Terms of service
Version of 27 October 2026
Translation of the Portuguese original. In case of any discrepancy, the Portuguese version prevails.
These terms govern the use of Iris, the management platform for hauliers of Balboastar Web Solutions (Rui Lucas dos Santos Costa, sole trader (empresário em nome individual), tax number (NIF) 213752654, Avenida de São Félix, n.º 8, 4760-510 Gondifelos, Vila Nova de Famalicão), hereinafter “we”. The company that creates the account — hereinafter the “customer” — accepts them upon registration, together with the data processing agreement at the end of this page.
1. What the service is
Iris is a platform accessible over the internet, with a dashboard for the office and a web app for drivers: trips, stops and deliveries, drivers, fleet, customers, refuelling, expenses and reports. It is a service for businesses, not for consumers.
Iris does not replace the tachograph, which is the legal record of driving and rest times, nor the mandatory transport documents, nor the certified software required by law for invoicing. The driving times it shows are an aid to planning.
2. Account and customer responsibilities
- Whoever creates the account warrants that they are authorised to bind the company and that the registration details are true.
- The customer is responsible for the credentials of its users and drivers and for everything done with them.
- The customer uses the service in accordance with the law, including employment and data protection law, and informs its workers about the processing of their data (we have a template notice, which we send on request).
- The customer checks what the automatic document reading proposes before saving: the result is a suggestion, not a certainty.
- The customer does not attempt to access other companies' data, overload the service or circumvent its protections.
3. Trial period
Each new haulier has 30 days of free use, with no card required. At the end, if there is no paid subscription, we may suspend the account: the dashboard becomes read-only and nothing is deleted at that point. The data can be edited again once the subscription is activated.
4. Price and payment
- The subscription is monthly: a base fee per company plus a fee per tractor unit, according to the chosen plan. Current prices are on the website.
- Payment is made in advance, by card via Stripe or by bank transfer. Card details are processed by Stripe and do not pass through our servers.
- Prices do not include VAT. While we remain under the exemption scheme of Article 53 of the Portuguese VAT Code (CIVA), no VAT is charged; if the scheme changes, VAT will be added at the statutory rate.
- If a payment fails and is not settled, the account may be suspended under section 3.
5. Cancellation
The customer may cancel at any time. The service continues until the end of the period already paid for and there is no refund of monthly fees in progress. We may also terminate the service with 30 days' notice, or immediately in the event of unlawful use, breach of these terms or prolonged non-payment.
6. The customer's data
The data the customer records belongs to the customer. We process it solely to provide the service, as processor, under the data processing agreement. The customer may export trips, refuelling, expenses and times at any time, and ask us for a copy of the remaining data. When the contract ends, the data remains available for export for 30 days and is then deleted, except for what the law requires us to keep.
How we process the data for which we are the controller is set out in the privacy policy.
7. Availability and changes to the service
We do our best to keep the service available, but we do not guarantee uninterrupted operation: there may be downtime for maintenance, provider failures or causes beyond our control. At this stage we do not commit to a service level agreement with penalties. We may improve and change features; if we withdraw one on which the customer depends, we will give reasonable advance notice.
8. Limitation of liability
The service is provided as is. To the extent permitted by law, our liability for losses relating to the service is limited to the amount of the monthly fees paid by the customer in the three months preceding the event that gave rise to them, and we are not liable for loss of profits or for indirect damages. Nothing in these terms excludes liability for wilful misconduct or gross negligence, or any other liability that cannot be excluded by law.
9. Changes to the terms
We may change these terms. Material changes are communicated by email with 30 days' notice. If the customer does not agree, it may cancel before they take effect.
10. Governing law and jurisdiction
Portuguese law applies. The courts of the district of Braga, Portugal, have jurisdiction over any dispute.
11. Contact
Balboastar Web Solutions · geral@bswebsolution.com · 911 884 828 · Avenida de São Félix, n.º 8, 4760-510 Gondifelos, Vila Nova de Famalicão.
Annex — Data processing agreement (Art. 28 GDPR)
Between the customer (controller) and Balboastar Web Solutions (processor). It forms part of these terms and applies for as long as Iris is used.
1. Subject matter, nature and purpose
Hosting, organising, displaying and transmitting the data that the customer and its users record; calculating routes, times and consumption; reading documents and images when a user requests it; sending end-of-trip reports to the recipients configured by the customer.
2. Data subjects and categories of data
The customer's drivers and other workers, office users, contact persons of the customer's customers and persons who sign for delivery of the goods. Identification and contact data; tax number (NIF), social security number (on the back of the Portuguese citizen card), IBAN, address and date of birth; images of documents (identification, driving licence, CAM (driver certificate of professional competence), tachograph card, ADR, driver qualification certificate) and photograph; pay per km; trips, stops and deliveries; location of the driver's phone at each entry; refuelling, expenses and receipts; incidents and photographs; absence requests and supporting documents, which may contain health data (Art. 9); fines and accidents; delivery signatures.
3. Our commitments
- To process the data only on the documented instructions of the customer — this agreement and the use of the platform constitute those instructions.
- To ensure the confidentiality of those who have access to the data.
- To apply the security measures set out in section 5.
- To engage only the sub-processors listed in the privacy policy (section 5), which the customer authorises by way of general authorisation. We give 30 days' notice of each new provider; the customer may object and, in that case, cancel at no cost.
- To assist the customer in responding to data subjects' requests and with data protection impact assessments.
- To notify the customer of a personal data breach without undue delay and, at the latest, 48 hours after becoming aware of it.
- At the end of the contract, to allow the data to be exported and to delete it within the following 30 days, unless there is a legal obligation to retain it.
- To make available the information necessary to demonstrate compliance with this agreement and to allow reasonable audits, with prior notice.
4. The customer's responsibilities
To have a lawful basis for the data it records, to inform the data subjects, and to determine who has access (user roles) and the retention periods for its data.
5. Security measures
- Isolation by company and by role in every database table and in file storage.
- Personal documents in private storage, readable only by the office and modifiable only by management and human resources.
- Encrypted connections, hashed passwords, service keys held only on the server.
- AI document reading with zero retention and no use for training.
- Logging of changes to records; replaced documents deleted from storage.
- Database hosted in the European Union.