Terms of Service
Last Updated: May 5, 2026
These Terms of Service ("Terms") constitute a binding agreement between Yellow Method Oy ("Yellow Method", "we", "us") and the entity or individual ("Customer", "you") accessing or using our services via our websites at yellowmethod.ai, app.yellowmethod.ai, and any other subdomains (collectively, the "Website") or otherwise using our SaaS services (the "Services").
By creating an account, clicking "I Accept," or using the Services, you agree to these Terms.
1. Definitions
"Agreement" means these Terms, the Data Processing Addendum, the Privacy Notice, and any applicable Order Form.
"Services" means the SaaS platform, assessments, software, and any related support or consulting provided by Yellow Method.
"Customer Material" means any data, content, or material provided or submitted by Customer to the Services (e.g., employee lists, assessment answers).
"Usage Data" means data generated by Yellow Method relating to the use and performance of the Services (e.g., logs, analytics, feature usage counts).
"Order Form" means the online ordering document or subscription plan selected by Customer specifying the Services and Fees.
"Deliverables" means any reports, exports, or other outputs generated for Customer through the Services or related consulting.
"Website" means our websites located at yellowmethod.ai and any of its subdomains, including app.yellowmethod.ai.
2. Access and Use
2.1 License Grant. Subject to these Terms and payment of applicable fees, Yellow Method grants you a non-exclusive, non-transferable, worldwide, limited right to access and use the Services solely for your internal business purposes during your valid subscription period under the Agreement.
2.2 Free Trial. If Customer registers for a Free Trial, Yellow Method will make the Services available on a trial basis with limited features and/or for a limited period. These Terms (including the DPA and Privacy Notice) apply to Free Trial use, except that Free Trials are provided "AS IS" without any warranty, service level commitments, or support. Either Party may terminate the Free Trial at any time upon notice.
2.3 Restrictions. You may not (a) reverse engineer, decompile, or disassemble the Services; (b) use the Services to build a competing product; or (c) use the Services for any unlawful purpose or in a manner that violates third-party rights.
2.4 Customer Responsibilities. Customer is responsible for: (a) ensuring that its use of the Services and submission of Customer Material complies with applicable laws (including employment and data protection laws); (b) providing all required notices to, and obtaining all required consents from, data subjects before submitting their personal data to the Services; (c) the accuracy, quality, and legality of Customer Material; and (d) keeping its account credentials secure and notifying Yellow Method without undue delay of any unauthorized use of its account.
2.5 Acceptable Use. Customer shall not use the Services to transmit any malicious code, spam, or content that is unlawful, defamatory, or infringes third-party rights.
3. Intellectual Property and Data Rights
3.1 Ownership. Yellow Method owns all Intellectual Property Rights in the Services, Usage Data and Deliverables (excluding any Customer Material incorporated in Deliverables). Customer retains all rights, title, and interest in and to Customer Material. Yellow Method grants Customer a non-exclusive, worldwide licence to use the Deliverables for Customer's internal business purposes.
3.2 License to Customer Material. Customer grants Yellow Method a non-exclusive, worldwide license to host, copy, process, and display Customer Material solely for the purpose of providing and supporting the Services and performing its obligations under the Agreement.
3.3 Usage Data. Yellow Method may generate and process Usage Data. To the extent Usage Data constitutes personal data, Yellow Method acts as an independent Controller and processes such data in accordance with its Privacy Notice.
3.4 Improvement and Research (Instruction to Anonymize). Customer instructs and authorizes Yellow Method to: (a) Pseudonymize and/or anonymize Customer Material in accordance with applicable data protection laws; and (b) Use aggregated and anonymized data derived from Customer Material to:
- Maintain and improve the Services and Yellow Method's internal operations;
- Develop new products and features; and
- Conduct and publish statistical or scientific research, including in collaboration with universities and research institutions.
Provided that such data does not identify Customer or any individual and cannot reasonably be re-identified. For such use of anonymized data, Yellow Method acts as an independent controller.
Identification of Customer (including the use of Customer's name or logo in any publication or research output) shall require Customer's prior written consent.
4. Fees and Payment
4.1 Fees. Fees are specified in the Order Form. Prices are exclusive of VAT and other taxes.
4.2 Payment. Unless otherwise agreed, payments are due monthly or annually in advance. Interest on overdue payments accrues per the Finnish Interest Act.
4.3 Price Changes. We may update pricing with 60 days' written notice. Customer may terminate the Agreement before the change takes effect if the new prices are not accepted.
5. Data Protection and Security
5.1 Roles. To the extent Yellow Method processes personal data contained in Customer Material (e.g., employee assessments) on behalf of Customer, the Data Processing Addendum (DPA) incorporated herein shall apply. For account management and Usage Data, Yellow Method acts as a Controller as described in the Privacy Notice. In order to provide periodic assessments, longitudinal reporting and historical benchmarking, Customer acknowledges that Yellow Method needs to store relevant Customer Material for the duration of the Customer's subscription and the limited post-termination period described in the DPA and Privacy Notice.
5.2 Security. Yellow Method shall implement and maintain appropriate technical and organizational measures to protect Customer Material against accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to personal data, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing, as required by Article 32 GDPR.
6. Confidentiality
Each Party shall keep the other Party's confidential information confidential and use it only for the purposes of the Agreement. Each Party may disclose such information to its employees, contractors, professional advisers, and Affiliates who need to know it for those purposes and who are bound by confidentiality obligations at least as protective as this Section, or where required by law. This obligation survives for 5 years after the Agreement ends.
7. Limitation of Liability
7.1 Cap on Liability. To the maximum extent permitted by applicable law, each Party's total aggregate liability arising out of or in connection with the Agreement is limited to an amount equal to the fees paid by Customer for the Services during the twelve (12) months immediately preceding the event giving rise to the claim.
7.2 Free Trial Liability. For Free Trials, Yellow Method disclaims all liability to the fullest extent permitted by mandatory law. To the extent permitted by mandatory law, Yellow Method shall have no liability whatsoever for Free Trial features, data, or results.
7.3 Excluded Damages. Neither Party is liable for any indirect or consequential damages, such as loss of profits, loss of business, or loss of data.
7.4 Carve-Outs. The limitations in this Section 7 do not apply to liability for: (a) death or personal injury caused by negligence; (b) fraud, intentional misconduct, or gross negligence; (c) Customer's payment obligations; or (d) any other liability that cannot be excluded under mandatory law.
7.5 The Services and Deliverables are intended to provide decision-support insights only. They do not constitute legal, psychological, HR or other professional advice. Customer remains solely responsible for any employment or business decisions it makes based on the assessments, reports or insights provided by the Services, and Yellow Method does not warrant that use of the Services will achieve any particular business outcome.
8. Term and Termination
8.1 Term. Commercial subscriptions are valid for the term specified in the Order Form. If valid "until further notice," Customer may terminate with 1 month's notice, and Yellow Method with 3 months' notice.
8.2 Termination for Cause. Either Party may terminate immediately for material breach if the breach is not remedied within 30 days of written notice.
8.3 Effect of Termination. Upon termination, Customer's right to use the Services ceases. Yellow Method shall delete Customer Material in accordance with the DPA, unless retention is required by law. This does not affect Yellow Method's right to retain and use anonymized data in accordance with Section 3.4.
9. General
9.1 Governing Law. These Terms are governed by the laws of Finland, excluding its conflict-of-law rules.
9.2 Dispute Resolution. Any dispute shall be finally settled by arbitration in accordance with the Arbitration Rules of the Finland Chamber of Commerce. The seat shall be Helsinki, the language English, and the tribunal shall consist of one (1) arbitrator.
9.3 Consumer Exception. If Customer qualifies as a consumer under EU law, the arbitration clause in 9.2 does not limit the Customer's right to bring a claim before the competent courts or consumer dispute board of their place of residence.
9.4 Changes to Terms. We may update these Terms from time to time. For materially adverse changes, we will notify Customer by email or via the Services at least 30 days before the change takes effect. If Customer does not agree to the updated Terms, Customer may terminate the Agreement before the effective date of the change.
9.5 Assignment. Customer may not assign the Agreement without Yellow Method's prior written consent, except to an Affiliate or in connection with a merger or sale of substantially all its assets. Yellow Method may assign the Agreement without Customer's consent in connection with a corporate reorganization, merger, or sale of business.
Data Processing Addendum (DPA)
Definitions
"Data Protection Laws" means the GDPR and any applicable national data protection laws implementing or supplementing it.
"Personal Data", "Processing", "Controller", "Processor" and "Personal Data Breach" have the meanings given in the GDPR.
"Customer Personal Data" means Personal Data processed by Yellow Method on behalf of Customer under the Agreement.
This Data Processing Addendum ("DPA") applies where Yellow Method ("Processor") processes Customer Personal Data on behalf of the Customer ("Controller").
1. Details of Processing (Article 28 Description)
Subject Matter: Provision of the Services to Customer.
Duration: The term of the Agreement plus the period until data is deleted or returned.
Nature and Purpose: Storage, analysis, and processing of data to provide information, insights, longitudinal reporting, and historical benchmarking, and to anonymize data for R&D as instructed by Customer.
Data Subjects: Customer's employees, assessment participants, and authorized users.
Types of Personal Data: Identification and demographic data (names, gender, age range, preferred language), professional background (education, work experience), contact details (email, phone), employment details (role, team), and assessment responses.
2. Processor Obligations
Yellow Method shall:
Instructions: Process Customer Personal Data only on documented instructions from Customer (including this DPA and the Agreement), unless required to do so by EU or Member State law. In such a case, Yellow Method will inform Customer of that legal requirement before processing, unless the law prohibits such information.
Confidentiality: Ensure that persons authorized to process the Customer Personal Data have committed themselves to confidentiality.
Security: Implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk (Art. 32 GDPR).
Assistance: Assist Customer, taking into account the nature of processing and the information available to Yellow Method, with Customer's obligations regarding security of processing, data protection impact assessments (DPIAs), and prior consultations with supervisory authorities (Articles 32–36 GDPR). Where such assistance requires significant effort, Yellow Method may charge reasonable fees.
Subprocessors: Customer generally authorizes the use of subprocessors (listed at yellowmethod.ai/subprocessors). Yellow Method shall notify Customer of changes; Customer may object within 14 days. Yellow Method remains liable for its subprocessors.
Data Rights: Assist Customer (at Customer's expense for significant effort) in responding to data subject requests (access, rectification, deletion).
Breach Notification: Notify Customer without undue delay after becoming aware of a Personal Data Breach.
Records: Maintain records of processing activities and make them available to Customer upon request to the extent required to demonstrate compliance with this DPA and Article 28 GDPR.
Deletion: Upon termination or expiration of the Agreement, and following any agreed post-termination retention period (to allow for data export or reactivation), Yellow Method shall delete or return all Customer Personal Data, unless storage is required by law. This obligation does not apply to data that has been irreversibly anonymized in accordance with Section 3, as such data no longer constitutes personal data.
3. Research and Anonymization
Customer hereby instructs Yellow Method to pseudonymize and/or anonymize Customer Personal Data as necessary to generate aggregated datasets. Once Customer Personal Data has been irreversibly anonymized such that it no longer relates to an identified or identifiable natural person, the GDPR no longer applies to that data, and Yellow Method may use such anonymized data as an independent Controller for research and product development. Yellow Method shall not attempt to re-identify individuals from anonymized datasets.
4. International Transfers
Yellow Method shall not transfer Customer Personal Data outside the EEA unless appropriate safeguards are in place, such as the EU Standard Contractual Clauses (SCCs) or an Adequacy Decision.
5. Audits
Yellow Method shall make available information necessary to demonstrate compliance. Customer may audit Yellow Method's compliance once per 12-month period (unless a breach has occurred) upon 30 days' notice. Yellow Method may satisfy Customer's audit rights under this Section by providing up-to-date summaries of independent audits or certifications (such as ISO or SOC reports), where available. On-site audits shall be agreed in advance and conducted in a manner that minimizes disruption to Yellow Method's business and protects the confidentiality of third-party data.