Terms of service
Version 2026-10-18
Includes the business data processing annex. Territorial availability does not certify the business's tax compliance or enable every integration.
These terms govern access to Vértice POS for restaurants, Vértice Retail for retailers, and Vértice Services and Beauty, offered under the Vértice Digital brand. By purchasing or using the service, the customer represents that it has legal authority to bind the business it represents.
The service operator is QUIROGA SOLUCIONES E INGENIERIA SAS, NIT 900448567-2. Registered address: CALLE 30 24 38 OFICINA 403, BARRIO CAÑAVERAL, código postal 681001, Floridablanca, Santander, Colombia.
1. Service and license
Vértice grants a limited, non-exclusive, non-transferable SaaS license that remains valid during the subscription. Features depend on the purchased plan, region, and available integrations. The service does not transfer ownership of the software or authorize resale, copying, reverse engineering, or any exploitation prohibited by law.
2. Account, security, and permitted use
The customer must provide accurate information, protect credentials, assign minimum permissions, and report incidents or unauthorized access. The service may not be used for fraud, unlawful content, rights violations, control evasion, attacks, or data processing without a valid legal basis.
3. Business responsibilities and invoicing scope
The customer retains control of its operation: catalog, prices, inventory, recipes, sales documentation, employees, consumers, payment methods, returns, licenses, permits, and the quality of its products or services. The customer must also review imported or generated information for accuracy before publishing it.
Operational records and tax integrations: order slips, summaries, and payment acknowledgments do not by themselves establish compliance with tax requirements or replace the specific tax documents the business must issue. Electronic invoicing features, where offered, depend on an integration expressly available for the country and enabled for the business, its configuration, and the required authorizations and validations. Installing Vértice, selecting a country, or generating a PDF does not establish that authorization or acceptance of a document by the tax authority.
Tax configuration: the customer determines and maintains the taxes, rates, and exemptions applicable to its sales, including VAT, consumption tax, or sales taxes according to its jurisdiction. Vértice performs calculations according to the configuration and available features; this does not by itself certify that the configuration is correct for tax purposes. This customer responsibility does not exclude Vértice's legal and contractual obligations regarding the operation of the service.
Business tax obligations: each restaurant or business is responsible for determining, filing, collecting, and paying taxes, withholdings, fees, electronic invoicing, and other obligations arising from its own sales and activities in Colombia, the United States, Europe, Venezuela, or any other country where it operates. Vértice provides technology tools and does not replace the customer's accountant, tax adviser, or tax authority.
Vértice obligations: Vértice remains responsible for the tax, invoicing, and reporting obligations legally applicable to the sale of its own SaaS subscription. This allocation does not exclude any party's mandatory responsibilities.
4. Pricing, subscription, and payment providers
The current price, currency, billing period, applicable taxes, and terms are displayed before purchase confirmation. Vértice Retail is initially offered only as a monthly subscription. Hotmart or another authorized provider may process payment as a third party; available methods vary by country, currency, risk assessment, and local law.
Provider confirmation and our controls allow Vértice to update a purchase, renewal, cancellation or refund technically; they do not condition the exercise of rights or reduce legal deadlines for a valid request. Promotions do not change future renewals unless expressly stated. Before each product is published, purchase, renewal, cancellation, refund, duplicate, and delayed-event flows will be tested.
5. Personal data and customer content
The data processing annex forms part of these terms and their acceptance.
Vértice acts as controller for account, contracting, billing, security, support, and legitimate service-improvement data. For data the customer uploads or generates about buyers, guests, employees, or suppliers under its instructions, Vértice normally acts as processor and the customer as controller.
The customer represents that it has the necessary authorizations and rights over the text, images, trademarks, catalogs, and data it adds. Detailed terms are provided in the Privacy policy.
See our designated agent, notices, removal, counter-notices, and policy to terminate repeat infringers' accounts in appropriate cases in our copyright and DMCA procedure.
6. Availability, support, and changes
Vértice applies reasonable security, backup, and continuity measures, but internet services and external providers may experience interruptions. Maintenance windows, incidents, and plan limits will be communicated through available channels. Material changes to terms will be notified with reasonable advance notice and, when appropriate, require renewed acceptance; consent will not be presumed for new purposes that legally require authorization.
7. Suspension, termination, and portability
We may limit or suspend access for security risk, fraud, material breach, or nonpayment, using a proportionate measure and notice when feasible. The customer may cancel under the purchased offer. Data return, mandatory rights and deletion follow the annex and law without requiring a higher plan; additional commercial tools may depend on the plan.
8. Warranties and liability
The service is provided subject to availability and does not guarantee that any configuration alone complies with every industry or tax rule. To the extent permitted by law, neither party is liable for unforeseeable indirect damages. Any liability limitation does not apply where prohibited by mandatory law and does not exclude fraud, willful misconduct, gross negligence, or non-waivable rights.
9. Countries, governing law, and mandatory rights
The contractual relationship is organized from Colombia and, as a general rule, interpreted under its laws. However, nothing in these terms removes mandatory protections applicable because of the customer's residence or location, including rules of the European Union or its member states, the United Kingdom, the United States and its states, Venezuela, and other Latin American countries. Any dispute-resolution mechanism will respect jurisdictions and rights that cannot validly be waived.
Availability in a country does not mean that every payment method, tax integration, or feature is enabled there. The customer must verify regional scope before purchasing.
10. Contact and related documents
Initial scope in Spain: operational management without issuing invoices or simplified invoices. Payment acknowledgments do not replace invoices the business must issue through an appropriate system. This territorial limit does not disable features for businesses in the United States or other countries or certify their tax compliance.
Privacy contact: admin@verticedigital.tech. Alternative contact: acceso@verticedigital.tech. You do not need to sign in to email us.
Identity and contact details updated: 2026-10-07.
Contract, support, and privacy requests are received through the platform's authenticated channels. The Privacy policy and Cookie policy also apply.
Contracting, authorized users and documents
The subscription contract binds QS and the business identified at purchase. A representative's acceptance includes the processing annex; it does not make each business customer a SaaS subscriber. The business manages its authorized personnel's access and permissions and must communicate usage and confidentiality rules. Accounts are personal; credentials must not be shared and access restrictions must not be bypassed.
The accepted offer identifies the product, plan, term, price, currency and channel. Expressly agreed specific terms prevail on their subject; mandatory law and the data annex prevail within their respective scope. The privacy policy explains processing; reading it does not authorize advertising or every purpose through a single bundled consent.
Free plan, trials, renewal, promotions and cancellation
Accepting these terms does not create a paid subscription on the Free plan. Capacity limits apply and clearly identified ad spaces may appear. Rejecting optional tracking neither purchases a plan nor authorizes tracking. Trials advertised without a card and without automatic renewal end without a charge; a store offer with different conditions must disclose them and obtain a separate purchase decision before charging.
Paid subscriptions may renew automatically when disclosed at purchase, until canceled. The amount, currency, billing period and, where applicable, taxes, promotional duration and subsequent price are shown before purchase. Price changes follow the notice and acceptance required by the channel and law, allowing cancellation before they take effect. A plan change does not restart a consumed discount; its amount, effective date and renewal must appear in the specific confirmation.
For Google Play purchases, manage renewal and cancellation in Google Play Subscriptions using the purchasing account. Uninstalling Vértice, signing out or requesting data deletion does not itself cancel store billing. Other enabled channels use the identified provider's controls or acceso@verticedigital.tech. Mentioning a possible provider does not make that channel available.
Ordinary cancellation prevents future renewals and normally preserves access through the paid period, subject to valid suspension grounds and store or legal requirements. Duplicate charges, material failures, withdrawal rights and other refunds are assessed under the facts and mandatory rights. Technical provider confirmation does not erase a validly submitted cancellation or request or reduce legal deadlines.
Content, images and intellectual property
The customer retains its rights in its content. It grants a non-exclusive permission limited to providing the requested feature: hosting, technical copying, optimization, transmission to authorized recipients and display under the selected settings. Permission lasts as necessary for service and applicable retention duties. It does not grant a perpetual license to commercialize content, train models or use customers' images in our advertising.
The business chooses which catalog, prices, schedules and images it publishes and must review the result before distribution. Importing an image from a URL, file or generation tool does not establish a license or image permission. It must hold sufficient rights and permissions, including those of identifiable people and children's guardians where required. Unlawful content, child exploitation, impersonation, harassment and unnecessary sensitive data must not be uploaded.
Vértice and its licensors retain their software, design, brands and documentation; third-party component licenses remain applicable. Voluntary suggestions may improve the product without appropriating entrusted business data or others' rights. The linked copyright and DMCA procedure, including the designated agent, takedown, counter-notice and repeat-infringer policy, remains incorporated.
Assistants, automation and integrations
Vi provides product guidance; enabled assistance or generation features may make errors or produce results similar to others'. Review amounts, documents, images and recommendations before use. They do not replace legal, accounting, tax, health or professional advice or guarantee compliance or business outcomes. Do not send passwords, codes, card details or unnecessary sensitive data.
Write actions, publication, communications and payments require each feature's permissions and confirmations; guidance does not prove an action occurred. External integrations may have their own terms and receive only data necessary for an enabled feature. The annex prohibits independent model training on entrusted business data. Trial features are identified as such and do not establish capabilities not yet available.
Suspension review and leaving the service
Request review of a suspension or content removal at acceso@verticedigital.tech, identifying the account and grounds without sending credentials. We will evaluate the explanation and communicate the decision and applicable mandatory remedies. We may act immediately for risks or legal requirements and limit disclosure where required; this does not remove complaint rights.
At termination, return or deletion follows the annex, distinguishing mandatory rights and return of business data from additional commercial formats or plan tools. Those rights do not require a higher plan. Before a planned permanent closure, we will provide reasonable notice to recover data and explain treatment of unused prepaid amounts under the contract and law. Retention exceptions are explained and restricted.
Complaints, governing law and courts
Send contractual complaints to acceso@verticedigital.tech with a description, requested solution and minimum supporting evidence. We aim to acknowledge within two business days and decide or report progress within ten business days; shorter legal deadlines prevail. Direct resolution or voluntary conciliation may be pursued. This process does not prevent approaching an authority, seeking urgent relief, contacting a payment provider or protecting a legal deadline.
For business relationships without a different mandatory forum, Colombian law applies and disputes go to the competent courts at the operator's domicile in Colombia to the extent jurisdiction rules permit. Consumers retain their protective law, guarantees and courts, including courts at their residence where allowed. No worldwide mandatory arbitration, general waiver of collective actions, jury or non-waivable rights, or contractual shortening of legal deadlines is imposed. Authorities retain their powers.
Notices and general provisions
Service notices use the account, registered email or another agreed channel; the business must keep contact details current. Marketing requires the applicable separate choice and can be withdrawn. Material changes do not apply retroactively through silence alone; they are communicated and the required acceptance is obtained with evidence of the accepted text.
An invalid clause does not invalidate the remainder where the agreement can legally continue. A delay in exercising a right does not waive it. Assignment or a change of operator must respect contracts, notices, data protection and mandatory rights and does not expand entrusted processing purposes. No clause transfers QS's mandatory duties to the customer, promises unverified certifications or excludes liability that cannot legally be limited.
Content notices and review
Anyone may report service content they believe unlawful to admin@verticedigital.tech, alternatively acceso@verticedigital.tech, without signing in. Identify the exact URL, content, reasons and minimum supporting facts. Include a contact and, where required, a name and good-faith accuracy statement. Do not attach child-abuse material or unnecessary sensitive data; identify its location. Legal identification exceptions remain available.
Where contact details are available, we will acknowledge receipt and assess notices diligently and proportionately. Where legally permitted, affected people receive the decision, reasons and applicable review options. Request human review through the same channels; authority and court remedies remain available. Copyright notices also follow our published DMCA procedure. Additional intermediary or platform duties depend on the actual function and applicable law.
Confidentiality and compliance
Each party will protect the other's non-public business information received to provide or use the service, limit its use to that purpose and restrict access to staff or providers who need it and are bound to protect it. Exceptions cover information lawfully public, legitimately known or independently developed. Legally required disclosures are limited to what is necessary, with notice where permitted. Duties survive while information remains confidential; personal data also follow the annex and law.
Use and integrations must respect trade, export and sanctions restrictions applicable to the particular operation. Provider availability may vary. External disruption does not remove mitigation and notice duties or applicable mandatory cancellation, refund and complaint rights.
Age, representation and protection of children
Vértice is a business service and does not offer independent accounts to people under 18. Anyone contracting, administering or creating a buyer account must be at least 18 and have any additional legal capacity required locally; business representatives must also be authorized. An adult's permission does not enable a children's account the service does not offer. PEGI 3 describes app content and does not change these conditions or constitute parental consent.
An appointment, order or child's photo recorded by an adult is different from the child's own account. The business must establish necessity, have a lawful basis and any required guardian authorizations, respect the child's best interests and rights, limit access and retention, and respond to rights requests. Uploading an image for a booking or operation does not by itself authorize publication or campaign use. Data authorization, image rights and copyright are separate matters.
We do not routinely request a full birth date or identity copy to browse a catalog. If we become aware of a prohibited account or improper collection, we will restrict the affected processing during review and delete information that has no valid retention ground. A guardian may contact admin@verticedigital.tech or acceso@verticedigital.tech; we will proportionately verify identity and authority and coordinate with the business where it is controller. Do not send complete identity documents or the child's details in an initial message.
We do not authorize sale, behavioral advertising or model training using children's data processed on behalf of a business. A child-directed flow, or one involving known direct collection from children, that requires notices, verification or parental consent—including COPPA in the United States where applicable—will not be enabled without the required safeguards. Digital-consent ages are not equivalent to contractual adulthood.
Regional scope: 23 markets
Argentina, Bolivia, Canada, Chile, Colombia, Costa Rica, Ecuador, El Salvador, Spain, United States, Guatemala, Honduras, Italy, Mexico, Nicaragua, Panama, Paraguay, Netherlands, Peru, United Kingdom, Dominican Republic, Uruguay, Venezuela. A listed market does not enable every feature, payment method or tax integration, or certify local compliance. Mandatory local protections prevail; existing territorial restrictions remain.
Colombia
Habeas data, information, proof of authorization where applicable, access, correction, complaints, deletion and withdrawal under Law 1581 and applicable rules are preserved. SIC is the data-protection authority within its remit. Children's data receive heightened protection; operating from Colombia does not remove other territories' safeguards.
Spain, Italy and the Netherlands
Where GDPR applies, its rights, lawful bases, processing contracts and transfer safeguards apply alongside local cookie, child and contracting rules. Complaints may go to AEPD, the Italian Garante or Autoriteit Persoonsgegevens within their remit, without excluding another competent authority. An EU representative is assessed under the facts and legal exceptions; the Colombian contact is not presented as an EU representative. The annex does not replace standard contractual clauses or a required Europe–Colombia transfer assessment.
United Kingdom
Where applicable, UK GDPR, the Data Protection Act and current British communications, storage and access rules apply, including effective amendments. Transfers require the relevant UK mechanism where required; an EU mechanism is not presumed sufficient on its own. Complaints may be made to ICO. Representation duties are assessed separately from EU duties.
United States
Applicability depends on state, residence, activity, role and thresholds; business SaaS is not treated as a blanket exemption. Where legally recognized, you may access, know, correct, delete, obtain a portable copy, opt out of sale/sharing or targeted advertising, limit certain sensitive uses and appeal a denial without discrimination. Authorized agents and universal signals are supported where required. Entrusted purposes also follow the annex's service-provider terms; federal and sectoral rules are not replaced by CCPA.
Canada
Applicable federal and provincial rules, including Quebec requirements where relevant, govern meaningful consent, information, access, correction, protection and out-of-province processing. Privacy contacts identify the responsible person or role and cooperate with the competent federal or provincial authority. Language and contracting duties are assessed before offering the affected agreement; ES/EN alone does not establish Quebec language compliance. Existing operational or tax restrictions remain.
Other Latin American and Caribbean countries
Argentina, Bolivia, Chile, Costa Rica, Ecuador, El Salvador, Guatemala, Honduras, Mexico, Nicaragua, Panama, Paraguay, Peru, the Dominican Republic, Uruguay and Venezuela retain their applicable constitutional, data, consumer and contracting protections. No uniform law or identical rights or deadlines are assumed. Authorization, transfers, retention and responses follow each country's current rules and transitions; you may ask which rule and authority apply to your request. Future legislation is not presented as already effective.
Annex: processing of business data
This annex forms part of the terms accepted between the business identified in its account and QUIROGA SOLUCIONES E INGENIERIA SAS. It applies to personal data processed on the business's behalf, not Vértice's own purposes described in the privacy policy. It does not transfer Vértice's obligations to the business or exclude mandatory rules in its country.
