Legal

Kadroflow Terms of Service

Terms for business organisations using Kadroflow for recruitment and HR workflows. They define the Customer's responsibilities, the data-processing relationship and the limits of AI-assisted features.

Version: 2026-07-26Effective: after legal approval; draft dated 26 July 2026

Operator / provider: Kadroflow; Kranj. Stefetova ulica; 95550449; support@kadroflow.com

1. Parties, business use and authority

These Terms form an agreement between the legal operator identified above ("Kadroflow", "we", "us") and the organisation named in an order or account ("Customer"). Kadroflow is offered for business and professional use, not personal consumer use. A person creating or administering an account confirms that they are at least 18 and authorised to bind the Customer.

[INFORMATION REQUIRED] The operator must confirm its registered name, registration number, VAT status, official address and whether any consumer may lawfully purchase a plan before these Terms are published.

2. Definitions and contract documents

"Service" means the hosted Kadroflow application and documented features. "Customer Data" means information submitted to the Service by or for Customer, including candidate and employee information. "Order" means the checkout, order form or agreed plan identifying fees and limits. The Order, these Terms and any signed data processing agreement (DPA) form the contract. A negotiated Order prevails over these Terms for a direct conflict; the DPA prevails for personal-data processing.

3. The Service

Kadroflow supports recruitment and HR workflows such as vacancies, candidate records, documents, interviews, transcripts, communications, workflow history, reporting and optional AI-assisted features. Features depend on the selected plan and configuration. The Service is workflow software, not legal, employment, tax, payroll, medical or professional advice.

4. Accounts, administrators and access

Customer must provide accurate account information, protect credentials, use multi-factor authentication where available, and promptly remove access that is no longer required. Customer administrators control members, roles, permissions, integrations and workspace settings.

Customer is responsible for activity performed through its accounts except to the extent caused by Kadroflow's breach of the contract. Suspected compromise must be reported promptly to support@kadroflow.com.

5. Plans, orders and usage limits

An Order identifies the plan, billing period, price, currency and material usage limits. Customer may not evade limits by duplicating workspaces or accounts. Upgrades may apply immediately; downgrade timing and effects are shown before confirmation. If an Order conflicts with marketing copy, the Order controls.

6. Fees, taxes and payment

Paid fees are charged in advance using the payment method selected at checkout. Prices exclude taxes unless the checkout expressly says otherwise. Customer must provide accurate billing and tax information and authorises the payment provider to charge amounts due.

We may restrict paid functionality after reasonable notice of an overdue undisputed amount. [INFORMATION REQUIRED] Finance must approve invoicing rules, late-payment treatment, VAT presentation and any price-change notice period.

7. Renewal, cancellation and plan changes

A paid subscription renews for successive periods matching the selected billing cycle until cancelled through the billing portal or another method stated in the Order. Cancellation normally takes effect at the end of the paid period; access remains available until then unless the account is suspended for cause.

Before purchase, the checkout must clearly show the renewal cadence, total charge and cancellation method. Customer should export needed data before the account closes or limits reduce.

8. Trials, promotions and refunds

Trial or promotional terms shown at activation form part of the Order. We do not promise that every plan includes a trial. Refunds are provided where required by mandatory law or expressly agreed in the Order.

[INFORMATION REQUIRED] Commercial and legal owners must approve a written refund policy and confirm whether any consumer withdrawal right can arise. Until then, the interface must not promise "no refunds" or a guaranteed refund.

9. Acceptable use

Customer must not use the Service to break the law, infringe rights, discriminate unlawfully, conceal monitoring, make prohibited employment decisions, upload malware, probe security, bypass access or payment controls, scrape at scale, resell unauthorised access, or interfere with availability.

Customer must not collect information irrelevant to employment, including family status, pregnancy or other protected or special-category data, unless a documented lawful basis and necessity apply.

10. Customer Data and instructions

Customer retains its rights in Customer Data. Customer grants Kadroflow a limited, non-exclusive right to host, copy, transmit, secure and otherwise process Customer Data only to provide, support and protect the Service, comply with law, and follow documented instructions.

Customer confirms that it has lawful grounds to collect, upload, disclose and instruct processing of Customer Data and has delivered all required notices. Kadroflow does not acquire ownership of candidate or employee records.

11. Data-protection roles

For Customer-controlled candidate, recruitment and workforce data, Customer is normally the controller and Kadroflow is its processor. For Kadroflow account administration, billing, platform security, abuse prevention and its own legal obligations, the operator is normally an independent controller.

The parties will enter into the applicable DPA before production processing. Kadroflow will not determine Customer's hiring purpose or lawful basis. See the Privacy Notice for the role split and individual-rights routes.

12. Recruitment and employment compliance

Customer is solely responsible for lawful recruitment criteria, equal-treatment duties, candidate transparency, retention periods, lawful sourcing, employment decisions and responses to individuals. Customer must provide a meaningful alternative where recording, consent or automated processing cannot lawfully be required and must avoid requesting data that is not directly relevant to the role.

