Terms of Service

Placeholder. This page is the structural shell. The actual terms are being finalized by the operator and will be published before the public launch.

1. Acceptance

By signing into Joujik Mutualwork, you agree to these terms. If you do not agree, do not use the service.

2. The service

Joujik Mutualwork is a workflow tool for governance, risk, and compliance (GRC) audit projects. We coordinate task assignment, status, and audit-event tracking. Evidence files live in your own Google Drive — we do not host them.

3. Account registration

You authenticate via Google Sign-In. One account per individual. You are responsible for the security of your Google account; we do not store your Google password.

4. Acceptable use

Do not use the service to upload illegal content, malware, or content that infringes others’ rights. Do not attempt to bypass access controls or impersonate other users.

5. Your data

You retain ownership of all evidence files (which live in your Google Drive) and of your audit-project metadata stored in our systems. We process this data on your behalf to provide the service.

5a. Data location and access revocation

Each engagement places its evidence files in either your Google Drive or your consultant’s Google Drive. The choice is made by the client_admin during the per-project setup wizard. We strongly recommend choosing “I host the Drive folder” so that you keep custody of evidence regardless of what happens with the engagement.

If you are a client and you let your consultant host the Drive folder, removing your access from the engagement (by you or by the consultant) will also revoke your access to the evidence files stored in that consultant’s Drive. Joujik Mutualwork does not currently provide a grace-period export mechanism. You are responsible for backing up critical evidence locally before disengaging from a consultant-hosted project.

Per-engagement metadata (customer profile, comments, audit log, per-task notes) follows the same data-locality principle and is progressively being migrated into the engagement’s Drive folder under a hidden .joujik/ directory. When this migration is complete (planned for the M2 release), the same access-revocation rules apply: if your consultant hosts the Drive, removal also ends your access to historical metadata.

Joujik Mutualwork itself never holds copies of your evidence files or per-engagement metadata. What we hold server-side is identity (your Google email, encrypted refresh token), pointers (which Drive folder belongs to which project), membership (who can access which project), and static framework catalogues (ISO / SOC 2 / GDPR / Israeli Privacy Law clauses, which are public reference data).

6. Pricing

During the beta period, the service is provided at no charge. Once billing is enabled, current customers will be notified and given the option to subscribe before any charges apply.

7. Termination

You may stop using the service at any time by revoking our Google OAuth grant. We may suspend accounts that violate these terms.

8. Disclaimers

The service is provided “as is”. We make no guarantee that using this service will result in a passing audit. Joujik Mutualwork is a project-management tool, not legal or compliance advice.

9. Limitation of liability

To the maximum extent permitted by law, our liability is limited to the amount you have paid us in the 12 months preceding the claim.

10. Governing law

These terms are governed by the laws of (operator: jurisdiction).

11. Contact

Questions: (operator: add email).