Terms of service (v2)

1. Acceptance and Contracting Party

These Terms apply to the Cady company workspace and related services supplied by Part Central Limited, trading as Cady (Company 15296116, England and Wales; "Cady", "we", "us"). Our registered office is Apartment 22, 23 Albert Embankment, London, England, SE1 7GG. We are the supplier in every region.

The customer ("you") is the business identified when these Terms are accepted. If you act for a company or other legal entity, you confirm that you have authority to bind it. A sole trader contracts in their own name for business purposes. A proposed company cannot be named as the customer before it exists; any later transfer to an incorporated company requires our agreement.

The agreement begins when you expressly accept these Terms through our sign-up process or sign an order incorporating them. The applicable Data Processing Agreement forms part of the agreement. Our Privacy Policy explains our processing of personal data; accepting these Terms is not consent to optional marketing. Dataroom guests accept the separate obligations in Section 19 when accessing a share.

2. Description of Services

Cady provides a company workspace for founders, owners, and authorised company operators, including solo founders. You can use Cady through our web app and through your own AI agent (for example ChatGPT or Claude), which you connect to Cady using the Model Context Protocol (MCP). Cady does not provide hosted AI model inference through these workspace features; your chosen agent performs its reasoning, under your own agreement with its provider. Available capabilities depend on your company’s plan, configuration, and the roles and permissions of its members. Our Services include:

• Company context and working records, with company roles (owner, admin, member and viewer) and permissions
• Projects, for planning and tracking company work
• A company CRM for people and organisations your company works with
• Files, for storing and organising company documents
• On the Pro plan, Datarooms, for sharing selected files with outside parties who verify their email address with a one-time code, as described in your order or plan
• Approval and receipt records for supported consequential actions performed through Cady, with passkey review where the action requires it

We will provide the Services with reasonable care and skill in accordance with the features expressly agreed for your plan or order. We do not promise particular business outcomes or an uptime service level unless separately agreed. Early-access limitations are described in Section 5.3.

3. Eligibility

Our Services are intended for:

• Company founders, owners, and authorised operators acting for business purposes
• Solo founders and company employees or representatives with the required authority
• Individuals aged 18 or older who are authorised to use the workspace. Only the representative accepting the customer agreement must have authority to bind the customer; an invited member or viewer does not make that representation merely by joining

By using our Services, you represent that you meet these eligibility requirements.

4. Account Registration

To use our Services, you must:

• Create an account with accurate and complete information. You sign in with a one-time code sent to your email address or with a passkey; Cady does not use passwords
• Maintain the security of your email account, passkeys, and devices, and of the AI agents you connect to Cady
• Promptly notify us of any unauthorised access
• Manage the access you authorise and take reasonable steps to protect your account. This does not transfer responsibility for a failure of Cady’s own security or authorisation controls to you

5. Plans, Payments and Early Access

5.1 Plans and orders

Free includes one member and the core workspace, Projects, CRM and Files. Pro adds Datarooms and is priced per member. The available features, billable seats, currency, billing interval, usage allowances and price are shown before you order. Published prices exclude applicable transaction taxes unless expressly stated otherwise; taxes we must collect are shown before payment and on the order or invoice. You remain responsible for taxes legally imposed on your purchase that we are not required to collect, excluding taxes on our income. Your agent provider’s charges are separate.

We may apply proportionate technical limits to protect security and availability. We will give advance notice of material reductions to ordinary plan allowances and an opportunity to export or cancel. Urgent action to stop abuse or a security incident may take effect immediately. These protections do not authorise undisclosed metered charges.

5.2 Paid subscriptions and refunds

A paid subscription starts only when an authorised customer representative affirmatively orders it. Stripe Checkout and the Customer Portal handle payment details; Cady does not receive or store full card details. Invoices identify Part Central Limited, trading as Cady. Stripe Tax supports tax calculation; we remain responsible for our applicable seller obligations.

Before a paid order is submitted, we display its currency, price, tax, interval, recurring nature, billable-seat rule, proration and cancellation method. Subscriptions renew for the interval selected at checkout unless cancelled before renewal. An authorised customer representative may cancel through the account portal or support; we confirm receipt and the effective date. Cancellation normally takes effect at the end of the paid period. A billable seat is a purchased seat that an active member or a pending invitation can occupy. Seats added during a paid period are charged pro rata for the remainder of that period, shown before you confirm the charge. Seat reductions take effect at the next renewal, with no credit for the current period; the seats remain usable until then. Price increases apply at renewal with at least 30 days’ advance notice; you may cancel before they take effect.

