Legal

SafePlate Terms & Conditions v1.0

vv1.0Effective: 11 May 2026Published: 11 May 2026

Summary

SafePlate v1.0 Terms of Service — covers scope of the platform, AI limitations and EU AI Act disclosures, GDPR data protection obligations including special category health data, subscription billing, liability limitations, data retention on cancellation, and governing law (Ireland). By accepting you agree to these terms as a food business operator using the SafePlate compliance platform.

SafePlate — Terms & Conditions

Version: v1.0
Effective Date: 11 May 2026
Last Updated: 11 May 2026

These Terms & Conditions ("Terms") govern your access to and use of the SafePlate platform ("SafePlate", "the Platform", "the Service") operated by Resocial Marketing Ltd, a company incorporated in Ireland (hereinafter "Resocial", "we", "us", "our").

By registering an account, accepting these Terms, or using the Platform in any capacity, you ("you", "the User", "the Business") agree to be legally bound by these Terms. If you are registering on behalf of a business entity, you represent and warrant that you have authority to bind that entity.

Please read these Terms carefully before using SafePlate. If you do not agree, you must not use the Platform.

1. Definitions

In these Terms, the following words and expressions shall have the meanings set out below:

"Account" means the unique login credentials and associated data created when you register on SafePlate.

"Admin Panel" means the internal management interface accessible exclusively to authorised Resocial Marketing Ltd employees.

"AI Credits" means the virtual currency used to purchase individual AI-powered operations within the Platform, as further described in Section 6.

"AI Services" means all features of the Platform powered by third-party large language models, including but not limited to the HACCP Expert AI chatbot, AI-assisted record assessment, automated inspection scoring, and AI-generated reports.

"Anthropic" means Anthropic, PBC, the provider of the Claude AI models used within the Platform's AI Services.

"AUP" means the Acceptable Use Policy, either as a standalone document or as set out in Section 4 of these Terms.

"Business" means any food business entity registered on the Platform, including sole traders, partnerships, and corporate entities.

"Content" means all text, images, documents, records, data, and other materials uploaded to or generated within the Platform by you or your team members.

"Control Records" means food safety monitoring logs, temperature records, hygiene checklists, and other regulatory compliance records created using the Platform's HSE Controls features.

"DPA" means a Data Processing Agreement, where applicable between Resocial and a Business, incorporating Standard Contractual Clauses as required under GDPR.

"EHO" means an Environmental Health Officer, being an officer employed by a local authority in Ireland with enforcement powers under the Food Safety Authority of Ireland Act 1998 and related legislation.

"Free Plan" means the tier of the Platform available at no charge, subject to feature and credit limitations as published on the SafePlate pricing page.

"FSAI" means the Food Safety Authority of Ireland.

"GDPR" means Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation) as retained and applicable in Ireland, and where applicable in the context of Northern Ireland, as it applies under the Windsor Framework.

"HACCP" means Hazard Analysis and Critical Control Points, the internationally recognised system of food safety management required under EU Regulation 852/2004 and Irish food safety law.

"HSA" means the Health and Safety Authority of Ireland.

"Intellectual Property Rights" means patents, trademarks, service marks, trade names, copyrights, database rights, design rights, know-how, confidential information, and all other intellectual property rights whether registered or unregistered.

"Manager" means a User assigned the role of 'manager' or 'owner' within a Business on the Platform, with elevated permissions as defined in the Platform documentation.

"Member" or "Team Member" means any User who has accepted an invitation to join a Business account on the Platform.

"Personal Data" has the meaning given in GDPR Article 4(1).

"Platform" means the SafePlate software-as-a-service product, including the web application, mobile application (iOS and Android), edge function APIs, and any related services operated by Resocial.

"Pro Plan" and "Enterprise Plan" mean the paid subscription tiers of the Platform, as described on the SafePlate pricing page.

"Service Role" means a Supabase service-level access credential used exclusively in server-side processing; never exposed to end users.

"Special Category Data" has the meaning given in GDPR Article 9, and in particular includes health data as defined therein.

"Stripe" means Stripe Payments Europe, Limited, the payment processing provider used by Resocial.

"Sub-Processor" means any third-party processor engaged by Resocial to process Personal Data on your behalf in connection with the Platform.

"Subscription" means a paid plan (Pro or Enterprise) for access to the Platform on a recurring billing basis.

"User" means any individual who has created an account on the Platform or who accesses the Platform as a Member of a Business account.

"Venue" means a physical food business location registered under a Business account.

2. Scope of Services

2.1 What SafePlate Provides

SafePlate is a digital compliance management platform designed to assist Irish food businesses in:

Creating, recording, and storing HACCP-related food safety monitoring records;
Managing staff training records, fitness-to-work declarations, and induction documentation;
Maintaining allergen matrices, traceability records, and food incident logs;
Accessing AI-powered food safety guidance through the HACCP Expert AI assistant;
Generating compliance reports and documentation for internal and external review;
Managing equipment registers, calibration records, and supplier approvals;
Receiving automated alerts and notifications relating to compliance obligations.

