Terms of Sale

These Terms of Sale ("Terms") constitute a legally binding agreement between GR-Cadia Inc. (a corporation incorporated under the Canada Business Corporations Act), operating as GRCadia (grcadia.com), located at 2074 Steeles Ave E, Unit 17, Brampton, ON L6T 5A5, Canada (GST/HST: 704274364 RT0001), and the individual or business entity that completes a purchase or activates a subscription ("you" or "Customer").

By purchasing, you confirm that you are acting in a business capacity and that these are business-to-business (B2B) transactions.

2.1 Digital Products

GRCadia sells digital compliance templates, policy documents, procedure templates, technical playbooks, detection rules, automation scripts, and related documentation in standard editable formats including .docx, .xlsx, .pdf, and .zip bundles.

2.2 Framework Alignment

GRCadia Products are guidance tools designed to support compliance programme implementation. They are aligned with — but do not reproduce text from — recognised industry frameworks and regulations including ISO 27001, HIPAA, GDPR, SOC 2, NIST, PCI DSS, and others. GRCadia is not affiliated with, endorsed by, or certified by any standards body, accreditation body, or government agency. Products do not constitute legal, regulatory, or certification advice.

All prices are in USD unless otherwise stated. GRCadia reserves the right to change prices at any time. Price changes to existing subscriptions will be notified at least 30 days in advance. Payments are processed securely by Stripe Inc. GRCadia does not store payment card information. GST/HST may be applied to purchases by Canadian customers.

4.1 Permitted Uses

• Use Products internally within your organisation
• Modify and customise Products for your own internal use
• Store Products on your organisation's internal systems and cloud storage
• Print copies for internal reference and audit purposes
• Consultant and Enterprise subscribers: use Products when providing professional compliance services to clients (not for resale)

4.2 Prohibited Uses

• Redistribute, resell, sublicense, or share Products outside your organisation
• Post Products on public websites, document sharing platforms, or publicly accessible systems
• Remove or alter GRCadia copyright notices, disclaimers, or branding
• Use Products to train, fine-tune, or develop any AI or machine learning model
• Present Products as your original work or claim authorship to third parties

4.3 Seat Limits

5.1 General Rule — All Sales Final

Due to the digital nature of GRCadia Products, all sales are final. Once a Product has been delivered or made available for download, no refunds will be issued except as described below.

5.2 Exceptions

• The Product was not delivered or made available within 24 hours of payment
• The Product file is corrupt or unopenable and GRCadia is unable to provide a working replacement within 5 business days
• A duplicate charge occurred due to a technical error

5.3 Subscription Refunds

• Monthly subscriptions: No refund for the current billing period. Cancellation takes effect at the end of the current period.
• Annual subscriptions: Full refund available within 14 days of initial purchase, less the list price of any individual Products downloaded during that period. After 14 days, no refund is issued.

To request a refund under the exceptions above, email support@grcadia.com within 7 days of purchase with your order number.

All Products are the exclusive intellectual property of GR-Cadia Inc. and are protected by Canadian copyright law. Purchase does not transfer any intellectual property rights to you.

All third-party product names, trademarks, and registered trademarks mentioned in GRCadia Products are the property of their respective owners. GRCadia is not affiliated with Microsoft, Google, AWS, ISO, IEC, AICPA, HHS, NIST, or any other organisation whose frameworks or products are referenced.

7.1 No Warranty

GRCadia Products are provided "as is" without warranty of any kind. GRCadia does not warrant that Products will meet your specific compliance requirements, guarantee certification outcomes, or ensure your organisation will pass any audit or regulatory review.

7.2 Liability Cap

GRCadia's total aggregate liability for any claim shall not exceed:

You get back what you paid — nothing more.

7.3 Excluded Damages

GRCadia is not liable for any indirect, incidental, special, consequential, or punitive damages including loss of profits, regulatory fines, audit failures, or reputational harm.

7.4 Not Legal or Regulatory Advice

Nothing in any GRCadia Product constitutes legal, regulatory, compliance, or professional advice. You are solely responsible for ensuring your organisation's compliance with applicable laws and regulations.

Regulations and frameworks referenced in GRCadia Products are subject to change. GRCadia makes reasonable efforts to update Products when significant changes occur. However, GRCadia does not guarantee that any Product reflects the most current version of any regulation at the time of your download. You are responsible for verifying current requirements. Authoritative sources: iso.org, nist.gov, hhs.gov.

Subscriptions renew automatically at the end of each billing period. You will receive a renewal reminder at least 7 days before monthly renewals and 30 days before annual renewals. Cancel anytime at account settings. Files you download during an active subscription remain yours permanently regardless of subscription status. Full subscription terms at grcadia.com/subscription-terms.

GRCadia Products, including cybersecurity detection rules, automation scripts, and technical playbooks, may be subject to export control laws in certain jurisdictions. You are responsible for complying with all applicable export control regulations.

GRCadia collects and processes personal data in accordance with its Privacy Policy. GRCadia does not sell personal data to third parties.

These Terms are governed by the laws of the Province of Quebec and the federal laws of Canada. Disputes within the monetary jurisdiction of the Court of Quebec (Division des petites créances — currently CAD $15,000) shall be submitted exclusively to that court. For disputes exceeding that threshold, the parties submit to the exclusive jurisdiction of the courts of the Province of Quebec, judicial district of Montreal.

These Terms are available in French at grcadia.com/terms-fr.

These Terms, together with the Privacy Policy, EULA, and Subscription Terms, constitute the entire agreement between you and GRCadia. GRCadia may update these Terms with at least 14 days' notice for material changes. Continued use after changes take effect constitutes acceptance.