Terms and Conditions

The service provider and your contracting party for the software service is:

By creating an account, accepting an order, starting a paid checkout, or using the service, the customer agrees to these Terms on behalf of the organization it represents. If the customer does not agree, it must not use the service.

1. Website and dashboard descriptions are invitations to place an order, not binding offers, unless expressly stated otherwise.
2. A contract for a Free account is formed when 1Consent activates the account or begins providing the service after registration.
3. A paid order is placed through Stripe-hosted checkout and accepted when checkout confirms the transaction or 1Consent activates the paid entitlement, whichever occurs first.
4. The person acting for the customer represents that they have authority to bind that organization.

If documents conflict, the following order applies: a signed order or negotiated agreement; the processor terms in Section 11 for data-protection matters; these Terms; then product documentation. Stripe/Link's checkout and payment terms separately govern the payment transaction where Stripe/Link acts as merchant of record.

English and German versions are intended to have the same meaning. If they conflict, the German version controls to the extent permitted by law.

1Consent provides hosted software and infrastructure for configuring, publishing, and operating consent and privacy-choice experiences.

• CMP runtime, APIs, framework-aware consent experiences, and storage of configured consent evidence;
• dashboard configuration, themes, translations, service catalogs, deployment stages, roles, and audit functions;
• website scanning and classification evidence for customer review;
• plan-dependent aggregate consent and session analytics, exports, and operational reports; and
• optional AI-assisted theme, suggestion, and translation features.

Current plan limits and feature descriptions shown at order time form part of the service description. Features can differ by plan, environment, framework, and release stage.

The customer determines the purpose and legal configuration of its CMP deployment and must:

• identify and comply with the privacy, ePrivacy, advertising, consumer, accessibility, and sector rules that apply to each property and audience;
• review framework suggestions and configure lawful purposes, legal bases, regions, choice design, retention, and withdrawal behavior before publication;
• provide accurate privacy, cookie, vendor, and transfer information to end users and keep it current;
• verify every service, vendor, cookie, tag, and script, including server-side processing that a browser scan cannot observe;
• give lawful instructions, obtain required rights and consents, and respond to data-subject or consumer requests;
• test its implementation and preserve any additional evidence its risk assessment or law requires.

Accounts are personal to authorized users and organization access is controlled by assigned roles. The customer is responsible for activity under its organization except to the extent caused by 1Consent.

• Provide accurate, current registration, organization, domain, and billing information.
• Protect credentials, use appropriate authentication controls, and do not share individual accounts.
• Authorize only personnel who need access and promptly remove users whose authority ends.
• Notify 1Consent promptly of suspected unauthorized access, compromised credentials, or misuse.

Free, Starter, Pro, add-ons, included usage, overage units, retention periods, and prices are those displayed in the order flow when the customer subscribes. Plan entitlements apply at organization level unless stated otherwise.

Where a paid plan includes metered overages, usage is measured as described in the pricing information. Reaching an included page-impression allowance does not block the CMP. Disputed usage must be raised within 30 days after the related invoice or statement.

Paid self-service transactions use Stripe Managed Payments. The Stripe or Link entity identified at checkout acts as merchant of record and contractual seller for that checkout transaction; 1Consent remains responsible for delivering and supporting the software service.

• Checkout, accepted payment methods, currency conversion, receipts, invoices, payment support, disputes, and order management are handled through Stripe/Link under the terms shown there.
• Stripe/Link calculates, collects, files, and remits covered indirect taxes. The customer remains responsible for taxes, withholding, and reporting not covered by the merchant-of-record transaction.
• Paid plans renew monthly until canceled. The recurring price, usage charges, and next billing date are shown before confirmation and in the billing interface.
• If payment fails or becomes overdue, 1Consent may limit paid features after any stated grace period while keeping the consent-serving path available where technically and legally appropriate.
• Plan or add-on changes can be prorated as shown before confirmation. Price changes apply no earlier than the next renewal after at least 30 days' notice unless the customer expressly accepts an earlier change.

The customer must keep its billing details current and review Stripe/Link receipts and order information.

