General Terms of Use and Sale

Retyc — a service by TripleStack SAS

Effective date: February 23, 2026


TripleStack SAS, a simplified joint-stock company (société par actions simplifiée) with share capital of €1,000, registered with the Lyon Trade and Companies Register under number 853 010 064, with its registered office at 12 B rue du Stade — 69290 Grézieu-la-Varenne, France (hereinafter "TripleStack"), operates the Retyc platform accessible at https://retyc.com (the "Retyc Platform" or alternatively the "Platform").


1. Purpose

These General Terms of Use and Sale (hereinafter the "ToU") define the conditions under which TripleStack provides its services on the Platform to the client (the "Client") and their users (the "Registered Users") (the "Services").

The Retyc Platform is an end-to-end encrypted file storage and sharing service, hosted exclusively in Europe.

The Client expressly acknowledges that they are solely responsible for all data transferred or communicated by them and their Registered Users on the Platform for the purpose of using the Services (the "Client Data").

To become a Client, the person must be a merchant, exercise an independent professional activity, or act within the scope of their usual and principal professional activity.

The Services include a free offer (hereinafter the "Free Plan") and paid subscription offers. These ToU apply to all such offers. The Services are subject to change and TripleStack may remove services or offer additional or new services, which may be subject to additional, separate or supplementary terms and conditions. The various Services and subscription terms are defined on the Retyc website at https://retyc.com (the "Retyc Site").

Use of the Services is expressly conditional upon acceptance of all ToU, which the Client and their Registered Users acknowledge having received in a legible and understandable manner.

If the Client is a legal entity, the person accepting these ToU on behalf of and for the Client declares and warrants that they are authorised and have the capacity to bind the Client to these ToU.

Registration, access to and use of the Platform in any capacity as of the date of last connection constitutes full and unconditional acceptance of these ToU and TripleStack's Personal Data Protection and Use Policy in their latest version.

The Client warrants that their Registered Users will comply with these ToU.

The Client remains fully responsible to TripleStack for the use of the Services and the Platform by all their Registered Users.

The Client and their Registered Users may access the Platform using any Internet browser and/or operating system. It is the Client's responsibility to have Internet access and the equipment necessary to use the Services.

If any part of the ToU is found to be illegal, invalid or unenforceable for any reason, the provisions in question shall be deemed unwritten, without affecting the validity of the remaining provisions, which shall continue to apply.

The fact that TripleStack does not invoke any provision of these ToU at any given time shall not be construed as a waiver of the right to invoke it at a later date.


2. Definitions

"Administrator": means any person duly authorised by the Client to manage the Client's account and their Organisation.

"Client": means TripleStack's contracting party, acting in a professional capacity.

"ToU": means these General Terms of Use and Sale.

"Personal Data": means, within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the "General Data Protection Regulation" or "GDPR"), any information relating to an identified or identifiable natural person.

"Client Data": means the files, information, documents and any other content communicated or provided by the Client and/or Registered Users on the Retyc Platform.

"Free Plan": means the free access offer to the Services, subject to the limitations defined on the Retyc Site.

"TripleStack": means the simplified joint-stock company (société par actions simplifiée) with share capital of €1,000, registered with the Lyon Trade and Companies Register under number 853 010 064, with its registered office at 12 B rue du Stade — 69290 Grézieu-la-Varenne, publisher of the Platform.

"Platform": means the Retyc online service accessible at https://retyc.com and where applicable on any other medium and/or operating system, the use of which is subject to these ToU.

"Services": means all the features and services offered by TripleStack on the Platform, including file storage, encryption and sharing. The Services are subject to change.

"Registered User": means any person who has created an account on the Platform, authorised to connect to the Services by the Client in accordance with these ToU, regardless of the access rights granted to them (Administrator or any other user).

"Anonymous User": means any person accessing the Platform without a registered account, notably to download a shared file.


3. Registration and Access to Services

3.1 Conditions of Access and Use of the Platform

The Client is solely responsible for the proper functioning of their computer equipment and their access to the Platform. The Client is solely responsible for maintaining their computer system to enable a reliable connection to the Retyc Services. All costs incurred by the Client for access to the Platform by the Client and their Registered Users, including connection costs and the costs of acquiring or renewing computer equipment, are the exclusive responsibility of the Client.