Except where required by law, expressly agreed, or provided below, fees for a billing period already started are not refundable merely because you stop using the Services. We will correct erroneous or duplicate charges. If we discontinue a paid service during a prepaid term, or you terminate for our material breach after giving us written notice and 30 days to remedy it, we will refund the unused prepaid portion of the affected service. Refunds are limited to unused prepaid plan time in the events this Agreement specifies; we do not refund periods already used or give credit for seat reductions. Contact legal@cadyworks.com with a billing dispute. These terms do not restrict mandatory cancellation, switching or refund rights.

For an ended or unpaid subscription, Pro-only products become read-only after a 14-day grace period unless the subscription or another valid entitlement is restored. Downgrade or non-payment alone does not delete workspace data. Export and deletion requests remain available, subject to identity and security checks. Suspension for abuse or a security incident is handled separately under Section 13.

5.3 Early access, pilots and complimentary Pro

We may designate a feature or workspace as early access or grant Pro at no charge. The invitation or grant identifies its scope, any seat limit and any expiry. Early-access features may change and may have interruptions or incomplete functionality. We do not promise a launch date, continued availability of a particular early-access feature, or an uptime service level unless expressly agreed.

These Terms, the DPA, confidentiality duties and applicable data-protection obligations continue to apply to early access and free or complimentary use. Early access is not permission to use weaker access controls. Keep an independent copy of important source documents and use only data appropriate to the stated feature limitations; this does not reduce our own obligations.

Free or complimentary use does not convert automatically to a charge. Paid use requires a separate affirmative order. Unless a fixed expiry was clearly disclosed when the grant was accepted, we will give at least 14 days’ notice before ending free early access or complimentary Pro, and at least 30 days’ notice before ending paid early access or permanently discontinuing the whole workspace service. Urgent security, unlawful use or a legal requirement may require earlier action, with the reason and as much notice as practicable. Non-material experimental features may change without that notice; withdrawing a material part of an agreed paid service preserves the termination and unused-prepayment refund rights in Section 5.2. Expiry never creates a charge. After access ends, we preserve a secure export route for at least 30 days and any longer applicable switching or retrieval period. A fixed expiry does not shorten those rights.

6. User Conduct and Responsibilities

You must use the Services lawfully. In particular, you must not:

• Use the Services for any unlawful purpose
• Send unlawful, deceptive, or unsolicited communications contrary to applicable privacy, marketing, or platform rules
• Upload special-category personal data, criminal-offence data, regulated health records, full payment card details, government-issued personal identifiers or access secrets unless we have expressly agreed an appropriate service and safeguards in writing. Use designated billing and authentication flows for payment and account access. An unauthorised upload does not waive our duties concerning data actually received; notify us so we can securely restrict and remove it as appropriate.
• Use the Services in a transaction prohibited by laws applicable to you or Cady, including applicable sanctions or export restrictions
• Attempt to gain unauthorised access to our systems
• Interfere with or disrupt the Services
• Transmit viruses, malware, or harmful code
• Impersonate others or provide false information
• Bypass access controls, extract another customer’s data, or use automation outside your authorised access. Supported agents, authorised exports and lawful switching are permitted
• Infringe intellectual property or confidentiality rights. Nothing in these Terms restricts competition, interoperability or switching that applicable law protects

7. Third-Party Integrations

Our Services work with third-party services including:

• AI agents you choose and connect to Cady over MCP, such as ChatGPT or Claude
• Stripe, for payments and billing

Your agent may have its own connections to email, calendar, chat or other services. Those connections are separate from the Cady connection. By connecting an AI agent, you:

• Authorise that agent to read and change Cady data within the scopes you approve and your role permits, as described in our Privacy Policy
• Arrange and comply with your own agreement with that provider; connecting it does not itself accept its terms on your behalf
• Acknowledge we are not responsible for third-party service availability

8. Intellectual Property

8.1 Our Intellectual Property

The intellectual property in the Services belongs to us or our licensors and is protected by copyright, trademark, and other intellectual property laws. We will maintain the rights needed to supply the Services and permit your agreed use. During the service term, you may access and use the Services for your business in accordance with your plan and this Agreement.