2.2 Compliance Tool, Not Compliance Guarantee

SafePlate is a tool to assist compliance. It does not guarantee compliance with FSAI, HSA, HSE, or any other regulatory requirements. The responsibility for actual compliance with all applicable food safety, health, and safety legislation rests exclusively with the Business and its Management.

2.3 Not Legal or Regulatory Advice

Nothing in the Platform, including outputs from AI Services, constitutes legal advice, regulatory advice, or a formal compliance audit. You should seek qualified professional advice for specific legal, regulatory, or food safety questions.

2.4 Regulatory Alignment

The Platform is designed with reference to:

EU Regulation 852/2004 on the hygiene of foodstuffs;
Food Safety Authority of Ireland Act 1998;
FSAI Guidance Notes (including Guidance Note 44 on Food Safety Culture);
Health and Safety at Work Act 1989 (Ireland) and associated regulations;
HSA Safe Hospitality guidance;
EU Regulation 1169/2011 on food information to consumers (allergen labelling);
General Data Protection Regulation (EU) 2016/679.

Regulatory requirements change over time. See Section 10 for our disclaimer regarding regulatory change.

3. Account Registration and Eligibility

3.1 Who May Register

You may register for a SafePlate account if you:

(a) are at least 18 years of age;
(b) are operating a food business in Ireland (including Northern Ireland — see Section 16) or providing services to such a business;
(c) have the legal authority to accept these Terms on behalf of any business entity you are registering.

SafePlate is not available to food businesses located in Great Britain (England, Scotland, or Wales). See Section 16.

3.2 Registration Information

You agree to provide accurate, current, and complete information when registering, including your business name, Companies Registration Office number (where applicable), EHO district, and contact details. You agree to maintain and promptly update this information.

3.3 Account Security

You are responsible for maintaining the confidentiality of your account credentials. You agree to:

(a) use a strong, unique password;
(b) not share your credentials with any other person;
(c) notify us immediately at [support@safeplate.ie](mailto:support@safeplate.ie) if you suspect unauthorised access;
(d) ensure all Members of your Business account comply with these Terms.

3.4 Business Owner Responsibility

The person who registers a Business account (the "Owner") is contractually responsible for all activity within that Business account, including activity by Managers, Supervisors, Staff, and Viewers added to the account.

3.5 One Account Per Business Location Group

Multiple venues under common ownership may be managed under a single Business account. Each distinct legal entity operating food businesses must maintain its own Business account.

4. Acceptable Use Policy

4.1 Permitted Use

You may use SafePlate solely for lawful purposes in connection with managing food safety compliance for your registered food business(es).

4.2 Prohibited Activities

You must not use SafePlate to:

(a) submit false, fabricated, or misleading food safety records;
(b) tamper with, alter, or delete records in a manner intended to deceive any regulatory authority;
(c) process Personal Data of individuals who have not consented to such processing in accordance with GDPR;
(d) upload content that is defamatory, discriminatory, harassing, or otherwise unlawful;
(e) circumvent any technical or access controls within the Platform;
(f) reverse engineer, decompile, or disassemble any part of the Platform;
(g) scrape, crawl, or otherwise extract data from the Platform by automated means without written permission;
(h) use the AI Services to generate food safety records for premises you do not control;
(i) resell or sub-license access to the Platform without a written reseller agreement with Resocial;
(j) use the Platform for any purpose that would constitute a criminal offence or create civil liability.

4.3 Consequences of Breach

Breach of this AUP may result in immediate suspension or termination of your account, without refund, and may be reported to relevant regulatory authorities including the FSAI, HSA, or An Garda Síochána.

4.4 AI Misuse

You must not attempt to manipulate AI Services to generate outputs that misrepresent food safety conditions, fabricate compliance records, or provide advice that could endanger public health. Such conduct may constitute an offence under the Food Safety Authority of Ireland Act 1998.

5. Subscription Plans and Billing

5.1 Plan Tiers

SafePlate is offered on the following tiers:

| Plan | Monthly AI Credits | Price | Features |
|---|---|---|---|
| Free | 100 | €0/month | Core controls, basic AI |
| Pro | 1,000 | As published | Full feature set |
| Enterprise | 5,000 | As published | Custom limits, dedicated support |

Current pricing is published at [safeplate.ie/pricing](https://safeplate.ie/pricing) and may be updated with 30 days' notice to existing subscribers.

5.2 Subscription Billing

Pro and Enterprise subscriptions are billed monthly or annually in advance, in Euros (€), via Stripe. By subscribing, you authorise Resocial to charge the payment method on file on each billing date.

5.3 Auto-Renewal

Subscriptions renew automatically unless cancelled before the renewal date. You will receive a reminder email at least 5 days before renewal. You may cancel at any time through the billing settings in your account; cancellation takes effect at the end of the current billing period.

