Compose Glow AB · Organization No. 559556-7875 · Effective Date: 31-March-2026 · Last Updated: 31-March-2026
These Terms of Service (the "Terms" or "Agreement") are entered into by and between Compose Glow AB ("Compose", "we", "us", or "our"), a private limited liability company registered under the laws of Sweden, with organization number 559556-7875; and the Customer ("Customer", "you", or "your") as identified in the Account registration. Compose provides the Compose Glow platform, accessible at glowcode.io and related domains (the "Site"), together with hosting services, form-building and related services (collectively, the "Service"). The Service is offered as Software as a Service (SaaS). The Service is offered through various subscription plans ("Plans"), each with different pricing, feature sets, and usage limits, as described on our pricing page. These Terms apply to all Plans and any use of the Service. As the Service is delivered on a SaaS basis, the Customer acknowledges that the functionality may evolve over time. The Service is not tied to any specific version of the underlying software. By creating an Account, clicking "I Agree," or otherwise accessing or using the Service, you confirm that you have read, understood, and agree to be bound by these Terms and our Privacy Policy. These Terms take effect upon Account creation and remain in force until terminated in accordance with Section 8. If you are entering into these Terms on behalf of a company or other legal entity, you represent and warrant that you have authority to bind that entity, its affiliates, and all users who access the Service through your Account. In such cases, "you" and "your" refer to that entity. The Service is available to individuals aged 16 years or older. If you are between 16 and 18 years of age (or the age of legal majority in your jurisdiction), you agree to review these Terms with your parent or guardian to ensure mutual understanding and acceptance.
2.1 Creating an Account: To use the Service, you must register and create an account ("Account") by providing accurate and complete information, including your name, email address, and password. Upgrading to a paid Plan requires providing valid payment information. By connecting to the Service via a third-party authentication provider (for example, Google or Entra ID), you grant us permission to access and use the information from that service as permitted by it, in order to authenticate your Account. 2.2 Account Security: You are responsible for maintaining the confidentiality of your Account credentials and for all activities that occur under your Account. You must promptly notify us at support@glowcode.io if you become aware of any unauthorized access to or use of your Account. We are not liable for any loss arising from unauthorized use of your Account. 2.3 Authorized Users: Depending on your Plan, you may invite employees, contractors, or other authorized individuals ("Authorized Users") to access your Account. You are responsible for ensuring all Authorized Users comply with these Terms. Sharing login credentials between individuals is prohibited unless expressly permitted by your Plan.
3.1 Plans and Pricing: The Customer shall pay the fees applicable to their selected Plan (the "Service Fee"), as described on our pricing page. All fees are exclusive of VAT, sales tax, and other applicable duties and taxes, which shall be borne by the Customer. 3.2 Free Plans: Evaluation Accounts are not required to provide payment information but are subject to these Terms and applicable usage limits. We reserve the right to modify the features and limits of any free Plan at any time. 3.3 Billing and Renewal: Paid subscriptions are invoiced in advance, with monthly or annual frequency, depending on the applicable subscription period. You expressly authorize us to issue electronic invoices for the paid subscription, which can be downloaded in payment section under Settings. 3.4 Payment Terms: Payment is due immediately the first day of the billing cycle. 3.5 Refund Policy: Subject to applicable law, Fees are nonrefundable. We will not refund any amount nor grant any credit for subscriptions (including any add-ons you may have purchased from time to time) that are cancelled before reaching the end of the then current subscription period. 3.6 Upgrades and Downgrades: You may upgrade your Plan at any time, and the additional fees will be prorated for the remainder of the current billing cycle. Downgrades take effect at the start of the next billing cycle. Downgrading may cause loss of access to certain features, data, or forms. It is your sole responsibility to export or migrate any content before downgrading. 3.7 Price Adjustments: Compose reserves the right to adjust the Subscription Fee with at least thirty (30) days' written notice before the next Renewal Term. Continued use of the Service after a price adjustment constitutes acceptance of the new pricing.
