: access, rectification, erasure, restriction, portability, objection; withdraw consent anytime. Contact: info@endora.io. Supervisory authority e.g., LfDI Rheinland-Pfalz.

Security (Art. 32): TLS, least privilege, firewalling, audit logging, deletion routines.

DPA: available for Client processing (sub-processor list, TOMs, EU localization).

Cookies: none non-essential by design; if analytics/ads added later, consent banner + policy update.

Changes: updates posted here; current version applies.

• Before work starts: Full refund if you cancel before implementation begins.
• After kickoff but before first delivery: 50% refund.
• After first delivery: No refund once the first deliverable has been provided.
• Revisions: Included rounds will be honored; our bugs fixed at no cost.
• Legal note (EU/B2B): Withdrawal may expire once performance has begun (§ 312g BGB).

• Delivery: snippet + instructions (HTML/JS or JSON).
• Refunds: Not refundable after delivery/access/use.
• Defects: We remedy reasonable issues per docs or offer a credit/refund at our discretion.

• Billing: In advance per term.
• Cancellation: Anytime; access continues until the term ends.
• No pro-rata refunds for partial months.

Email info@endora.io with order details. Include the receipt/transaction ID if applicable.