Terms of Use, Disclaimer & Privacy Statement

1. Who we are

NetVallum.io is a trade name (handelsnaam) of Balans IT B.V., a private limited company incorporated in the Netherlands, registered with the Dutch Chamber of Commerce (Kamer van Koophandel) under number 32078127.

• Registered office: Utrecht, the Netherlands
• Contact: legal@netvallum.io
• Data protection: privacy@netvallum.io

In this document "NetVallum", "we", "us" and "our" refer to Balans IT B.V. acting under the NetVallum.io trade name.

2. Scope and acceptance

These terms apply to the NetVallum.io platform, portal, agents/software and the netvallum.io website (together, the "Service"). By requesting, accessing or using the Service you agree to these terms. Where you accept on behalf of an organisation, you confirm you are authorised to bind that organisation.

The Service is provided on a B2B basis to distributors, partners (resellers) and business customers. It is not offered to consumers.

3. Availability — European market only

The Service is intended and made available exclusively for the European market. We do not offer or target the Service outside Europe, and it may not be available or lawful to use elsewhere.

4. Disclaimer and limitation of liability

• The Service and all related software are provided "as is" and "as available", and use is entirely at your own risk. We take all reasonable measures to keep the Service secure and reliable, but to the maximum extent permitted by law we give no warranties of any kind (including merchantability, fitness for a particular purpose, or uninterrupted or error-free operation).
• You remain fully responsible for the configuration, security and operation of the firewalls and networks you manage through the Service, and for maintaining your own backups and continuity measures.
• To the maximum extent permitted by law, NetVallum's liability is excluded in full. Without limitation, NetVallum is not liable for any direct, indirect, incidental or consequential damage, loss of data, loss of profit or business interruption arising from or relating to the Service or its use.
• The only exception is liability that cannot be excluded under mandatory law — in particular liability for intent (opzet) or deliberate recklessness (bewuste roekeloosheid). Such liability remains governed by the law and is not extended by these terms.

5. No affiliation with pfSense® / Netgate®

NetVallum.io manages and monitors firewalls that run pfSense® software. NetVallum is not affiliated with, endorsed by, or sponsored by Netgate® or the pfSense® project. pfSense® and Netgate® are trademarks of Rubicon Communications, LLC. NetVallum is not responsible for the software produced by those parties, nor for changes they make to it. All product names and trademarks are the property of their respective owners.

6. Privacy statement (GDPR / AVG)

6.1 Controller

For personal data processed for our own administration and for operating the platform, the controller is Balans IT B.V. (NetVallum.io). Where you are a distributor or partner reselling the Service, you are the controller towards your own customers and NetVallum acts as processor / sub-processor on your behalf (see §6.7).

6.2 What we process — and what we do not

We process only the data needed for our administration and for managing the devices managed via NetVallum.io:

• Account & administrative data: organisation name, Chamber of Commerce / VAT number, contact person, e-mail, address, billing details, tier/pricing, and the audit trail of actions in the portal.
• Device-management data: the configuration and technical telemetry of the managed firewalls required to monitor and manage them (status, health, interfaces, versions and similar operational data).
• Acceptance records: when you accept these terms we record the accepting user, their IP address and the timestamp (see §9).

NetVallum has no direct access to, or insight into, the end-customer traffic or content data flowing through the managed firewalls. We manage the devices; we do not inspect the network traffic or the personal data of your end users on those networks.

6.3 Legal bases

• Performance of a contract (Art. 6(1)(b) GDPR): providing the platform, managing your devices and account.
• Legal obligation (Art. 6(1)(c)): administrative, accounting and tax retention.
• Legitimate interests (Art. 6(1)(f)): security, fraud prevention, product operation and improvement, and keeping records of acceptance.

6.4 Security and location of data

• All personal data is stored encrypted at rest on servers located within Europe.
• Firewall API credentials are additionally encrypted with per-record encryption; responses to clients never expose secrets.
• We apply appropriate technical and organisational measures to protect the data.

6.5 Sub-processors

We use a limited number of sub-processors to run the Service, all within the EU/EEA: hosting / infrastructure in the Netherlands; self-hosted identity / authentication on our own infrastructure; payments via Mollie B.V. (Netherlands); and an EU-based transactional e-mail provider. An up-to-date list is available on request. We enter into data-processing agreements with each sub-processor. A separate Data Processing Agreement (verwerkersovereenkomst) applies to the reseller/processor relationship and is provided as part of reseller onboarding.

6.6 Retention

• Operational / device-management data is deleted promptly when you remove the firewalls from the platform and terminate the Service. After deletion, residual copies may only remain in our encrypted backups until those backups are overwritten in the normal rotation.
• Administrative / financial data is kept for the statutory retention period (approximately 7 years) as required by Dutch tax and accounting law.
• Acceptance records are kept for the duration of the relationship plus the applicable limitation period.

6.7 Distributors, partners and white-label

A distributor or partner reselling the Service is the controller towards its own customers; NetVallum acts as processor for that distributor/partner and, in the chain below them, as sub-processor. Regardless of any white-label branding, the identity of Balans IT B.V. as the party operating the platform remains disclosed, as required for transparency under the GDPR.

6.8 Your rights

You have the right to access, rectify, erase, restrict and port your personal data, and to object to certain processing. You may also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). To exercise your rights, contact privacy@netvallum.io.

7. Cookies

The netvallum.io website uses only strictly necessary cookies/technologies required for its functioning. We do not use tracking or analytics cookies and do not profile visitors. Because only strictly necessary cookies are used, no consent wall is required.

8. Intellectual property

The platform, portal, agents, website and their content are owned by Balans IT B.V. or its licensors. You receive a limited, non-exclusive, non-transferable right to use the Service for its intended purpose during your subscription. Open-source components are used under their respective licences.

9. Recording acceptance

When you accept these terms, we record the accepting user, their IP address and the date/time of acceptance, and we e-mail a PDF confirmation to the accepting user's address. These records are kept as evidence of acceptance and are visible, within their own scope, to the party above you in the hierarchy.

10. Changes

We may update these terms; the current version and effective date are always shown on netvallum.io. Material changes are communicated and, where required, re-accepted.

11. Governing law and jurisdiction

These terms and any dispute arising from or relating to the Service are governed by the laws of the Netherlands. Disputes are submitted to the competent court of Rechtbank Midden-Nederland (location Utrecht), without prejudice to any mandatory venue rules that may apply.