Terms and Conditions

Version: September 16, 2026

1. Provider and agreement

1.1. These Terms govern Frontierz Studio, AI Fellows, Learning Paths and related services (the Services), provided by Founderz AI, S.L., trading as Frontierz, with registered office at Carrer Pau Vila 13-15, 2-4, 08174 Sant Cugat del Vallès, Barcelona, Spain; tax identification number B06944375 and EU VAT number ESB06944375. Contractual inquiries and notices may be sent to hello@frontierz.com.

1.2. The Customer is the organization or professional purchasing the Services for business or institutional purposes. Users are individuals accessing a Customer's deployment or a demonstration operated by Frontierz. Administrators are the Customer's personnel authorized to configure, manage and review its deployment. The accepted service order, proposal or commercial agreement is the Order. The Order determines the purchased features, capacity, term, fees and any service levels.

1.3. The Agreement consists of the Order, these Terms and the data processing provisions in Schedule 1. Individually agreed contractual terms prevail over these Terms. A separately executed data processing agreement prevails on personal-data processing. Mandatory law and applicable European Commission standard contractual clauses prevail over inconsistent provisions.

1.4. The Agreement is concluded when authorized representatives sign the Order or the Customer accepts it and Frontierz confirms acceptance. Before acceptance, Frontierz shall make the applicable terms available in a form that can be stored and reproduced, allow the correction of electronic order details and confirm electronic acceptance within twenty-four hours of receiving it. The contracting language is English unless otherwise agreed. Browsing, requesting a demonstration or participating in one creates no paid subscription.

1.5. Users accept the provisions governing their use when they sign up or before their first session. The Customer may instead accept those provisions on behalf of its Users, in which case it shall inform them of the applicable provisions and remain responsible for their compliance, including through its public links, embeds and LMS access. In either case, Users are bound by the provisions addressed to Users, in particular Sections 1.6, 2, 3, 4.2, 5.1, 5.2, 6, 9.3 and 13.1, together with the Privacy Policy. Users do not assume the Customer's payment obligations, commercial liability arrangements or responsibility for other Users. For Frontierz-operated demonstrations, Frontierz performs the deployment and user-information duties assigned to the Customer in these Terms.

1.6. The Legal Notice governs website use. The Privacy Policy and Cookies Policy provide the corresponding information. Contract acceptance does not constitute consent to marketing, optional cookies or other processing requiring separate consent. Where mandatory law grants an individual additional rights, for example as a consumer or employee, those rights remain enforceable.

2. Services and access

2.1. The Services support workplace learning, onboarding, knowledge assistance, role-play, simulations and workforce development. Depending on the Order, they include voice and text AI Fellows, structured Learning Paths, imported e-learning content, learning assessments, reports, certificates and integrations. The Customer shall define each deployment's purpose, audience, content, assessment criteria and permitted external actions, and review configurations before release.

2.2. Public AI Fellows may be accessed through links or embeds without an account. Private deployments require the relevant authentication and access grant. A public link does not protect confidential information. The Customer shall control publication, assign appropriate permissions and protect accounts and integration credentials. Frontierz shall preserve the selected access restrictions when processing knowledge or maintaining the Services.

2.3. The Services are intended for professional audiences. A deployment directed at minors requires express agreement and appropriate eligibility, information and authorization arrangements before use. The Customer shall provide an appropriate alternative where a User requires an accommodation unavailable in the selected session mode.

2.4. The Customer shall revoke access when no longer authorized and report suspected compromise promptly. The Customer is responsible for use of the Services through its accounts and access grants until access is revoked. Withdrawing access does not erase retained records.

3. Sessions, assessments and records

3.1. Voice sessions require microphone access; AI Fellow sessions within Learning Paths use voice. Text interaction is available in supported or enabled features. Camera sharing may be enabled for a learner's personal AI Fellow (Your Fellow) and for Learning Path Fellow sessions; screen sharing may be enabled for AI Fellows and Learning Paths. Both depend on the Customer's configuration, start only when activated by the User and may be stopped by the User at any time.

3.2. Live audio, camera snapshots and screen frames are processed for the session and are not retained as recordings. For Customer deployments, transcripts, summaries, learning progress, assessments and relevant technical and connector records are retained under Schedule 1. Information disclosed in live media may therefore remain in those records. Session attachments provide conversation context and do not automatically become persistent Knowledge Base material; filenames and information extracted into retained records may remain.