The customer may cancel a paid subscription through the Link or billing portal. Unless checkout says otherwise, cancellation takes effect at the end of the current paid billing period and paid access continues until then. A downgrade can remove features, capacity, or retained data after reasonable export opportunity.

Fees are non-refundable and no credits are due for partial periods, unused capacity, or customer configuration errors, except where mandatory law requires a remedy, a duplicate or incorrect charge occurred, or 1Consent agrees to a remedy for material service nonconformity.

Customers may also request transaction support from Link. Stripe may issue a refund at its discretion within 60 days of a Managed Payments transaction. A refund does not create an ongoing entitlement to use paid features.

The customer and its users must not use the service to:

• violate law, third-party rights, or binding industry rules;
• probe, bypass, disrupt, overload, or compromise security, rate limits, tenant isolation, or service integrity;
• distribute malware, spam, deceptive interfaces, or content that is unlawful, infringing, or abusive;
• intentionally submit special-category, highly sensitive, payment-card, authentication-secret, or regulated health data unless expressly supported and agreed in writing;
• resell, sublicense, timeshare, or provide the service bureau-style unless an order expressly permits it;
• reverse engineer or extract non-public source code, models, catalogs, or underlying components except to the extent a mandatory law cannot be waived; or
• misrepresent that 1Consent, a scan, or a generated configuration is a legal certification or regulator approval.

As between the parties, the customer retains its rights in data, content, configuration, assets, and instructions it submits to the service ('Customer Data').

The customer grants 1Consent and its subprocessors a non-exclusive, worldwide license during the contract to host, copy, transmit, transform, display, and otherwise process Customer Data only as necessary to provide, secure, maintain, and support the service and comply with law.

1Consent may create and use statistics that have been irreversibly anonymized so that neither the customer nor an individual is reasonably identifiable. Pseudonymous data is not treated as anonymous under this clause.

If the customer voluntarily provides feedback, it grants 1Consent a perpetual, irrevocable, royalty-free right to use it without identifying the customer or disclosing Customer Data.

1Consent and its licensors retain all rights in the service, software, APIs, designs, documentation, service catalog, models, templates, and improvements. No rights are granted except those expressly stated.

During the contract, 1Consent grants the customer a limited, non-exclusive, non-transferable, revocable right to access and use the service internally for its business and deploy authorized CMP assets on its own or managed properties, subject to the plan and these Terms.

Each party will protect the other's non-public business, technical, security, and commercial information with at least reasonable care, use it only to perform or exercise rights under the contract, and disclose it only to personnel, providers, or advisers who need it and are bound to protect it.

Confidential information excludes information lawfully public without breach, already known without duty, independently developed, or lawfully received from another source. A legally compelled recipient may disclose the minimum required and, where permitted, give prior notice.

1Consent aims to provide a reliable service but does not promise uninterrupted or error-free availability unless a signed order includes a service level agreement. Planned maintenance, emergency work, internet dependencies, customer systems, and third-party providers can affect service.

1Consent may update the service for security, law, interoperability, performance, or product development. It will not materially reduce the core paid functionality during a prepaid period without a reasonable substitute, migration path, or pro-rata remedy, except where required for security or law.

Preview, beta, evaluation, and experimental features are provided for testing, may change or end, and should not be used for critical production processing unless expressly approved.

The customer may stop using Free at any time and may cancel paid service as described in Section 8. Termination does not erase amounts already due.

1Consent may suspend affected access where reasonably necessary for a security threat, unlawful use, material breach, overdue payment, provider restriction, or risk to the service or others. Where practicable, it will give notice and an opportunity to cure and limit the suspension to what is necessary.

Either party may terminate for a material breach not cured within 30 days after written notice, or immediately if cure is impossible, insolvency law permits, or continued performance would be unlawful. 1Consent may end Free service on 30 days' notice.

On termination, licenses and access end except during an agreed transition or retrieval period. Accrued payment, confidentiality, IP, liability, processor deletion, switching, and provisions intended to survive remain effective.