TripleStack shall not be held liable in the event of damage to the Client's or Registered Users' computer equipment caused by malicious software, or in the event of interruption or failure of the Client's Internet connection.

3.2 Creating a Client Account

In addition to accepting these ToU, access to the Platform and the Services requires the creation of a Client account using the form provided for this purpose.

The Client shall provide TripleStack with all information requested for the creation of the account. The Client will have an Administrator profile. An organisation will be linked to the account (the "Client's Organisation" or the "Organisation"). This information is defined in TripleStack's Personal Data Protection and Use Policy, accessible at https://retyc.com/legal/data-policy, the terms of which form an integral part of these ToU.

The Administrator will be authorised to grant access rights and usage permissions to any Registered User they have invited to connect to the Platform.

The Client undertakes to:

a) provide truthful, accurate, up-to-date and complete information as requested during the registration process; and

b) promptly maintain and update all information relating to them in order to keep it truthful, accurate, up-to-date and complete.

TripleStack reserves the right to update at any time the list of information to be provided for the creation and maintenance of the Client's account and Administrator profile.

3.3 Granting Authorisations to Registered Users

The Administrator defines the terms of connection and use of the Platform and the scope of usage rights granted to Registered Users linked to the Client's Organisation.

Each Registered User is responsible for reading and accepting these ToU.

In all cases, future Registered Users will be required to create their profile in accordance with these ToU. They must provide all information requested by TripleStack using the forms provided for this purpose. Failure to provide mandatory information will prevent registration on the Platform.

Registered Users must:

a) provide truthful, accurate, up-to-date and complete information as requested during the registration process; and

b) promptly maintain and update all information relating to them in order to keep it truthful, accurate, up-to-date and complete.

3.4 General Provisions

If the Client or their Registered Users provide false, inappropriate, outdated or incomplete information, or if TripleStack has valid reasons to suspect that such information is false, inappropriate, outdated or incomplete, TripleStack reserves the right to delete the Client's account and refuse any current or future use of the Services.

It is the responsibility of Clients and Registered Users to ensure that their personal data used to create their accounts is accurate and complete, and to select a strong and secure password.

As TripleStack has no means of verifying the identity or capacity of Clients and Registered Users, TripleStack cannot be held liable for identity theft in the event of fraudulent registration. In any case, any person who discovers that their identity has been usurped during their connection must immediately contact TripleStack at: legal@retyc.net.

Access to the Client's personal space and Organisation is strictly personal and non-transferable. Any use of a Client's or Registered User's login credentials on the Platform creates a presumption that the account holder is connected. The Client and their Registered Users are therefore solely responsible for the use of their login credentials.

Passwords must under no circumstances be shared with or communicated to third parties. TripleStack cannot under any circumstances be held liable for the loss of login credentials and/or a password.

The Client and their Registered Users are solely responsible for keeping their login credentials and passwords confidential. In the event of loss, theft or compromise of their credentials, whether resulting from negligence or fault on the part of the Client or their Registered Users, or from the actions of a malicious third party, TripleStack cannot under any circumstances be held liable for the consequences of fraudulent use of the account concerned, including unauthorised access to Client Data, or any modification, deletion or disclosure of files resulting therefrom. Any use of an account with valid credentials is presumed to have been carried out by the account holder.

If the confidentiality of a password is compromised, the Client undertakes to notify TripleStack as soon as possible at legal@retyc.net so that the necessary measures can be taken. The Client remains responsible for the use of their account until they have notified TripleStack of the risk of compromise.


4. Retyc Services

4.1 Platform Services

TripleStack offers on the Retyc Platform a secure file storage and sharing service with end-to-end encryption, hosted exclusively on infrastructure located in Europe.

The various Services, features and subscriptions available are defined on the Retyc Site.

The Client may subscribe to the Free Plan or to a paid subscription on a monthly or annual basis, automatically renewable by tacit agreement.