3.3. Authorized Customer personnel may access individual conversations and results according to their permissions. Private access does not make a session confidential from those personnel. Personalization may use permitted history, progress, profile information and Administrator notes. The Customer shall explain this processing, keep information relevant and accurate, and respect access and correction rights. Public sessions shall not be described as anonymous where their content or supplied identifiers identify a person.

3.4. AI assessments may determine whether objectives have been met, unlock later learning, generate criteria-based simulation feedback and contribute to individual or cohort reports. Criteria may be configured in advance or generated from the exercise. The Customer shall review generated criteria before relying on them for consequential assessment. It shall provide competent human review of disputed results and correct material errors. Hiding feedback from a User does not remove statutory access or challenge rights. LMS progress or grade transfers shall accurately describe what was assessed.

3.5. Badges and certificates record completion under the program's conditions. They do not confer an academic degree, professional license, regulatory approval or Microsoft certification. Administrators decide how certificates and other program assets are shared, including whether a certificate can be verified through a link. The Customer shall configure that visibility in line with its own policies and notices and keep the information published to what is necessary; Frontierz shall assist with corrections or withdrawal where required. External credentials remain subject to their issuer's requirements.

3.6. Deleting readable conversation content may leave activity metadata, including dates, duration and counts. Complete erasure requests shall follow Section 9 and, for Customer deployments, Schedule 1. Invitations, reminders and other program communications shall serve the disclosed purpose and be sent only to authorized recipients.

4. Content, intellectual property and confidentiality

4.1. The Customer and relevant rights holders retain ownership of materials, instructions, files, configurations and other content supplied to the Services (Customer Content). The Customer shall hold the rights and authority required to provide that content, including third-party learning packages and any person's image, likeness or voice used to create an AI identity.

4.2. The Customer grants Frontierz and its authorized service providers a non-exclusive license to process Customer Content solely to provide, secure and support the Services and carry out documented instructions. The license ends when the content is deleted, subject to lawful retention. It grants no right to sell Customer Content, use it in advertising or reuse it for other customers. Demonstration participants grant the same limited license for their own submissions.

4.3. Frontierz does not use Customer Content, learning records or other Customer or User data to train, fine-tune or improve any AI model. Models are used for inference. Retrieval, embeddings and permitted personalization serve the contracted deployment and do not constitute model training.

4.4. The Customer may retain and use outputs generated for it for lawful purposes. Frontierz transfers any transferable rights it acquires in those outputs, excluding pre-existing materials and Frontierz technology. Third-party rights remain protected; generated outputs do not necessarily attract exclusive intellectual-property rights. Rights in separately commissioned deliverables shall be specified in the Order. Frontierz and its licensors retain their respective rights in the platform, software, underlying models and pre-existing materials.

4.5. Each party shall protect the other's confidential information, use it only for the Agreement and disclose it only to persons bound by confidentiality who need it for that purpose. These obligations continue while the information remains confidential. They exclude information lawfully public, already known, independently developed or lawfully received without restriction. Compelled disclosure shall be limited to legal requirements, with prior notice where permitted. Publicity using the other's name, logo or confidential materials requires prior written permission.

5. Artificial intelligence and human oversight

5.1. AI Fellows are automated systems. Frontierz shall identify AI interaction clearly and accessibly no later than the time of the first interaction, and implement required synthetic-content marking within the applicable legal deadlines. Customers and Users shall preserve required notices and provenance information and disclose generated or manipulated content as required by Article 50 of Regulation (EU) 2024/1689, as amended (the AI Act).

5.2. AI outputs require review before consequential reliance, publication or external action. The Services provide learning and assistance, not professional legal, medical or financial advice. Completion of a program does not establish regulatory compliance. The Customer shall appoint competent reviewers with authority to investigate, correct and override results, consider the affected person's explanation and provide legally required explanations. An unresolved material error shall not support a significant adverse decision. Frontierz shall provide the information and assistance within its responsibility.

5.3. Frontierz shall assess and document the intended purpose and regulatory classification of its AI features and fulfill its provider obligations. The Customer shall fulfill the obligations that apply to its own use of the Services. Each party shall support the AI literacy of personnel operating the Services on its behalf.

5.4. The Services are designed for workplace learning and practice. Using them for recruitment, employment decisions, worker monitoring, behavior-based task allocation or formally regulated educational or vocational assessment requires express written agreement before deployment, identifying the intended use, the responsible parties and the required safeguards. Each party shall then complete the obligations that apply to its role by the legal deadlines. Statutory duties cannot be transferred by contract.

5.5. A change of purpose, substantial modification or supply under another name shall be assessed before implementation. The parties shall promptly report material errors, discriminatory behavior and suspected serious incidents to one another, preserve relevant evidence, take corrective action and make legally required notifications. Frontierz shall maintain the safeguards required against prohibited and reasonably foreseeable misuse.

6. Prohibited use

Customers and Users shall not:

• Infringe the law or another person's rights; gain unauthorized access; compromise security; bypass access restrictions; distribute malicious code; or send unlawful marketing.
• Engage in harmful manipulation, exploitation of vulnerabilities, unlawful discrimination, social scoring or covert surveillance.
• Infer emotions or intentions from biometric signals in workplace or educational settings; infer sensitive characteristics through biometric categorization; or use the Services for biometric identification or untargeted facial-image collection.
• Generate non-consensual intimate or sexual depictions, child sexual abuse material or sexualized depictions of minors, or impersonate a real person without authority.
• Make solely automated decisions producing legal or similarly significant effects, use learning disclosures for an undisclosed disciplinary purpose, or conduct a regulated deployment outside Section 5.
• Supply special-category personal data, criminal-offense data or real financial-account data for learning exercises unless expressly agreed and lawfully authorized. Synthetic or anonymized examples shall be used where personal data are unnecessary. Authentication secrets shall be entered only through designated configuration controls.

7. Integrations and customer-managed AI

7.1. Customer-authorized integrations, including HTTP and MCP connectors, may retrieve information, transmit content or create and modify external records. Requests and responses may be logged. The Customer shall approve destinations, permissions, data fields and actions, protect credentials, test configurations and inform affected Users. Human confirmation is required before an action creates a binding commitment, incurs expenditure, deletes material or significantly affects a person. An action that cannot meet this requirement shall not be enabled.

7.2. Customer-selected external services remain subject to their own arrangements. Frontierz remains responsible for its integration implementation and for the service providers it engages. An AI output or instruction embedded in third-party content does not itself authorize an external action.

7.3. Where the Order provides customer-managed AI (BYOAI), the agreed inference uses the Customer's designated Azure subscription and resources. The Customer shall maintain the required licenses, capacity and permissions. Platform hosting, stored learning records and other service processing remain governed by the Order and Schedule 1.

8. Charges, service performance and changes

8.1. Fees, taxes, payment dates, usage limits and renewal arrangements shall be stated in the Order. Automatic renewal and additional usage charges require express agreement. A trial becomes paid only through an accepted paid Order. Reaching a disclosed allowance may prevent further activity. Price changes apply at renewal or by agreement, with notice allowing the Customer to exercise its non-renewal rights.

8.2. Frontierz shall provide the Services with professional care and skill, in material accordance with the Order and applicable documentation, and remedy material defects within a reasonable period appropriate to their severity. Availability, support response times and service credits apply as expressly agreed.

8.3. Frontierz may maintain and improve the Services, including changing models or providers, while preserving the contracted purposes and agreed protection. Material changes affecting personal data or AI classification require the corresponding assessment. Frontierz shall give reasonable advance notice of a material adverse change; the Customer may terminate the affected Services before it takes effect. Necessary urgent legal or security changes shall be explained promptly.

9. Personal data

9.1. Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 govern personal-data processing. The Customer is controller and Frontierz is processor for personal data processed on the Customer's instructions. Where the Customer acts for another controller, it shall hold authority to engage Frontierz as subprocessor. Schedule 1 applies. Frontierz is a separate controller for its own inquiries, business administration, billing, legal obligations and public demonstrations, as described in the relevant privacy information.

9.2. The Customer shall establish a lawful basis, provide required privacy information, observe workplace information and consultation duties, and conduct impact assessments where required. Contract acceptance, employee participation and browser permissions do not themselves establish valid consent. Frontierz shall provide the assistance required by Schedule 1.

9.3. Data-protection requests may be sent to the responsible controller or rgpd@founderz.com. Nothing restricts an individual's statutory rights, complaints to a supervisory authority, including the Spanish Data Protection Agency, or judicial remedies.

10. Suspension and termination

10.1. The Agreement continues for the term stated in the Order. Either party may terminate for a material breach that remains unremedied after written notice and a reasonable opportunity to remedy it, or immediately where the breach is irremediable or continued performance would be unlawful.

10.2. Frontierz may proportionately restrict affected Services to address a security threat, prohibited use or legal requirement, or an overdue payment after written warning and a reasonable opportunity to pay. Restrictions shall be explained unless legally prohibited and lifted when their grounds cease.

10.3. Termination preserves accrued rights and obligations intended to survive, including confidentiality and data protection. The Customer shall inform Users of access ending; Frontierz shall provide the exit process below.