8.2 Your Content

You retain ownership of data you submit to the Services. By submitting content, you grant us a non-exclusive licence to host, copy, transmit and otherwise process it only as needed to provide, secure and support the Services on your instructions. You must have the rights and lawful authority needed for those instructions. This licence ends when the relevant processing ends, subject to the agreed exit and lawful retention provisions. We do not acquire ownership of your content or a right to use it to train general-purpose AI models.

Each company’s main server is in the US or the EU. It is set when the company is created and shown in the company’s settings. We and our sub-processors may also process data in other countries, as described in the Privacy Policy and the DPA. Any further commitment about where data is stored or processed applies only if it is expressly agreed in an order.

8.3 Feedback

You may choose to give feedback. We may use it without payment to improve the Services, but this permission does not transfer ownership of your content or permit disclosure of confidential information or use of personal data for an unrelated purpose.

8.4 Your Name and Logo

We will display your organisation’s name or logo as a customer reference only with your separate permission. Any approved use will follow the scope of that permission and will not imply a broader endorsement.

You may withdraw this permission at any time by emailing data@cadyworks.com, and we will remove your name and logo from our website within 10 business days and from new marketing materials thereafter. This clause grants us no other rights in your trademarks, and we will not present you as endorsing Cady beyond the fact that you are a customer.

8.5 Confidentiality

Each party will protect the other’s confidential information with reasonable care and use it only to perform or exercise rights under this agreement. Customer workspace content is confidential whether or not it contains personal data. Disclosure is limited to authorised recipients and personnel or service providers who need it for that purpose and are bound by appropriate confidentiality duties.

This duty does not apply to information the recipient can demonstrate was already lawfully known, independently developed, lawfully received without restriction, or public without breach. A legally required disclosure must be limited to what is required, with advance notice where lawful. These duties survive termination for as long as the information remains confidential. Customer-directed sharing is subject to the chosen recipients and any additional share terms.

9. AI-Generated Content

Your chosen agent may use artificial intelligence to prepare research, analysis, plans, and drafts using Cady data. Cady uses Cloudflare Workers AI and Vectorize for some AI and search features. Cady maintains context, permissions, approvals, and working records; your chosen agent performs its own reasoning and execution under its separate terms. You acknowledge that:

• AI outputs may contain errors or inaccuracies
• AI outputs should not be relied upon as professional advice
• You are responsible for verifying AI-generated information before acting upon it
• No particular accuracy or commercial outcome is promised for AI outputs, subject to our express commitments and applicable law
• These are general company-workspace tools. Do not rely on an agent output as the sole basis for a decision about a person’s employment, credit, housing, healthcare or legal rights. A dedicated regulated or similarly consequential workflow requires our prior written agreement on supported use, human review and safeguards.

10. Disclaimers

Except for our express commitments in these Terms, the applicable DPA, and any separately agreed subscription terms, the Services are provided "as is" and "as available", to the extent permitted by applicable law.

TO THE EXTENT PERMITTED BY APPLICABLE LAW, AND SUBJECT TO THOSE EXPRESS COMMITMENTS AND NON-EXCLUDABLE RIGHTS, WE DISCLAIM IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.

Subject to those express commitments and any rights that cannot lawfully be excluded, we do not warrant:

• That the Services will meet a particular purpose not expressly agreed with us
• That research or AI-generated information will be accurate, reliable, or complete
• That operation will be uninterrupted or error-free

No system is completely secure. This does not reduce our agreed security obligations, our obligations concerning Sub-processors we engage, or any obligation imposed by applicable law.

PROFESSIONAL ADVICE: Cady does not provide investment, legal, tax, or financial advice. The Services support your own decisions. Consult qualified professionals where required. We do not guarantee product-market fit, customer responses, revenue, funding, or meeting bookings.

11. Limitation of Liability

Nothing in the Agreement excludes or limits liability for death or personal injury caused by negligence, fraud or fraudulent misrepresentation, deliberate wrongdoing directed or knowingly approved by a party’s directors or equivalent senior management, or any liability that cannot lawfully be excluded or limited. It does not restrict the rights of individuals, regulators or other third parties under applicable law.

Subject to those exceptions, neither party is liable to the other for indirect or consequential loss or punitive damages, or for loss of profits, revenue, anticipated savings, business opportunity, funding or goodwill, whether direct or indirect. Reasonable direct costs of investigating and containing a breach, notifying affected people where legally required, or restoring customer data are not excluded merely because they concern data or security; they remain subject to the applicable cap.

