Terms of Use

Candidate Data means personal data relating to job candidates, prospects, or other professionals that is processed through the Service, whether provided by Customer, obtained from licensed third-party providers, collected from publicly available professional sources, received through Customer-authorised integrations, or generated through enrichment at Customer’s request.

Candidate Intelligence means Service features that help Customers identify, match, review, understand, organise, and engage potential candidates using professional information and evidence.

Credits means usage units that may be consumed by searches, profile expansions, enrichment, verification, content generation, outreach, or other actions, as described in Customer’s plan or order.

Customer Data means data, content, materials, instructions, candidate lists, suppression lists, and other information submitted to the Service by or on behalf of Customer or its Users.

Opportunity Content means team, company, role, culture, values, principles, or other content created, uploaded, generated, or published through the Service to explain an employment opportunity.

Professional Evidence means publicly available or lawfully obtained information about an individual’s professional experience or work, including personal or company websites, portfolios, blogs, articles, publications, research papers, conference or talk pages, public code repositories, technical contributions, developer activity, and similar professional content.

Profile means a candidate, team, company, role, or opportunity page or record created, maintained, enriched, or displayed through the Service.

Third-Party Services means external platforms, applications, data sources, vendors, or tools that are integrated with, connected to, or used by the Service, including data, hosting, analytics, communications, payment, email, and customer relationship management providers.

User means an individual authorised by Customer to access or use the Service under Customer’s account.

2.1 Business use

The Service is intended for business use. Each User must be at least 18 years old and authorised to act for Customer.

2.2 Account security

Customer must keep account credentials confidential, prevent unauthorised access, and promptly notify Vashly of suspected misuse or compromise. Customer is responsible for activity under its account and for its Users’ compliance with these Terms.

2.3 Service and Terms changes

We may add, change, or discontinue Service features. If we make a material adverse change to these Terms, we will provide reasonable advance notice, normally at least 30 days, unless an earlier change is required for legal, security, or urgent operational reasons. If Customer does not agree to a material adverse change, Customer may terminate the affected subscription before the change takes effect.

3.1 Licence

Subject to these Terms, the applicable order or plan, and payment of fees, Vashly grants Customer a limited, non-exclusive, non-transferable, non-sublicensable, and revocable right during the subscription term to access and use the Service for Customer’s internal business purposes.

3.2 Plans, limits, and Credits

Access and usage may be limited by Users, Profiles, Credits, searches, messages, data volume, rate limits, fair-use rules, or other plan terms. Credits are plan-bound, may be subject to periodic caps, and do not roll over unless the applicable order states otherwise. We may throttle anomalous or abusive usage to protect the Service, our customers, individuals, or Third-Party Services.

3.3 Restrictions

Except where applicable law prohibits the restriction, Customer must not copy, modify, translate, decompile, reverse engineer, disassemble, or create derivative works of the Service; access the Service to build or benchmark a competing product; resell or make the Service available to unauthorised third parties; or bypass usage, security, or access controls.

Customer and its Users must not use the Service to:

• violate applicable law, regulation, court order, or third-party rights;
• upload, create, or distribute unlawful, defamatory, hateful, harassing, pornographic, deceptive, or malicious content;
• discriminate unlawfully or make employment decisions based on protected characteristics;
• infer or target sensitive personal characteristics without a valid lawful basis and Vashly’s express written authorisation;
• scrape, harvest, or obtain data in breach of applicable law or third-party terms, or bypass technical protections, rate limits, anti-automation measures, or access controls;
• transmit malware, interfere with Service operations, or conduct security testing without Vashly’s written permission;
• send spam, deceptive messages, or outreach that violates data protection, direct marketing, anti-spam, or e-privacy law;
• misrepresent identity, affiliation, an opportunity, or the nature of a communication; or
• use Candidate Data or Professional Evidence for surveillance, stalking, harassment, or any purpose unrelated to legitimate professional recruiting or talent activities.

We may suspend or restrict access for a violation of this section as described in section 17.

5.1 Customer responsibility

Customer controls its Customer Data, Profiles, and Opportunity Content. Customer must ensure it has all rights, permissions, notices, and lawful bases needed to submit, use, and publish those materials.

5.2 Generated content

The Service may help create or revise team, company, role, outreach, and Opportunity Content. Generated content is assistive and may be incomplete, inaccurate, inappropriate, or unsuitable for Customer’s intended use. Customer must review, edit, and approve content before publishing or sending it.

5.3 Customer publicity

Vashly may identify Customer as a customer, including by using Customer’s name or logo, only with Customer’s prior consent or where Customer has enabled that use in the Service. Customer may withdraw consent prospectively at any time.

6.1 Sources

Candidate Data may come from:

1. data uploaded or otherwise provided by Customer;
2. licensed third-party data providers;
3. publicly available professional sources, including professional and developer platforms, company and personal websites, portfolios, blogs, articles, publications, research papers, conference or talk pages, public code repositories, technical contributions, and other professional content made publicly available by or about an individual; and
4. Customer-authorised integrations.

Where lawful, Vashly may combine information from multiple sources to create, enrich, update, or deduplicate professional profiles; surface relevant Professional Evidence; support candidate-role matching; and provide contextual explanations about why a candidate may or may not be relevant to an opportunity.

Public professional activity may indicate experience, skills, interests, or areas of work. It does not by itself indicate that an individual is looking for a job, willing to engage, or interested in a particular opportunity.

6.2 Customer’s lawful basis and transparency duties

Customer is responsible for determining and documenting an appropriate lawful basis for its processing and use of Candidate Data, providing required privacy information, conducting any required balancing or impact assessments, and responding to data-subject requests addressed to Customer.

6.3 Accuracy and recency

Candidate Data, Professional Evidence, enrichment, matching, and generated explanations may be incomplete, outdated, incorrectly attributed, or inaccurate. Customer must validate material information, use professional judgment, and give individuals an appropriate opportunity to correct relevant information where required by law.

6.4 Suppression and do-not-contact records

Customer must promptly honour objections, opt-outs, and do-not-contact requests. The Service may provide controls for suppression records, but Customer remains responsible for configuring and using them correctly. Vashly may maintain a minimal suppression record to prevent reintroduction of information or further outreach after a valid request.

7.1 Assistive functions

The Service may use automated systems and artificial intelligence to:

• support candidate discovery and candidate-role matching;
• structure, organise, enrich, and summarise professional information;
• identify and surface Professional Evidence;
• provide contextual explanations about potential relevance or gaps;
• help draft Opportunity Content and outreach;
• organise and display engagement activity; and
• support search, workflow, and communication features.

7.2 Human review and hiring decisions

AI-generated or automated outputs are assistive and may be incomplete, inaccurate, or biased. Customer is responsible for reviewing and validating outputs and for all decisions and actions taken using them. Vashly does not act as an employment agency or recruiter and does not make hiring or other legal or similarly significant employment decisions on Customer’s behalf.

Customer must not use the Service as the sole basis for a decision that produces legal or similarly significant effects for an individual where prohibited by applicable law. Customer must apply meaningful human oversight and comply with applicable employment, equality, transparency, and automated-decision requirements.

7.3 Engagement activity

The Service may display engagement activity associated with Opportunity Content or outreach, such as delivery, opens, clicks, visits, replies, or other interactions where permitted by law and available through Customer’s configuration or Third-Party Services. Engagement activity may be incomplete or technically imprecise and must not be treated as proof of an individual’s intent, interest, or willingness to change jobs.

7.4 Third-Party Services

Candidate Intelligence, enrichment, content, communications, and engagement features may rely on Third-Party Services. Their terms and privacy practices may apply. Vashly is not responsible for their acts, omissions, outages, data quality, or policy changes, but will use reasonable efforts to mitigate material disruption where practicable.