5.4 Cooling-Off Period for Sole Traders and Consumers

If you are a sole trader or an individual acting outside a business context, you have a 14-day right of withdrawal from a new subscription under the EU Consumer Rights Directive (2011/83/EU) as implemented in Ireland by the European Union (Consumer Information, Cancellation and Other Rights) Regulations 2013. To exercise this right, contact [support@safeplate.ie](mailto:support@safeplate.ie) within 14 days of your first payment. This right does not apply if you have already fully used the service within the 14-day period.

5.5 Price Changes

We will give existing subscribers at least 30 days' written notice before any price increase takes effect. If you do not cancel before the new price takes effect, you are deemed to have accepted the new price.

5.6 Taxes

Prices are exclusive of VAT. VAT at the applicable Irish rate will be added where required by law.

5.7 Failed Payments

If a payment fails, we will retry up to three times over 7 days. After repeated failure, your account may be downgraded to the Free plan and access to paid features suspended. Outstanding amounts remain due.

5.8 Refunds

Subscription fees paid for completed billing periods are non-refundable except as required by applicable Irish consumer law or as expressly stated in these Terms. If you cancel mid-period, you retain access until the end of the paid period.

6. AI Credit System

6.1 What AI Credits Are

AI Credits are a non-monetary virtual currency used to unlock individual AI-powered operations within the Platform. Credits are consumed per operation as follows:

| Operation | Cost |
|---|---|
| HACCP AI Chat message | 5 credits |
| Control record AI assessment | 2 credits |
| Photo analysis | 3 credits |
| Inspection scoring | 5 credits |
| Food safety culture score | 5 credits |
| Temperature trend analysis | 3 credits |
| Weekly digest generation | 8 credits |
| PDF compliance report | 10 credits |
| HACCP plan generation | 25 credits |
| HACCP plan refresh | 10 credits |

6.2 Monthly Included Credits

Each plan includes a monthly allocation of AI Credits (see Section 5.1). Unused monthly credits do not roll over to the following month. Credits reset on your monthly billing date.

6.3 Credit Top-Ups

Additional AI Credits may be purchased in packs at any time. Top-up credits do not expire and are consumed after your monthly included allocation is exhausted.

6.4 Non-Refundable After Use

AI Credit top-up purchases are non-refundable once credits have been used. Unused credits in a top-up pack may be refunded within 14 days of purchase if no credits from that pack have been consumed, subject to Resocial's discretion. This does not affect your statutory rights as a consumer.

6.5 Credit Guard — Deduction Before Inference

Credits are deducted from your account before any AI operation is executed. If your credit balance is insufficient, the operation will not proceed and no credits will be charged. This ensures you are never charged for an operation that was not completed.

6.6 AI Lock at Zero Balance

If your AI Credit balance reaches zero, AI Services will be automatically disabled until credits are added. Non-AI features of the Platform remain fully accessible.

6.7 Low Credit Alerts

Automated alerts are sent when your balance falls to 20% and 10% of your monthly allocation, and again when your balance reaches zero.

6.8 No Liability for AI Unavailability Due to Zero Balance

Resocial accepts no liability for any compliance consequences arising from the temporary unavailability of AI Services due to a zero credit balance.

7. Free Trial

7.1 Trial Period

New Business accounts on the Pro plan may be offered a free trial period as advertised at the time of registration. The duration and terms of any trial will be stated clearly at sign-up.

7.2 Credit Card Requirement

A valid payment method may be required to start a trial. If so, you will not be charged until the trial ends. You may cancel before the trial ends to avoid any charges.

7.3 One Trial Per Business

Free trials are available to new customers only. Only one trial per legal business entity is permitted.

7.4 Transition to Paid Plan

At the end of the trial, your account will automatically convert to the selected paid plan unless cancelled. Trial credits do not carry over to the paid plan.

8. Intellectual Property

8.1 Our Rights

The Platform, including its source code, design, user interface, documentation, AI prompts, system prompts, and all Platform-generated outputs (except your Content), are the exclusive property of Resocial Marketing Ltd and are protected by Irish and EU intellectual property law.

8.2 Your Rights in Your Content

You retain full ownership of all Content you upload to the Platform, including your food safety records, staff data, allergen matrices, and business documentation.

8.3 Licence You Grant Us

By using the Platform, you grant Resocial a limited, non-exclusive, royalty-free licence to host, store, process, and transmit your Content solely for the purpose of providing the Service to you. We do not use your Content to train AI models or for any purpose other than delivering the Service.

8.4 Anonymised Aggregate Data

We may use anonymised, aggregated, non-personally-identifiable data derived from Platform usage (for example, aggregate temperature breach rates across sectors) to improve the Platform and publish industry insights. This data will never identify your Business or any individual.

