image for site
CoAlias LogoPowered by CoAlias
image for site
ISMS Policy Generator
Terms and Conditions
Last update: January 2024

TERMS OF SERVICE

This ToS applies to the Policy Generation tool. If you want to know about AI chat assistants (i.e., the ISO 27001 risk assessment assistant or the ISO 27001 Copilot), please see dedicated appendixes.

1. Acceptance of Terms

Your use of ISMS Policy Generator’s services and products, including the website app.ismspolicygenerator.com, is subject to the terms of a legal agreement between you and ISMS Policy Generator.

2. User Obligations

Users are strictly prohibited from using the services for any illegal, inappropriate or dangerous activities. Misuse or exploitation of the services is not permitted. The service may be used by consultants on behalf of their clients, provided they have obtained the necessary permissions. Corporate users must obtain approval from their respective risk, security or compliance departments prior to using the service.

3. Services

Our services rely on bubble.io, OpenAI API, and Zapier, and involve storing data in U.S. servers. We do not request nor require sensitive or confidential business data, and we are not responsible for the unauthorized transmission of such data. Our services operate on the principle of data minimization. Any personal information not requested should not be provided.

4. Payment

Services are provided on a one-time purchase basis. Payment is processed through our Bubble Stripe plugin, and we do not store any payment information.

5. Limitation of Liability

To the maximum extent permitted by law, ISMS Policy Generator shall not be liable for any direct, indirect, incidental, special, consequential, or exemplary damages, including but not limited to damages for loss of profits, goodwill, use, data, or other intangible losses resulting from the use of our services.

6. Data Collection and Use

We collect company-related information such as the company name, company description, company country, and company industry. This data is stored in our database, used for policy generation, and is part of the generated policy stored on Google Drive. Email addresses are collected for sending policies and processing payments, and are stored in our Bubble database. We try to ensure our practices are as GDPR-friendly as possible. Please refer to our Privacy Policy for more information.

7. Dispute Resolution

Any disputes arising out of these terms and your use of our services will be governed by the laws of France, without regard to its conflict of law provisions. You and ISMS Policy Generator agree to submit to the personal jurisdiction of the courts located within France.

8. Termination

ISMS Policy Generator reserves the right to terminate your access to our services at any time, for any reason. For subscription services, users may terminate their subscription at any time.

9. Refund Policy

Please refer to ourRefund Policyfor the conditions and process for requesting a refund.

To update the Terms of Service for ISMS Policy Generator, you can include a new section or clause that addresses the specific nature and limitations of your service, particularly regarding ISO 27001 certification. Here's a suggested addition to the Terms of Service, which can be inserted as a new section or integrated into an existing one:

10. Disclaimer Regarding ISO 27001 Certification

ISMS Policy Generator focuses on assisting users in generating tailored information security policies. While these policies are an integral part of the ISO 27001 certification process, users must understand that obtaining ISO 27001 certification involves comprehensive requirements beyond policy generation. These include, but are not limited to, the actual implementation of security controls, risk management procedures, and ongoing compliance activities.

The services provided by ISMS Policy Generator are designed to support part of the ISO 27001 certification process but do not guarantee certification success. The responsibility for meeting the full scope of ISO 27001 standards, including the effective implementation and maintenance of security controls and practices, rests with the user. ISMS Policy Generator makes no representation or warranty about the user’s ability to achieve ISO 27001 certification through the sole use of our services.

Users are encouraged to consult with qualified professionals and consider additional resources or services to fully comply with ISO 27001 standards and successfully complete the certification process.

11. Promotional Offer for Video Reviews (Effective January 2024)

a. Eligibility: This promotional offer is exclusively available to users subscribed to the monthly plan of ISMS Policy Generator. Users on one-time payment plans are not eligible for this promotion due to technical constraints related to subscription billing.

b. Submission Standards: Participants are required to submit video reviews in accordance with the guidelines provided by VocalVideo.com. By submitting a video review, users grant ISMS Policy Generator the right to use their video on our website and potentially on third-party platforms such as G2, Product Hunt, or similar platforms in the future.

c. Discount Terms:Eligible users who submit a qualified video review will receive a 30% discount on their monthly bill following the submission and approval of their review. This discount is limited to one per user and cannot be combined with other offers.

d. User Consent and Privacy:The collection and use of personal data for the video reviews are managed by VocalVideo.com, and participation is on a consent basis. Users must agree to VocalVideo.com's terms and provide consent for the use of their personal data as part of the review process.

e. Promotion Duration and Rights:The promotional offer is valid throughout the year 2024. ISMS Policy Generator reserves the right to end, extend, or modify the promotion at any time without prior notice. Any changes will be communicated through the service's standard communication channels.

f. Liability Limitation:ISMS Policy Generator is not liable for any errors or failures in applying the promotional discount to a user’s account. While we will make every effort to apply discounts correctly, the promotion's availability and execution are not guaranteed and may be subject to limitations beyond our control.

g. Acceptance of Promotion Terms:By participating in this promotion, users acknowledge that they have read, understood, and agreed to the terms outlined in this section.


