Terms of Service

1. PREAMBLE
These Terms of Service ("Terms") govern the access to and use of the platform Yalt ("the Platform"), a product of MAGICAL INSIGHTS, a company registered under Portuguese law with NIPC 517 845 164, headquartered at Rua 1º De Maio 81 Loja E Piso 1, 7300-205 Portalegre, Portugal ("Magical Insights," "we," or "us").
By using our services, you ("the Client") agree to be bound by these Terms.

2. DEFINITIONS
"Platform": the web and mobile interface provided by Magical Insights to operate loyalty programs and marketing campaigns."Client": the business entity subscribing to our services."Marketplace": the Yalt app and website where client loyalty programs and campaigns may be displayed."API": any application programming interface made available by Magical Insights to access or integrate with the Platform."White-label App": a customized version of the Platform provided under the Client’s brand identity.

3. ACCESS AND USE
Clients must be legally registered entities. Each Client is responsible for all activities conducted under their account and agrees to maintain the confidentiality and security of their login credentials. Clients must notify Magical Insights immediately of any unauthorized use of their account.
The Platform may require compatible devices, internet access, and certain software; periodic updates may also be required. You agree to be responsible for any hardware, software, and connectivity required to use the Platform.

4. SUBSCRIPTIONS
We offer monthly and annual subscriptions. Subscriptions automatically renew at the end of each term unless cancelled in advance. Cancellations become effective at the end of the current billing cycle and must be performed via your account settings or by contacting support.
A free trial period may be available. At the end of the trial, you will automatically be enrolled in the chosen subscription unless cancelled beforehand. No refunds are provided for partial periods or unused services.

5. PRICING AND PAYMENT
All prices are communicated on our website or during contract negotiation. Payments are due in advance of each billing period. Failure to process payment may result in suspension or termination of service. Fees do not include applicable taxes unless otherwise stated.
You agree to provide valid and updated payment information and authorize Magical Insights to charge all fees incurred through your account.

6. DATA ROLES AND CLIENT RESPONSIBILITIES
The Client acknowledges and agrees that, within the scope of loyalty programs and marketing campaigns operated through the Platform:

-The Client acts as the Data Controller of all personal data collected from its end consumers, including names, email addresses, phone numbers, purchase history, and behavioral data.

-Magical Insights acts solely as a Data Processor, processing personal data only on behalf of and under the documented instructions of the Client.

-The Client is solely responsible for:
(i) establishing and maintaining a valid legal basis for processing under Article 6 of the GDPR;
(ii) obtaining all necessary consents from its end consumers where required;
(iii) maintaining a Privacy Policy and Terms and Conditions that are publicly accessible and accurately describe its data collection practices;
(iv) responding to data subject requests received directly by the Client.

-Magical Insights shall not share consumer personal data with third parties, except where necessary for the provision of the service (sub-processors) or where required by law.

-The Client acknowledges that operating a loyalty program without an appropriate Privacy Policy directed to consumers constitutes a breach of these Terms and may result in suspension of the service.

7. THIRD-PARTY SERVICES
Yalt integrates with third-party platforms (e.g. POS systems, CRM tools, marketing software). Magical Insights is not liable for the accuracy, availability, or performance of these third-party services. Use of such services is governed by their own terms and conditions.

8. USAGE RESTRICTIONS
Clients agree not to:Use the Platform for any unlawful, abusive, or fraudulent activities;Resell, sublicense, or distribute Platform access without written authorization;Reverse engineer or attempt to extract source code;Use the Platform to compete with Magical Insights or develop similar services.
Violations may result in immediate termination.

9. TERMINATION
Magical Insights may suspend or terminate access in the event of non-compliance, payment failure, or unlawful use. Clients may terminate their subscription at any time; access will continue until the end of the billing term.

10. LIMITATION OF LIABILITY
The Platform is provided "as is", without warranties of any kind, whether express or implied.

Magical Insights shall not be liable for any indirect, incidental, punitive, special, or consequential damages arising out of or related to the use or inability to use the Platform, including loss of revenue, loss of data, or reputational damage.

The total aggregate liability of Magical Insights for any claims arising under or in connection with these Terms shall not exceed the total fees paid by the Client in the three (3) months preceding the incident giving rise to the claim.

