Escape Velocity: terms of service and data processing terms

Version 2026-11-03. Draft for a solicitor's review, not yet in force. Written 2026-11-01 by T's platforms management session as the first version of the one document every Escape Velocity product (Office, Workshop, Bookings) shows its customers and has their owner accept in the app. Square brackets mark what T must fill in or confirm before anyone accepts it. The master copy is this file; each product keeps its copy in its repo under terms/<date>.md, as it is, and the latest date is the version in force. The .docx beside this file is the same text for T and the solicitor.

---

1. Who we are

Escape Velocity is the trading name of Tyrone Lynch, a sole trader at [street address], Castletownbere, Co. Cork, Ireland [, VAT number IE ...]. "We", "us" and "our" mean Escape Velocity. When Escape Velocity Limited is formed, these terms pass to it and the next version of these terms will say so. You can reach us at [contact email].

"You" and "your" mean the company or business that has been given access to a Product, and the person accepting on its behalf. By accepting these terms you confirm that you may bind that business.

2. What these terms cover

These terms are one agreement in two parts: the terms of service (sections 3 to 15) and the data processing terms (section 16), with a short privacy notice for your account (section 17). They cover each of our products that you have been given access to: Office, Workshop or Bookings (each a "Product"). A trial of a Product is on the same terms.

The owner of your business accepts these terms in the Product before it is used, and accepts each new version before carrying on. The Product records who accepted, when, and which version, and shows it in Settings. The terms can be read at any time from the Product's About page and the foot of every screen, signed in or not.

3. The Product and your account

• We give your business access to the Product at its address (for example office.escapevelocity.ie). One account is one business. Its owner adds the people who may use it and may remove them.
• Each person's sign-in is theirs alone. You are responsible for who you let in, for keeping passwords, PINs and set-up codes safe, and for what your people do in the Product. Tell us at once if you think a sign-in has been misused; we may suspend a sign-in we reasonably believe is compromised.
• Devices you use with the Product (tablets, phones, computers) are yours to keep safe.

4. Trials

• A trial is free and lasts for the period shown in Settings. We may extend it, make it a full plan, or end it.
• At the end of a trial, access closes. Your records are kept for 30 days so you can take a plan and carry on; after that they are deleted under section 6.
• A trial puts no obligation on either of us beyond these terms.

5. Your plan and payment

• Your plan (its name, price, billing period and renewal day, and what it includes) is shown in Settings. We set it with you and only we can change it.
• We invoice you in euro, with VAT where it applies, for each billing period in advance, from Escape Velocity's own invoicing system. Invoices are payable within [14] days of their date.
• You may pay by card or by SEPA direct debit. Your payment details are given to and kept by our payment provider, Stripe, on its own secure pages, opened from the Product's Settings; the Product never sees or stores a card number or an IBAN. When a payment method is on file, we take each invoice from it when the invoice is issued, and you can change or remove the method in Settings at any time. With no payment method on file, you pay by bank transfer to the account on the invoice.
• If a payment fails, we email your owner at once and try again over the following days. If an invoice is still unpaid 14 days after the first failure, or 14 days after a reminder where you pay by bank transfer, we may pause your business's access until it is paid; your records are not deleted by a pause, and access returns as soon as the invoice is paid.
• We may change a plan's price with at least 30 days' notice before the renewal it applies to. If you do not want the new price, you may end under section 13 before that renewal.
• A period already begun is not refunded unless these terms or the law say otherwise.

6. Your data

• Your records are yours. We hold and process them only to provide the Product, to support you, to keep it secure, and to meet the law. We never sell them and never use them to advertise to anyone. [Confirm: we may use anonymous, aggregated usage figures that identify no business or person to improve the Product.]
• You can take your records out at any time through the Product's downloads (PDF, Excel, CSV and the API where the Product has one).
• When your access is to end (section 4 or 13), take out what you want to keep before its last day. For 30 days after it we send you a copy of your records on request; we then delete them from the live database, and they fall out of our backups within [35] days after that. On request we confirm the deletion by email.