4. Privacy and Data Processing When providing the Service, Compose acts in different data-processing capacities depending on the Customer type: Organizational Customers - Where the Customer is a legal entity, public authority, or other organization, the Customer is the data controller for personal data processed through the Service and Compose acts as data processor. Compose's Data Processing Agreement (DPA) forms part of these Terms. Individual Customers - Where the Customer is a private individual, Compose is the data controller. Please see our Privacy Policy for details on how we process personal data, including data subject rights. Compose hosts data in Microsoft Azure in Europe. Compose maintains appropriate technical and organizational measures to protect the security, confidentiality, and integrity of all Customer data. For details on sub-processors, please refer to our list of sub-processors, available on our website.
Compose strives to maintain high availability of the Service but does not warrant any particular uptime level outside of any separately agreed Service Level Agreement (SLA). Planned maintenance that may affect availability will be communicated with reasonable advance notice. Compose is not responsible for disruptions caused by factors outside its reasonable control, including third-party infrastructure failures, internet connectivity issues, or Customer-side system errors. 8. Term and Termination - 8.1 Term and Subscription Cycles: These Terms enter into force upon Account creation and remain in effect for the period specified in your selected Plan (the "Initial Term"). Your Plan will automatically renew for successive periods of equal duration (each a "Renewal Term"), unless cancelled or modified via the application's billing settings prior to the end of the current term. 8.2 Plan Modifications: Upgrades take effect immediately with pro-rata fees. Downgrades take effect at the next Renewal Term with no pro-rated refunds. 8.3 Termination for Convenience: Either Party may terminate a paid subscription by providing notice via the application's "Cancel Subscription" feature or in writing before the end of the current billing cycle. 8.4 Termination for Cause: Either Party may terminate with immediate effect if the other materially breaches and fails to cure within thirty (30) days of written notice. 8.5 Consequences of Termination: Upon termination, your Account will be transitioned to a Free Plan or deactivated. It is your sole responsibility to export User Content before termination. Any outstanding payment obligations survive termination. 9. Suspension of Service - Compose may suspend the Customer's access to the Service if payment has not been received within fifteen (15) days of the due date, provided Compose gives at least five (5) days' prior written notice. Compose may also immediately suspend access if the Customer materially breaches these Terms. 10. Warranties and Disclaimers - 10.1 Service "As Is": THE SERVICE AND ALL CONTENT ARE PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT, TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW. 10.2 Compose's Warranties: Compose warrants it has the right to provide the Service and that the Service will perform materially in accordance with its published documentation. Compose does not warrant uninterrupted or error-free operation. 10.3 Exclusions: Compose shall have no responsibility for issues arising from modifications made by the Customer, use in combination with non-Compose systems, use outside the scope of these Terms, or third-party claims related to Customer's content. 11. Limitation of Liability - 11.1 Direct Damages: A Party in breach shall compensate the other Party's documented, direct economic loss caused by the breach. 11.2 Exclusion of Indirect Damages: NEITHER PARTY SHALL BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING LOSS OF REVENUE, LOST PROFITS, LOSS OF DATA, OR BUSINESS INTERRUPTION, REGARDLESS OF THE THEORY OF LIABILITY. 11.3 Liability Cap: Each Party's total aggregate liability under these Terms in any rolling twelve (12) month period shall not exceed the total Service Fees paid or payable by the Customer during the same period. 11.4 Exceptions: The limitations do not apply to damages from fraud, gross negligence, willful misconduct, breach of confidentiality, intellectual property infringement, or Customer's payment obligations. 12. Indemnification - 12.1 Indemnification by Compose: Compose will defend, indemnify, and hold harmless the Customer against any third-party claim alleging that the Service infringes intellectual property rights, provided the Customer promptly notifies Compose and Compose is given control over the defense. 