Terms of Service

Effective date: September 28, 2026
Last updated: September 28, 2026

These Terms of Service ("Terms") govern access to and use of the websites, applications, subscriptions, and related services offered by Veskyra LLC ("Veskyra," "we," "us," or "our"), including Reskyr, Ryskra, Kyrvec, ValKred, KorLea, and Presvyr, any other product or service we offer that links to or incorporates these Terms (including products released after the effective date), and our shared authentication services (the "Services"). "You" means the person accepting these Terms or, where that person has authority to contract for an organization, that organization. An "Order" is a checkout, order form, or other written subscription or purchase confirmation identifying the Services and commercial terms.

DISPUTE RESOLUTION NOTICE: Section 15 includes binding individual arbitration and a class-action waiver, with exceptions and a 30-day email opt-out. Opting out does not affect your service, pricing, or discounts.

1. Agreement, eligibility, and related documents

You accept these Terms when you affirmatively agree to them during registration or checkout, sign an Order incorporating them, or otherwise expressly accept them. If you act for an organization, you represent that you have authority to bind it. If you do not accept, do not activate or purchase the Services. We make the applicable Terms available for you to retain.

You must be at least 18 and able to enter a binding contract to create a self-service account. Access for younger authorized participants requires a separately approved organizational arrangement with legally required permissions and safeguards. Our current offering is limited to U.S. customers; accepting these Terms does not approve an account outside that scope.

Our Privacy Policy explains personal-information processing; acknowledging it is not blanket consent to every use of data. The AI Data Use Policy governs optional content AI features. The Data Handling and Processing Agreement ("DPA") applies when incorporated into your agreement and we process organizational personal data on your behalf. These Terms do not themselves constitute a HIPAA business associate agreement ("BAA").

If documents conflict, mandatory law and applicable mandatory transfer clauses control first; an executed BAA controls its subject matter; the DPA controls personal-data processing; a separately negotiated signed agreement or Order controls its expressly addressed commercial matters; the AI policy controls AI-specific processing; and these Terms otherwise control. An Order changes a data-protection commitment only if it expressly identifies a lawful agreed change. Purchase-order boilerplate does not amend our agreement unless we expressly accept it in writing.

2. Accounts and organizational administration

Provide accurate account and billing information, keep it current, protect credentials and authentication devices, and promptly report suspected unauthorized access. Use individual credentials unless a feature expressly supports a shared operational account. You are responsible for your authorized users, their compliance with these Terms, and all activity under your accounts and credentials, except to the extent caused by our breach of our security obligations.

Organizations appoint and supervise administrators, assign appropriate permissions, and promptly remove access when a user leaves or changes roles. Administrators may manage organizational records and users within their permissions. Personal-vault and employer-sharing choices remain subject to the product's specific rules.

You may not impersonate another person, misrepresent credentials, or access a workspace without authority. We may request reasonable verification of authority before changing access or exporting organizational records.

3. Access, permitted use, and service changes

During your subscription or other authorized access period, we grant you a limited, nonexclusive, nontransferable right to use the purchased Services for their intended purposes, within your plan limits and these Terms. You may authorize users as your plan permits. Training-provider rights to distribute courses through KorLea are addressed in Section 7.

You must not use the Services to violate law, infringe privacy or intellectual-property rights, distribute malicious code, disrupt security or availability, obtain unauthorized access, bypass access or payment controls, misuse another person's records, or evade applicable trade restrictions. Do not resell access or copy, scrape, or redistribute another provider's protected training material without permission. You may not reverse engineer the Services except to the extent applicable law gives you a right that cannot be restricted. Good-faith security research must respect applicable law and avoid unauthorized access to or disclosure of others' data; report issues privately to us.

Platform messaging may be used only for service and transactional communications and reminders the recipient has opted to receive. You may not send promotional campaigns, advertising, or solicitations through our systems, including by disguising them as transaction or service notices. Respect reminder preferences and keep essential notices relevant to the underlying account, transaction, or service. Independently operated mailing lists and off-platform communications remain your responsibility and do not create permission to violate applicable law, a recipient's choices, or restrictions on data obtained through the Services.

Our communications to you. We send service, security, billing, and transactional messages as needed to provide the Services. We may also send account holders and business contacts information about Veskyra products, features, events, and offers. Every marketing email includes an unsubscribe link, and unsubscribing does not stop service or transactional messages. We do not send marketing to people whose information appears only in a customer's records (for example a range's members, a training provider's learners, or the subject of an incident report) unless they have their own account or relationship with us, and we do not give customer data or our contact lists to anyone else for their own marketing.

Text message (SMS) alerts. Some Services offer text-message alerts as an optional, separately purchased add-on (currently Reskyr, with others possibly added later). SMS alerts are strictly opt-in:

• Each recipient must affirmatively enroll their own mobile number. An organization may not enroll a number, or ask us to text one, without that person's consent, and must promptly remove numbers for people who leave or withdraw.
• Consent to receive texts is not a condition of any purchase. Message frequency varies with the alerts and settings chosen. Message and data rates may apply.
• Reply STOP to any alert to stop texts to that number, or HELP for help, or contact hello@veskyra.com. Tell us or your administrator promptly if your number changes.
• SMS alerts are used only for the service alerts the recipient enrolled in, never for marketing through the platform.
• Mobile carriers are not liable for delayed or undelivered messages. SMS alerts are supplemental notifications. They are not a dispatch, paging, or emergency alerting system and must not be the only way you learn of an emergency or time-critical event; delivery is not guaranteed.