Subscriptions will be automatically renewed for an identical period, unless cancelled by the Client under the conditions set out in Article 6.

4.2 Rules Governing Use of the Services

The Client is responsible for all Client Data that they and their Registered Users communicate and use through the Platform and the Services.

The Client designates the Registered Users authorised to use the various Services. All such persons act under the Client's sole responsibility.

The Client undertakes not to resell the services covered by the Services to third parties, or to use the Services for purposes outside the scope defined herein. In the event of breach of this obligation, TripleStack may proceed with the immediate suspension of the Services, the closure of the Client's account and the termination of the contract.

Prohibited content. It is strictly prohibited to use the Platform to store, share or distribute any unlawful content, including in particular: any content contrary to public order and morality, any child sexual abuse material, any content glorifying terrorism or crimes against humanity, any content infringing the intellectual property rights of third parties, any content constituting an infringement of privacy or human dignity. TripleStack reserves the right to immediately remove any unlawful content brought to its attention and to terminate the account of the Client concerned, without prejudice to any legal action.

4.3 Additional Services and Modification or Removal of Services

The Platform and the Services are subject to change. TripleStack may offer additional services or new features, which may be subject to additional, separate or supplementary terms and conditions.

TripleStack may at its sole discretion modify or remove any Service or feature. In the event of any substantial removal or modification, TripleStack undertakes to notify the Client in advance as soon as possible.


5. Financial Terms

5.1 Pricing and Terms for Services Subscribed by the Client

The terms and pricing for paid Services are communicated by TripleStack on the Retyc Site. The Free Plan is accessible at no charge, subject to the limitations defined on the Retyc Site.

The Client may modify their order and correct any errors before confirming their order.

Upon acceptance of these ToU and confirmation of the order for Services, the contract is validly concluded between TripleStack and the Client.

The Client may modify their chosen subscription plan at any time during their subscription. Such modification will take effect for the remainder of the current subscription period and for subsequent renewals. Amounts due will be recalculated on a pro-rata basis for the remaining subscription period. Where a credit is due, the Client will benefit from it during the next renewed subscription period.

5.2 Payment

Prices are listed on the Retyc Site in the Services descriptions, in euros, excluding tax and including all taxes.

The total amount is indicated in the subscription summary, both excluding tax and including all taxes.

Orders for Services on the Platform are payable in euros. Full payment must be made on the date of the order by the Client.

Payments are processed by the payment service provider Stripe. Stripe's general terms and conditions are available at https://stripe.com/en/legal.

The Client must pay the full amount of each invoice, including all taxes indicated thereon, without being able to offset any amounts allegedly owed by TripleStack.

The Client agrees to pay all applicable taxes, government charges and any other taxes applicable to all their payments.

Any failure to pay will result in the automatic termination of these ToU.

In the case of a subscription, the Client will be automatically charged using their payment method at the beginning of each subscription period for the applicable fees and taxes for that period.


6. Term — Termination — Consequences of Termination

6.1 Term

The contract takes effect on the date on which the Client registers to use the Platform and will be automatically renewable for successive periods of one (1) month or one (1) year, depending on the subscription chosen. The Free Plan is entered into for an indefinite period.

Paid Service subscriptions will be automatically renewed unless the Client notifies cancellation before the renewal anniversary date, or unless TripleStack notifies termination under the conditions set out below.

6.2 Termination

6.2.1 Suspension of Services — Termination by TripleStack

Regardless of the offer subscribed to, TripleStack shall have the right to terminate these ToU with immediate effect for any legitimate reason and at any time, by simple notification, temporarily or permanently, by deleting the Client's account and/or their Registered Users' accounts, including in the event of breach of any provision of these ToU or the storage or sharing of unlawful content.

6.2.2 Termination by the Client

In the event of cancellation of the subscription by the Client, the subscription will end on the expiry date and no renewal will take place. The Free Plan may be cancelled at any time by the Client via their account settings.

6.3 Consequences of Termination

Following account closure, the Client, the Administrator and all of the Client's Registered Users will be given the opportunity to download their content available on the Platform for their own archiving, within the timeframes defined according to the type of offer subscribed to. After this period, the Client Data will be permanently deleted.