7. Using the Product properly

You agree to use the Product lawfully and only for your own business; not to resell access to it; not to test its security or try to reach another business's records; not to send unlawful content through it; and not to go round the API's limits with automated requests. We may remove content that breaks the law and suspend access that breaks this section after telling you, or at once where the risk to other customers requires it.

8. Availability, support and changes

• We aim to keep the Product available at all times, but we do not promise uninterrupted service. We tell you about planned maintenance in advance where we can, and keep it outside Irish working hours where we can.
• We back up the database every night and have proven that a backup can be restored.
• Support is by email at [contact email] on Irish working days; we aim to reply within [two] working days. There are no service-level credits at this stage.
• We improve and change the Product over time. We will not remove a function your business depends on without at least 30 days' notice, except where the law or security requires it. What changed in each release is listed under What's new in the Product.

9. Features that use artificial intelligence

Some functions read documents you drop in, match them to your records, or make narrow judgements (for example which supplier a receipt names). These use third-party services listed as sub-processors in section 16.4. Every reading is a suggestion: nothing is saved until you press Save, and fields the reader could not find are marked for you to check. You may ask us to switch these functions off for your business, and they are off for trials unless switched on.

10. Our commitments and the limits of our liability

• We provide the Product with reasonable skill and care.
• Except as stated in these terms, and to the extent the law allows, the Product is provided as it is, and we exclude every implied warranty, condition or term, including as to fitness for a particular purpose.
• The Product helps you run your business; it does not replace your accountant, your statutory books or your tax returns. You are responsible for the accuracy of what is entered and for your returns to Revenue and any other body.
• We are not liable for indirect or consequential loss, or for loss of profit, revenue, business, contracts, goodwill or anticipated savings, however it arises.
• Our total liability to you in any twelve months, in contract, tort (including negligence) or otherwise, is limited to the fees you paid us for the Product in those twelve months, or €[100] if you paid none (a trial).
• Nothing in these terms excludes or limits our liability for death or personal injury caused by our negligence, for fraud, or for anything that cannot be excluded or limited under Irish law.

11. Intellectual property

• The Product, its code, design and documentation are ours or our licensors'. While these terms stand you have a non-exclusive, non-transferable right to use the Product for your business.
• Your records are yours. You give us the right to process them only as these terms say.
• Ideas and feedback you give us about the Product may be used by us to improve it, with no obligation to you.
• "Powered by Escape Velocity" and our mark stay on the Product's screens and on every document it makes, and may not be removed or altered, except for Escape Velocity's own business.

12. Confidentiality

• Each of us keeps the other's confidential information confidential and uses it only for these terms. This does not cover information that is public, already known, or that must be disclosed by law.
• We do not look at your records except to support you when you ask, to keep the Product running (for example to restore a backup or fix a fault), or where the law requires. Our operator view shows only your business's name, its owner's name and email, and dates; never your records.

13. Ending

• You may end your plan at any time: an owner cancels it in the Product, in Settings, Plan and billing, or tells us in writing (email is fine). It ends at the end of the billing period already begun, which is not refunded, and you can use the Product as before until then. Until that day an owner can keep the plan after all.
• We may end these terms by giving you at least 30 days' notice in writing (email is fine), to take effect at the end of a billing period.
• We may end them at once if you seriously breach them and do not put it right within 14 days of our telling you, or if an invoice is still unpaid 30 days after your access was suspended under section 5.
• When these terms end, section 6 says what happens to your records. Sections 6, 10, 11, 12, 15 and 16 continue to apply as far as they need to.

14. Changes to these terms

We may change these terms. A new version is shown to your owner at sign-in with a note of what changed, and must be accepted before carrying on. If you do not accept, you may end under section 13 and we refund the part of any period paid for beyond the day your access ends. Each version is dated and every version can be read in the Product.

15. General

• These terms are governed by the law of Ireland and the Irish courts have exclusive jurisdiction.
• They are the whole agreement between us about the Product and replace any earlier agreement about it, including any paper data agreement.
• Notices to you go to the owner's email address kept in Settings; notices to us go to [contact email].
• Neither of us is liable for failing to perform because of something outside our reasonable control.
• If part of these terms cannot be enforced, the rest stands.
• You may not transfer these terms without our written consent. We may transfer them to Escape Velocity Limited when it is formed, or to a successor that takes over the Product, and will tell you when we do.

16. Data processing terms

16.1 Roles

For the personal data in your records (your customers and their contacts, your suppliers' contacts, your own people, vehicle registrations, bookings) you are the controller and we are the processor under the General Data Protection Regulation (GDPR) and the Data Protection Act 2018. For the data we hold about your account (section 17) we are the controller.

16.2 What we process, and why

• Subject matter and duration: providing the Product to you while these terms stand, and the deletion period after.
• Nature and purpose: storing and displaying your records; reading documents and photos you drop in and proposing records from them; matching records to one another; sending email on your instruction; backing up and restoring; support at your request.
• Types of personal data: names, email addresses, phone numbers, postal addresses, vehicle registrations and mileage (Workshop), booking details (Bookings), invoice, quote and payment details, bank details you enter, the documents and photos you upload, notes you type.
• Data subjects: your customers and their contacts, your suppliers' contacts, your own people.

16.3 Our obligations as processor (Article 28(3) GDPR)

We will:

• process personal data only on your documented instructions, which are these terms and your use of the Product, and tell you if we believe an instruction breaks data protection law;
• make sure everyone we allow to process it is bound by confidentiality;
• take the security measures in section 16.5;
• engage sub-processors only as section 16.4 allows, under written terms no less protective than these;
• help you answer requests from data subjects (the Product lets you find, correct, export and delete records; we help where it cannot);
• help you meet your obligations on security, breach notification, impact assessments and consultation with the Data Protection Commission, as far as the Product and the information we hold allow;
• delete or return all personal data at the end, as section 6 says, unless the law requires us to keep it;
• give you the information needed to show we comply, and allow audits: once in any twelve months on 30 days' notice, at your cost, by written answers to your questions or, where those do not suffice, by a visit that does not disturb other customers.

16.4 Sub-processors

You authorise us to use these sub-processors. We tell your owner by email at least 30 days before adding or replacing one; you may object in writing with your reasons, and if we cannot resolve it you may end under section 13.

The code of the Product is kept at GitHub, Inc.; it holds no personal data.

Anthropic's reading is used only when the reader is switched on for your business (section 9). TypeSafe receives only the facts a judgement needs, never a document and never a person's name, contact details or account numbers.

16.5 Security

Connections are encrypted (TLS). Data is encrypted at rest by the host. Every record carries its business and the database enforces row-level security, so one business cannot see another's records even through a fault in a screen; an isolation test runs two businesses side by side over every table. Passwords are hashed with argon2. Sign-ins and the API are rate limited. Nothing personal is written to the server log. Backups run nightly and a restore has been proven. Access to the live database is limited to Escape Velocity's owner. A standing check proves that the operator's view returns no business's records.

16.6 International transfers

Personal data leaves the European Economic Area only to the sub-processors listed in section 16.4, under Chapter V of the GDPR (standard contractual clauses or an adequacy decision), as the table says.

16.7 Personal data breaches

If we become aware of a personal data breach affecting your records, we tell your owner without undue delay and within 48 hours, with what we know, what we are doing, and what we suggest you do, and we help you with any notification you must make.

16.8 At the end

Section 6 applies. On request we confirm deletion in writing.

16.9 Your obligations as controller

You have a lawful basis for the personal data you enter; you give your customers and people the privacy information the law requires; your instructions to us are lawful; you keep your sign-ins safe; and you tell us promptly of anything that affects our processing.

17. Privacy notice for your account

We are the controller of the data about your account: your business's name and address, your owner's and people's names and email addresses, sign-in times and devices set up, your plan and the invoices we send you, and the feedback you send us through the Product (its words, a screenshot if you attach one, the page it was sent from, and the browser and device it came from). We use it to provide and bill the Product, to support you and to improve it. We keep it while your account stands and, for invoices, for the period Irish tax law requires (currently six years after the year they relate to). You have the rights the GDPR gives you (access, correction, erasure, portability, objection) by email to [contact email], and the right to complain to the Data Protection Commission (dataprotection.ie).