11. Switching, return and deletion

11.1. The Customer may request a switch to another provider, transfer to its own infrastructure or erasure by written notice of no more than two months. Frontierz shall support the exit, provide reasonable assistance to authorized recipients, identify known continuity risks and maintain the contracted service and data security throughout transition.

11.2. Transition shall take no more than thirty calendar days after the notice period. If technically infeasible, Frontierz shall justify this within fourteen working days of the request and specify an alternative period not exceeding seven months. The Customer may extend transition once for a period appropriate to its needs. Frontierz shall confirm termination of the affected Agreement when switching succeeds, or at the end of the notice period where the Customer selects erasure instead.

11.3. Export covers the Customer's retained inputs, outputs and associated metadata: supplied files and knowledge; Fellow, integration and program configurations; learning structures and materials; conversations and summaries; profiles, identifiers and notes; activity, progress and assessments; reports, badges and certificates; and Customer-specific integration records. It includes the relationships needed to interpret them, in reusable machine-readable formats and available original file formats. Frontierz source code, model weights, internal platform architecture and security tooling, and other customers' data are excluded. An exclusion shall not withhold Customer data or impede lawful switching.

11.4. Before contracting, Frontierz shall provide switching instructions, available interfaces and known limitations. Its current export-format register and its infrastructure-jurisdiction and international-access information are published at Data Location and Export. This information forms part of the Agreement and shall remain accessible. The Customer shall identify its destination provider or infrastructure and cooperate with the transfer.

11.5. At least thirty calendar days for retrieval shall follow transition. After successful switching and that period, or an agreed later period, Frontierz shall erase the exportable data and digital assets in accordance with Schedule 1. A Customer selecting erasure instead of switching may instruct deletion at termination. Legally required retention shall be limited to its required purpose and duration.

11.6. Until January 12, 2027, any switching charge must be expressly stated before contracting and shall not exceed directly attributable switching costs. From that date no switching or data-egress charge applies. Ordinary service charges and any expressly agreed lawful early-termination charge remain payable. No early-termination charge applies to termination for Frontierz's breach or a material adverse change under Section 8.3.

12. Liability

12.1. Each party is responsible for loss caused by its breach of the Agreement or applicable law. Frontierz remains responsible for its subcontractors' performance. Unless the Order states otherwise, each party's aggregate contractual liability for paid Services arising in a twelve-month period shall not exceed the fees paid or payable for the affected Services for that period; during the first year, the amount is the fees for that initial year.

12.2. This limit does not apply to fraud, intentional misconduct, gross negligence, infringement of the other party's intellectual-property rights, death or personal injury, or liability that cannot lawfully be limited. It does not limit payment obligations, data subjects' compensation rights, non-excludable rights of contribution or supervisory powers. Liability for unpaid demonstrations is governed by applicable law.

12.3. A party prevented from performing by an event beyond its reasonable control shall notify the other, mitigate its effects and resume performance promptly. This does not excuse avoidable security failures or remove statutory data-protection duties.

12.4. Frontierz shall defend the Customer against a third-party claim that the platform software developed by Frontierz and provided under the Agreement infringes that third party's intellectual-property rights in the European Union, and shall pay the damages finally awarded or agreed in settlement, provided that the Customer notifies Frontierz promptly, allows Frontierz to control the defense and settlement and cooperates reasonably. Frontierz may resolve such a claim by securing the right to continue use, by modifying or replacing the affected element, or, where neither is reasonably achievable, by ending the affected Services. This commitment concerns Frontierz's own developed technology; it does not extend to Customer Content, third-party components or services, underlying models, generated outputs, combinations with items not supplied by Frontierz, or use contrary to the Agreement or the documentation. The Customer shall correspondingly defend Frontierz against third-party claims arising from Customer Content or from use of the Services in breach of the Agreement. This Section states each party's remedy for third-party intellectual-property claims and remains subject to Section 12.1.

13. Notices, changes and governing law

13.1. Contractual notices shall be sent to the contacts in the Order or Frontierz's address in Section 1. Users may report inappropriate output, incorrect assessments, security incidents or unlawful content through their Administrator or hello@frontierz.com. Frontierz shall investigate matters within its responsibility and assist with others.

13.2. Revised Terms apply to new Orders and renewals after prior notice. Changes to an existing Agreement require agreement, except where mandatory law requires otherwise. Invalidity of a provision does not affect the remaining provisions. Spanish law governs the Agreement. The courts of the city of Barcelona, Spain, have jurisdiction over any dispute arising from it, without prejudice to mandatory rules that confer jurisdiction elsewhere, including rules protecting consumers and an individual's data-protection remedies.