For each party, aggregate liability for all ordinary claims arising out of or in connection with the Agreement is the greater of USD 500 and the fees paid or payable by the customer company for the Services in the 12 months before the first event giving rise to any claim under the Agreement. For claims arising from a breach of confidentiality, security or data-protection obligations, the aggregate limit is instead the greater of USD 2,500 and twice those 12 months of fees. For this calculation, fees exclude taxes, amounts refunded and amounts attributable solely to future service periods that were not yet due before that event. No fee is imputed to Free or complimentary use; the monetary floors apply where the fee calculation is lower. These limits apply across contract, negligence and other legal bases, including the DPA, and to Free, paid, early-access and complimentary use.

The limits apply across the entire Agreement for the customer company, including its seats, users, workspaces and orders, rather than separately for each claim, user, record or event. They do not reset annually. The enhanced limit is the maximum combined aggregate liability for all capped claims, not an additional amount on top of the ordinary limit; ordinary claims remain subject to their lower sublimit. Related events do not create fresh caps. These limits do not reduce properly accrued subscription fees or our obligation to return an unused prepaid amount expressly refundable under these Terms. Monetary floors are in US dollars or their equivalent in the payment currency using the Bank of England published exchange rates on the first event date, or the nearest preceding published business day.

We are not responsible for the independent acts or failures of services you contract with directly. This does not exclude responsibility attributable to our own breach, negligence, configuration or authorisation failures, or reduce our agreed obligations concerning Sub-processors we engage. An indemnity or obligation to fund another party’s defence is not included unless expressly agreed in a separate written variation.

12. Third Party Claims

Neither party gives the other a contractual indemnity or an obligation to defend or fund the defence of a third-party claim under these standard Terms. Each party remains responsible for its own breaches and any liability imposed by applicable law, subject to lawful limitations in Section 11. This Section does not prevent recovery of a loss otherwise recoverable for a proven breach or override a statutory contribution right.

If a third-party intellectual-property claim affects the Services, we may obtain continued rights or modify or replace the affected function without materially reducing its agreed purpose. If those options are not reasonably practicable, we may end the affected service and refund its unused prepaid fees, while preserving secure export and applicable switching rights. This does not promise payment of the customer’s defence costs, settlements or an award against it, and does not exclude remedies for our own breach that otherwise apply under this Agreement or mandatory law.

Each party should notify the other promptly of a claim materially affecting the Services or customer content and provide reasonably available relevant information, subject to confidentiality, privilege and law. Neither party may admit liability or agree obligations on the other’s behalf without its written consent. There is no double recovery of the same loss.

13. Cancellation, Suspension, Exit and Deletion

13.1 Cancellation and suspension

You may cancel a subscription or request account closure by the supported account controls or by contacting us. Cancelling a subscription, closing an individual account, deleting a company workspace and exercising a person’s data-protection rights are separate requests. Deleting a departing member’s account does not automatically delete company records the customer is entitled or required to retain.

We may suspend access where reasonably necessary to address unlawful use, a material breach or a security threat. Where safe and lawful, we will explain the reason, give an opportunity to remedy it and preserve a secure route to export. Non-payment follows Section 5.2. A company owner must arrange any required ownership transfer before closing the last owner’s account.

13.2 Export and switching

An authorised owner or admin may request an export of customer-provided content and exportable records and metadata in commonly used, machine-readable formats, together with stored files. We will explain the contents, any lawful exclusions, available interfaces and how to retrieve the export. Credentials and executable authorisation secrets are excluded; excluding them must not remove the customer’s underlying business records.

For a switch to another provider or to your own infrastructure, contact team@cadyworks.com. We will assist reasonably, maintain appropriate security and continuity during the transition, and make exportable data available for at least 30 days after the agreed transition period. Expiry of an individual secure download link does not end that retrieval period; a replacement can be requested after authentication. We do not charge a separate switching or data-egress fee or an additional early-termination penalty. Ordinary subscription fees remain payable only until the affected service contract ends, subject to the mandatory termination rules below. Where an in-scope Data Act switch, or an in-scope election of deletion without switching, ends a prepaid term early, we refund its unused prepaid portion from that termination date. This is our agreed refund policy; it does not depend on treating every such refund as a statutory entitlement. Other voluntary cancellation normally takes effect at the end of the current paid period under Section 5.2. Our export and switching register describes the exportable data and digital assets, formats, methods, restrictions and security exclusions. Until it is published on cadyworks.com, the register is available on request from data@cadyworks.com.

