Terms of use of the platform SOPHIE

1. Introductory provisions. These terms of use (the "Terms") govern the use of the SOPHIE platform operated by Impactso s.r.o., company ID 19088159, VAT ID CZ19088159, with its registered office at K Zátiší 362/5, 147 00 Prague 4, Czech Republic, email info@impactso.com (the "Operator"). SOPHIE is a software platform for collecting, managing and evaluating data on the social impact of projects and activities (the "Platform" or "SOPHIE"). The Customer is an organization that has created an account in SOPHIE (the "Customer"). A Participant is a person who registers in SOPHIE or fills in questionnaires as part of the Customer's project. The Platform is intended for businesses and organizations, not for consumers. Participants are not a party to these Terms; their personal data is governed by the sections on the SOPHIE platform at impactso.com/privacy-policy.

2. Account and registration. An account in SOPHIE is created by a person authorized to act on behalf of the Customer. When registering, they provide true and complete information about the organization and themselves and accept these Terms, including the data processing agreement under Article 7, by ticking a checkbox. Ticking the checkbox has the same effect as a signature. SOPHIE stores a record of the acceptance of the Terms: the organization, the user, the date and time, and the version. The agreement between the Customer and the Operator is formed upon completion of registration. The Customer is responsible for the security of its users' access credentials and for all activity under its account. If it discovers misuse of the account, it will notify the Operator without undue delay.

3. Scope of service and right to use. For the duration of the agreement, the Operator grants the Customer a non-exclusive and non-transferable right to use the SOPHIE platform for its own needs, in particular to manage projects and activities, collect questionnaire responses, evaluate impact indicators and create reports. The scope of the service, the number of projects or users and other parameters follow from the price list or the order. The Customer may not provide SOPHIE to third parties for payment, circumvent technical restrictions, or attempt unauthorized access to the Operator's systems or to the data of other customers.

4. Customer obligations. The Customer is the controller of the personal data of participants that it processes in SOPHIE. It is responsible in particular for ensuring that it:

1. has a legal basis for the processing and properly informs participants about it,
2. does not request special categories of personal data in questionnaires (health, ethnic origin, religious belief, sexual orientation and similar) unless it has the participants' explicit consent and has notified the Operator in advance,
3. does not enter into SOPHIE any content that infringes the law, third-party rights or good morals,
4. handles participants' requests to exercise their rights.

The Operator may temporarily restrict access to the account if the Customer breaches these Terms or if the security of SOPHIE is at risk, and will inform the Customer accordingly.

5. Price and payment terms. The price for using SOPHIE is set by the current price list at impactso.com/pricing or by an individual order. Prices are stated exclusive of VAT unless stated otherwise. The Operator issues the invoice electronically to the email address stated in the account. The due date is stated on the invoice or in the order. In case of late payment, the Operator may, after a prior notice, restrict access to SOPHIE until payment is made. The price may be changed effective from the next prepaid period. The Operator will announce a price change at least 30 days in advance.

6. Availability, maintenance and support. The Operator strives to ensure uninterrupted operation of SOPHIE but does not guarantee that it will work without interruptions or errors. Planned maintenance will be announced in advance where possible. The Operator may develop SOPHIE and change its functions, provided this does not substantially reduce the scope of the agreed service. Support is provided by email at info@impactso.com on business days. The Customer reports any errors found by email with a description of the problem.

7. Personal data protection and data processing agreement. The Operator processes participants' personal data for the Customer as a processor; the Customer is the controller. The data processing agreement under Article 28 GDPR is Annex 1 to these Terms and forms an integral part of them. It is formed by accepting the Terms and no separate signature is needed. The current version is available in SOPHIE and at impactso.com/privacy-policy. The Operator processes the personal data of the Customer's users (for example contact persons) and account data as a controller under the general principles at impactso.com/privacy-policy. In case of conflict between the Terms and the data processing agreement, the data processing agreement prevails in matters of personal data protection.

8. Customer data. All data that the Customer enters into SOPHIE or obtains in it from participants (the "Customer Data") remains the property of the Customer. The Operator only acquires the right to process it to the extent necessary to provide the service. The Customer may export the Customer Data at any time in a machine-readable format using the functions of SOPHIE. After the agreement ends, the Customer has 30 days to export; afterwards the Operator will delete the data in accordance with the data processing agreement. The Operator may use anonymized and aggregated data to improve SOPHIE and to produce statistics, provided that neither the Customer nor participants can be identified from them.

9. Intellectual property. SOPHIE, its software, design, methodology (including the Theory of Change templates and the indicator catalogue) and documentation are the intellectual property of the Operator or its licensors. The Customer acquires no rights other than the right to use SOPHIE under Article 3. The Operator may use the Customer's name and logo as a reference only with its prior consent.

10. Liability. The Operator is liable for damage caused by breach of its obligations in accordance with legal regulations. Its liability for damage is limited to an amount equal to the fees paid by the Customer in the last 12 months. This limitation does not apply to damage caused intentionally or by gross negligence, or where the law prohibits such limitation. The Operator is not liable for loss of profit, for damage caused by incorrect use of SOPHIE or by incorrect data entered by the Customer, or for outages of third-party services beyond its control. The Customer is responsible for decisions it makes on the basis of data and reports in SOPHIE.

11. Duration and termination. The agreement is concluded for an indefinite period or for a prepaid period according to the order. The Customer may terminate it at any time by cancelling the account or by email to info@impactso.com. Subscription fees already paid are not refunded unless agreed otherwise. The Operator may terminate the agreement with a notice period of 30 days. Either party may terminate the agreement with immediate effect in case of a material breach by the other party that is not remedied even after a notice within a reasonable period. After termination, Article 8 applies.

12. Changes to the terms. The Operator may change the Terms. It will publish the new version in SOPHIE and on impactso.com and notify the Customer by email at least 30 days before it takes effect. If the Customer does not agree with the change, it may terminate the agreement before the change takes effect. By continuing to use SOPHIE after the change takes effect, the Customer accepts the new version. In case of a material change, SOPHIE will request new acceptance by ticking a checkbox.

13. Final provisions. The Terms are governed by the law of the Czech Republic. Disputes arising from them will be resolved by the court of the Czech Republic with subject-matter and territorial jurisdiction according to the Operator's registered office. If any provision is invalid, the others remain in force.

These Terms are designated version 1.0, effective 18 October 2026. Annex 1 forms an integral part of them: Data Processing Agreement for the SOPHIE platform.

This is a translation of the Czech original. In case of discrepancy, the Czech version prevails.