1. The customer may request a switch to another provider, port to on-premises infrastructure, or erase exportable data by emailing the contact below and identifying the destination or authorized migration provider.
2. The switching process starts without undue delay after a notice period chosen by the customer, which will never exceed two months. A monthly self-service customer may choose the end of its current billing period.
3. The mandatory transition period is no more than 30 calendar days. 1Consent will provide reasonable assistance, maintain continuity and security, and disclose known continuity risks within its control.
4. If 30 days is technically infeasible, 1Consent will explain why within 14 working days and specify an alternative period not exceeding seven months. The customer may extend the transition once by a period it considers more appropriate.
5. Exportable data remains retrievable for at least 30 calendar days after the transition period, unless the parties agree to a later date.
6. After successful switching and expiry of the retrieval or later agreed period, 1Consent will fully erase exportable data and digital assets generated by or directly relating to the customer, subject to mandatory law, processor instructions, protected backups, and data that has been irreversibly anonymized.

Each party warrants that it has authority to enter the contract. 1Consent warrants that it will provide paid service with reasonable care and skill and substantially in accordance with the current service description.

Subject to that express warranty, the service, scans, catalog entries, AI output, and Free, evaluation, or beta features are provided as available. 1Consent does not warrant that every tracker or processing activity will be detected, that every configuration is lawful, that output is complete or error-free, or that the service meets a customer's unstated requirements.

Mandatory statutory warranties and remedies remain unaffected.

1. Liability is unlimited for intent and gross negligence; injury to life, body, or health; fraudulent concealment; an expressly assumed guarantee; liability under the German Product Liability Act; and any other liability that cannot lawfully be limited.
2. For slight negligence, 1Consent is liable only for breach of an essential contractual duty whose performance enables the contract and on which the customer normally relies. Liability is limited to the foreseeable loss typical for this type of contract.
3. Otherwise, liability for slight negligence is excluded. To the extent permitted by law, neither party is liable for indirect or consequential loss, loss of profit, or loss of anticipated savings that was not foreseeable as typical loss.
4. For customer-caused or avoidable data loss, recoverable loss is limited to the reasonable restoration effort that would have been required with appropriate customer exports and backups. This does not limit 1Consent's processor or security duties.
5. These limitations also apply to representatives, employees, and agents and to contractual, tort, and other claims. Statutory burden-of-proof rules are not changed.

1Consent may change these Terms for future contracts at any time. For an existing continuing contract, material changes require at least 30 days' notice and a reasonable explanation. A change may address law, security, provider requirements, abuse prevention, or service development and must not unreasonably disturb the contractual balance.

A change that is legally required or necessary to address an urgent security threat may take effect sooner; notice will be given as soon as reasonably possible.

If a notified material change substantially disadvantages the customer, the customer may reject it and terminate the affected service before it takes effect. Continued use after the effective date constitutes acceptance where legally permitted.

German law applies, excluding conflict-of-law rules that would select another law.

If the customer is a merchant, legal entity under public law, public-law special fund, or has no general place of jurisdiction in Germany, the exclusive place of jurisdiction is Munich, Germany. 1Consent may also sue at the customer's general place of jurisdiction.

The UN Convention on Contracts for the International Sale of Goods does not apply.

• The customer may not assign the contract without 1Consent's prior consent, not to be unreasonably withheld for a bona fide corporate reorganization. 1Consent may assign to an affiliate or successor to the relevant business if customer protection is not materially reduced.
• Neither party is liable for delay caused by events beyond reasonable control, except payment duties. The affected party will mitigate and communicate material impact.
• Contract notices may be sent to the account email, through the dashboard, or to the legal contact below. The customer must keep its contact details current.
• A failure to enforce a right is not a waiver.
• If a provision is invalid, statutory law replaces it; the remainder stays effective. The parties will use a valid term that most closely reflects the lawful commercial purpose.
• The documents identified in Section 2 are the entire agreement for the service and replace prior statements on the same subject. Individual negotiated terms remain effective.

Send contract, cancellation, switching, subprocessor-objection, or legal notices to: