Terms of Service
Last updated: 22 October 2026
1. About these Terms
These Terms of Service (“Terms”) govern access to and use of the services provided under the 3 Steps Data brand by FLATWORLD INTEGRATION PTY LTD (ACN 617 309 789), trading as 3 Steps Data (“3 Steps Data”, “we”, “us” or “our”).
By purchasing a subscription, creating or operating a Data Vault, creating or using a Data Connection, or otherwise using the service, you agree to these Terms.
If you use the service on behalf of an organisation, you represent that you have authority to act for and bind that organisation.
If you do not agree to these Terms, do not use the service.
2. Definitions
In these Terms:
Customer Content means data, documents, files, communications and other information placed in a Data Vault or made available through a Data Connection by or on behalf of a customer or participant.
Data Connection means a controlled relationship through which information may be made available to, or contributed by, a person, organisation or system according to permissions selected by the Data Vault operator.
Data Connection Group means an organisational feature used to group related Data Connections. Moving a Data Connection between Data Connection Groups does not itself move, copy or rearrange Customer Content.
Data Vault means the controlled environment provided through the service in which Customer Content is staged, stored and made available through Data Connections.
Trust Verification means the 3 Steps Data mechanism that allows a user to check whether a Data Connection or service link is an authentic 3 Steps Data link.
3. The service
3 Steps Data provides infrastructure that allows customers to create and operate Data Vaults and create controlled Data Connections between those Data Vaults and authorised people, organisations or systems.
A Data Connection may allow a participant to access, download or contribute information depending on the permissions selected by the Data Vault operator.
The service may also include security, Trust Verification, resilience, disaster-recovery and administration functionality.
Features may evolve over time.
4. No conventional identity account
The 3 Steps Data platform is designed so that customer account, identity and billing personal information does not need to be stored within the Data Vault platform.
Payment providers handle payment and billing information separately.
Service access, subscriptions and Data Vault operation may rely on technical identifiers, credentials, verification mechanisms or payment status without creating a conventional customer identity profile within the Data Vault platform.
5. Data Vaults
Each Data Vault subscription applies to one Data Vault.
The Data Vault operator chooses the Data Vault region from those available when the Data Vault is created.
A Data Vault is a genuine working environment.
One Data Vault subscription is not intended to provide an unlimited number of separate environments for an entire enterprise.
Additional Data Vault subscriptions may be appropriate for different teams, environments, business units, projects or use cases.
There is no per-seat licensing for participants in Data Connections.
6. Data Connections
A Data Connection is a controlled relationship through which information can be made available to or contributed by authorised participants.
You decide which Data Connections to create, who or what to connect with and what permissions each Data Connection has.
Data Connections may be organised into Data Connection Groups.
Moving a Data Connection between Data Connection Groups changes its organisation only. It does not move, copy or rearrange the underlying Customer Content.
3 Steps Data is not a party to the commercial, professional, personal or other relationship between participants merely because the service provides infrastructure for the Data Connection.
7. Customer Content
As between you and 3 Steps Data, you retain the rights you have in your Customer Content.
You give 3 Steps Data only the rights reasonably necessary to host, encrypt, process, transmit, protect, back up where enabled, recover and otherwise handle Customer Content for the purpose of providing and operating the service and meeting applicable legal obligations.
3 Steps Data does not acquire ownership of Customer Content merely because it is stored or processed using the service.
8. Responsibility for Customer Content
You are responsible for Customer Content that you upload, provide, disclose or make available through the service.
You are responsible for ensuring that:
you have the rights and authority required to use, store and disclose the Customer Content;
the Customer Content is lawful;
your use of the Customer Content complies with applicable privacy, confidentiality, professional, regulatory and contractual obligations;
the recipient of Customer Content is the person, organisation or system you intend to receive it; and
the permissions you select are appropriate for the information concerned.
3 Steps Data does not determine whether particular Customer Content is accurate, complete, appropriate, lawful or suitable for disclosure to a particular recipient.