Magical Insights shall not be liable for any fines, sanctions, or regulatory enforcement measures, including those issued by data protection authorities such as CNPD (Portugal), CNIL (France), or AEPD (Spain), arising from:
(i) the Client’s failure to maintain adequate consumer-facing privacy disclosures;
(ii) the Client’s failure to establish a valid legal basis for data collection;
(iii) unlawful use of the Platform by the Client; or
(iv) any breach by the Client of its obligations as Data Controller under the GDPR or other applicable laws.

The Client agrees to indemnify, defend, and hold harmless Magical Insights, its officers, employees, and agents from and against any claims, damages, fines, sanctions, or legal costs arising from the Client’s failure to comply with its obligations as Data Controller.

11. GOVERNING LAW AND JURISDICTION
These Terms are governed by the laws of Portugal. All disputes shall be resolved by the competent courts of Lisbon.

12. CHANGES TO TERMS
We reserve the right to update these Terms. Clients will be informed of changes via email or Platform notification. Continued use of the Platform after such notification constitutes acceptance.

13. COMMUNICATION
You agree to receive communications from us electronically, including service announcements, administrative messages, and newsletters. These communications are part of your relationship with us. You may manage preferences or unsubscribe via your account or communication footer.

14. CONFIDENTIALITY
Each party agrees to maintain the confidentiality of all proprietary or confidential information disclosed during the course of service usage. Confidentiality obligations survive for two (2) years post-termination and exclude information that is:Publicly known at the time of disclosure;Lawfully received from another source;Independently developed without reference to the confidential material;Required to be disclosed by law or regulation.

15. GDPR AND DATA PROCESSING
15.1 Roles
For all personal data relating to the Client’s end consumers processed through the Platform, Magical Insights acts solely as a Data Processor and the Client acts as a Data Controller. For data relating to the Client’s own account and personnel, Magical Insights acts as a Data Controller under its own Privacy Policy available at yalt.co.

15.2 Processing Instructions
Magical Insights shall process consumer personal data only based on documented instructions from the Client. The configuration and activation of features within the Platform constitute documented instructions for the purposes of Article 28 of the GDPR.

15.3 Confidentiality
Magical Insights ensures that all personnel authorized to process personal data are bound by confidentiality obligations.

15.4 Security
Magical Insights implements appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or destruction, in accordance with Article 32 of the GDPR.

15.5 Sub-processors
The Client grants Magical Insights general authorization to engage sub-processors necessary for providing the Platform services. Current sub-processors include: Twilio (SMS delivery), SendGrid (email delivery), and cloud infrastructure providers. Magical Insights will inform the Client of any intended changes to sub-processors, and the Client may object within 14 days. A list is available at yalt.co/sub-processors.

15.6 Data Subject Rights
Magical Insights shall assist the Client in responding to data subject requests (access, rectification, erasure, portability) through the technical means available within the Platform.

15.7 Data Breach Notification
Magical Insights shall notify the Client without undue delay after becoming aware of a personal data breach affecting the Client’s consumer data, and in any event within 72 hours where feasible.

15.8 Deletion and Return
Upon termination of the subscription, Magical Insights shall retain consumer data for 30 days for export purposes. After this period, the data shall be securely deleted, unless retention is required by law.

15.9 Audit Rights
The Client may request reasonably necessary information to demonstrate compliance. Magical Insights may satisfy audit requests by providing up-to-date third-party reports or certifications.

15.10 International Transfers
Where personal data is transferred outside the European Economic Area, Magical Insights shall ensure appropriate safeguards in accordance with Chapter V of the GDPR, including Standard Contractual Clauses where applicable.

16. API USAGE
Magical Insights may provide APIs to facilitate integration with third-party systems. API access is subject to usage limitations and rate limits defined in documentation. Clients may not share API keys or use the API in ways that would cause harm or service degradation.
We reserve the right to revoke API access in the event of abuse, excessive usage, or violation of these Terms.

17. BRANDING AND WHITE-LABEL RIGHTS
Where applicable, Clients may use the white-label version of the Platform under their own branding. All intellectual property rights to the underlying Platform remain with Magical Insights. Custom branding does not confer any rights of ownership or transfer.
Clients may not remove or obscure Yalt or Magical Insights notices unless expressly authorized.

