Terms of Service

1. The agreement

These Terms of Service are the contract between you and the operator of Kilvera (a natural person established in the Netherlands) for use of Kilvera (the website, the playable demo, the inventory tool, saved workspaces and the PDF). By creating an account, clicking to accept, or using the service — including the demo — you agree to them. If you use the service for a company, you confirm you have authority to bind that company, and “you” means the company.

If you do not agree, do not create an account and do not use the demo or the rest of the service.

The Privacy Policy at /privacy is part of how we handle personal data. It is not a separate paid product.

2. What Kilvera is — and is not

Kilvera is automated software that multiplies activity data you enter by published emission factors and prints the working. It produces a screening inventory for internal management and CSRD-style preparation.

It is not: a limited- or reasonable-assurance engagement; a verification opinion; legal, accounting or climate-science advice; an SBTi-validated target; a filing with any regulator; or a substitute for a competent practitioner reviewing your boundary, activity data and factor choices.

Spend-based lines, hotel nights, residual waste and similar items are labelled as screening estimates. Dual Scope 2 follows the GHG Protocol Scope 2 Guidance as implemented in the methodology we publish. National climate targets shown next to your figures are country obligations, not yours, and a gap in our table is a gap in our data.

You remain solely responsible for what you submit to an auditor, a competent authority, a customer or the public.

3. Eligibility

You must be at least 18 and able to form a binding contract. The service is aimed at organisations. You may not use it if you are prohibited from receiving it under applicable export or sanctions rules (see section 14).

4. Accounts

An account is required to persist inventories. The public demo is a local sample; it is not an account and we do not keep it for you. Inventories you save on an account belong to that account, including if you later take a paid plan. We do not owe you recovery of a browser cache you cleared.

You must give an accurate email, keep the password confidential, and tell us of unauthorised use. We may refuse, suspend or close an account that is abusive, unlawful, or a risk to the service or others.

One login is one workspace unless we have agreed a multi-entity plan with you in writing.

5. Your data and our licence

You retain whatever rights you have in the activity data and company information you enter. You grant us a worldwide, non-exclusive licence to host, process and display that data solely to provide the service to you (including backups by our processors).

You warrant that you have the right to enter the data (including personal data of colleagues or contacts) and that it is not unlawful. You will not upload malware or attempt to break another user’s isolation.

Calculated results and the PDF are derived works of your inputs plus our factor tables and software. You may use the PDF for your business. You may not present it as our verification, or remove the statements that it is not one.

6. Our intellectual property

The software, design, copy, factor compilation as a database, and trademarks are ours or our licensors’. Official factor lists remain the property of their publishers (GHG Protocol, Ember, DEFRA/DESNZ, EPA, CO2emissiefactoren.nl, AIB, SBTi, Climate Action Tracker, WRI and others). We do not claim those underlying publications.

You may not scrape, resell, reverse engineer (except to the extent a mandatory law cannot be waived), or use the service to build a competing factor engine by systematically extracting the tables.

7. Acceptable use

You will not: probe or attack the service; bypass row-level isolation; use the service to mislead a third party that the PDF is assured; submit content that is illegal, defamatory or infringing; or use it in a way that would make us a controller of special-category data.

We may rate-limit, block or remove content that breaches this section.

8. Plans, prices and payment

The only plan offered today is Starter, which is free and requires an account. Paid plans are not on sale. Registering interest is not a purchase and creates no obligation to pay.

We do not take payment on the site today. If we enable charges later, prices will be in euro, exclusive of VAT unless stated, billed in advance, and shown on this page before the first charge. You may cancel a paid period before it renews.

Refunds: statutory withdrawal rights may apply to consumers in the EEA/UK for digital content only until performance has begun with your consent and acknowledgement. Kilvera is sold as a business tool. Where you are a consumer and those rights apply, we will honour them. Otherwise fees are non-refundable except where we materially fail to provide the paid features that were not marked “in build”.

We may change prices on notice before the next billing period. Continued payment is acceptance of the new price for that period.

9. Availability and changes

We aim for the service to be available but do not warrant uninterrupted or error-free operation. Factor lists, country coverage and pathways will change as sources revise their publications. A saved report keeps the results stored with it; a new calculation uses the then-current engine.

We may modify or discontinue features. If a paid feature you rely on is withdrawn, we will give reasonable notice or a pro-rata refund of prepaid unused time for that feature.

10. Disclaimers

The service is provided “as is” and “as available”. To the maximum extent permitted by law we disclaim implied warranties of merchantability, fitness for a particular purpose, quiet enjoyment and non-infringement.

We do not warrant that a particular factor is the one your auditor, your national helpdesk or your customer will demand, or that following a modelled SBTi minimum rate produces a validated science-based target.

11. Liability

Nothing in these terms excludes liability that cannot be excluded: death or personal injury caused by negligence, fraud, or mandatory product-liability and consumer rules.

Subject to that, we are not liable for: indirect, incidental, special, consequential or punitive damages; lost profits, revenue, goodwill or data; the cost of substitute software; or any claim arising from your decision to file, publish or assure figures the tool produced.

Our total liability for all claims in any twelve-month period is limited to the fees you paid us for the service in that period, or €100 if you are on the free tier. That cap is an aggregate cap, not per claim.

If you are a consumer in a jurisdiction that forbids these limits, they apply only to the extent allowed, and your statutory rights remain.

12. Indemnity

If you are using the service as a business, you will indemnify us against claims by third parties (including your customers, auditors and authorities) arising from your inventories, your PDFs, your marketing of the figures, or your breach of these terms, except to the extent caused by our wilful misconduct.

13. Term and termination

These terms start when you first use the service and continue until you stop or we close the account. You may export or download your PDFs before you leave. After deletion, cached copies in other browsers are your problem to clear.

Sections that by nature should survive (intellectual property, disclaimers, liability, indemnity, governing law) survive termination.

14. Export, sanctions and anti-abuse

You represent that you are not on an EU, UN, UK or US sanctions list and are not located in a comprehensively sanctioned jurisdiction. You will not use the service in violation of export-control or sanctions law.

15. Governing law and disputes

These terms are governed by the laws of the Netherlands, excluding conflict-of-law rules. The UN Convention on Contracts for the International Sale of Goods does not apply.

Courts: the competent courts of Amsterdam, the Netherlands, except that we may seek injunctive relief in any court of competent jurisdiction, and if you are a consumer you may also bring proceedings in your country of residence where that right cannot be waived.

If you are a business in the EEA, you may be entitled to use the European Commission’s ODR platform; we are not obliged to use a particular ADR body unless a mandatory rule says so.

16. General

These terms are the entire agreement for the service and replace prior proposals about it. If a clause is unenforceable, the rest stays. A waiver has to be in writing. You may not assign the contract without our consent; we may assign it to a successor of the service. There are no third-party beneficiaries except as required for processor/controller arrangements.

Paper form is not required. A click-accept or continued use after notice is enough where the law allows.

Notices to us: kilvera.support@proton.me. Notices to you: the email on the account, or a banner on the site.

The English text is the governing version. Any translation is for convenience only.

We may update these terms. The date at the top will change. Material changes will be posted on /terms and, for account holders, emailed where we can. If you continue to use the service after the new effective date, the new terms apply. If you do not agree, stop and delete the account.

17. Data-processing terms (GDPR / UK GDPR Art. 28)

This section applies when a company uses Kilvera and we store workspace, inventory or target data that includes personal data. For that business data the company is the controller and we are the processor. For the account email itself we remain a controller, as described in the Privacy Policy. Until a separately signed DPA exists, this section is the written processing contract required by Article 28 GDPR and the UK GDPR equivalent.

Subject matter and nature: we host, store, retrieve and transmit the data you save so you can run inventories, set targets and download a PDF (the PDF is generated on your device). Duration: for the life of the account, then deletion as in the Privacy Policy. Purpose: providing the service you requested, and complying with law. Types of personal data in the processor role: contact names and emails you type, and any personal data you embed in notes or activity fields. Categories of data subjects: people you name (employees, contractors, site contacts). We do not want special-category data; do not enter it.

We process only on documented instructions from you — these terms, your use of the product, and written instructions you send us — unless Union, Member State or UK law requires otherwise, in which case we tell you if legally allowed. We ensure persons authorised to process the data are bound by confidentiality. We implement the security measures in the Privacy Policy. We will not appoint a sub-processor other than those named below without a chance for you to object.

Sub-processors today: Cloudflare, Inc. (hosting / edge delivery) and Supabase (authentication and database). A material addition will be listed in the Privacy Policy at least 14 days before it goes live where we can. If you object on reasonable data-protection grounds you may stop using the service and require deletion. Those sub-processors may use further infrastructure providers under their own terms; we remain responsible to you for their processing under this section.

We will, taking into account the nature of processing, help you respond to data-subject requests and with DPIAs or prior consultation to the extent the product allows (export via PDF, deletion, and our answering your questions). We will notify you without undue delay after becoming aware of a personal-data breach affecting data we process for you. At the end of the service we delete or return the personal data, at your choice, within 30 days, except copies we must keep under law or that sit in rotating backups until they expire.

Audits: on written request we will provide available security and transfer documentation from us and from the named sub-processors. An on-site audit is only where mandatory law requires it, at your cost, on reasonable notice, no more than once per year unless a breach or a supervisory authority requires more, and without access to other customers’ data.

International transfers of personal data we process for you follow Privacy Policy section 8 (SCCs / UK Addendum / adequacy / Data Privacy Framework as applicable). If those transfer tools change, we will update the Privacy Policy.