We may maintain, update, or replace features. We will not materially reduce the core functionality of a paid subscription during its current term without a reasonably equivalent replacement or a right to terminate the affected service and receive a refund of unused prepaid fees. That termination right and refund are your exclusive remedy for a change to the Services. We provide reasonable advance notice of a material discontinuation unless urgent security or legal circumstances prevent it. Availability commitments or service credits apply only if expressly stated in an Order or separate service-level agreement.

Free, trial, and preview features. Free plans, trials, and features we label as beta, preview, or early access are provided for evaluation and convenience. They may change or be discontinued, may have limited support, and are excluded from the warranty in Section 12. We give at least 30 days' notice and an opportunity to export before discontinuing a free plan that holds your records, subject to the ValKred rules in Section 11.

Removal of unlawful or prohibited material. We may remove or disable access to content, or suspend a feature for a particular account, if we reasonably believe the content or use violates these Terms, infringes another person's rights, or creates a security or legal risk. When practicable, we notify the affected customer and explain how to respond.

4. Plans, payment, renewal, cancellation, and refunds

Product relationships. ValKred offers a continuing free account limited to two credentials, with restricted features and no fixed trial expiration. Inactive-account cleanup and confirmed downgrade deletion are described in Section 11. It does not automatically become a paid subscription; paid access requires an expressly accepted purchase. Kyrvec and KorLea consumer applications provide companion access to services supplied by subscribing ranges and training providers. Using those companion applications does not itself create a paid Veskyra consumer subscription. Reskyr and Ryskra are organizational subscription services. The range or training provider is responsible for its separate customer transaction; these Terms govern use of the Veskyra platform when validly accepted.

An Order identifies the seller, service, price, currency, billing interval, applicable limits, and any taxes or additional charges. You authorize only the charges disclosed and accepted in the Order. Charges for optional add-ons or usage beyond a plan must be disclosed before they are incurred. You are responsible for applicable taxes other than taxes on our net income, subject to valid exemption documentation.

Automatic renewal. If your Order identifies an automatically renewing subscription, it renews for the disclosed interval at the disclosed price unless canceled before renewal. We obtain the required affirmative authorization, provide a confirmation you can retain, and send renewal or trial-conversion notices required by law. A trial converts to a paid subscription only on terms you expressly accepted, including its duration, price, renewal interval, and cancellation method.

Cancellation. You may cancel renewal through the billing controls for the purchasing channel or by contacting hello@veskyra.com. We provide an accessible cancellation method and confirmation without requiring an unnecessary retention process. Unless an Order or applicable law provides otherwise, cancellation stops the next renewal and access continues through the paid term. Deleting an application from a device does not cancel a subscription. If account deletion is requested directly from us, we explain and coordinate any separately managed subscription cancellation rather than assume it has occurred.

Refunds. Except as stated in your Order, these Terms, or mandatory law, fees for the current Veskyra subscription period are nonrefundable and we do not give partial-period refunds for voluntary cancellation. We correct billing errors and provide refunds required by law. Refund rights for our uncured material breach or early discontinuation appear in Sections 3 and 11. Nothing in this section limits a right to dispute a charge or a refund right that applicable law does not allow us to exclude. A KorLea training provider's course sale has the separately disclosed refund terms described in Section 7.

Price changes. Subscription price increases take effect at a future renewal, after at least 30 days' notice and any longer notice or additional consent required by law. If notice is not provided in time, the higher price does not apply to that renewal. You can cancel before the increase takes effect. Fixed-term prepaid prices do not increase during the paid term.

App-store purchases are billed and canceled through the relevant store where required; its payment and refund rules also apply, subject to mandatory law. Course purchases may have a different seller, access duration, or refund policy, which must be disclosed before purchase as described in Section 7.

If a payment fails or an invoice is more than 15 days overdue, we will notify you and may suspend or limit paid features until payment is resolved. For organizational customers, overdue undisputed amounts may accrue a late charge of the lesser of 1% per month or the highest rate permitted by law, and the customer is responsible for reasonable costs of collecting overdue amounts. You must raise any good-faith billing dispute within 60 days after the charge or invoice date; the undisputed portion remains payable. The post-subscription periods in Section 11 give consumers a 90-day reactivation period followed by 90 days for final export, and organizations a 90-day cure/export period. Those periods preserve eligible data, not full paid functionality without payment. An authorized deletion request or mandatory legal requirement may call for earlier action.

5. Customer content and ownership

"Customer Content" means information and material you or your authorized users submit to or create within the Services, including documents, reports, images, assessment material, and saved AI results. As between you and Veskyra, you or the relevant rights holder retain ownership of Customer Content. We do not acquire ownership because you upload it.