8.5 Feedback

If you provide suggestions, feedback, or ideas for improving the Platform, you grant Resocial an irrevocable, perpetual, royalty-free licence to use such feedback without obligation to you.

8.6 No Implied Licence

Nothing in these Terms grants you any rights to Resocial's Intellectual Property Rights beyond the limited right to use the Platform as described herein.

9. AI Services — Important Limitations

EU AI Act Notice: SafePlate's HACCP Expert AI assistant constitutes an AI system that interacts with human users. In compliance with EU AI Act Article 50 (obligations for deployers of AI systems that interact with natural persons, applicable from 2 August 2026), we disclose that: (a) you are interacting with an AI system, not a human; (b) the AI is powered by Anthropic's Claude model; and (c) the AI operates within a defined scope limited to food safety, HACCP, allergen management, and related Irish and EU regulatory topics.

9.1 Scope Limitation

The HACCP Expert AI assistant is trained and constrained to answer questions within the following domains only:

HACCP principles, CCPs, critical limits, monitoring, corrective actions, verification, and records;
FSAI legislation, guidance, and EHO inspection processes;
HSA Safe Hospitality guidance;
Temperature control for food safety;
Allergen management under EU FIC Regulation 1169/2011;
Staff fitness to work and illness exclusion;
Food safety training;
Cleaning, disinfection, and pest control;
Traceability, food recall, and supplier management;
Food safety culture under FSAI Guidance Note 44;
Microbiological hazards;
Shelf-life and date marking;
Food incident reporting;
EHO inspection preparation.

Questions outside this scope will be declined. The AI will clearly indicate when a question falls outside its scope.

9.2 AI Outputs Are Not Definitive

AI-generated content, including chat responses, AI assessments of control records, inspection scores, and HACCP plan drafts, are provided for guidance and assistance purposes only. They:

(a) may contain errors, omissions, or outdated information;
(b) do not constitute a formal HACCP audit, regulatory inspection, or compliance certification;
(c) should be reviewed by a qualified food safety professional before being relied upon for critical compliance decisions;
(d) are not a substitute for appropriately trained staff.

9.3 Critical Limits Are Fixed

The temperature critical limits used by the Platform's AI and automated checks are fixed constants based on FSAI/HSA guidance. These limits are:

Fridge: target 3°C, warn >5°C, critical breach >8°C
Freezer: target –18°C, warn >–15°C, critical breach >–12°C
Cooking (poultry): minimum 82°C core
Cooking (all other): minimum 75°C core
Reheating: minimum 75°C (82°C poultry), never reheat more than once
Hot holding: minimum 63°C; discard if below 63°C for more than 2 hours
Cold display: maximum 5°C; discard if above 8°C for more than 4 hours
Delivery (chilled): reject if above 8°C
Delivery (frozen): reject if above –12°C
Legionella (stored): minimum 60°C
Legionella (outlet): minimum 50°C

These limits reflect current FSAI/HSA guidance. Where your Competent Authority or qualified food safety consultant advises different limits for your specific operation, those professional instructions take precedence.

9.4 EU AI Act Compliance

Resocial commits to ongoing compliance with the EU AI Act (Regulation (EU) 2024/1689) as its provisions become applicable. The HACCP Expert AI is categorised as a general-purpose AI system operating in a limited-scope deployment. We maintain transparency logs and human oversight mechanisms as required.

9.5 Product Liability

To the maximum extent permitted by law, Resocial is not liable for any harm caused by reliance on AI-generated outputs under the EU Product Liability Directive (Council Directive 85/374/EEC as amended) or any successor legislation. AI outputs must be validated by qualified humans before implementation.

9.6 No Guarantee of Accuracy

AI language models can and do produce inaccurate or "hallucinated" outputs. Do not act on AI advice without independent verification, particularly for matters that could affect food safety or public health.

10. Regulatory Compliance Disclaimer

10.1 Law Changes

Food safety, health and safety, allergen labelling, and data protection law changes regularly. FSAI and HSA publish updated guidance notes, codes of practice, and legislative notices. Resocial does not warrant that the Platform reflects the most current state of applicable law at any given time.

10.2 Update Policy

We aim to update the Platform's control definitions, AI critical limits, and compliance templates within a reasonable period (generally 60 days) of material changes to FSAI or HSA published guidance. However, we cannot guarantee immediate updates.

10.3 Your Responsibility

You are responsible for staying informed of changes to food safety law applicable to your business and for ensuring your compliance practices reflect current legal requirements, regardless of what the Platform currently reflects.

10.4 EHO Inspection — No Liability for Outcomes

SafePlate expressly excludes all liability for the outcome of any EHO inspection, improvement notice, closure order, prosecution, or other regulatory action taken against your business. The Platform provides tools to assist with compliance documentation. Whether those documents satisfy an EHO inspector, meet the standard required for prosecution defence, or constitute an adequate HACCP system under the Food Safety Authority of Ireland Act 1998 is a matter for qualified legal and food safety professionals and ultimately for the courts. We do not guarantee that using SafePlate will result in a favourable inspection outcome, avoid regulatory action, or constitute a legal defence.

10.5 Infrastructure Failure During Inspection

If the Platform is unavailable at the time of an EHO inspection due to any technical issue (including but not limited to Supabase downtime, Netlify outages, or network failures), Resocial accepts no liability for any consequences including but not limited to inspection failure, regulatory action, or business disruption. See Section 14 for our availability commitments. You should maintain offline or paper backups of critical compliance records.

11. Data Protection and Privacy

11.1 Roles and Responsibilities

For the purposes of GDPR:

Resocial Marketing Ltd acts as a Data Processor in respect of the Personal Data of your employees, contractors, and customers that you process through the Platform. You remain the Data Controller for that data.
Resocial Marketing Ltd acts as a Data Controller in respect of the Personal Data of your account holders (i.e., the individuals who register on the Platform) for purposes of account management, billing, and service delivery.

11.2 Data Processing Agreement

Where required under GDPR Article 28, a Data Processing Agreement (DPA) governs Resocial's processing of Personal Data on your behalf. By accepting these Terms, you accept the standard DPA available at [safeplate.ie/legal/dpa](https://safeplate.ie/legal/dpa). Enterprise customers may request a bespoke DPA.

11.3 Privacy Policy

Our full Privacy Policy is available at [safeplate.ie/legal/privacy](https://safeplate.ie/legal/privacy) and is incorporated into these Terms by reference.

11.4 Data Minimisation

We process only the Personal Data necessary to deliver the Service. We do not sell or share your Personal Data with third parties for marketing purposes.

11.5 Your Rights as a Data Subject

As a data subject, you have the following rights under GDPR:

Right of access (Article 15)
Right to rectification (Article 16)
Right to erasure (Article 17) — subject to legal retention obligations (see Section 15)
Right to restriction of processing (Article 18)
Right to data portability (Article 20)
Right to object (Article 21)

To exercise any of these rights, contact [support@safeplate.ie](mailto:support@safeplate.ie).

11.6 Supervisory Authority

You have the right to lodge a complaint with the Data Protection Commission of Ireland at [dataprotection.ie](https://www.dataprotection.ie) or with your local supervisory authority.

12. Special Category Health Data

GDPR Article 9 Notice: SafePlate processes certain categories of Special Category Personal Data as defined in GDPR Article 9. This section sets out how we handle that data and your specific rights and obligations in relation to it.

12.1 What Special Category Data We Process

The Platform processes the following Special Category Data on behalf of food businesses:

(a) Fitness-to-Work Declarations: Staff fitness-to-work declarations contain health data including (but not limited to) information about gastrointestinal symptoms, skin conditions, recent illness, jaundice, and recent travel. This data is required by FSAI guidance and forms part of a food business's HACCP system.

(b) Illness Reports: Records of staff illness absence, including whether the illness is gastrointestinal in nature (which triggers a mandatory 48-hour exclusion under FSAI guidance).

(c) Return-to-Work Documentation: Records of fitness assessments on return from illness absence.

12.2 Legal Basis for Processing

The legal basis for processing this Special Category Data is:

GDPR Article 9(2)(b): Processing is necessary for the purposes of carrying out obligations and exercising specific rights of the controller or of the data subject in the field of employment and social security and social protection law (specifically, compliance with food safety legislation and occupational health obligations under the Health and Safety at Work Act 1989 and Food Safety Authority of Ireland Act 1998);
GDPR Article 9(2)(h): Processing is necessary for the purposes of preventive or occupational medicine (specifically, preventing the transmission of food-borne illness to the public).

12.3 Your Obligations as a Data Controller

If you are a Business using SafePlate to collect fitness-to-work or illness data from your employees, you are the Data Controller for that data. You must:

(a) have a lawful basis for collecting that data from your employees (typically GDPR Article 9(2)(b) combined with explicit consent or a clear employment contractual obligation);
(b) provide employees with a clear privacy notice explaining how their health data will be processed;
(c) ensure only appropriately authorised personnel (typically Manager level or above) can access fitness-to-work records;
(d) not use fitness-to-work data for any purpose other than managing occupational health and food safety compliance;
(e) comply with the retention and deletion obligations in Section 15.

12.4 Security of Health Data

Resocial implements technical and organisational measures to protect Special Category Data, including:

Row-Level Security (RLS) policies ensuring fitness-to-work records are accessible only to the recording staff member and Manager-level or above users;
Health data field values are never included in application error logs or Sentry error reporting;
All data is encrypted at rest and in transit;
Access to health data tables is restricted at the database level and audited.

12.5 No AI Processing of Health Data

Fitness-to-work declarations and illness reports are never submitted to AI Services (including Anthropic's Claude) and are never processed by large language models. These records are stored and retrieved as structured data only.