1. Scope and instructions
The business determines the purposes and acts as controller. Vértice acts as processor or service provider: it hosts, organizes, retrieves, transmits to authorized recipients, exports and deletes data for the subscribed restaurant, retail and service modules. Instructions are documented through these terms, configuration and requests by authorized representatives, including international transfers. Vértice will notify the business if it considers an instruction unlawful. If law requires other processing, it will notify the business beforehand unless legally prohibited.
Processing lasts for the service relationship and until return or deletion is completed. It covers the business's customers, buyers, guests, contacts, employees and suppliers; identity, contact, account and role data, orders, bookings, recorded payments, documents and images supplied for operations. It does not enable medical records or health files. The business must have a lawful basis, inform individuals and limit data to what is necessary.
2. Limited use and security
Vértice will not sell or share data received under this processing arrangement for behavioral advertising, or use it for its own advertising, model training or purposes outside the instructions and legal duties. It will not combine it with other customers' or sources' data for independent purposes. Access is limited to authorized personnel subject to confidentiality. Vértice will maintain risk-appropriate measures: business isolation, role-based permissions, encryption in transit, credential protection, traceability and backup and recovery procedures. No unverified certification is promised.
3. Subprocessors and transfers
The business generally authorizes subprocessors necessary for the service: Vercel for web hosting and processing; Supabase for database, authentication and files; Hostinger for authentication and support emails containing entrusted data. Supabase's primary database is in Oregon, United States (us-west-2); this does not identify all locations of other services. Vértice operates from Colombia. Contractual details of entities, locations and applicable safeguards must be made available to the business before international processing that requires them. This annex does not replace standard contractual clauses or itself establish a lawful transfer.
Vértice will impose equivalent protection duties on subprocessors and remain responsible to the business for their performance. It will give prior notice of planned additions or replacements, with sufficient information and time for the business to raise justified objections before the affected processing. If unresolved, the parties will agree an alternative or end the affected processing with return or deletion. A flow requiring international safeguards will not start without putting them in place. Payment and advertising providers determining their own purposes do not become subprocessors of business data through this authorization.
4. Rights, incidents and cooperation
Vértice will assist the business with individual rights, impact assessments and consultations with authorities, considering the nature of processing and available information. It will notify breaches of business data without undue delay after becoming aware, providing available information on scope, consequences, measures and follow-up. It will make available information needed to demonstrate compliance and allow audits and inspections by the business or its authorized auditor, with safeguards for other customers. It will report directly received requests when the business must resolve them.
5. Termination and retention
At termination, Vértice will return or delete data and copies at the business's choice, except legally required retention. Exceptions will identify their reason, scope and applicable period or criterion; retained data will have restricted access and will not be reused. Manual local backups have a 30-day cycle from creation unless an exception is justified and recorded; this is not a universal legal period or a promise of immediate deletion of every provider backup. Deletion decisions will be reapplied after a restore. Return and mandatory rights are not conditional on purchasing a higher plan.
6. United States service-provider conditions
Where CCPA or an equivalent rule applies to entrusted processing, specific purposes are limited to hosting, organizing, retrieving, transmitting to authorized recipients, exporting and deleting data necessary for subscribed modules. Vértice will meet applicable duties and provide the same level of required protection as the business; it will not sell or share those data for behavioral advertising or retain, use or disclose them outside the direct business relationship or specified purposes except as legally permitted. It will not combine them with other customers, sources or its own interactions for prohibited independent purposes.
The business may take reasonable steps to verify compliance, stop and remediate unauthorized use and request evidence of rights handling, respecting security and other customers' data. Vértice will notify the business if it determines it can no longer meet applicable duties, cooperate with individual requests and require the necessary contractual conditions from subcontractors. These clauses do not themselves establish service-provider status if actual activities do not comply.
7. Contact and acceptance
Javier Alfonso Quiroga Sarmiento coordinates privacy and data requests. Contact: admin@verticedigital.tech; acceso@verticedigital.tech.
Express acceptance of this version of the terms includes this annex and is recorded with user, business, version and time. Previous accounts are not deemed to have accepted it: they must expressly accept before becoming bound by the new agreement. Legal data-protection duties do not depend on that acceptance.