Schedule 1 — Data processing

A. Processing covered

Frontierz shall process Customer Personal Data solely to provide the Customer's Services. Processing comprises collection, transmission, transcription, storage, retrieval, inference, personalization, assessment, reporting, authorized integration actions, support, export and erasure. It concerns employees, contractors, program participants and other people whose data the Customer lawfully supplies: professional identity and contact details; session inputs and transient live media; files and knowledge content; transcripts and summaries; profiles and notes; learning progress, assessments and certificates; and associated activity, device and integration metadata. Special-category, criminal-offense and financial-account data are outside the standard service scope.

Processing continues for the contracted term and the necessary return or deletion period. The Order or separately agreed processing information shall identify enabled features, authorized purposes, retention and backup-deletion periods, processing locations and subprocessors. Those particulars form part of this Schedule and shall be supplied before processing begins. Core platform hosting and storage are in the European Union. Inference, support and auxiliary services shall use only disclosed and authorized locations and transfer arrangements. Section 4.3's commitment on model training applies throughout.

B. Instructions and confidentiality

The Customer shall provide lawful, documented instructions, including through authorized configuration, and ensure the accuracy, relevance and lawful collection of supplied data. Frontierz shall act only on those instructions, including for transfers, unless Union or Member State law requires otherwise; it shall inform the Customer of that requirement beforehand unless legally prohibited. Frontierz shall immediately inform the Customer if an instruction infringes data-protection law and suspend that instruction pending resolution. Persons authorized to process the data shall be bound by continuing confidentiality obligations and receive access only as necessary.

C. Security

Frontierz shall implement and maintain measures appropriate to risk under Article 32 GDPR, including encryption in transit and at rest, logical tenant separation, server-side authorization, restricted staff access, logging, vulnerability management, incident response, encrypted backups and procedures to restore availability. It shall regularly assess the measures' effectiveness and shall not materially reduce the agreed protection. Production personal data shall not be used in development or testing. Applicable security information shall be made available to the Customer subject to appropriate confidentiality safeguards.

D. Subprocessors and international transfers

The Customer authorizes the subprocessors identified in the Privacy Policy and any deployment-specific list supplied with the Order or data processing agreement. Frontierz shall provide their legal entities, functions, processing locations and transfer safeguards in the data processing agreement or on request. Frontierz shall give advance written notice of additions or replacements and a reasonable opportunity to object on data-protection grounds before the change. If an objection cannot be resolved through a compliant alternative, the Customer may end the affected Services.

Frontierz shall impose equivalent data-protection obligations on each subprocessor and remain fully responsible for its performance. Transfers or remote access outside the EEA require the Customer's documented authorization and a valid Chapter V GDPR mechanism, with necessary assessments and supplementary measures.

E. Assistance and incidents

Taking account of the nature of processing and information available, Frontierz shall assist the Customer with individual rights, security, breach notifications, data protection impact assessments and prior consultation under Articles 32–36 GDPR. Requests received directly shall be forwarded without undue delay; Frontierz shall not determine the Customer's response without instructions unless legally required.

Frontierz shall notify the Customer without undue delay after becoming aware of a personal-data breach. It shall provide known information about its nature, affected data and people, likely consequences, contact point and remedial measures, supplement that information as it becomes available, preserve evidence and cooperate in containment and recovery. The Customer remains responsible for notifications required of it as controller.

F. Compliance information and audits

Frontierz shall make available the information necessary to demonstrate compliance with Article 28 GDPR, including available security documentation and written answers to the Customer's reasonable questions, subject to appropriate confidentiality safeguards. Customer audits are ordinarily conducted by reviewing that information. Where it is insufficient to demonstrate compliance, or an inspection is required by law or a supervisory authority, an inspection may be carried out under conditions agreed in the Order or the data processing agreement, including reasonable notice, scope, frequency, confidentiality and cost arrangements, and in a manner that protects other customers' data and Frontierz's operations. Contractual procedures shall not restrict a competent authority's powers.

G. Return and erasure

At the Customer's choice, Frontierz shall return or erase Customer Personal Data after the Services end, observing Section 11's retrieval period where switching is requested, and erase existing copies unless Union or Member State law requires retention. Deletion shall cover production data, derived records, indexes and subprocessor copies. Backups shall be isolated from ordinary use and erased under the agreed lifecycle; deletion instructions shall be reapplied if a backup is restored. Return and erasure shall occur without undue delay within the agreed deadlines, and Frontierz shall provide written confirmation on completion. Obligations under this Schedule continue while Frontierz or a subprocessor retains Customer Personal Data.