12.6 Staff Rights Regarding Health Data

Individual staff members have the right to access their own fitness-to-work and illness records through the Platform. Requests for deletion of health records will be considered subject to the legal retention obligations in Section 15.3.

13. Sub-Processors

Resocial uses the following third-party Sub-Processors in the delivery of the Platform. All Sub-Processors are bound by appropriate data processing agreements and, where required by GDPR, Standard Contractual Clauses.

| Sub-Processor | Purpose | Location | Data Protection Info |
|---|---|---|---|
| Supabase, Inc. | Database, authentication, file storage, edge functions | EU (AWS eu-west-1) | [supabase.com/privacy](https://supabase.com/privacy) |
| Anthropic, PBC | AI language model inference (Claude) | USA (SCCs applied) | [anthropic.com/privacy](https://www.anthropic.com/privacy) |
| Stripe Payments Europe, Limited | Payment processing | Ireland/EU | [stripe.com/privacy](https://stripe.com/privacy) |
| Resend, Inc. | Transactional email delivery | USA (SCCs applied) | [resend.com/privacy](https://resend.com/privacy) |
| Netlify, Inc. | Web application hosting and CDN | USA/EU (SCCs applied) | [netlify.com/privacy](https://www.netlify.com/privacy/) |
| Sentry, Inc. | Error monitoring and performance | USA (SCCs applied) | [sentry.io/privacy](https://sentry.io/privacy/) |
| Expo (Expo, Inc.) | Mobile push notification infrastructure | USA (SCCs applied) | [expo.dev/privacy](https://expo.dev/privacy) |
| Google Firebase (Google LLC) | Android push notifications (FCM) | USA/EU (SCCs applied) | [firebase.google.com/support/privacy](https://firebase.google.com/support/privacy) |

13.1 Notification of Sub-Processor Changes

We will provide at least 30 days' notice of any addition to or change of Sub-Processors that process Personal Data. Notice will be provided by email to the Business Owner's registered email address. You may object to a new Sub-Processor within 14 days; if we cannot accommodate your objection, you may terminate your subscription with a pro-rata refund.

13.2 Anthropic Data Handling

When you use AI Services, your inputs (including food safety questions and control record data, but never Personal Data or health data) are transmitted to Anthropic for inference. Anthropic processes this data under its API terms. Anthropic does not train its models on API inputs by default. We have configured our Anthropic integration to avoid sending identifiable personal or health data in AI prompts.

14. Infrastructure and Availability

14.1 Target Availability

Resocial targets 99.5% monthly uptime for the Platform. This target is aspirational and does not constitute a contractual Service Level Agreement (SLA) unless separately agreed in writing for Enterprise customers.

14.2 Planned Maintenance

We aim to carry out planned maintenance outside core Irish business hours (08:00–22:00 IST) and will give at least 24 hours' notice via the Platform's status page and email where possible.

14.3 Third-Party Infrastructure

The Platform depends on the infrastructure of Supabase (database and API), Netlify (hosting), Stripe (billing), Resend (email), and other Sub-Processors listed in Section 13. Outages or degraded performance of these third-party services may affect the Platform's availability. Resocial accepts no liability for such third-party outages.

14.4 EHO Inspection Infrastructure Failure

Specifically and without limitation: if the Platform is inaccessible during an Environmental Health Officer inspection or audit, Resocial accepts no liability for any regulatory consequences whatsoever, including but not limited to unsatisfactory inspection outcomes, improvement notices, enforcement actions, or business closure. You should maintain printed or otherwise accessible offline copies of current food safety records and your HACCP plan. This is a legal requirement independent of your use of any digital system.

14.5 Mobile App Availability

The SafePlate mobile application ("App") operates offline-first where possible, with a local sync queue for records created without internet connectivity. However, AI Services and real-time sync require an active internet connection.

14.6 Force Majeure

Resocial shall not be liable for any failure or delay in performance caused by circumstances beyond our reasonable control, including natural disasters, war, civil unrest, government action, internet infrastructure failures, or acts of God.

15. Data Retention and Account Termination

15.1 Your Data During Active Subscription

Your Content and records are stored for the duration of your active Account. Backups are maintained as required for disaster recovery.

15.2 General Retention on Account Termination

On termination or closure of your account, your data is retained for 90 days to allow for data export, after which it will be deleted from active systems. Backups may retain data for up to an additional 30 days before full deletion.

15.3 Mandatory Retention of Regulatory Records

Certain records cannot be deleted on request because they are subject to mandatory retention obligations under Irish and EU food safety law:

(a) HACCP Records and Control Records: Under EU Regulation 852/2004 and FSAI guidance, food safety records must be retained for a minimum of 2 years from the date of creation. Deletion of control records within this period will be declined.

(b) Fitness-to-Work and Illness Records: These records are required by FSAI guidance and employment law and must be retained for a minimum of 5 years after the end of the relevant employment relationship, or such longer period as required by law.