12.2 Indemnification by Customer: The Customer will defend, indemnify, and hold harmless Compose against third-party claims arising from User Content, Respondent Data, the Customer's violation of these Terms, or the Customer's infringement of intellectual property rights. 13. Confidentiality - Each Party shall maintain confidentiality of all non-public information disclosed by the other Party, including business plans, pricing, technical data, and customer information. Confidentiality obligations survive termination for three (3) years. 14. Marketing - Compose may reference the Customer's use of the Service in marketing activities. If the Customer is a private individual, Compose will request permission before such reference. The Customer may opt out by notifying Compose in writing. 15. Third-Party Services - The Service may facilitate access to or integration with third-party services. The Customer shall comply with the terms governing such services. Compose shall not be liable for errors, outages, data loss, or other issues arising from third-party services. 16. Force Majeure - Neither Party shall be liable for any delay or failure to perform obligations (other than payment) to the extent caused by a Force Majeure Event beyond the affected Party's reasonable control. If such an event persists for more than ninety (90) days, either Party may terminate these Terms. 17. Amendments - Compose reserves the right to amend these Terms by giving at least thirty (30) days' prior written notice. Continued use constitutes acceptance. If you do not agree, your sole remedy is to terminate your Account before the amendment takes effect. 18. General Provisions - 18.1 Assignment: The Customer may not assign these Terms without Compose's prior written consent. Compose may freely assign to any affiliate or successor entity. 18.2 Independent Contractors: Nothing in these Terms creates a partnership, joint venture, agency, or employment relationship. 18.3 Severability: If any provision is invalid, it shall be modified to the minimum extent necessary to make it enforceable. 18.4 Entire Agreement: These Terms, together with the Privacy Policy, DPA, and any separately executed Order Form or SLA, constitute the entire agreement. 18.5 No Waiver: The failure to exercise any right shall not constitute a waiver of that right. 18.6 Notices: All notices shall be in writing and sent by email or to legal@usecompose.com. Notices are deemed received upon confirmed delivery. 18.7 Survival: Sections 6, 10, 11, 12, 13, and 18 shall survive termination. 19. Governing Law and Dispute Resolution - 19.1 Governing Law: These Terms shall be governed by the laws of Sweden. 19.2 Disputes — EU/EEA Customers: The Parties shall first attempt to resolve disputes through good-faith negotiation. If a resolution is not reached within thirty (30) days, either Party may submit to the courts of Stockholm, Sweden. 19.3 Disputes — Non-EU/EEA Customers: Disputes shall be resolved by binding arbitration in accordance with the Swedish Arbitration Act, with the seat of arbitration in Stockholm, Sweden. Related documents: Privacy Policy | Data Processing Agreement (DPA)
6. User Content and Intellectual Property 6.1 Your Content: You retain full ownership of all content, data, forms, and materials you create or upload through the Service ("User Content"). Compose claims no ownership over User Content. You grant Compose a non-exclusive, royalty-free, worldwide, sublicensable license to use, reproduce, modify, display, and distribute your User Content solely for the purposes of operating, providing, and improving the Service. This license terminates when you delete your User Content or close your Account, except for copies reasonably retained in backup systems or as required by law. 6.2 Respondent Data: If you create forms that collect data from respondents ("Respondent Data"), you are the data controller for that data and are solely responsible for obtaining all required consents, providing appropriate privacy notices, and complying with applicable data protection laws. Compose processes Respondent Data on your behalf and in accordance with our DPA. 6.3 Compose's Intellectual Property: All intellectual property rights in and to the Service, the Site, underlying software, technology, documentation, trademarks, logos, and designs remain exclusively with Compose or its licensors. These Terms grant you no rights to any Compose intellectual property except the limited right to use the Service in accordance with your Plan. You shall not make any part of the Service, including its software, available to others without Compose's prior written consent. 6.4 Feedback: If you provide suggestions, feature requests, or other feedback regarding the Service ("Feedback"), you grant Compose an unrestricted, irrevocable, perpetual, royalty-free license to use and incorporate such Feedback into the Service without obligation to you.
