BUSINESS SUBSCRIPTIONS

Service, billing & refund terms

Version plangrc-b2b-2026-10-04.2 · Prepared 4 October 2026

Prepared for owner and legal review. Live checkout remains disabled until this exact version is approved for publication. Test acceptance does not create a paid contract.

1. Who provides the service

PlanGRC is provided by Star Worldwide Trading Limited, company number 13530775, 268 Lees Road, Oldham, United Kingdom, OL4 1PA. Billing and service enquiries: [email protected]; +44 7883 27 1160. Privacy enquiries: [email protected].

2. Organisation accounts and contract formation

Online plans are offered to organisations for business use. The person ordering must be authorised to bind the organisation and provide accurate account and tax information. A verified workspace is required before payment. The contract comprises the accepted plan revision, these terms and any signed order or data-processing agreement. A signed order takes precedence for expressly negotiated matters; a data-processing agreement governs processing of customer personal data. We record the accepting administrator, time, plan and terms version.

Paid access starts after Stripe confirms payment. A redirect, payment attempt or abandoned checkout is not proof of payment. Trial access and its end date are stated in the workspace. No card is required for a separately offered trial; it does not automatically become a paid subscription without an authorised checkout.

3. Plans, prices, taxes and renewal

New-customer list prices are USD 600/month or USD 6,000/year for Starter; USD 1,800/month or USD 18,000/year for Compliance Operations + AI; and USD 3,600/month or USD 36,000/year for Assurance Business + AI. Enterprise and private deployments require a written quotation. Annual prices are paid in full in advance; they are not monthly instalments. Applicable taxes are additional and shown at checkout. Your bank may apply currency-conversion charges.

Subscriptions renew automatically at the billing interval you select until cancelled. You authorise Stripe to collect the agreed recurring charges using your chosen payment method. Existing accepted prices and limits remain attached to your subscription; editing our public catalogue does not change them. Any proposed price change to an existing agreement requires advance communication and acceptance or the process expressly agreed in your signed order.

Customer-specific discounts

A discount code is valid only for the named organisation, agreed initial plan and billing interval, before its redemption expiry. Codes cannot be stacked and can be redeemed once. A first-invoice discount applies to the first monthly invoice, or the first full annual invoice only where the offer explicitly specifies annual billing. A recurring discount applies to future eligible invoices until that subscription ends. It survives cancellation reversal before the term ends, but does not transfer to a new subscription after cancellation. Percentage discounts reduce the applicable list price; fixed discounts subtract the agreed amount per invoice and cannot create a negative charge. Taxes, prorations and an agreed plan change can change the total. The standard price and discount are shown separately on Stripe invoices. Changing the billing interval with a recurring offer requires a new billing agreement. A discount granted to an existing subscription applies prospectively and does not refund previous invoices.

4. Included users and AI allowances

Starter includes 5 GRC users and 50 acknowledgement-only users. Compliance Operations + AI includes 25 GRC users, 250 acknowledgement-only users and 250 standard AI requests per UTC calendar month. Assurance Business + AI includes 75 GRC users, 1,000 acknowledgement-only users and 1,000 standard AI requests per UTC calendar month. Invited and active users count against their respective allowance. Acknowledgement-only accounts access assigned policy acknowledgements, not the full GRC workspace. Other project, framework, assessment and storage limits are shown with the plan.

Compliance Operations + AI includes up to one guided cycle activation per subscription year and one active guided cycle. Assurance Business + AI includes up to three activations per subscription year and three active cycles. An annual prepaid subscription grants the annual activation allowance after payment. For monthly subscriptions, the Professional activation becomes available with the first paid month; Business activations become available with paid months 1, 5 and 9. Continuing guided access requires a current paid subscription. Cancelling and restarting the same workspace does not restart the allowance year or grant the same credits again. Unused activations expire at the allowance anniversary; they have no cash value. An upgrade grants only the difference in the applicable allowance, not a duplicate annual grant.

Each guided cycle has a maximum of 200 provider requests and 20 MiB of document processing. Standard AI allowances reset monthly and do not roll over. Requests reserved for generation, including failed requests with uncertain provider usage, count toward the limit; verified billing or service errors can be reviewed by support. The guided workspace also has a 512 MiB metadata and retained AI-history safety limit; contact support for an agreed archival arrangement before reaching it. No audit history is automatically deleted to reset an allowance. Extra cycles or resources, voice services, human consultants and external audits are not included unless separately ordered. AI outputs are drafts requiring human review; they do not approve compliance, certify an organisation or replace legal or professional judgement.

5. Upgrades, downgrades and changing billing interval

An eligible upgrade within the same billing interval is priced using Stripe's proration for the remaining period. You see the amount and confirm before we request payment. Higher entitlements begin only when the payment succeeds. If additional payment authentication is required, use the Stripe invoice page. Failed upgrade payment preserves the previously paid plan while the current paid term remains valid.

Downgrades and changes between monthly and annual billing take effect at the next renewal. There is no immediate cash refund for unused time. Reduce usage and active guided cycles to fit the target plan before requesting a downgrade. If usage later exceeds the new limits, existing records are retained and additional creation is restricted until usage fits. One scheduled change is allowed at a time. Cancelling renewal removes a scheduled plan change. Contact support for custom subscriptions, negotiated discounts or incompatible provider settings.

6. Cancellation, non-payment and ending service

An authorised administrator can cancel renewal in Billing at any time before renewal. Access continues to the paid period end. You may reverse a scheduled cancellation before the term ends; after it ends, a new checkout is required. Cancellation does not itself request a refund. A payment already processing or completed before cancellation remains subject to the refund policy below.