You grant us a limited right to host, copy, transmit, display, format, and otherwise process Customer Content only as needed to provide the Services you request, comply with lawful instructions and obligations, maintain security, and exercise rights expressly set out in the agreement. This includes using contracted providers for those purposes. It does not grant permission to sell Customer Content, use it for unrelated advertising, or train AI models with it. The right ends when the content is deleted, except for limited retained copies and duties described in the Privacy Policy or DPA.

You are responsible for having the rights, authority, notices, and permissions needed to submit content and instruct its processing. Provide accurate information where accuracy is needed, and correct errors you discover. Do not upload unnecessary sensitive information. We remain responsible for our contractual and legal obligations; your responsibilities do not excuse our unauthorized processing.

Exports are limited to records you are authorized to receive and the formats the Services reasonably support. A learner's right to their completion record does not transfer ownership of a provider's test questions or course material. We can assist with reasonable export requests; unusual custom work requires a separately agreed scope and price, without charging for rights requests where prohibited.

Service data. We collect and use technical and usage information about how the Services are accessed and perform, such as feature use, performance measurements, error reports, and security events, together with aggregated or deidentified information derived from use of the Services ("Service Data"). We use Service Data to operate, secure, support, and improve the Services and to develop new functionality, and Veskyra owns it. Service Data does not include Customer Content in a form that identifies you, your users, or the people in your records. We do not sell it, use it to identify anyone to a third party, or use Customer Content to train AI models.

Veskyra and its licensors retain all rights in the Services, software, designs, documentation, and underlying technology, and in any improvements to them. No rights are granted except those expressly stated in these Terms. You may give us voluntary suggestions that we can use to improve the Services without compensation or obligation; this does not transfer ownership of confidential records or authorize using personal information or AI content for training.

Copyright complaints. We respond to notices of alleged copyright infringement that comply with the Digital Millennium Copyright Act (17 U.S.C. § 512). Send notices to our designated agent: Copyright Agent, Veskyra LLC, at the legal service address in Section 17 or legal@veskyra.com. A notice must identify the copyrighted work, the allegedly infringing material and its location, your contact information, a statement of good-faith belief that the use is unauthorized, a statement under penalty of perjury that the notice is accurate and that you are authorized to act, and your physical or electronic signature. We may remove or disable the material and notify the person who provided it, who may send a counter-notice under § 512(g). We terminate, in appropriate circumstances, the accounts of users and customers who repeatedly infringe.

6. Organizational, professional, and regulated uses

Kyrvec range operations

Kyrvec supplies administrative software; the range operator remains responsible for operating its premises, supervising activities, enforcing eligibility and safety requirements, maintaining required records, and determining lawful access to facilities. Software credentials, a waiver signature, a recorded qualification, or an access-control response are not an independent determination that an activity or participant is safe or legally eligible. Operators must maintain appropriate emergency, outage, and manual-access procedures, and coordinate changes to connected access systems when service ends.

The operator is responsible for the text and appropriate use of its waivers, any required electronic-signature disclosures and alternatives, identity checks, and the signer's authority, including guardian authority. The Services do not guarantee that a waiver is enforceable. Kyrvec permits adult logins only. A range or authorized adult may maintain a dependent or participant record and sign on a minor's behalf where legally authorized; the minor does not receive an independent login.

The operator must limit identity-verification requests to information reasonably necessary for a specified lawful purpose and provide appropriate notice. A statement that the operator is regulated does not independently justify every requested field or authorize an unsupported background-check or record-storage workflow. Verification-only source material follows the discard policy in the Privacy Policy; any required ongoing record must have a separately identified purpose and retention basis.

The range operator sells its memberships, bookings, rentals, and permitted non-firearm retail offerings, sets their disclosed purchase, cancellation, refund, and tax terms, and processes payments through its own payment-provider account. These transactions are distinct from the operator's Veskyra software subscription. Checkout and payment arrangements must identify the operator as seller and preserve mandatory rights and any platform duties imposed by law. The operator controls its independent use of operational records and must meet its own legal and privacy obligations.

Kyrvec provides operations software for shooting ranges. Use of Kyrvec for the sale of firearms is expressly prohibited. You may not use its listings, ordering, checkout, payment, messaging, import, or integration features to offer, arrange, process, or complete firearm sales. These Terms do not authorize firearm-sale summaries or associated sales-record integrations. Any independent firearm-sales business an operator conducts must remain outside Kyrvec. The operator remains responsible for that separate activity and any required checks and records; Kyrvec does not provide those services. Identity verification described in these Terms concerns supported range operations and does not authorize firearm-sale processing.

Agency-sponsored access. An agency's authorized representatives may access details of visits made under its sponsored arrangement. A member's separate personal account and activity are not linked to the agency account or disclosed to the agency through that access, including the existence of the personal account. Agencies and operators must respect this boundary and may not use reports, exports, integrations, account matching, or another permission to circumvent it. It does not restrict an operator's otherwise authorized handling of its own range records, subject to applicable law and the Privacy Policy.

Public leaderboard participation requires the member's express opt-in and is not a condition of ordinary range participation. Kyrvec has no AI features; the AI terms do not imply otherwise.