7.5 No circumvention

Customer must not use the Service to violate or circumvent a Third-Party Service’s rules or technical measures, including access restrictions, rate limits, anti-automation controls, or prohibitions on scraping.

8.1 Ownership

As between the parties, Customer retains its rights in Customer Data and the Candidate Data it controls. Vashly and its licensors retain all rights in the Service and Vashly technology.

8.2 Licence to operate the Service

Customer grants Vashly a worldwide, non-exclusive, royalty-free licence during the applicable term to host, copy, process, transmit, display, modify, and create technical derivatives of Customer Data only as necessary to provide, maintain, secure, support, and improve the Service, comply with Customer instructions, and exercise Vashly’s rights and obligations under these Terms and the Privacy Notice.

Vashly will not use Customer’s private workspace content to train publicly available foundation models. Any use of personal data for Service improvement will be governed by applicable law, the Privacy Notice, and any applicable DPA.

8.3 Aggregated and de-identified data

Vashly may create and use aggregated or de-identified information for analytics, security, benchmarking, and Service improvement, provided it does not identify Customer or an individual. Vashly will not attempt to re-identify de-identified information.

8.4 Prohibited data

Unless expressly agreed in writing, Customer must not submit special categories of personal data, criminal-conviction data, children’s data, government identification numbers, bank account data, payment card data, or other highly sensitive data to the Service.

9.1 Customer responsibility

Customer is the sender of outreach initiated through its account and is responsible for ensuring that each communication complies with applicable privacy, direct marketing, anti-spam, consumer protection, and e-privacy laws and industry rules. This includes establishing any required lawful basis or consent, providing truthful sender information and required notices, limiting communications to appropriate recipients, and maintaining evidence of compliance.

9.2 Opt-outs and objections

Customer must provide and honour clear opt-out mechanisms and promptly process unsubscribe and objection requests across all relevant systems. Customer must not contact an individual through another channel to circumvent an opt-out where doing so would be unlawful or contrary to the individual’s request.

9.3 Prohibited outreach

Customer must not use the Service to send deceptive, harassing, excessive, or indiscriminate communications; mass-harvest contact details; target protected classes unlawfully; or conceal the sender or purpose of a message.

10.1 Roles

The parties’ data-protection roles depend on the processing activity:

• For Customer Data and Candidate Data that Customer uploads or specifically instructs Vashly to process within Customer’s workspace, Customer generally acts as controller and Vashly acts as processor.
• For Vashly’s own websites, account administration, billing, security, fraud prevention, product analytics, legal compliance, business communications, and professional-data processing undertaken for Vashly’s own stated purposes, Vashly acts as an independent controller.
• Each party may act as an independent controller for processing it determines independently. Nothing in these Terms makes the parties joint controllers unless they expressly agree otherwise in writing.

10.2 Data Processing Addendum

Where Vashly processes personal data on Customer’s behalf and applicable law requires a processor agreement, the parties incorporate the Vashly Data Processing Addendum (“DPA”) into these Terms.

10.3 Subprocessors and international transfers

Vashly’s subprocessors are listed at https://vashly.com/subprocessors. International transfers will use a valid transfer mechanism and appropriate safeguards, such as adequacy decisions or Standard Contractual Clauses, as described in the DPA. Vashly will give at least 30 days’ advance email notice of material subprocessor additions or replacements affecting Customer Personal Data. Customer may object on reasonable data-protection grounds; if the parties cannot resolve the objection, Customer may terminate the affected service as described in the DPA.

10.4 Security and incidents

Vashly implements appropriate technical and organisational measures designed to protect personal data. If Vashly becomes aware of a personal data breach affecting personal data processed for Customer, Vashly will notify Customer without undue delay and provide reasonable cooperation as required by applicable law and the DPA.

11.1 Customer-authorised integrations

If Customer enables an integration, Customer authorises Vashly to exchange relevant data with that Third-Party Service as needed to provide the integration. Customer is responsible for its relationship with and lawful use of the Third-Party Service. The third party’s terms and privacy notice govern its processing.

11.2 Availability and changes

Vashly does not control and is not responsible for Third-Party Services’ availability, accuracy, security, acts, omissions, or policy changes. Vashly may modify or discontinue an integration if a Third-Party Service changes or withdraws access.

12.1 Vashly intellectual property

Vashly and its licensors own the Service, software, interfaces, models, workflows, documentation, and related intellectual property. No rights are granted except as expressly stated in these Terms.

12.2 Feedback

If Customer provides feedback or suggestions, Vashly may use them without restriction or obligation, provided Vashly does not publicly identify Customer as the source without permission.

13.1 Fees

Customer must pay the fees stated in its order or plan. Additional or overage usage may be charged at the rates communicated to Customer or stated in the applicable plan.

13.2 Taxes

Fees exclude applicable taxes. Customer is responsible for taxes associated with its purchase, other than taxes based on Vashly’s net income.

13.3 Trials and beta features

Trials, previews, and beta features are provided as available, may be subject to additional terms, may change or end at any time, and may have limited or no support.

Vashly may maintain, update, or modify the Service. Where practicable, Vashly will schedule planned downtime to reduce disruption and provide advance notice of material planned downtime.

15.1 Mutual authority

Each party warrants that it has authority to enter into these Terms.

15.2 Service provided as available

To the maximum extent permitted by law, the Service is provided “as is” and “as available.” Vashly does not warrant uninterrupted or error-free operation or the accuracy, completeness, identity attribution, availability, or fitness for purpose of Candidate Data, Professional Evidence, enrichment, matching, engagement activity, or generated output.

15.3 Customer verification

Customer must independently review and verify outputs before relying on them, contacting an individual, publishing content, or making an employment-related decision.

15.4 No legal, HR, or hiring advice

The Service and its outputs are not legal, compliance, human-resources, or hiring advice and are not a substitute for qualified professional advice.

16.1 By Vashly

Vashly will defend Customer against a third-party claim alleging that Customer’s authorised use of the Service, excluding Customer Data, Candidate Data, Customer configurations, and Third-Party Services, directly infringes a third party’s intellectual-property right, and will pay damages finally awarded or agreed in settlement by Vashly. Customer must promptly notify Vashly, give Vashly control of the defence and settlement, and reasonably cooperate.

Vashly has no obligation for claims arising from: (a) Customer Data or Candidate Data; (b) combinations with items not supplied by Vashly; (c) use contrary to documentation or these Terms; (d) modifications not made by Vashly; or (e) compliance with Customer’s specifications. Vashly may modify the Service, obtain the necessary right, or terminate the affected feature and provide a pro-rata refund of prepaid fees for the unused affected period.

16.2 By Customer

Customer will defend and indemnify Vashly against third-party claims arising from Customer Data; Customer’s collection, use, disclosure, or outreach involving Candidate Data; Customer’s employment decisions; Customer’s violation of law or third-party terms; or Customer’s use of the Service in breach of these Terms. Vashly must promptly notify Customer, give Customer control of the defence and settlement, and reasonably cooperate. Customer may not settle a claim in a way that admits fault by or imposes a non-monetary obligation on Vashly without Vashly’s written consent.

Vashly may suspend or limit access where reasonably necessary because: (a) Customer breaches section 4 or 7.5 or applicable law; (b) Customer’s use creates a security, legal, privacy, or operational risk; (c) fees are overdue after notice; (d) a Third-Party Service or authority requires it; or (e) suspension is needed to protect individuals, Vashly, its customers, or the Service. Where lawful and practicable, Vashly will notify Customer of the reason and work to restore access after the issue is resolved.