APPENDIX 1: Terms and Conditions for AI-Assisted ISO 27001 Risk Assessment Tool (Beta Version)


Last Updated: 14/03/2024 

Short version

Using our AI-Assisted ISO 27001 Risk Assessment Tool means accepting a few key points: It's in beta, so expect changes and potential mistakes. Your data?Chatbase.cohandles that, not us, so theirprivacy policyis the one towatch. If you are a consultant, always get your client approval before sharing their data.Our ISO 27001 assistant aims for accuracy but can make mistakes, so verify for peace of mind. Expect updates, including potential changes in service features and pricing. Using the beta version without paying for it does not guarantee continuous free access. As of today, only the Pro plan of ISMS Policy generator guarantees a continuous access to the ISO 27001 risk assessment assistant, as long as the user pays for it, of course.

Introduction
Welcome to our AI-Assisted ISO 27001 Risk Assessment Tool ("Service"). These Terms and Conditions ("Terms") govern your use of our Service, which is currently in its beta phase and uses Chatbase.co as its third-party AI provider. By accessing or using our Service, you agree to be bound by these Terms.

1. Service Description
Our Service offers AI-powered guidance to help users conduct ISO 27001 risk assessments. The Service is reliant on Chatbase.co's technology and is designed to support your risk assessment process.

2. Beta Service
Understand that the beta version of the Service is still in testing and development. The performance, features, and pricing of the Service are subject to change. We do not guarantee the continuity of service and may interrupt or terminate the Service at our discretion.

3. Data Management
All user data entered into the Service is managed entirely by Chatbase.co. We do not store, process, or have access to the data. Refer to Chatbase.co's Privacy Policy for details on data management.

4. User Obligations
You must ensure that you have the necessary consents to process data within the Service, especially if you are using the Service on behalf of a third party, such as your clients.

5. Use of Service
You agree to use the Service in accordance with all applicable laws and regulations and not for any unlawful purpose. You will not share access to the Service with any unauthorized users.

6. Limitations and Disclaimers
The Service is provided "as is" and may contain errors or inaccuracies. We disclaim all warranties, express or implied, and shall not be liable for any reliance on the Service. Always verify the information provided by the Service before taking any action.

7. Intellectual Property
The intellectual property rights of the Service content, interface, and underlying technology are owned by us or our licensors. You are granted a limited, revocable license to use the Service according to these Terms.

8. Changes and Amendments
We may modify these Terms at any time. Your continued use of the Service after any changes constitutes your acceptance of the new Terms.

9. Governing Law
These Terms shall be governed and construed in accordance with the laws of the jurisdiction where we are located, without regard to its conflict of law provisions.

10. Contact Us
For any questions about these Terms, please contact us via our contact form.


APPENDIX 2: Terms of Service for ISO 27001 Copilot (Beta version)

Last updated: 14/03/2024

Short version

Utilizing the ISO 27001 Copilot signifies acceptance of key terms: it’s a beta service with potential for change and error. Data management is throughChatbase.co, so theirpoliciesapply. If you are a consultant, ensure client consent for data use. Our ISO 27001 assistant aims for accuracy but can make mistakes, so verify for peace of mind. Expect updates, including potential changes in service features and pricing.Joining beta without paying does not guarantee continuous free access. Only thepre-launch lifetimedeal guarantees a lifetime access to the ISO 27001 Copilot. Only the Pro plan of ISMS Policy generator guarantees a continuous access to the ISO 27001 Copilot, as long as the user pays for it, of course. 

Introduction
Welcome to the ISO 27001 Copilot, powered by Chatbase.co. These Terms of Service ("Terms") are a contract between you and us, outlining your use of the ISO 27001 Copilot service ("Service"). By accessing or using the Service, you confirm your agreement to these Terms.

1. Service Description
The ISO 27001 Copilot provides AI-driven guidance to support your understanding and implementation of ISO 27001 compliance efforts. It utilizes Chatbase.co's AI technology to offer tailored advice based on the information you provide.

2. No Guarantee of Compliance
Utilizing the ISO 27001 Copilot does not ensure ISO 27001 compliance. The Service aims to assist in your compliance journey but cannot replace the need for a formal audit or the expertise of certified professionals in the field of information security management.

3. Data Management and User Consents
Data input and generated by the Service is managed by Chatbase.co. You are responsible for ensuring that you have all necessary rights and consents to use, input, and share data within the Service, particularly if you are acting on behalf of a third party or a client. Refer to Chatbase.co's Privacy Policy for detailed information on their data handling practices.

4. Limitations of Service
The Service is provided on an "as is" basis without any warranties, express or implied. Decisions based on the Service's output should be taken with caution, and it is recommended to seek advice from professionals certified in ISO 27001 for comprehensive risk assessments and compliance strategies.

5. Intellectual Property
All intellectual property related to the Service, excluding user-provided data, belongs to us or our licensors. You are granted a non-exclusive, revocable license to use the Service under these Terms.

6. Amendments to Terms
We reserve the right to modify these Terms at our discretion. Your continued use of the Service after such changes indicates your acceptance of the new Terms.

7. Governing Law
These Terms are governed by the laws of our jurisdiction.

8. Contact Information
For any inquiries regarding these Terms, please contact us via our contact form in the footer.

By using the ISO 27001 Copilot, you agree to these Terms, recognizing the Service's role as a support tool in your ISO 27001 compliance efforts and accepting responsibility for obtaining necessary consents for data use.
© 2024 ISMS Policy Generator. All rights reserved.