reBop’s
Terms of Services

Effective Date: July 14, 2021

1. PREAMBLE

reBop, a simplified joint stock company (“société par actions simplifiée” as defined by French regulations) registered at the Trade and Companies Register under the number 892 923 731, having a registered office located at 3 rue de Teheran 75008 Paris (“reBop”), has developed a software of which functionalities and features are accessible in SaaS mode at the following address www.rebop.io (the “Platform”) allowing the persons who have registered on the Platform (the “Customer”) to manage digital certificates.

These terms of services (the “Terms of Services”) form a binding agreement between the Customer and reBop, which governs the Customer’s right to access and use the Platform and related services (the “Services”).

The Terms of Services are not intended to limit or supersede any other existing documents such as the Privacy Policy and the Cookies Policy.

2. DEFINITIONS

For the purposes hereof, the terms and expressions starting with a capital letter shall have the meaning either assigned herein or the meaning indicated below, whether used in the singular or plural:

  • Data”: means all the information of any kind communicated by the Customer under its full responsibility, to be processed on the Platform;
  • Document”: means all files uploaded to the Platform by the Customer for electronic certificate management;
  • Login credentials”: means the identifiers allowing a Customer to access the Platform and Services from a secured internet connection;

3. ACCEPTANCE OF THE TERMS OF SERVICES

Registration on the Platform requires accepting these Terms of Services. The acceptance of the Terms of Services is formalized by a checkbox “Yes, I agree with the Terms of services” by the Customer’s user who registers on the Platform and creates an account for the Customer. Clicking this checkbox constitutes proof that the Customer has read and accepted these Terms of Services and that Customer’s user has full power and authority to accept these Terms of Services and commit to the payment of the Fees for the organization identified as the Customer.

4. MODIFICATION OF THE TERMS OF SERVICES

reBop may adapt, amend or modify these Terms of Services from time to time.

Any use of the Platform by the Customer after the Terms of Services have been updated is considered as acceptance by the Customer of the new Terms of Services. Such change will be notified to the Customer by any means.

The Terms of Services accessible on the Platform prevail over any previous version.

5. DESCRIPTION OF SERVICES

The Services allow the Customer to:

  • Perform real-time digital certificate monitoring;
  • Manage digital certificate expiration, revocation and suspension alerts;
  • Perform digital certificate discovery;
  • Carry out automatic renewal detection;
  • Access a dashboard and expiration schedule;
  • Do automatic email reporting;

These main functionalities and features of the Services are described on the following website: www.rebop.io

The Platform is available in Software as a Service (“SaaS”), but can also be provided through an on-premise license. On-premise licenses are subject the execution of a specific on-premise license agreement with reBop.

Documentation on the Platform and Services is available online. reBop may add to or change the Platform and the Services at any time to take into account technological developments, technical requirements, security issues and applicable regulations, or at the discretion of reBop.

It is the Customer’s responsibility to ensure that the Customer’s IT and transmission resources available can be adapted to the Platform’s evolution.

6. ACCESS TO THE SERVICES

The Customer wishing to subscribe to the Services must provide the information requested through the online form. The Customer certifies the accuracy of the information provided in the form.

The contracting process includes the following steps:

  • Step 1: The Customer completes the registration form by filling in the requested fields, and by providing a valid email address. To validate registration, the Customer must accept the Terms of Services by checking the appropriate box, and acknowledge the Privacy Policy;
  • Step 2: Then, the Customer will be able to select the options available for the Service best suited to its needs;
  • Step 3: At this stage, the Customer has the option to check the details of its subscription and the total price payable, and if necessary, can correct any error or modify its order;
  • Step 4: The Customer confirms its order by payment for the order through the Stripe platform;
  • Step 5: reBop acknowledges the subscription by sending a payment confirmation email to the email address provided. The order is only considered final after reBop has sent the Customer this confirmation, and after reBop has received the full amount due. Once confirmed, the order cannot be canceled, except as otherwise provided herein.

