Terms of use
The agreement between a customer organization and the operator of Spilno LMS, including the data processing agreement.
Updated: October 21, 2026
Parties
These terms are an agreement between the operator of the Spilno LMS service ([TO FILL: full legal name, registration number, address], "we") and the organization that signed up for Spilno LMS ("the customer"). The person signing up the organization confirms they are authorised to agree on its behalf.
The service
Spilno LMS is a cloud system for training employees: courses, quizzes, assignments, reminders, reports, certificates, AI quiz generation. We keep developing the service: features may change, but we don't remove without notice what a customer already relies on in its work.
The service is currently in beta, without a guaranteed service level (SLA).
Account and users
- The customer adds its people and appoints admins. It is responsible for who has access and with which role.
- Keep passwords and account access secret. Tell us right away if you suspect unauthorised access.
Plans and payment
- You pay for active users per month under your plan; a person counts as active if they used the service at least once that month.
- The trial lasts 14 days with everything in the Business plan, without a payment card.
- The active-user limit is soft: learning doesn't stop, and the overage is included in the invoice. File storage and plan features are hard limits.
- Invoices are issued monthly. If an invoice isn't paid, we may suspend access; the data is kept.
Customer content
- Everything the customer puts into Spilno LMS (courses, materials, people's data, results) belongs to the customer. We use it only to provide the service to the customer.
- The customer is responsible for having the rights to its materials (including third-party SCORM courses) and a lawful basis to process its employees' data.
AI generation
- AI drafts may contain inaccuracies. The customer reviews them and decides what to publish; learners only see what an admin approved.
- For generation, learning material is sent to an AI provider (see the Privacy policy). Don't include data you can't share with such a provider. AI can be switched off for the whole organization.
Acceptable use
You may not: post illegal content or malware; try to access other organizations' data or get around the service's limits; load the service with automated requests or tests without our consent; resell access without a separate agreement.
Data processing agreement (DPA)
This section is the data processing agreement under Article 28 GDPR. For the data the customer puts into Spilno LMS, the customer is the controller and we are the processor.
- Subject and nature of processing: providing the training service. Data subjects: employees and other people the customer adds. Categories of data: as described in the Privacy policy. Duration: the term of the contract plus 30 days for export.
- Instructions: we process the data only on the customer's documented instructions, which are these terms and the customer's actions in the service, unless the law requires otherwise.
- Confidentiality: only people bound to confidentiality have access to the data, and only as far as the service needs.
- Security: we take the measures described in the Privacy policy: encrypted connections, isolation of organizations' data, two-factor sign-in and an action log for our team, backups.
- Sub-processors: the customer gives general authorisation for the sub-processors listed in the Privacy policy. We announce new ones at least 30 days in advance; the customer may object and, if we can't agree, end the contract. Our agreements with sub-processors give at least the same level of protection.
- Helping the customer: we help respond to people's requests about their rights, ensure security, carry out data protection impact assessments and report breaches.
- Breaches: we notify the customer of a personal data breach without undue delay, with the information known at the time.
- End of processing: after the contract ends, the customer can get an export of its data within 30 days; then we delete the data, including from backups within 14 days, unless the law requires keeping it.
- Audits: we provide the information needed to demonstrate compliance with these obligations and allow reasonable audits agreed in advance.
- Transfers outside the EU: only as described in the Privacy policy, based on the EU Standard Contractual Clauses.
If the customer needs a separately signed DPA, write to us.
Availability and support
We make reasonable efforts to keep the service available and announce planned maintenance in advance. Backups are made daily. Support by email at hello@spilnolms.com.
Termination
- The customer can stop using the service at any time.
- We may suspend or end access for a material breach of these terms or non-payment, with advance notice where possible.
- After termination: data export on request within 30 days, then deletion.
Liability
During the beta the service is provided "as is". Our total liability is limited to the amount the customer paid us in the last 12 months. We aren't liable for indirect losses or lost profits. These limits don't apply where the law doesn't allow them.
Changes to the terms
We notify admins about significant changes at least 30 days in advance. If the customer doesn't agree, it can stop using the service before the changes take effect.
Law and disputes
[TO FILL: governing law and dispute resolution.] We first try to resolve any issue by negotiation.
Contact
hello@spilnolms.com · [TO FILL: operator's registered address]