Where Chapter VI of Regulation (EU) 2023/2854 applies, you may switch to another provider or your own ICT infrastructure, or elect deletion. The notice period to initiate switching will not exceed two months; we may agree an earlier start, including immediately, and will not require the full period where it is unnecessary. We will provide reasonable assistance, maintain appropriate continuity and security, and cooperate in good faith with you and your destination provider. After that notice period we will complete the transition without undue delay and ordinarily within 30 calendar days. If technically unfeasible, we will notify you within 14 working days of your request, explain the technical justification and identify an alternative transition period no longer than seven months. You may exercise your separate right to extend the transition once for a period you consider appropriate. We will tell you when switching completes or, where you elect deletion without switching, when the notice period ends. The Agreement for the affected service ends on successful completion of switching or, for deletion without switching, at the end of the applicable notice period, subject to surviving obligations. Mandatory law prevails.

13.3 Deletion and retention

A company-deletion request from an authorised owner suspends ordinary workspace access and starts a 30-day cancellation period. We will confirm the export arrangements before suspension; secure operator-assisted retrieval remains available during the applicable exit period. At your instruction to proceed, or after the cancellation and applicable retrieval periods end, we will delete workspace content in accordance with the DPA. The cancellation window does not shorten a longer mandatory retrieval period or delay an earlier valid erasure instruction. An individual rights request is assessed under applicable law and is not automatically delayed by the workspace cancellation period.

We may retain only the limited records needed for applicable legal duties or justified legal claims, subject to the Privacy Policy. A payment default alone does not trigger deletion. Confidentiality, accrued payment obligations, applicable liability provisions and the DPA’s surviving duties continue after termination.

14. Force Majeure

Neither party shall be liable for any failure or delay in performing its obligations under these Terms (other than payment obligations) where such failure or delay results from a Force Majeure Event, provided that the affected party promptly notifies the other party and uses commercially reasonable efforts to mitigate the impact and resume performance.

"Force Majeure Event" means any event beyond a party's reasonable control, including:

• Natural disasters, epidemics, pandemics, or government-mandated public health measures
• War, armed conflict, terrorism, insurrection, or civil disturbance
• Government sanctions, embargoes, regulatory changes, or court orders
• Widespread power grid, telecommunications, or internet backbone failures
• Material outages of cloud infrastructure providers (including Cloudflare) or critical third-party services
• A qualifying external disruption to a supported agent connection, only to the extent it prevents the affected part of our Services; unrelated web-app functions and our surviving data-protection duties remain governed by this agreement
• DDoS attacks, zero-day exploits, or nation-state cyber operations beyond what can reasonably be prevented by the platform's security controls
• Strikes, lockouts, or labour disputes (excluding the affected party's own employees)

If a Force Majeure Event prevents a material part of the Services for more than 30 consecutive days, either party may terminate the affected service by written notice, without liability other than the obligation to refund any prepaid fees for services not yet delivered.

A Force Majeure Event does not excuse payment obligations that were due before the event commenced. Routine software bugs, planned maintenance, general business difficulties, or financial hardship do not constitute Force Majeure Events. An upstream outage or cyberattack qualifies only to the extent its effects were beyond reasonable control despite appropriate preventive and recovery measures. This Section does not suspend confidentiality, security, breach-notification, lawful return or deletion duties to the extent they can still be performed, or excuse our earlier failure to meet them.

15. Governing Law and Disputes

The Agreement is governed by the laws of England and Wales. The courts of England and Wales have exclusive jurisdiction over disputes between the parties, except where mandatory law or an applicable international-transfer clause requires otherwise. Nothing prevents a person exercising statutory rights before a competent regulator or court.

Before starting ordinary proceedings, a party should notify the other at its designated legal contact and allow 30 days for good-faith discussion. Mediation is voluntary unless separately agreed. This process does not prevent urgent protective relief, compliance with a statutory deadline, or action needed to preserve a claim.

16. Changes to the Agreement

We will give at least 30 days’ advance notice of a material change to these Terms. For paid subscriptions, a change that materially reduces your contractual rights applies at the next renewal and only with any acceptance required by law, unless the change is legally required or you expressly agree otherwise. A legally required or urgent security change may take effect sooner, with the reason and as much notice as practicable; it will be no broader than necessary.