7. Non-Exclusivity

The Client acknowledges that TripleStack has no exclusivity obligation. Accordingly, TripleStack is free to provide Services to other clients, including competitors of the Client.


8. Platform Availability — Force Majeure

The Platform is in principle accessible 24 hours a day, 7 days a week, except for interruptions, whether scheduled or not, for maintenance purposes or in cases of force majeure as defined by French courts, including natural disasters, armed conflict, terrorist attacks, epidemics and all public health risks, labour disputes, strikes at TripleStack or its suppliers, or mandatory injunctions from public authorities.

Where possible, TripleStack will notify the Client in advance of any maintenance or update operations.

TripleStack undertakes to regularly update the Platform and to correct any recurring bugs or defects reported to it as soon as possible. TripleStack will use its best efforts to ensure continuous availability of the Platform and to restore it as quickly as possible in the event of an interruption.

TripleStack undertakes to take all state-of-the-art measures to ensure the IT security of its Services and the Platform, in particular against the risks of intrusion or viruses.

TripleStack reserves the right to interrupt the Services where the security of the Platform is threatened (detected security breach, intrusion, data corruption, virus, malware).

No credit, refund or credit note of any kind will be issued in the event of a scheduled maintenance interruption.


9. Personal Data Protection

Each Party is required to comply with all applicable regulations relating to the protection of personal data, in particular the provisions of Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and the French Data Protection Act (Loi Informatique et Libertés) of 6 January 1978, as amended.

TripleStack's Personal Data Protection and Use Policy is accessible at: https://retyc.com/privacy.


10. Intellectual Property

10.1 TripleStack's Intellectual Property

The Retyc Platform, as well as all interfaces and applications developed by TripleStack, available now and in the future, on all present and future operating systems and platforms, as well as all elements relating to the TripleStack and/or Retyc brands, including all present and future registrations, logos, designs, images, photographs, illustrations and all other associated elements and rights, remain the exclusive property of TripleStack.

The Services are protected by laws relating to copyright and trademarks, as well as other laws in force in France and the European Union. Nothing in these ToU shall give the Client or their Registered Users the right to use the name TripleStack or Retyc, nor their trademarks, logos, domain names or other distinctive brand attributes.

TripleStack grants the Client a personal, non-transferable and non-exclusive licence to access and use the Platform exclusively in the context of using the Services under the terms and conditions herein.

The Client is not authorised, except as required by mandatory legal provisions, to modify, decompile, disassemble or create any derivative work from the Retyc Platform (in whole or in part).

TripleStack may use open-source software and make it available to the Client in compliance with the licences governing such software.

10.2 Non-Infringement Warranty

TripleStack declares that it holds all intellectual property rights relating to the Platform and warrants in particular that the Platform does not constitute an infringement of any pre-existing work and that it respects the intellectual property rights of third parties.

As such, TripleStack indemnifies the Client against any action, claim or opposition from any person invoking an intellectual property right to which the performance of these ToU may have given rise.

For their part, the Client undertakes to immediately notify TripleStack of any infringement of the Platform of which they become aware.


11. Client Data

TripleStack undertakes to take all state-of-the-art measures to ensure the integrity of Client Data, including by performing regular backups.

The Client may at any time back up their data in accordance with the Platform's procedures and remains solely responsible for backing up their data.

The Client is the sole owner of the rights to their data processed in the context of the Services.

The Client grants TripleStack and its subcontractors, as needed, a non-exclusive, worldwide, royalty-free and non-transferable licence to host, cache, copy and display said Client Data solely for the purpose of performing the Services and exclusively in connection therewith. This licence will automatically terminate upon cessation of the contractual relationship between the Parties.

The Platform and all data thereon, including Client Data, are hosted on infrastructure located exclusively in Europe (Scaleway SAS and Clever Cloud SAS).

The Client declares and warrants that they hold all necessary authorisations to use their Client Data in the context of the Services and that they do not infringe any third-party rights.

The Client is informed and agrees that TripleStack may access their Client Data and transmit it upon requisition from a duly authorised administrative or judicial authority, in compliance with applicable regulations. Unless prevented by such requisition, TripleStack will endeavour to inform the Client without delay.