If a renewal is unpaid, Stripe may retry the payment and request authentication. PlanGRC makes the workspace read-only while payment is overdue; billing and payment-recovery tools remain available. Continued non-payment, fraud, unlawful use or a serious security threat may lead to suspension or termination. We will provide notice where practicable and legally permitted. No customer records are automatically deleted by a payment failure or cancellation webhook.

Export your information before the paid term ends. Workspace data is retained under the applicable customer agreement and privacy retention policy; the standard commercial record marks it eligible for retention review 180 days after cancellation. This is not a guarantee of ongoing application access or immediate deletion on that date. Legal holds, accounting records and backup schedules are handled separately. Contact [email protected] for an earlier deletion or export request.

7. Refunds and credits

• Duplicate payment or our billing error: we refund the duplicate or incorrect amount once verified.
• Material service failure attributable to us: notify support and allow a reasonable opportunity to fix it, normally up to 15 days unless urgency or law requires otherwise. If it remains unresolved, we assess a proportionate refund or credit for the affected paid service. A signed SLA may define a different remedy.
• Termination by us without customer breach: we refund the unused prepaid service period unless an agreed replacement remedy applies.
• Mandatory legal entitlement: rights that cannot lawfully be excluded take precedence, including where consumer law applies despite the stated business sales model.
• Goodwill: exceptional requests may be approved individually; approval in one case creates no general entitlement.

Change of mind, non-use, internal staffing changes, failure to cancel before renewal, completed guided work and ordinary mid-term cancellation do not automatically qualify for a refund. We do not provide a blanket consumer cooling-off waiver. Report errors promptly, ideally within 30 days; this request does not shorten any mandatory legal limitation period.

Request review from Billing using the invoice, amount and reason. Do not send card details or bank credentials. We aim to respond within five business days; complex cases can take longer. Refund approval is separate from subscription cancellation. Approved amounts are returned through Stripe to the original payment method where possible, accompanied by a credit note. A credit note being issued does not mean funds have reached your bank. Stripe, the card network and your bank determine processing time; failed or pending refunds require reconciliation. We do not deduct our processing fees from a refund owed for our error or a mandatory legal right. We cannot refund the same disputed amount twice; contact support if you have opened a chargeback.

8. Acceptable use, security and intellectual property

You retain ownership of your uploaded information and grant us only the permissions needed to provide and support the service. You must have permission to upload it. Keep administrator access and credentials secure, apply appropriate access controls, and notify us promptly of suspected compromise. Do not upload unlawful content, malicious code or payment card credentials; bypass limits; share named-user accounts; interfere with other customers; or attempt unauthorised access. We retain ownership of the service and its software. Your subscription grants a limited right to use it for your organisation during the term.

Each party will protect the other’s confidential information with reasonable care, use it only for the agreed service, and disclose it only to personnel and service providers who need it and are bound by appropriate duties, or where law requires. Information already public, independently developed or lawfully obtained without restriction is excluded.

9. Service commitments and liability

We will provide the service with reasonable skill and care. Unless a signed order states otherwise, there is no guaranteed uptime percentage, certification outcome or uninterrupted availability. We are responsible for losses caused by our breach subject to these terms. Neither party excludes liability for fraud, fraudulent misrepresentation, death or personal injury caused by negligence, or any liability that cannot legally be limited. Subject to those exceptions, each party's aggregate contractual liability is limited to the fees paid or payable for the affected service in the preceding 12 months. Neither party is liable for indirect or consequential loss, loss of profit or lost business opportunities. This cap does not excuse payment of agreed fees or a refund expressly due under these terms. Any differing liability allocation in a signed agreement controls.

10. Payment privacy and data processing

Stripe collects payment details on its hosted checkout and billing portal. PlanGRC does not collect or store full card numbers, CVC/security codes, card expiry dates, bank account credentials, billing addresses or tax identifiers in its billing database. Billing addresses and tax details supplied at checkout are held by Stripe for invoicing, tax and payment processing. PlanGRC stores only customer/subscription/price/invoice/event references, amounts and currency, dates and statuses, accepted plan and terms versions, administrator references, refund decisions and minimal audit records. Existing organisation contact details remain governed by the general privacy notice.

Invoice PDFs are fetched or linked from Stripe for authorised administrators; they are not copied into the PlanGRC evidence store. Raw payment webhook bodies are verified in memory and are not retained or logged by the billing integration. Necessary payment processing is separate from optional marketing and analytics consent. No Stripe card-entry script is loaded on the PlanGRC billing page. Stripe's hosted pages may use their own necessary cookies and fraud-prevention technology.

We process billing information to perform contracts, meet legal obligations and protect against fraud. UK company accounting records are generally retained for six years from the end of the relevant financial year, and longer where law, a tax investigation or legal hold requires. Access is restricted to authorised personnel. Stripe and its subprocessors may process information internationally under their applicable contractual safeguards. See Stripe's privacy notice and our privacy notice. Customer workspace personal data requires the applicable data-processing agreement; these billing terms do not replace it.

11. Complaints, changes and governing law

Raise billing or service complaints with [email protected], identifying the organisation and invoice reference. Both parties will first attempt to resolve disputes in good faith. Unless a signed order says otherwise, the contract is governed by the law of England and Wales and disputes are subject to its courts, without excluding mandatory local rights. Material changes apply prospectively after appropriate notice and any acceptance required by the customer agreement. They do not silently rewrite a previously accepted plan or terms record.

Privacy · Cookies · General website terms · Billing workspace