Presvyr zero-knowledge vaults

Presvyr encrypts vault contents on your device before they reach our servers, and we do not hold the keys needed to decrypt them. As a result:

• We cannot read, recover, reset, or restore access to your vault contents. Your password and your recovery sheet are the only ways to decrypt your vault. If you lose both, your encrypted data cannot be recovered by anyone, including Veskyra. Keep your recovery sheet secure and separate from your devices.
• You are solely responsible for protecting your password, recovery sheet, unlocked devices, and exports, and for the people you choose to share a vault with or name as emergency-access trustees. Removing someone from a shared vault stops future access but cannot undo what they already viewed or saved.
• Because we cannot see vault contents, we cannot review them for accuracy, completeness, or lawfulness. You are responsible for what you store, including keeping any records about firearms, medications, or other regulated items in compliance with applicable law. Presvyr is a personal record-keeping tool; it does not buy, sell, or transfer any item.
• Exports and backups of readable data are made from the Presvyr application on your device. Any export we can provide from our servers contains only encrypted data. To the maximum extent permitted by law, Veskyra is not liable for loss of access to encrypted data resulting from lost passwords, lost recovery sheets, or compromised or unlocked devices.

Presvyr has no AI features.

Other operational and professional uses

The Services assist with recordkeeping, learning, planning, and administration. They do not replace professional judgment, required inspections, incident command, emergency communications, medical care, legal advice, or a regulator's or licensing body's decisions. Verify critical information, deadlines, exports, submissions, and reminders against authoritative sources. Maintain procedures appropriate to your operation if the Services are unavailable.

You remain responsible for the accuracy and required submission of OSHA, fire-incident, licensing, certification, continuing-education, and other regulatory records. A reminder, completed course, AI suggestion, or stored credential does not guarantee compliance, accreditation, renewal, or acceptance by an employer or licensing body.

Not a safety system. The Services are not designed, tested, or intended to serve as a life-safety or emergency system, an emergency dispatch or alerting service, a primary physical-security or access-control safeguard, a medical device, or the sole record of information you are legally required to keep, and you must not rely on them in that way. Each customer remains solely responsible for its premises, operations, personnel, activities, emergency response, and the decisions it makes using the Services. To the maximum extent permitted by law, Veskyra is not responsible for bodily injury, death, or property damage arising from activities at a customer's facility, from emergency or incident response, or from workplace events, except to the extent caused by Veskyra's own negligence or willful misconduct where the law does not permit that responsibility to be excluded.

Reskyr is intended for non-transporting fire and rescue departments, and Ryskra for non-healthcare businesses managing workplace safety and incident records. Sensitive operational data is permitted only within the lawful, supported scope of the relevant product. These descriptions do not conclusively determine an organization's legal status or the law applicable to a record. The standard service does not accept HIPAA-regulated processing that requires a BAA. Do not submit such information unless we have separately approved an exception in writing, executed a BAA, and designated a supported configuration. No existing BAA-ready offering is represented. Other specially regulated uses, including criminal-justice data or regulated student records requiring additional safeguards, also require prior written agreement where the standard service does not provide them. A DPA, encryption, or an optional AI setting alone does not establish approval.

For ValKred, an employer-paid plan includes the employer access disclosed for that plan and does not offer an in-product opt-out from that access. An employer-sponsored discount on an individually paid plan allows opt-out from the disclosed credential/progress sharing; after opt-out, the employer sees only that the account exists. An employer must not bypass a sharing choice or use either arrangement to access unrelated information. Settings identify current sharing and available choices; the material conditions must also be explained before enrollment or a plan change. Mandatory privacy rights remain available. The user keeps the employer-sponsored discount after opting out.

7. KorLea training providers and learners

Training providers own or license their course and assessment content. A provider authorizes Veskyra to host, deliver, format, and process that material to operate the course and, when the provider deliberately selects the feature, to assist with import through AI. The provider represents that it has the rights required for those uses, including for uploaded third-party material.

Providers are responsible for their content, instructional quality, answer keys, claims about accreditation or continuing-education credit, applicable learner disclosures, and any provider-specific purchase terms. Those terms must be presented before purchase and cannot override these Terms, mandatory consumer rights, or our data-protection commitments without an express lawful agreement. Providers must review imported material before publishing it.

The course-sale contract is between the learner or purchasing organization and the identified training provider. The provider sets the course-access period, which may be a fixed term or a clearly defined lifetime offer, and must disclose it before purchase. Any lifetime description must identify whose or what lifetime governs and explain material conditions, including how access will be fulfilled if the provider stops using KorLea. The provider cannot commit Veskyra to perpetual hosting or extend its own Veskyra subscription by making that promise to learners. Learners receive a personal right to access the purchased content for the duration and purposes stated in their provider agreement. Purchasing access does not transfer ownership or authorize distributing course material, exposing answer banks, or falsely claiming another person's completion.

The training provider is the seller and merchant of record for its course sales. Its identity, contact information, price, applicable taxes, access period, attempt limits, and refund/cancellation terms must be disclosed before purchase. The provider is responsible for its learner refunds and transaction-tax obligations, subject to any nonwaivable marketplace or tax obligations imposed on Veskyra by law. Veskyra supplies the platform and may facilitate transactions and support; it is not a party to the provider's course-sale contract merely by doing so. Separately accepted platform-use terms and Veskyra's own privacy, security, and service obligations continue to apply. Contact the identified provider first for a course refund and contact Veskyra if you need help reaching it or encounter a platform problem.