You may cancel before an adverse change takes effect and retain the applicable export and retrieval rights. If a material adverse change must take effect during a prepaid term and you notify us before it takes effect that you do not accept it, you may end the affected service and receive a refund for its unused prepaid portion. We do not treat an OAuth grant, a passkey approval for an action, or silence as acceptance of a materially new agreement. We retain accessible historical versions and state each change’s effective date.

17. General Provisions

The Agreement consists of an accepted order, these Terms and the DPA. An early-access schedule forms part of its order. Applicable mandatory transfer clauses prevail over conflicting terms; the DPA then prevails for personal-data processing, an expressly agreed order variation prevails for its stated commercial subject, and these Terms apply otherwise. A purchase order or link to customer terms does not amend the Agreement unless both parties expressly agree. The Privacy Policy is a notice, not consent to unrelated processing.

If a provision is unenforceable, the rest remains effective. Failure or delay in exercising a right is not a waiver. Except for the sharing customer’s express rights under Section 19 and mandatory rights, no third party may enforce this Agreement under the Contracts (Rights of Third Parties) Act 1999.

Neither party may assign the Agreement without the other’s consent, not unreasonably withheld, except to a successor in a genuine merger, reorganisation or sale of substantially all the relevant business, provided the successor assumes the obligations and the transfer does not materially reduce the other party’s protections. We will notify you of a supplier transfer. Transferring a pre-incorporation account to a new company requires a written novation; it does not happen automatically.

Contract notices go to legal@cadyworks.com for us and the designated account contact for you. We may also display service notices in the workspace. A notice that changes contractual rights must be sent in a durable, retrievable form. A failed email delivery is investigated; a dashboard announcement alone does not establish receipt. Formal service of court proceedings follows applicable procedural law.

18. Contact Us

For questions about these Terms:

• Email: legal@cadyworks.com
• Data Protection: data@cadyworks.com

19. Dataroom Guest Terms

This Section is also published on its own as the Dataroom Guest Terms.

These guest terms apply when you expressly accept them to access a dataroom invitation. Your access agreement is with Part Central Limited, trading as Cady. The business identified in the invitation is the sharing customer. You do not become a subscriber or owe subscription fees merely by accepting an invitation.

You may use the shared material only for the purpose identified by the sharing customer. Keep it confidential, protect your access code and session, and do not disclose it or submit it to an AI service or other third party without the sharing customer’s permission. Disclosure to your professional advisers is permitted only where the share terms allow it and they are bound by equivalent confidentiality duties. The confidentiality exceptions in Section 8.5 apply. These confidentiality and purpose restrictions survive expiry or revocation for as long as the material remains confidential. You accept them in your own capacity; your employer is bound only if it separately agrees through an authorised representative.

You must not bypass access controls or obtain material outside the invitation. Access may expire or be revoked. On request, stop using and delete copies you hold, except copies you must retain by law or for the establishment, exercise or defence of legal claims; those copies remain confidential. Revocation does not technically erase downloaded copies.

The sharing customer supplies the material and decides who may access it. Cady provides access controls and agreement records; it does not guarantee a recipient’s compliance, investigate that recipient’s identity or employer authority, or undertake to enforce the sharing customer’s confidentiality rights or fund its legal action. This does not reduce Cady’s responsibility for its own agreed controls, security or other breaches. Cady does not verify the material’s accuracy or endorse any proposed transaction. Any additional terms shown by that customer form a separate agreement only when you expressly accept them. A conflicting customer term cannot reduce Cady’s own duties under its agreement or applicable law. You receive no intellectual property rights beyond the permitted use.

These guest terms, Sections 6, 10, 11 and 15, and the confidentiality provisions govern guest access. The sharing customer may enforce the confidentiality and use restrictions in this Section under the Contracts (Rights of Third Parties) Act 1999. Cady and the guest may not rescind or vary those enforceable restrictions without the sharing customer’s consent. Its consent is not required to vary Cady’s unrelated platform terms. The platform liability limits in Section 11 govern claims between Cady and the guest, using the monetary floors where no subscription fees are payable by the guest; they do not limit the sharing customer’s claim against the guest for breach of those confidentiality or use restrictions. No contractual monetary cap is supplied for that direct claim; liability and available remedies remain subject to applicable law. An additional NDA does not release the standard obligations unless the sharing customer expressly agrees. Cady may enforce its own platform rights separately. No party or beneficiary may recover more than once for the same loss. No other third party receives enforcement rights under these Terms. Our Privacy Policy explains guest verification and access records.