Legal centre

The documents

• Contract

  Terms of Use

  The binding agreement for the website and the platform: accounts, fees and renewal, data ownership, licences and restrictions, warranties, liability, indemnities, arbitration and governing law.

  Read the Terms →

• Policy

  Privacy Policy

  What personal information we collect, why, who we share it with, how long we keep it, where it goes, and your rights under California law, the other US state laws, and the EU and UK GDPR.

  Read the Privacy Policy →

• Policy

  Cookie Policy

  Every cookie and similar technology we use, what each does, how long it lasts, the vendors involved, and how to change your choices — including Global Privacy Control.

  Read the Cookie Policy →

Available on request from legal@vavastone.com: our Data Processing Addendum, our current subprocessor list, our security overview, and our standard Order Form and Master Subscription Agreement for enterprise procurement.

Which one applies to you

Order of precedence

Where documents conflict, the following order applies, highest first:

1. A written Order Form, statement of work or master agreement signed by an authorised officer of VavaStone.
2. Any addendum expressly incorporated by that document, including the Data Processing Addendum.
3. The Terms of Use.
4. The Privacy Policy and Cookie Policy.
5. Documentation, help material and in-product notices.

Purchase orders and supplier portals. Terms contained in a purchase order, vendor onboarding form, procurement portal, invoice acknowledgement or similar document issued by a customer are void and of no effect, even if VavaStone signs, stamps or uploads to that document. Only an instrument signed by an authorised officer of VavaStone that expressly identifies the sections being varied can amend the Terms. See section 1.3 of the Terms of Use.

Company details

Serving legal notice on us

To be effective, a legal notice, demand, claim, subpoena or service of process must be in writing and delivered to:

[[ENTITY]]
Attn: Legal Department
[[ADDRESS]]
San Diego, California, United States

with a copy by email to legal@vavastone.com. Notice is effective on documented delivery to that address.

Notice sent only to a sales, support, billing or chat channel, only through in-product messaging, or only to an individual employee, is not effective legal notice and will not be treated as having been served. Before commencing any proceeding you must first follow the informal resolution procedure in section 25 of the Terms of Use; it is a condition precedent to arbitration.

Intellectual property and trade marks

VavaStone, the VavaStone logo and logomark, and the look, feel and trade dress of our website and application are trade marks and protected works of VavaStone. All software, data models, algorithms, interfaces, documentation, illustrations and content of the Service are owned by VavaStone or its licensors, and all rights are reserved. Section 9 of the Terms of Use sets out what you may and may not do with them.

You may not use our name, marks or trade dress in a way that suggests sponsorship, endorsement or affiliation, or register any confusingly similar name, mark or domain. Fair descriptive reference to VavaStone in ordinary editorial or comparative context is permitted, provided it is accurate, not misleading, and does not use our logo. Requests for permission and brand assets: legal@vavastone.com.

Third-party names, quarry names, stone brand names and marks appearing in the Service belong to their respective owners, and their appearance does not imply any affiliation with or endorsement by VavaStone. Where such material is uploaded by a customer, that customer is responsible for it under section 7.3 of the Terms.

Copyright claims

We respect intellectual property rights and expect our users to do the same. If you believe material accessible through the Service infringes your copyright, send a written notice under the Digital Millennium Copyright Act to our designated agent:

[[DMCA_AGENT]], Copyright Agent
[[ENTITY]]
[[ADDRESS]], San Diego, California, United States
copyright@vavastone.com

Your notice must include: (a) your physical or electronic signature, as the owner or a person authorised to act for the owner; (b) identification of the copyrighted work claimed to be infringed; (c) identification of the material claimed to be infringing, with enough detail for us to locate it, including the URL; (d) your contact details; (e) a statement that you have a good-faith belief the use is not authorised by the owner, its agent or the law; and (f) a statement, under penalty of perjury, that the information in the notice is accurate and that you are authorised to act.