13. AI-assisted features and human review

AI features may generate summaries, comparisons, writing suggestions, scores, extracted information or draft documents. Outputs can be incomplete, inaccurate, discriminatory or unsuitable. They are decision-support material only and must be checked against source evidence by a trained person.

Customer must not use Kadroflow to reject, rank, hire, promote or otherwise significantly affect a person solely through automated output. Customer must conduct and document any required data-protection impact assessment, AI risk assessment, notices, oversight and contest process before use.

No output is a guarantee of a candidate's suitability, legality of a decision or regulatory compliance.

14. Interview recording and transcription

Customer decides whether recording or transcription is enabled and is responsible for informing participants, establishing a lawful basis, obtaining consent where required, offering any legally required non-recorded route, limiting access and deleting files on schedule. A visible product control does not by itself make recording lawful.

15. Third-party services and integrations

Customer may connect third-party email, payment, storage or other services. Third-party terms govern Customer's relationship with those providers. Kadroflow is not responsible for a third party's independent service, changes or content, but remains responsible for subprocessors to the extent required by the DPA.

The current public subprocessor list must identify verified contracting entities, processing locations and transfer safeguards. [INFORMATION REQUIRED: publish and link the verified subprocessor list before launch].

16. Security and incidents

Kadroflow will maintain technical and organisational measures appropriate to the documented risk, as described in the DPA and security annex. Customer must configure access appropriately, secure endpoints, review members and report suspected incidents without undue delay.

No internet service can promise absolute security. Security descriptions are commitments only where included in the signed contract or verified public documentation; they are not certification claims.

17. Confidentiality

Each party will protect the other's non-public business, technical and personal information using at least reasonable care and use it only for the contract. Disclosure is permitted to personnel and approved providers who need access and are bound by confidentiality, or where law requires disclosure after notice where legally permitted.

18. Intellectual property

Kadroflow and its licensors retain rights in the software, design, documentation and marks. During the subscription, Customer receives a limited, non-exclusive, non-transferable right for authorised users to access the Service for Customer's internal business. No source-code, trademark or ownership right is transferred.

19. Feedback and usage information

Customer may provide feedback voluntarily. Kadroflow may use feedback without restriction provided it does not identify Customer or disclose Customer Data.

Product analytics or model-improvement use of personal or Customer Data is not authorised by this clause. Any such use requires a separately documented role, lawful basis, notice, controls and—where necessary—consent. [INFORMATION REQUIRED: approve the production analytics and AI-training position].

20. Availability, support and changes

We will provide the Service with reasonable skill and care. Maintenance, security work, internet dependencies and events outside reasonable control may interrupt it. No uptime service level applies unless written in an Order.

We may change features for security, law, usability or product development. We will provide reasonable notice before a material reduction to a paid core feature where practicable. [INFORMATION REQUIRED: approve support hours, response targets and any SLA].

21. Suspension

We may suspend affected access where reasonably necessary to contain a security threat, prevent unlawful use, comply with law, protect people or systems, or address a material payment default. Where lawful and practicable, we will give notice, limit the suspension and restore access when the reason is resolved.

22. Term, termination, export and deletion

Either party may terminate for an uncured material breach after reasonable written notice, or immediately for an irremediable breach, insolvency where permitted, or unlawful use. On termination, access ends and outstanding charges remain due.

Customer must export needed data before closure. Deletion timing, backup expiry and any paid export assistance must match the DPA and retention schedule. [INFORMATION REQUIRED: approve and technically verify the export window, production deletion workflow and backup deletion period].

23. Warranties and liability

Each party warrants that it has authority to enter the contract. Kadroflow warrants that it will provide the Service with reasonable skill and care. Except for express commitments and rights that cannot lawfully be excluded, the Service is provided without implied guarantees of uninterrupted operation, fitness for a particular hiring result or error-free AI output.

Neither party excludes liability that cannot legally be limited, including liability for fraud, wilful misconduct, or death or personal injury caused by negligence where applicable. [INFORMATION REQUIRED] Qualified counsel and commercial owners must approve the governing liability cap, excluded loss categories, data-protection/security cap and any indemnities. No monetary cap is represented by this draft.

24. General terms, law, changes and contact

Neither party is liable for delay caused by events beyond reasonable control, but payment obligations and reasonable continuity duties remain. Customer may not assign the contract without consent, except as part of a bona-fide reorganisation or sale where the assignee accepts it. Kadroflow may use subprocessors under the DPA and may assign the contract in a reorganisation or sale with appropriate notice.

If a clause is unenforceable, the rest remains effective. Failure to enforce is not a waiver. Notices may be delivered to the account email and the addresses above. Material changes will be announced in advance and, where required, presented for renewed acceptance.

The intended governing law is Slovenia and the courts of Slovenia, subject to mandatory law and a finally verified operator seat. [INFORMATION REQUIRED: counsel approval of jurisdiction, notice mechanics and language precedence]. Questions: support@kadroflow.com.