Course access and completion-record retention are distinct. The provider must disclose how long completion or certificate records remain available, how learners can obtain their available records, and whom to contact after course access ends, subject to applicable retention duties. These Terms do not promise an independent Veskyra lifetime certificate archive. If the provider leaves KorLea, it remains responsible for fulfilling its learner commitments through a lawful continuation, migration, refund, or other applicable remedy; Veskyra's export and retention duties to the provider remain governed by its subscription agreement and DPA.

The provider may not avoid mandatory learner remedies by referring to Veskyra's subscription refund rule.

Providers may access learner data only as described in the Privacy Policy, their disclosed training relationship, and applicable law. They may not use it for unrelated advertising, resale, or access to another provider's students. Learners may opt out of optional identifiable improvement analytics without losing access to purchased training. Providers must honor that choice, including when they already hold identifiable records for required course delivery or assessment; those records cannot be repurposed for the opted-out improvement analysis. Necessary delivery, assessment, completion, and lawful recordkeeping uses continue, as may appropriately deidentified aggregate reporting. When employer-paid training is offered, the disclosed reporting to the paying employer is also a required condition of that arrangement. This does not eliminate legally required consent, objections, or opt-outs, and does not permit access to unrelated purchases. Providers and employers must protect received records and respond to requests concerning information they independently control. Identifiable question analytics require an appropriate lawful basis; a subscription is not unrestricted permission to profile learners.

Employer reporting covers course progress, completion, and competency mastery for the covered training. It does not include individual answer details. Employers must not use exports, integrations, or another role to circumvent this restriction. A training provider's separate access to assessment records is governed by its disclosed provider purpose and permissions; employer payment alone does not confer that access.

8. Optional AI assistance

You choose whether to use a content AI feature. Ordinary use of a non-AI feature does not authorize an AI request. The AI Data Use Policy forms part of these Terms and limits how selected content may be processed.

AI results can be inaccurate, incomplete, biased, or misleading. Review edited narratives for changed facts, dates, names, and meaning; review extracted credentials and test material against the original. Do not rely on an AI result as an independent factual source or as the final decision in a safety, employment, licensing, medical, legal, or regulatory matter. Verify and approve results before publishing, filing, or relying on them. You are responsible for how you use AI results and for decisions made with them.

As between you and Veskyra, to the extent rights exist and can be transferred, you own the generated results associated with your lawful use; we assign to you any such rights we may hold. This does not guarantee copyright protection, uniqueness, accuracy, or freedom from third-party rights, or transfer rights in underlying source material. We do not claim ownership of your input or use inputs or outputs for model training.

9. Confidentiality and data protection

Each party must protect the other's nonpublic business, technical, and operational information disclosed in connection with the Services using reasonable care and use it only to perform the agreement or as otherwise authorized. Customer Content is confidential unless intentionally made public by an authorized rights holder. Access is limited to people and providers who need it for authorized work and are bound by appropriate duties.

This obligation does not apply to information independently developed, lawfully received without a duty of confidence, already lawfully known, or public without breach. Required legal disclosure is limited as appropriate, with notice when legally permitted. Confidentiality continues after termination while information remains confidential; trade secrets remain protected as required by law. Personal-information duties continue under applicable law and the DPA and are not removed merely because another confidentiality exception applies.

10. Third-party services and integrations

If you choose a separate third-party integration, identity provider, payment channel, or linked service, its own terms may apply. We identify any material transfer of data associated with activating an integration and process your directions within the applicable privacy framework. We are not responsible for an independent provider's separate product or promises, but remain responsible for our own integration obligations and the service providers we engage under our agreement.

11. Suspension, termination, and access to records

We may suspend access to the extent reasonably necessary to address a material breach, unpaid fees, a security threat, unlawful activity, or a legal requirement. When practicable, we explain the reason, give an opportunity to resolve it, and limit suspension to affected functions or accounts. Immediate action may be necessary for an urgent threat or legal obligation. We restore access when the reason has been resolved, subject to lawful termination.

Termination for breach. Either party may terminate an affected subscription for a material breach that remains uncured 30 days after written notice describing it, or immediately if the breach cannot lawfully or reasonably be cured. If you terminate for our uncured material breach, or we discontinue a paid service early for reasons other than your breach, we refund unused prepaid fees for the affected period. We do not charge fees for periods after such termination other than amounts already properly accrued.

After a consumer paid subscription ends without renewal, we preserve eligible personal records for 90 days for reactivation and a further 90 days for final export. For organizational subscriptions, ordinary access ends at effective cancellation, expiration, or suspension for nonpayment; an authorized representative has 90 days to request a raw export and discuss reactivation. Cancellation of future renewal takes effect at the end of the paid term; it does not cut off paid access early. A continuing ValKred free account follows the inactivity and downgrade rules below rather than automatically entering the paid-subscription lapse window. Kyrvec and KorLea companion access follows the relevant subscriber relationship and, for KorLea, Section 7.

Inactive ValKred free accounts. We may close and delete a free account after 24 consecutive months without account activity. We provide at least 30 days' advance warning identifying the scheduled deletion date and how to keep the account or export its records. Signing in and using the account before that deadline prevents deletion for inactivity. The active-system and backup deletion periods below apply after the deadline, subject to applicable rights, holds, and retention duties. This rule applies to the ValKred free account, not automatically to other Veskyra products or separately controlled organizational records.

Confirmed ValKred downgrade. The free plan permits up to two credentials. If you downgrade with more than two, you choose the two credentials to keep; all other credentials will be deleted as part of that downgrade. Information also needed by a retained credential remains with that credential. Before acceptance, we prominently identify what will be retained and deleted, explain the effect on associated records and files, provide significant warnings and an opportunity to export, and require you to re-enter your account password and explicitly confirm acceptance of the deletion. Password confirmation is required even if you normally sign in with a passkey, which does not replace your account password. Do not confirm until you have saved what you need. The confirmation identifies when the downgrade and deletion take effect. Deletion follows the active-system and backup schedule below; backup expiry is not a promised recovery period. Any lawful retention exception is limited to its stated purpose.

Canceling renewal or failing to pay does not by itself constitute this confirmed downgrade or consent to accelerated deletion. Without a confirmed downgrade or another authorized deletion request, the applicable paid-subscription reactivation/export window above remains in place; it does not grant continued paid functionality.

Exports during these windows are supplied through an authorized request process even if ordinary product access is unavailable. Standard raw export is included and encompasses the customer's records and attachments, with available relationships and identifiers needed to interpret them; it need not reproduce proprietary application code or another party's protected content. Custom migration or transformation work requires a separate agreement.

At the end of the relevant window, active data is deleted within 30 days and residual backups expire within a further 90 days, subject to applicable legal holds and retention duties. Mandatory law controls where it requires a different period or process. An authorized deletion request can begin that process earlier. We give notice of the applicable export deadline and impending deletion. An abusive or unlawful use may require restricting export delivery to a safe, lawful method rather than restoring general access.

Organizations are responsible for obtaining, checking, and preserving exports needed for statutory recordkeeping, public-record obligations, litigation holds, and continuity. A cancellation does not authorize unlawful destruction. Where retention law applies directly to Veskyra or a binding hold prohibits deletion, we preserve the necessary copy with restricted access. Customer must disclose known preservation requirements and arrange any required longer hosting or archival service separately. We do not provide indefinite archival hosting after cancellation. One-time course purchases, ongoing free accounts, and organization-controlled learner records have their own applicable terms and lawful retention rules.

Rights needed to resolve outstanding obligations survive termination, including accrued payment obligations, confidentiality, ownership, applicable data-protection and deletion duties, liability limits, and dispute provisions.

12. Warranties and disclaimers

Each party represents that it has authority to enter the agreement. For paid Services, we warrant that the Services will perform materially as described in their documentation during the paid term. If they do not, notify us with reasonable detail and we will use reasonable efforts to correct the nonconformity. If we cannot do so within a reasonable time, either party may terminate the affected Service and we will refund unused prepaid fees for it. To the extent permitted by law, that correction or refund is your exclusive remedy for breach of this warranty. The warranty does not cover problems caused by misuse, unsupported configurations, third-party services, or free, trial, or preview features. Nothing in this section disclaims an express security, privacy, confidentiality, or data-processing obligation.

TO THE MAXIMUM EXTENT PERMITTED BY LAW, EXCEPT FOR EXPRESS COMMITMENTS IN THE AGREEMENT, THE SERVICES AND AI RESULTS ARE PROVIDED "AS IS" AND "AS AVAILABLE." WE DISCLAIM IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. WE DO NOT WARRANT UNINTERRUPTED OR ERROR-FREE OPERATION, THAT ALL ERRORS WILL BE CORRECTED, OR THAT CONTENT, AI RESULTS, OR TRAINING WILL ACHIEVE A PARTICULAR REGULATORY, BUSINESS, OR PROFESSIONAL OUTCOME.

Some jurisdictions do not allow certain warranties to be excluded. If a disclaimer is not lawful for a particular customer or claim, it applies to the maximum extent the law permits.

13. Limitation of liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, VESKYRA AND ITS AFFILIATES, OFFICERS, EMPLOYEES, AND SERVICE SUPPLIERS WILL NOT BE LIABLE UNDER THIS AGREEMENT FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR LOST PROFITS, REVENUE, BUSINESS OPPORTUNITIES, OR GOODWILL, COSTS OF SUBSTITUTE SERVICES, OR LOSS OF DATA TO THE EXTENT SUCH LOSS IS INDIRECT OR CONSEQUENTIAL, EVEN IF ADVISED THAT SUCH DAMAGES WERE POSSIBLE.

TO THE MAXIMUM EXTENT PERMITTED BY LAW, THEIR TOTAL AGGREGATE LIABILITY ARISING OUT OF OR RELATING TO THE SERVICES AND THIS AGREEMENT WILL NOT EXCEED THE GREATER OF (A) THE FEES ACTUALLY PAID TO VESKYRA BY YOU, OR BY THE SUBSCRIBING ORGANIZATION FOR YOUR USE, FOR THE AFFECTED SERVICE DURING THE 12 MONTHS IMMEDIATELY PRECEDING THE FIRST EVENT GIVING RISE TO THE CLAIM, OR (B) US $100.

This is one aggregate cap for claims under the agreement, including the Terms, AI policy, and DPA, and applies regardless of whether a claim is framed in contract, tort (including ordinary negligence), or another theory. Related claims arising from the same or related events do not create separate caps. For a service paid for by an organization, the cap is shared across that organization's agreement for the affected service rather than multiplied by its users. Distinct independent customer agreements are assessed separately.

These exclusions and limits do not apply to liability for fraud or willful misconduct, or to any liability that applicable law does not allow to be excluded or limited, including nonwaivable consumer rights. They do not excuse payment of refunds expressly due under the agreement. Any different negotiated cap must be stated expressly in a signed agreement.

The cap limits the amount recoverable for claims to which it lawfully applies; it does not create an automatic entitlement to payment or shorten the time allowed to bring a claim.

14. Organizational indemnity

If you use the Services on behalf of a business or other nongovernmental organization, you will defend Veskyra and its affiliates, officers, and employees against any third-party claim to the extent arising from:

• your Customer Content, including a claim that it infringes or misappropriates intellectual-property rights or was collected or submitted without a required notice, consent, or authority;
• your unlawful use of the Services or your breach of the use restrictions in Section 3; or
• your own operations and relationships, including activities at your facilities, courses and course sales you offer, employment and eligibility decisions you make, and your dealings with your own members, customers, learners, employees, agencies, and other end users.

You will pay damages, fines, and reasonable costs (including reasonable attorneys' fees) finally awarded or agreed in an approved settlement. This does not apply to the extent a claim arises from Veskyra's breach of the agreement, unauthorized changes, negligence, or misconduct.

We will notify you promptly (a delay relieves you of your obligations only to the extent it materially prejudices your defense), give reasonable cooperation at your expense, and permit you to control the defense with suitable counsel. We may participate with our own counsel at our own expense. You may not settle a claim in a way that admits fault by, imposes nonmonetary obligations on, or fails to release Veskyra without our reasonable consent. This clause does not apply to individual consumers or governmental entities unless separately agreed and legally authorized.

15. Governing law and dispute resolution

PLEASE READ THIS SECTION. EXCEPT FOR THE EXCEPTIONS BELOW, YOU AND VESKYRA AGREE TO RESOLVE COVERED DISPUTES THROUGH BINDING INDIVIDUAL ARBITRATION INSTEAD OF A COURT OR JURY TRIAL. YOU MAY OPT OUT WITHIN 30 DAYS AS EXPLAINED BELOW.

Governing law. North Carolina law governs the agreement without its conflict-of-law rules. The Federal Arbitration Act governs this arbitration agreement where applicable. Mandatory protections under otherwise applicable law remain available.

Who and what are covered. This section applies mutually to you and Veskyra LLC for disputes arising from or relating to the Services or this agreement, including contract, statutory, and tort claims. It binds only parties who have validly agreed to it. An organization's acceptance does not by itself bind an employee, learner, report subject, or other individual personally. Disputes with independent training providers, employers, ranges, or payment providers are not included merely because they use the Services. Governmental customers are excluded unless a separate, legally authorized written agreement expressly adopts arbitration.

30-day opt-out. You may reject both the arbitration requirement and the class-action waiver by emailing legal@veskyra.com within 30 days after you first accept this section. Include your name, the account email address or other information reasonably identifying the account, and a statement that you opt out. An authorized representative may opt out for an organizational account. No reason or special form is required. Opting out does not affect access, pricing, discounts, or any other service terms. Veskyra will acknowledge receipt; a timely opt-out is effective even if acknowledgment is delayed. A valid previous opt-out remains effective. If you opt out, the court provision below applies and this section imposes no class-action or jury-trial waiver on you or Veskyra.

Attempt to resolve a dispute. Before arbitration, either party should send a brief description of the dispute and requested resolution to the other. You may email legal@veskyra.com; Veskyra will use your account notice address. The parties will attempt resolution for 30 days after receipt. Applicable claim deadlines are tolled during this period to the extent legally permitted, and neither party will assert this agreed pause as a time-bar defense. This process does not prevent a protective filing, small-claims action, urgent relief, or statutory complaint, and an immaterial notice defect does not forfeit a claim.

Administrator and rules. One neutral arbitrator will hear the dispute through the American Arbitration Association (AAA). Its Consumer Arbitration Rules apply when the relationship falls within their scope; otherwise its Commercial Arbitration Rules apply. Applicable AAA mass-arbitration rules also apply. The administrator determines the appropriate administrative classification under its rules; employer payment alone does not remove an individual's consumer protections. Rules and filing instructions are available at adr.org. This section does not override mandatory administrator fairness standards or applicable law.

Place, procedure, and remedies. Consumers may participate remotely or have an in-person hearing reasonably near their residence as provided by the applicable rules. For business disputes, the hearing is in Wake County, North Carolina, unless the parties agree to a remote hearing or another location. Each side has a fair opportunity to present evidence and obtain information reasonably necessary for its case. The arbitrator applies applicable substantive law and may grant the individual relief available in court, subject only to lawful contractual limits. The arbitrator provides a written reasoned decision. Awards are binding, subject to the judicial review permitted by law, and may be enforced in a court with jurisdiction.