18. SERVICE LEVEL AND UPTIME
Magical Insights aims to provide high service availability but does not guarantee any specific uptime. The Platform may occasionally be unavailable due to maintenance, updates, or technical issues. We will make commercially reasonable efforts to notify Clients in advance of planned interruptions.

19. BETA FEATURES DISCLAIMER
From time to time, we may offer features marked as “beta,” “preview,” or similar. These features are provided for evaluation purposes only and may be incomplete or unstable. Magical Insights does not guarantee the performance or availability of such features and may modify or remove them at any time.
Use of beta features is at the Client’s own risk.

20. SUPPORT SERVICES
Magical Insights provides standard support services during business hours (Portugal timezone), including assistance via email and in-app chat. Response times may vary based on issue severity and subscription level. Support does not cover integration with unsupported third-party services or development of custom code unless contractually agreed.

21. PUBLICITY RIGHTS
You grant Magical Insights the right to use your company name, logo, and public description of your use case in marketing materials, presentations, and on our website, unless explicitly prohibited in writing. Any confidential data or internal metrics will not be disclosed.

22. CAMPAIGN FEES AND FAIR USE
The Platform enables the sending of email, push notifications and SMS campaigns. These services are billed separately based on usage volume and destination.
Your plan might include some gratuity in the plans. Usage outside of that gratuity level, and without any other agreements, the consumables are billed as follow:
- 0.09€ per SMS credit.
- 0.005€ per Email Sent.
- 0.005€ per Push notification.

Clients are responsible for all charges incurred under their account, including but not limited to messaging costs and overage fees.


23. SMS CREDIT CONSUMPTION RULES
The number of SMS credits consumed by a message depends on several factors, including the message content and the recipient's country code.

Message Content: A standard SMS credit is consumed for messages containing up to 160 characters in the GSM-7 character set (the standard character set for SMS). If a message contains characters outside of this set, such as emojis or non-supported characters that require UTF-16 encoding, the message will be sent as a Unicode SMS, and the credit consumption will be doubled (i.e., 2 credits for a message that would normally consume 1 credit).

Recipient's Country Code: The number of SMS credits consumed also varies depending on the recipient's country code, reflecting the varying costs charged by telecommunication operators for delivering SMS to different countries. Specifically:
- Portugal, France: 1 credit per SMS
- Italy, Spain, Germany, UK, Angola: 2 credits per SMS
- All other countries: 4 credits per SMS

By charging credits based on the cost of delivery, we ensure that our pricing accurately reflects the costs incurred by our platform in sending SMS to different destinations.

24. FAIR USE
Abuse of the campaign system (e.g. spam, phishing, or excessive sending to invalid contacts) is strictly prohibited. Magical Insights reserves the right to throttle or suspend accounts engaging in abusive activity.

25. DATA PROCESSING AGREEMENT AND ACTIVATION CONFIRMATION
25.1
This Article, together with Article 15, constitutes the Data Processing Agreement ("DPA") between Magical Insights (Data Processor) and the Client (Data Controller), as required under Article 28 of the GDPR.

25.2
The subject matter and duration of the processing correspond to the operation of the Client’s loyalty program and associated marketing campaigns, for the duration of the active subscription.

25.3
The nature and purpose of the processing consist of the collection, storage, segmentation, and use of consumer personal data to operate loyalty mechanisms, send marketing communications, and generate analytics, as configured by the Client within the Platform.

25.4
The categories of data subjects are the Client’s end consumers who interact with the loyalty program. The categories of personal data include: names, contact details (email, phone), transaction data, behavioral data, and activity within the loyalty program.

25.5 Activation as Acceptance
By activating a loyalty program, campaign, or data collection feature within the Platform, the Client confirms that:
(i) it has read and accepted this DPA;
(ii) it is the Data Controller of the consumer data collected through such program;
(iii) it maintains an appropriate Privacy Policy directed to consumers; and
(iv) it has a valid legal basis for processing under Article 6 of the GDPR.

This activation event is recorded by Magical Insights with date and time and constitutes the Client’s binding acceptance of this DPA.

25.6
If the Client is unable to confirm the conditions set out in Article 25.5, it must not activate the feature and must contact Magical Insights before proceeding.

Last updated: March 30, 2026