After the Customer completes the subscription process, the Customer can access and make changes to its subscription, e.g. upgrade or downgrade its subscription plan directly in its account by registering on the Platform, using its Login credentials.

7. TERM & TERMINATION

The Terms of Services are effective from the moment of the Customer’s acceptance, when the Customer’s account is created until the end of the subscription. The Customer’s subscription to the Services will automatically renew for additional periods equal to one (1) month or a period equal to the Customer’s subscription period.

The Platform allows the Customer to terminate the subscription or downgrade or upgrade the Services by changing the options subscribed to, and to remove additional modules etc., at any time.

Either party may choose not to renew their subscription to the Services. If the Customer does not wish to renew their subscription, the Customer must select the appropriate non-renewal options in their account subscription page. If reBop chooses not to renew the Customer’s subscription, reBop will notify the Customer and terminate their access to the Services at the end of their current subscription period.

Information on termination from the Customer must be received before the invoice is issued for a new period. Upon termination for whatsoever reason, the Services will no longer be available, regardless of whether the Customer has subscribed to the Services on a monthly or annual basis.

reBop will not refund any subscription fee for the remaining time period if the subscription is terminated in the middle of a subscription period. No refunds will be given if the Customer’s subscription to the Services is downgraded.

In the event that the Customer breaches any term of these Terms of Service, and such breach is not rectified within ten (10) days after receiving the notice of breach thereof from reBop, reBop may terminate the subscription in whole or in part immediately upon written notice to the Customer.

8. SUPPORT & AVAILABILITY

reBop will use commercially reasonable efforts to provide technical support for the Services to Customer. The Platform is generally accessible 24 hours a day, 7 days a week.

reBop strives to provide quality access and to allow the Customer to use the Services in the best possible conditions.

Due to the nature and complexity of the Internet and telecommunications network and in particular its technical performance and response times for consulting, querying or transferring data, reBop makes its best efforts, in accordance with the rules of the art, to allow access to and use of the Services. reBop cannot ensure absolute accessibility or availability of the Platform.

9. PRICES AND PAYMENT TERMS

The Services are provided at the prices applicable and listed on the reBop website, at the time the Customer subscribes to the Services. reBop has several Service plans, one of which is free of charge.

Prices are in Euros and exclude VAT. The price is paid by means of secure payment by credit card. The amount indicated on the Stripe platform take into account any discount that may be applicable by reBop and corresponds to the total amount due for the Service ordered for the duration chosen.

When choosing the annual subscription, the price is payable in full on the day of the order by the Customer. When choosing the monthly subscription, the price is payable each month on the same date (on the date the Customer subscribed to the Services) by direct debit of the credit card used for payment. The Customer will receive a receipt by email after the payment of the Services.

Customer understands that revised or new fees may be required by changes in reBop’s business or offerings. Any new or revised fees will only become effective on the renewal of the Customer’s subscription period, after Customer prior information.

Payment by credit card is irrevocable, except in case of fraudulent use of the card. In this case, the Customer can request the cancellation of the payment.

reBop will not be obliged to provide the Services ordered by the Customer if the price has not been paid in full beforehand. Payments made by the Customer will only be considered as final once reBop has received the amounts due.

In case of default of payment, reBop will be entitled to request the payment of penalties at the European Central Bank rate, plus 10 percent as well as a fixed compensation for collection costs of €40 and the actual costs in the event of collection costs incurred in excess of this fixed compensation. Without prejudice to a possible action for damages, if within fifteen (15) days following the sending of a reminder, the Customer has not paid the sum due, reBop may suspend or limit access to the Customer’s Services, without being held liable.

In the event of expiry of the credit card used for the initial payment, reBop may terminate the subscription automatically, without notice, and claim payment due until termination from the Customer, by any means.

10. REBOP’S OBLIGATIONS

reBop undertakes to alert and warn the Customer of any error or security problem, or event reBop may be aware of which have an impact on the Services.

reBop only checks the compatibility of the Documents uploaded on the Platform. reBop never checks the content, quality, form, legality and validity of the Documents uploaded and gives no guarantee in this respect which remain at all times the Customer full responsibility.

11. CUSTOMER’S OBLIGATIONS

Customer agrees to pay any amount due to reBop in compliance with the payment terms and to:

  • use the Platform and the Services in accordance with the Terms of Services and any other acceptable use policy that may be applicable;
  • to use the Platform and the Services in a legitimate and lawful manner, acting in accordance with applicable laws and regulations;
  • to cooperate with ReBop when necessary;
  • to ensure that the content of the Documents uploaded to the Platform and the Data stored on the Platform are lawful, do not infringe the rights of third parties or cause them any prejudice, and are appropriate, professional and in keeping with the purpose of ReBop; the Customer shall be responsible for all related checks;
  • report to ReBop any failure of the Platform or the Services that the Customer notices.

The Customer shall ensure it has adequate and up-to-date computer equipment and software to ensure the proper quality of the Documents uploaded, shared and/or stored on the Platform.

12. INTELLECTUAL PROPERTY

reBop holds the necessary rights to grant the Customer the right to use and access the Platform and the Services.

All elements of the Platform and the Services made available to the Customer, the documentation and any other information made available by reBop to the Customer are and remain the exclusive property of reBop or its partners and providers. Consequently, the Customer shall refrain from any action which may directly or indirectly infringe the intellectual property rights of reBop or of any third party.

For the duration of the subscription, reBop grants to the Customer a personal, non-exclusive, non-transferable right to access and use the Platform and the Services, solely for his/her own internal business purposes and only for use within the scope specified herein. There are no implied licenses granted to the Platform and the Services, all rights not expressly granted in this Section are retained by reBop.

Thus, the Customer shall not:

  • make any representation, dissemination or distribution of the Platform, the Services and the related documentation, either in return for payment or free of charge;
  • conduct any form of use of the Platform, the Services and the related documentation, in any way whatsoever, for the purpose of designing, producing, distributing or marketing similar, equivalent or substitute Platforms or Services;
  • adapt, modify, alter or arrange the Platform, the Services and the related documentation for any reason whatsoever, including to correct errors;
  • make any direct or indirect transcription or translation into other languages of the Platform, Services and the related documentation;
  • make any modification or circumvention of the access codes or Login credentials, etc.

In case the Customer uploads or shares feedback, suggestions, ideas or other information or material (the “Content”) with reBop, the Customer automatically grants reBop a worldwide, non-exclusive, and non-transferable license to use its Content. It can be used for marketing or any other purposes at reBop’s sole discretion. The Customer will not be entitled to, and hereby waives any claim for, acknowledgment or compensation based on any Content used or modified by reBop.

13. PERSONAL DATA

Each of the Parties reciprocally undertakes to comply with the regulations in force regarding personal data; and in particular Regulation n°2016/679 (EU) of 27 April 2016 known as the General Data Protection Regulation, the Data Protection Act of 6 January 1978 in its updated version (the “Data Privacy Regulation”).

The provision of the Platform and Services implies the processing of the individuals’ Personal Data appearing on the digital certificates processed by reBop on behalf of the Customer. Appendix 1 of these Terms of Services describes the Parties’ obligations in this respect as well as the characteristics of the data processing.

14. CONFIDENTIALITY

Each of the Parties undertakes to treat all information, documents, data or concepts, communicated as such by reBop or a third party and relating to the Platform or the Services and the discussions relating thereto (the "Confidential Information"), of which the Customer may become aware of in the context of the Terms of Services as being confidential, and not to communicate the Confidential Information to third parties without the express written consent of the other Party.

Consequently, the Customer shall refrain, for the duration of the Terms of Services and for three (3) years after its expiry, provided that the Confidential Information has not become public, from disclosing it in any capacity, in any form and to any person or entity whatsoever.