TripleStack shall have the right to aggregate raw, statistical and anonymised data relating to the use of the Platform for public disclosure and/or to third parties, in accordance with applicable terms and conditions.


12. Liability

12.1 TripleStack's Liability

TripleStack accepts no liability for the results obtained from the use of the Platform and the Services by the Client and Registered Users.

The Platform being a standard service designed to meet the needs of the largest number of clients, TripleStack cannot guarantee that it will meet the Client's specific requirements. TripleStack does not guarantee that the features of the Services will meet the Client's particular requirements.

Being subject to a best-efforts obligation, TripleStack shall in no event be liable for direct or indirect damages suffered by the Client resulting from unavailability of the Platform, including data loss or loss of revenue.

Under no circumstances shall TripleStack be required to compensate for indirect or consequential damages such as, but not limited to: loss of business, loss of profit, loss of opportunity, commercial damage or loss of earnings.

In any event, TripleStack's potential financial liability shall not exceed the amounts paid by the Client for the Services that gave rise to the liability claim over the preceding twelve (12) months.

12.2 Client's Liability

The Client is required to ensure and warrants that all their Registered Users comply with these ToU.

The Client is solely responsible for Client Data and is responsible for removing any disputed or unlawful content.

Without prejudice to the foregoing, in the event of abuse or breach of these ToU, TripleStack reserves the right to take any appropriate action against any Client and/or Registered User in order to protect its rights.

12.3 User Obligations Regarding the Operation of the Services

The Client undertakes not to circumvent the security features of the Platform, not to disrupt its operation (spam, denial of service attacks, viruses), not to reverse engineer the Platform, and not to use software or bots to access or analyse the Services without authorisation.

The Client is required to report any abuse observed on the Platform to legal@retyc.net or by registered letter with acknowledgement of receipt to the address set out in Article 17 hereof.


13. Confidentiality

The Parties mutually undertake a general obligation of confidentiality with respect to any confidential information exchanged in the context of the preparation and performance of the Services, except for information that is generally known to the public.

Accordingly, the Parties undertake to keep all confidential information strictly secret, not to use it for purposes other than the performance of the Services, and not to communicate it to third parties without the prior written consent of the other Party, except where required by a competent public authority.

This confidentiality obligation shall remain in force after the expiry or termination of the contractual relationship for a period of three (3) years.

Furthermore, and subject to the above provisions, TripleStack is authorised by the Client to refer to the provision of the Services as a commercial reference with its clients and prospects, and to use the Client's distinctive signs (brand, logo) for this purpose.


14. Changes to Services — Amendments to the ToU

The Services and these ToU are subject to change. TripleStack may modify these ToU and any other terms and conditions relating to the use of the Retyc Platform.

If TripleStack makes substantial changes to these ToU, the Client and Registered Users will be informed in advance, and in any event at least fifteen (15) days before any changes affecting the rights or obligations of any party take effect, via the Platform or by any other means.

If the Client refuses to accept the new ToU, the Client may terminate their subscription in accordance with the terms of Article 6.


15. Language

As these ToU may be made available in different languages, in the event of conflict or contradiction between the provisions of the different versions, the French version shall prevail.


16. Evidence, Retention and Archiving

Computerised records kept in TripleStack's systems in compliance with state-of-the-art security standards shall be considered as proof of communications. In the event of a discrepancy between TripleStack's computerised records and documents held by the Client, TripleStack's computerised records shall prevail.


17. Contact TripleStack

For any questions regarding these ToU, TripleStack can be contacted by the following means:

  • By email: legal@retyc.net
  • By registered letter with acknowledgement of receipt addressed to:

TripleStack SAS
12 B rue du Stade
69290 Grézieu-la-Varenne
France


18. Governing Law and Jurisdiction

These ToU are governed by French law.

In the event of a dispute relating to the conclusion, performance, interpretation or termination of these ToU, the Parties shall endeavour in good faith to reach an amicable resolution.

Failing an amicable resolution, exclusive jurisdiction is attributed to the competent courts of Lyon, France.