Fees. For a consumer case, your filing charge will not exceed the lesser of the applicable AAA consumer filing charge or the filing fee for a comparable action in your local court. Veskyra pays the remaining administrator and arbitrator charges required for the case and any additional amount required to make the process accessible under applicable law and rules. Available hardship waivers remain available. For business cases, the applicable rules govern fees. Each party ordinarily bears its own lawyers' fees, but legally available fee awards and remedies remain available. The liability cap in Section 13 does not limit Veskyra's arbitration administration or arbitrator-payment obligations, or any fee award that cannot lawfully be limited. No automatic loser-pays obligation is created.

Exceptions and court decisions. Either party may bring an eligible individual case in small-claims court. Neither party is prevented from reporting to regulators, using lawful payment-dispute rights, or seeking urgent provisional court relief while a dispute is resolved. Claims or remedies that cannot lawfully be required to proceed in arbitration, including nonwaivable public injunctive relief, remain available in court. A court, rather than an arbitrator, decides formation, enforceability, scope, and applicability of this arbitration agreement and class waiver. The arbitrator decides the merits of properly arbitrable claims. Nothing requires secrecy about a dispute; lawful protections for confidential information may be ordered.

Individual proceedings. To the extent permitted by law, you and Veskyra agree to bring covered claims individually and not as a class, collective, or representative action. An arbitrator may not combine unrelated parties' claims or conduct a class proceeding without all affected parties' consent. Administrative coordination under applicable AAA mass-arbitration rules is not prohibited by this provision. Nonwaivable statutory rights and remedies are preserved. If this waiver is unenforceable for a particular claim or remedy, that claim or remedy proceeds in court; any remaining enforceable arbitration obligation continues only to the extent permitted by law. This clause does not independently waive a jury for a claim properly proceeding in court.

Unavailable arbitration and court forum. If AAA cannot administer a dispute, the parties may agree to another neutral administrator with equivalent protections. If they cannot agree within 30 days, either may proceed in court. Veskyra will not use its own nonpayment or failure to satisfy administrator requirements to prevent a claimant from proceeding in court. For disputes properly proceeding in court, the state courts in Wake County, North Carolina, or the federal court for the Eastern District of North Carolina have exclusive jurisdiction, subject to small-claims access and any mandatory right to a different forum, including a consumer's local courts.

Changes and survival. This section survives termination for covered disputes. A material change to it requires advance notice and affirmative acceptance; it does not apply retroactively to an existing dispute. A person accepting a material change receives a new 30-day opportunity to opt out. Neither an update nor continued use cancels an existing opt-out. Ordinary statutory claim deadlines apply; this section creates no shortened filing period.

16. Updates, notices, and general provisions

Changes to these Terms. We give at least 30 days' advance notice of material changes to these Terms by an appropriate account notice or email, except changes urgently required for security or law, which we explain as soon as practicable. Changes are prospective and do not rewrite accrued claims. We obtain affirmative acceptance where required. Material changes to the arbitration agreement additionally require the affirmative acceptance and renewed opt-out opportunity described in Section 15; the urgent-change exception does not waive those requirements. Material commercial changes during a prepaid term are subject to the protections in Sections 3 and 4; merely posting a revision does not override a signed fixed-term commitment.

You agree that we may provide agreements, notices, disclosures, and other communications electronically, by email to the address on your account or through the Services, and that electronic communications satisfy any requirement that they be in writing. We use additional delivery methods where law requires them. Keep your contact information current. You may save or print notices and these Terms. Legal notices to Veskyra must be sent to legal@veskyra.com with a copy to the legal service address in Section 17.

Neither party may assign the agreement without the other's consent, not unreasonably withheld, except that either party may assign it without consent to an affiliate or to a successor in a merger, reorganization, or sale of the relevant business that assumes the agreement and its data-protection obligations. This does not authorize separate sale of customer data. A party is not responsible for a delay caused by circumstances beyond its reasonable control to the extent it reasonably mitigates the effects; this does not excuse applicable incident-notification duties, confidentiality, or refunds for service we permanently discontinue.

If a provision is unenforceable, the remainder continues to the extent legally permitted, subject to the specific treatment of the arbitration agreement and class-action waiver in Section 15. Failure to enforce a provision is not a waiver. The parties are independent contractors. "Including" means including without limitation, and headings are for convenience only. Except for express supplier protections in Section 13 and rights required by law or transfer terms, the agreement does not create third-party beneficiaries. For a public-sector customer, procurement restrictions and a properly executed government addendum control where mandatory law requires them; no unauthorized waiver of immunity or indemnity is implied.

The accepted documents constitute the agreement for their subject matter and replace prior discussions on that subject, without eliminating accrued rights or commitments that must legally be honored.

17. Contact

Veskyra LLC
Legal service address: 4030 Wake Forest Rd Ste 349, Raleigh, NC 27609, United States
Legal and contract notices: legal@veskyra.com
Billing or service support: hello@veskyra.com
Security incidents and vulnerabilities: security@veskyra.com
Privacy and data requests: privacy@veskyra.com