(c) Training Records: Staff training and certification records must be retained for a minimum of 3 years after the record is created or the relevant employment ends.

(d) Audit Logs: System audit logs are maintained as immutable, append-only records and cannot be deleted even on account termination.

15.4 GDPR Erasure vs Legal Retention

Where you or a data subject makes a request for erasure under GDPR Article 17, we will comply to the extent possible. However, where erasure would conflict with a mandatory legal retention obligation listed in Section 15.3, we will retain the minimum data necessary to fulfil that obligation and delete or anonymise all other Personal Data associated with that record. We will notify you of any partial erasure and the legal basis for retention.

15.5 Data Export

You may export your data at any time using the export functionality within the Platform. We recommend regular exports as part of your compliance records management.

15.6 Account Termination by Resocial

Resocial may terminate or suspend your account immediately, without notice, if:

(a) you materially breach these Terms and fail to remedy the breach within 7 days of written notice;
(b) you use the Platform for illegal purposes, including the creation of false regulatory records;
(c) your account is subject to a regulatory investigation requiring suspension;
(d) a payment failure persists for more than 30 days after repeated attempts.

On termination by Resocial for cause, no refund is due. On termination without cause by Resocial, a pro-rata refund of prepaid subscription fees will be issued.

16. Multi-Jurisdiction Use

16.1 Ireland (Republic of Ireland)

SafePlate is primarily designed, calibrated, and supported for use in the Republic of Ireland. All references to legislation, regulatory bodies (FSAI, HSA), and compliance obligations refer to the Irish legal framework unless otherwise stated.

16.2 Northern Ireland

SafePlate supports use in Northern Ireland. Under the Windsor Framework (Protocol on Ireland/Northern Ireland), Northern Ireland applies EU food safety and agricultural law, including EU Regulation 852/2004 (HACCP), EU FIC Regulation 1169/2011 (allergens), and relevant GDPR provisions. SafePlate's compliance templates and critical limits are therefore substantially applicable in Northern Ireland. However, you remain responsible for verifying compliance with any Northern Ireland-specific regulatory requirements and the rules of the Food Standards Agency Northern Ireland (FSANI).

16.3 Great Britain NOT Supported

SafePlate does not support food businesses in England, Scotland, or Wales. Great Britain operates under UK GDPR, the UK Food Safety Act 1990, and FSA (UK) guidance, which diverge from the EU framework in material respects. We do not warrant that SafePlate meets the compliance requirements of food businesses in Great Britain. Businesses in Great Britain must not rely on SafePlate for compliance purposes.

16.4 Other Jurisdictions

SafePlate makes no representations regarding its suitability for use in any other jurisdiction. Businesses outside Ireland and Northern Ireland must not rely on the Platform for regulatory compliance.

17. Third-Party Services

17.1 Third-Party Integrations

SafePlate integrates with third-party services including Stripe (billing), Anthropic (AI), Supabase (infrastructure), Resend (email), Expo (mobile), and others listed in Section 13. Use of these integrations is subject to the respective third party's own terms of service and privacy policies.

17.2 No Endorsement

Reference to third-party services within the Platform does not constitute an endorsement by Resocial of those services.

17.3 Third-Party Terms

Stripe: Your use of payment services is subject to the [Stripe Services Agreement](https://stripe.com/ie/ssa).
Anthropic: AI outputs are subject to Anthropic's [usage policies](https://www.anthropic.com/policies/usage).
Expo / Apple App Store / Google Play: Mobile application use is additionally subject to the respective platform terms.

17.4 Third-Party Downtime

Resocial is not responsible for any loss or damage caused by the unavailability, errors, or acts or omissions of third-party service providers. We will endeavour to notify you promptly of any significant third-party outage affecting the Platform.

18. Data Breach Notification

18.1 Our Obligations

In the event of a personal data breach affecting data processed by Resocial on your behalf, Resocial will:

(a) notify you without undue delay and within 72 hours of becoming aware of the breach, to the extent information is available;
(b) provide information about the nature of the breach, the categories and approximate number of data subjects affected, the likely consequences, and the measures taken or proposed to address the breach;
(c) cooperate with you to enable you to meet your own obligations to notify the Data Protection Commission (DPC) and affected data subjects where required under GDPR Articles 33 and 34.

18.2 Your Obligations

As Data Controller, you are responsible for notifying the Data Protection Commission and affected data subjects where required. Resocial's notification to you starts the clock for your own notification obligations.

18.3 Security Measures

Resocial implements industry-standard security measures including:

Row-Level Security (RLS) on all database tables;
Encryption in transit (TLS 1.2+) and at rest (AES-256);
Service role credentials stored exclusively in Supabase Vault and never exposed to client code;
Regular security reviews and penetration testing;
Immutable audit logs with append-only policies;
Multi-factor authentication support for admin accounts.

19. Limitation of Liability

19.1 Mutual Acknowledgement

Both parties acknowledge that the limitations set out in this Section are an essential element of the bargain between them and that Resocial would not have agreed to provide the Platform at the prices charged without these limitations.