15. LIABILITY

reBop cannot be held responsible for the quality of the Platform and the Services, nor for disturbances or damage inherent in the hosting servers, the Internet or communication networks, nor for the modification, deletion or interruption of the Services or access to the Platform, for any disruption or lack of ability to use the Platform, for breaches of computer security, the lack of ability to access the Platform due to attacks or hacking, deletion or banning, whether temporary or permanent, and for whatever reason, including breakdowns or unavailability of the hosting servers, access to the Internet or communication networks, or a malfunction, unavailability of access, misuse, poor configuration of the Customer’s devices.

reBop’s commitments herein are provided under an obligation of means and limited to the responsibility to provide a technical service enabling the Customer to manage electronic certificates which will materially conform with its Documentation. In no event shall reBop be liable for failure to renew or verify the validity of any electronic certificate managed through the Services.

reBop shall not be liable for any illicit, fraudulent or abusive use or non-professional use of the Platform or due to a voluntary or involuntary disclosure unintentional disclosure of the Login credentials.

reBop shall not be liable for any damage suffered by the Customer or a third party resulting directly or indirectly from the Customer’s or a third party’s failure to comply with any of their obligations, herein, from use of the Services for purposes other than those for which they are intended or from negligence. The liability of reBop shall be limited to direct damages to the exclusion of any indirect damages of any nature whatsoever, such as loss of opportunity, loss of data, loss of profit or loss of business, damage to image or reputation.

In any event, the total amount of damages due by reBop shall not exceed 100% of the total amount of fees actually paid to reBop during the twelve (12) months preceding the event giving rise to the claim. Any claim against reBop must be notified within twelve (12) months following the event giving rise to the claim.

The foregoing limitations of liability shall not deprive either party of its essential obligation, shall be consistent with the terms of the Terms of Services and have been discussed in good faith.

16. LINKS TO THIRD PARTY SITES

The Platform may provide links that allow the Customers to leave the Platform and/or access third party websites. The linked sites in many cases are not under the control of reBop and reBop is not responsible for the content of any linked site or any link contained in a linked site, or any changes or updates to such sites. reBop is not responsible for webcasting or any other form of transmission received from any linked site. reBop provides these links only as a convenience, and the inclusion of any link does not imply endorsement by reBop of the site.

17. SECURITY

reBop uses its best efforts, in accordance with the state of the art / industry standards, to secure the Platform according to the risk incurred and the nature of the data processed. However, reBop shall only be liable in this respect in the event of a proven fault attributable to reBop.

The Customer shall not:

  • access or maintain, fraudulently, on all or part of the Platform;
  • use any access method other than the interface provided by reBop. In the event that such a method is discovered, the Customer undertakes to inform reBop without delay by e-mail to (.) so that the latter can take the necessary measures;
  • delete or modify Data contained on the Platform which has not been submitted or published by the Customer, or to introduce data fraudulently or even to alter the functioning of the Platform and the Services. The Customer shall in particular ensure that it does not introduce viruses, malicious code or any other technology harmful to the Platform;
  • carry out any operation aimed at saturating a page, bouncing operations or any operation resulting in hindering or distorting the functioning of the Platform;
  • use devices or software of any kind that would disrupt the proper functioning of the Platform;
  • engage in any action that would impose a disproportionate burden on the Platform’s infrastructure or execute any automation programming on the Platform.

Any access to a prohibited area will be considered as fraudulent access according to the provisions of the French Criminal Code. The Customer undertakes to consider that all data of which it becomes aware during such access to an unauthorized area is confidential data and therefore undertakes not to disclose it.

The Customer accepts the characteristics and limits of the Internet and electronic and mobile communications networks. The Customer is aware that the data circulating on the Internet and electronic and mobile communications networks are not necessarily secured, in particular against possible misappropriation.

The Customer shall take the appropriate measures to ensure the security of its own data and/or software including from contamination by possible viruses or malware or data loss.

18. INSURANCE

Each of the Parties declares that they have taken out an insurance policy, with a solvent insurance company, for the consequences of their professional civil liability, as a result of any damage arising from the performance of the Terms of Services and more generally from their activities. They each undertake to maintain this policy in force for the entire duration of the Terms of Services and undertake to be able to justify it to the other Party on request.

19. REVERSIBILITY

The Customer maintains the option to download all the Documents uploaded on the Platform by clicking on the “Export All” button. Therefore, at the end of the contractual relationship, for whatever reason, it is the Customer’s responsibility to check that it has downloaded all its Documents before closing its account or not renewing the subscription to the Services. Once the Customer’s account is closed, reBop deletes all its Data and Documents embedded in the Platform.

20. GENERAL PROVISIONS

Subcontracting. The Customer acknowledges and accepts that reBop has recourse to subcontractors to enable it to meet some of its obligations under this Terms of Services.

Assignment. The Customer shall not transfer the Terms of Services and/or any rights and obligations arising therefrom to a third party by any means and for any reason whatsoever, except with the prior written consent of reBop, including in the event of a direct or indirect change of control as defined in Article L. 233-3 of the French Commercial Code.

Promotion - Commercial Reference. reBop is expressly authorized by the Customer to use and/or reproduce the Customer’s identification elements (e.g. logo, trademarks) and/or the group to which it belongs, as a commercial reference on any medium or on any occasion for marketing, commercial or advertising purposes. For any other communication (e.g. press release), the communication project shall be submitted for the Customer’s written consent prior to its distribution.

Force majeure. Neither Party may be considered in default under the terms of the Terms of Services if the performance of its obligations, in whole or in part, is delayed or prevented as a result of a situation of force majeure as defined in Article 1218 of the French Civil Code, it being specified that a temporary impediment caused by a situation of force majeure is an impediment that lasts for a period of thirty (30) days as of the occurrence of the event at the root of the force majeure. Beyond this period of thirty (30) days, the impediment being definitive within the meaning of Article 1218 of the Civil Code, the Terms of Services may be automatically terminated.

Entire agreement. The Terms of Services constitutes the entire agreement between the Parties. It supersedes all prior written or oral negotiations, statements, representations or agreements relating to its subject matter between the Parties. reBop reserves the right to modify and update certain provisions, schedules or appendices with reasonable notice. The Customer will be notified by any means.

Invalidity. The nullity, unenforceability or, more generally, the lack of effect of any of the provisions of the Terms of Services shall not affect the remainder of the Terms of Services and the Terms of Services shall be performed as if this provision had never existed, provided, however, that this does not jeopardize the existence or balance of the Terms of Services and that the provision in question was not a determining condition of the consent of a Party. In addition, the Parties agree to replace, to the extent possible, any invalid provision with a valid provision having the same effect and reflecting, as far as possible, their initial intention.

Non-waiver. Unless otherwise provided for herein, no delay or failure by either party to exercise any right under this Agreement, shall constitute a waiver of that or any other right.

Applicable law and jurisdiction. The Terms of Services are governed by French law. All disputes to which it may give rise, or which may arise as a result or consequence thereof, shall be subject, failing an amicable agreement between the Parties materialized by the execution of a settlement agreement within thirty (30) days following notification by one of the Parties of the dispute describing the dispute and referring to the present provision, to the exclusive jurisdiction of the Commercial Court of PARIS.

APPENDIX

DATA PROTECTION

For the purpose of this Appendix, the terms “Personal Data”, “Processing”, “Data Subject”, “Data Controller”, “Data Processor” and “Personal Data Subject” have the meaning given by the Data Privacy Regulation.

The Processing carried out by reBop as a Processor is described in this appendix. The Parties expressly agree that reBop only acts in accordance with the Customer’s instructions and orders, it is therefore the Customer’s Data Processor under Data Privacy Regulation for the supply of the access to the Platform and the related Services.