When respondents submit forms created by Glow customers, personal data may be collected depending on the fields in each form. This data is stored on behalf of the Glow customer (who is the data controller for that data). Glow acts as a data processor in this context. This may include names, email addresses, uploaded files, and any other information entered into form fields. Legal basis: Legitimate interests of the data controller (the Glow customer) or consent, depending on the purpose of each form.
We use Mixpanel and Google Analytics to understand how the Service is used. This may include: pages visited and features used; device type, browser, and operating system; IP address (anonymised where possible); and session duration and click behaviour. Legal basis: Legitimate interests (Article 6(1)(f) GDPR) - to improve the Service and understand usage patterns. Where required by law, we will ask for your consent via a cookie banner.
If you contact us by email or through a contact form, we retain the content of that communication and your contact details in order to respond. Legal basis: Legitimate interests (Article 6(1)(f) GDPR).
Glow stores all platform data: including form submissions, file uploads, and account data - on Microsoft Azure infrastructure located in Sweden Central. This means your data remains within the European Economic Area (EEA) at all times.
We do not transfer your personal data outside the EEA except where necessary to provide the Service (for example, payment processing via Stripe). Where such transfers occur, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.
We use the following third-party services that may process personal data on our behalf:
Stripe, Inc. - Purpose: Payment processing. Location: United States (EEA transfer via Standard Contractual Clauses). Privacy policy: stripe.com/privacy
Mixpanel, Inc. - Purpose: Product analytics. Location: United States (EEA transfer via Standard Contractual Clauses). Privacy policy: mixpanel.com/legal/privacy-policy
Google LLC (Google Analytics) - Purpose: Website analytics. Location: United States (EEA transfer via Standard Contractual Clauses). Privacy policy: policies.google.com/privacy
We retain personal data for as long as necessary to provide the Service and comply with our legal obligations: Account data is retained for the duration of your account, plus 12 months after deletion. Form submission data (Evaluation tier): 30 days from submission. Form submission data (Starter tier and above): 180 days from submission, or as configured. Billing records: 7 years (Swedish bookkeeping law requirement - Bokföringslagen). Analytics data: as configured in Mixpanel and Google Analytics (typically 12-24 months).
As a data subject, you have the following rights regarding your personal data: Right of access - request a copy of the personal data we hold about you. Right to rectification - request correction of inaccurate data. Right to erasure - request deletion of your data (subject to legal retention obligations). Right to restriction - request we limit processing of your data. Right to data portability - receive your data in a machine-readable format. Right to object - object to processing based on legitimate interests. Right to withdraw consent - where processing is based on consent, you may withdraw at any time.
To exercise any of these rights, contact us at legal@glowcode.io. We will respond within 30 days.
You also have the right to lodge a complaint with the Swedish data protection authority: Integritetsskyddsmyndigheten (IMY). Website: imy.se. Email: imy@imy.se
We use cookies and similar tracking technologies on glowcode.io. These include: Strictly necessary cookies - required for the Service to function. Analytics cookies - used by Google Analytics and Mixpanel to understand usage.
You can manage your cookie preferences through our cookie banner when you first visit the site. You may also manage cookies through your browser settings, though disabling certain cookies may affect functionality.
We take the security of personal data seriously. Our measures include: encryption in transit (TLS) and at rest; access controls and role-based permissions; data hosted in Microsoft Azure Sweden Central, a SOC 2 and ISO 27001 certified environment; and regular security reviews.
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and affected individuals without undue delay, as required by GDPR Article 33-34.
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or through a notice on the Service. The date of the latest update is shown at the top of this document. Your continued use of the Service after changes take effect constitutes your acceptance of the revised policy.
For any questions about this Privacy Policy or to exercise your data subject rights, contact: Email: legal@glowcode.io. Company: Compose Glow AB