19.2 Exclusion of Consequential Loss

To the maximum extent permitted by applicable Irish and EU law, Resocial shall not be liable to you for any:

(a) indirect, special, incidental, consequential, or punitive loss or damage;
(b) loss of profits, revenue, business, goodwill, or anticipated savings;
(c) loss or corruption of data;
(d) loss arising from regulatory action, including EHO improvement notices, closure orders, or prosecution;
(e) loss arising from reliance on AI-generated outputs;
(f) loss arising from the unavailability of the Platform during an EHO inspection or audit;

in each case whether arising in contract, tort (including negligence), breach of statutory duty, or otherwise, even if Resocial has been advised of the possibility of such loss.

19.3 Cap on Liability

Resocial's total aggregate liability to you in respect of all claims arising out of or in connection with these Terms or the Platform (whether in contract, tort, or otherwise) shall not exceed the greater of:

(a) the total subscription fees paid by you to Resocial in the 12 months immediately preceding the event giving rise to the claim; or
(b) €500.

19.4 Exclusions from Cap

Nothing in these Terms limits or excludes liability for:

(a) death or personal injury caused by Resocial's negligence;
(b) fraud or fraudulent misrepresentation;
(c) any liability that cannot be limited or excluded by applicable Irish or EU law, including under the Sale of Goods and Supply of Services Act 1980 (Ireland);
(d) consumer rights under the Consumer Rights Act 2022 (Ireland) and EU consumer protection directives.

19.5 Sole Trader and Consumer Protections

If you are a sole trader or consumer for the purposes of Irish consumer law, statutory rights that cannot be excluded by contract are not affected by these Terms.

20. Indemnification

20.1 Your Indemnity

You agree to indemnify, defend, and hold harmless Resocial Marketing Ltd, its directors, employees, agents, and contractors from and against any claims, damages, losses, liabilities, costs, and expenses (including reasonable legal fees) arising out of or in connection with:

(a) your breach of these Terms;
(b) your violation of any applicable law, including food safety, health and safety, data protection, or employment law;
(c) the Content you upload to the Platform;
(d) any claim by a third party (including a regulatory authority, employee, or customer) arising from your use of the Platform;
(e) your failure to maintain appropriate offline records as required by law.

20.2 Our Indemnity

Resocial will indemnify you against any claim that the Platform itself (excluding your Content) infringes the intellectual property rights of a third party, subject to you (a) promptly notifying us of the claim, (b) not making any admission of liability, and (c) allowing us to conduct the defence at our cost.

21. Amendments to These Terms

21.1 Right to Amend

Resocial may update these Terms at any time. We will provide at least 30 days' notice of material changes, by email to the Business Owner's registered address and via an in-Platform notification.

21.2 What Constitutes a Material Change

Material changes include but are not limited to: changes to payment terms, changes to data processing practices, changes to limitations of liability, removal of features, or significant changes to the AI Services scope.

21.3 Your Acceptance

Continued use of the Platform after the effective date of amended Terms constitutes acceptance of the new Terms. If you do not agree, you must stop using the Platform and may terminate your subscription in accordance with Section 15.

21.4 Version History

Previous versions of these Terms are archived and available upon request at [support@safeplate.ie](mailto:support@safeplate.ie).

22. Governing Law and Jurisdiction

22.1 Governing Law

These Terms and any dispute or claim arising out of or in connection with them (including non-contractual disputes or claims) shall be governed by and construed in accordance with the laws of Ireland.

22.2 Jurisdiction

The courts of Ireland shall have exclusive jurisdiction to settle any dispute or claim arising out of or in connection with these Terms.

22.3 EU Mandatory Consumer Rights

Nothing in this Section affects any mandatory rights you have as a consumer or sole trader under applicable EU or Irish consumer protection legislation, including rights to bring proceedings before the courts of your place of residence.

22.4 Alternative Dispute Resolution

We commit to engaging in good-faith mediation or alternative dispute resolution before initiating or responding to formal legal proceedings. To initiate ADR, contact [support@safeplate.ie](mailto:support@safeplate.ie).

23. Contact Information

For all legal enquiries, data protection matters, and contractual notices:

Resocial Marketing Ltd
Registered in Ireland

Email: [support@safeplate.ie](mailto:support@safeplate.ie)
Data Protection: [support@safeplate.ie](mailto:support@safeplate.ie)
Billing: [support@safeplate.ie](mailto:support@safeplate.ie)
Support: [support@safeplate.ie](mailto:support@safeplate.ie)

Data Protection Commission of Ireland:
21 Fitzwilliam Square South, Dublin 2, D02 RD28
[dataprotection.ie](https://www.dataprotection.ie)

SafePlate is a product of Resocial Marketing Ltd. These Terms & Conditions are effective from 11 May 2026. Version v1.0.