We will respond to properly submitted notices, and may remove or disable access to the material and terminate the accounts of repeat infringers. If your material was removed and you believe that was a mistake or misidentification, you may submit a counter-notice to the same agent. A person who knowingly materially misrepresents that material is infringing, or was removed by mistake, may be liable for damages under 17 U.S.C. §512(f).

Security vulnerability disclosure

We welcome good-faith security research. Report suspected vulnerabilities to security@vavastone.com with enough detail to reproduce the issue.

Rules of engagement. Test only against your own account or data. Do not access, modify, exfiltrate or retain data belonging to anyone else. Do not run denial-of-service, load, spam or social-engineering tests, and do not attempt physical intrusion. Do not use automated scanners against production. Stop as soon as you have confirmed a vulnerability, and do not disclose it publicly until we confirm remediation or ninety (90) days have passed, whichever is sooner.

Our commitment. Research conducted in good faith and within these rules will not be pursued by us as a breach of the Terms of Use, and we will not initiate or support legal action against you for it. We will acknowledge your report and keep you informed of remediation. We operate no paid bug bounty programme and owe no payment, bounty or reward for any report, and any submission is subject to section 11 (Feedback) of the Terms of Use.

Law enforcement and third-party requests

Requests for customer records from law enforcement or another authority must be served in accordance with section 5 above, must be issued under valid legal process, and must be specific as to the account and the records sought. We review every request for legal sufficiency and produce only what the process requires.

Where the request concerns Customer Data held by us as a processor, and unless we are legally prohibited from doing so or believe there is a risk to life or serious injury, we will notify the affected customer before disclosure, so that they can seek protective relief. We may charge reasonable costs of compliance where the law permits.

Civil subpoenas and discovery requests should be directed to legal@vavastone.com and served at the address in section 5.

Data protection documents

Customers subject to the GDPR, the UK GDPR, or a US state privacy law that requires a written processing contract may request our Data Processing Addendum, which covers the subject matter and duration of processing, our obligations as processor, subprocessor terms, security measures, breach notification, assistance with data-subject requests, audit rights, and the Standard Contractual Clauses and UK Addendum for international transfers.

Our current subprocessor list, security overview, and answers to standard vendor security questionnaires are available under NDA. Contact privacy@vavastone.com.

Marketing claims and forward-looking statements

Statements on our website, in demonstrations, proposals, roadmaps, case studies and marketing materials describe what the Service is designed to do and what we currently intend to build. They are not warranties, guarantees or commitments, they do not form part of any contract, and no statement about future features, timing or commercial outcome may be relied upon. Nothing we publish is a promise of any increase in sales, revenue, margin or inventory turnover — results depend on factors outside our control. The operative commitments are those in your Order Form and in the Terms of Use; see sections 3.3, 17 and 21 of the Terms.

Accessibility

We aim to make our website and application usable by everyone, and we work towards the Web Content Accessibility Guidelines (WCAG) 2.1 Level AA as a design target. Accessibility is an ongoing effort, and some content — particularly third-party embeds and legacy material — may not yet fully conform. If you encounter a barrier, tell us at sales@vavastone.com with the page address and a description, and we will work with you to provide the information or function you need in an accessible alternative.

Changes and version history

We may update these documents. The effective date and version number at the top of each page tell you when it last changed. Where a change is material, we give at least thirty (30) days’ notice by email or in-product notice before it takes effect, except where a change is required by law or to address a security or legal risk, in which case it may take effect immediately.

Superseded versions are retained and available on request from legal@vavastone.com.

No legal advice

These documents describe the terms on which VavaStone provides its Service. They are not legal advice to you, and they do not address your own obligations to your buyers, suppliers, employees or regulators. You are responsible for your own compliance — including consumer protection, advertising, pricing, competition, tax, safety, employment and privacy law in every jurisdiction where you operate. Take your own advice.

Contact directory

Postal: [[ENTITY]], [[ADDRESS]], San Diego, California, United States.