Therefore, in accordance with Data Privacy Regulation, reBop when acting as a Data Processor, shall:

  • (i) Only process Personal Data under the Customer’s written instruction such as the Agreement and inform the Customer if an instruction does not comply with the Data Privacy Regulation, including regarding Data transfers to any third country or international organization, unless it must do so under UE Law or the law of the State Member to which the Data Processor is subject; in this case, Data Processor informs the Customer about this legal obligation before the Processing, unless if the applicable law prevents such information for general interest reasons;
  • (ii) Ensure the persons authorized to process the Personal Data shall comply with the confidentiality or be subject to an adequate legal obligation of confidentiality;
  • (iii) Implement all necessary measures to warrant Personal Data security and integrity,
  • (iv) Inform the Customer and collect its potential objections in case of change of subprocessor accessing the Personal Data, it being specified that the Parties agree that the Customer accepts the subprocessors used on the date of signature of the Terms of Services, as listed in this schedule;
  • (v) Reasonably assist the Customer, through adequate technical and organizational measures, as reasonable as possible, to fulfil its obligation of answering the Data Subjects’ requests in order to exercise his/her rights (access, erasure etc.) by transferring the request to the Customer, to perform impact analysis and prior consultations;
  • (vi) In the particular case of receipt of a Data Subject’s request to exercise his/her rights, notify the Customer and forward to them the request, and shall not answer the request unless the Customer expressly instructs reBop to do so;
  • (vii) Provide reasonable assistance to the Customer in ensuring compliance with its security obligations, taking into account the nature of the processing and the information at its disposal;
  • (viii) Delete all Personal Data held in a digital format and return to the Customer. Send the respective Personal Data in paper format at the end of the Service relating to the Processing, and destroy any existing copies, unless otherwise specified by EU Law, or if the Member State law requires the retention of the Personal Data;
  • (ix) Make available to the Customer within a reasonable period of time all information necessary to demonstrate compliance with the obligations set out in this Exhibit and to enable and assist in one audit per year, including inspections, by the Customer or another auditor/s as appointed by the Customer, it being understood that any penetration test shall be subject to prior written agreement on its terms and scope;
  • (x) Notify the Customer as soon as possible, and if possible within 48 hours of becoming aware of any Personal Data Breach at reBop or the host of the Personal Data and assist the Customer in providing information to the CNIL and to the Data Subjects following such a breach where appropriate;
  • (xi) Cooperate reasonably with the CNIL if necessary;
  • (xii) Cease all Processing upon termination or expiry of the Agreement other than as necessary to provide the reversibility of Personal Data referred to in (viii) above.

Description and characteristics of the Processing

Subject-matter of the Processing: Use of the Platform and Services

Duration of Processing: The duration of the Processing corresponds to the duration of the Terms of Services. In any case, the Personal Data will be deleted at the end of the Agreement.

Nature of Processing:

  • Collection and storage of Data
  • Data organization/structuring
  • Hosting and Data Retention
  • Data Consultation
  • Deletion of Data
  • Communication of Data by transmission, dissemination or other form of provision

Purposes of the Processing:

  • Manage digital certificates through the Platform
  • Storage of digital certificates
  • Monitoring and alerting of digital certificates expiration, revocation and suspension

Categories of Personal Data:

  • Identity data
  • Contact data
  • Data related to the professional activity

Categories of sensitive Personal Data: N/A

Categories of Data Subjects: Owner/person who appears in the digital certificate

Subprocessors

SubprocessorsLocationWarrantyDescription of services
Amazon Web Services, Inc.USAStandard Contractual ClausesHosting of the Platform and the digital certificates
Google, Inc.USAStandard Contractual ClausesHosting of the user authentification system
Netlify, Inc.USAStandard Contractual ClausesHosting of the public website
StripeIrelandN/APayment solution