To the maximum extent permitted by law:

1. Excluded damages. Neither party is liable for lost profits, lost revenue, loss of goodwill, loss of anticipated savings, loss or corruption of data, or indirect, special, incidental, punitive, or consequential damages.
2. Liability cap. Each party’s aggregate liability arising out of or relating to the Service or these Terms in any 12-month period will not exceed the fees paid or payable by Customer for the Service during that period.
3. Carve-outs. The exclusions and cap do not apply to Customer’s payment obligations; either party’s indemnity obligations; fraud, wilful misconduct, or gross negligence; breach of confidentiality or intellectual-property obligations; or liability that cannot lawfully be excluded or limited. Any additional or different carve-outs in an applicable DPA or order will control for that document’s subject matter.

Each party will protect the other party’s non-public information using at least reasonable care and will use it only to perform or exercise rights under these Terms. Confidentiality obligations do not apply to information that the recipient can demonstrate is public through no breach, already lawfully known, independently developed, or rightfully obtained from a third party. A recipient may disclose information when legally required, after providing advance notice where lawful and reasonably practicable.

20.1 Term

These Terms apply while Customer accesses or uses the Service and throughout any subscription term.

20.2 Termination for convenience

Customer may terminate as permitted by its order or plan. Prepaid fees are non-refundable unless the order or applicable law states otherwise.

20.3 Termination for cause

Either party may terminate for a material breach that remains uncured 30 days after written notice. A party may terminate immediately if the other party becomes insolvent or if continued performance would violate applicable law.

20.4 Export and deletion

Customer can request manual export or deletion by emailing hello@vashly.com. Account closure or subscription termination does not automatically delete workspace data. Requests are handled without undue delay and within one month of receipt. Deletion covers the relevant active systems and caches; recovery copies expire through their normal lifecycles. Minimal suppression records may be retained where necessary. The DPA and Privacy Notice describe the applicable scope, legal retention duties and backup periods.

20.5 Survival

Provisions that by their nature should survive termination will survive, including sections 8, 10, 12, 15, 16, 18, 19, 20.4, 20.5, 21, 24, and 25.

Vashly may provide operational or contractual notices through the Service, Customer’s administrative account, or email. Formal legal notices to Vashly must be sent to hello@vashly.com with “Legal notice” in the subject line and by post to Vashly AB, Birger Jarlsgatan 57 C, 113 56 Stockholm, Sweden. A party must keep its contact information current.

Customer must not access or use the Service in violation of applicable export-control or sanctions laws and represents that it is not a prohibited or sanctioned party.

Each party will comply with applicable anti-bribery and anti-corruption laws in connection with these Terms and the Service.

These Terms are governed by Swedish law, without regard to conflict-of-law rules. Any dispute arising from or relating to these Terms or the Service will be subject to the exclusive jurisdiction of Stockholm District Court (Stockholms tingsrätt), unless mandatory law requires otherwise.

25.1 Entire agreement and order of precedence

These Terms, the DPA, the Privacy Notice, and the applicable order or plan form the entire agreement regarding the Service and supersede prior agreements on the same subject. If documents conflict, the DPA controls for processing personal data on Customer’s behalf, the order controls for commercial terms, and these Terms control otherwise.

25.2 Assignment

Customer may not assign these Terms without Vashly’s prior written consent. Vashly may assign them to an affiliate or in connection with a merger, reorganisation, financing, or sale of all or substantially all relevant assets or business.

25.3 Severability

If a provision is held invalid or unenforceable, it will be limited to the minimum extent necessary and the remaining provisions will remain effective.

25.4 Force majeure

Neither party is liable for delay or failure caused by circumstances beyond its reasonable control, except for payment obligations.

25.5 Independent contractors

The parties are independent contractors. These Terms do not create a partnership, joint venture, fiduciary relationship, franchise, or agency.

25.6 Waiver

Failure or delay in exercising a right is not a waiver of that right.

25.7 No third-party beneficiaries

These Terms do not create rights for third parties unless expressly stated.

Questions about these Terms may be sent to:

Vashly AB
Birger Jarlsgatan 57 C
113 56 Stockholm, Sweden
hello@vashly.com