9. Communications between users
3 Steps Data provides infrastructure through which users may communicate or exchange Customer Content.
3 Steps Data is not responsible for statements, instructions, representations, requests, advice, files, documents or other communications exchanged between users.
The fact that a communication or file is transmitted using a Data Connection does not mean that 3 Steps Data has reviewed, authenticated, approved or endorsed its contents.
You are responsible for assessing the accuracy, completeness, authenticity and appropriateness of communications or Customer Content you receive.
You should not rely on a communication merely because it was transmitted using 3 Steps Data.
10. Trust Verification
3 Steps Data provides Trust Verification functionality that allows a user to check whether a Data Connection or service link is an authentic 3 Steps Data link.
Trust Verification verifies the relevant 3 Steps Data link.
It does not verify or guarantee:
the identity of another participant;
that a person is authorised to act for an organisation;
the trustworthiness of another person, organisation or system;
the accuracy, legality or authenticity of Customer Content;
the truth of any statement or communication; or
the safety or commercial merit of a proposed transaction or relationship.
You remain responsible for deciding whether to connect, communicate, disclose information, act on information received or proceed with a transaction or relationship.
11. Downloads and the limits of control
If you permit a participant to download Customer Content, the downloaded copy leaves the Data Connection.
That copy is no longer controlled by the permissions associated with the Data Connection.
3 Steps Data cannot control how a recipient uses, stores, copies, forwards or distributes a legitimately downloaded copy.
We deliberately make this boundary clear rather than representing that the service can provide control after information has left the Data Connection.
12. Payments
Payments are processed by independent payment providers.
3 Steps Data currently supports Stripe and may make additional providers available.
Payment providers may collect and retain information required to process transactions, including personal information, billing information and payment credentials.
3 Steps Data does not store payment-card information or customer billing personal information inside the Data Vault platform.
Your use of a payment provider may also be subject to that provider’s own terms and privacy policy.
13. Pricing
The price applicable to a Data Vault is displayed before purchase.
At the date of these Terms, the standard price is:
€20 per Data Vault per month, or the equivalent displayed in a supported currency.
Annual subscriptions receive the discount displayed when purchased, currently 20% compared with the corresponding monthly price.
There is no per-seat licensing.
There is no free trial unless we expressly offer one.
Applicable taxes may be added where required.
14. Payment methods
Payments must be made using a supported payment method made available through the service.
We currently use payment-card processing through payment providers.
We do not accept purchase orders unless we expressly agree otherwise.
A subscription begins once the required payment has been successfully confirmed.
15. Renewals
Subscriptions automatically renew for the same billing period unless the next renewal is cancelled before it occurs.
You may stop your next renewal at any time using the cancellation mechanism we provide.
Cancelling the next renewal does not ordinarily terminate the subscription period for which you have already paid.
You may continue using the service until the end of the current paid period, subject to these Terms.
16. Refunds
Payments already made are not refundable merely because you stop using the service before the end of the paid subscription period.
This does not affect any refund or other remedy that must be provided under applicable law.
17. Price changes
We may change prices for future subscription periods.
A price change will not retrospectively change an amount already paid.
Where a change affects a future renewal, we will provide reasonable advance notice where appropriate so that you may cancel the next renewal if you do not wish to continue at the new price.
18. Rate limits and normal use
3 Steps Data does not charge per seat or meter ordinary participation in Data Connections.
We may apply reasonable technical rate limits, capacity controls or abuse-prevention measures to protect the availability, security and fair operation of the service.
These controls are intended to prevent abuse, not interfere with reasonable normal activity.
If use materially exceeds what one Data Vault is reasonably intended to support, we may contact the Data Vault operator to discuss an appropriate configuration.
We will not silently convert ordinary overuse into unexpected per-seat charges.
19. Acceptable use
You must not use the service unlawfully or in a way that infringes another person’s rights.
You must not knowingly introduce malicious software, attempt unauthorised access to another Data Vault or service, interfere with service availability or security, bypass technical protections or rate limits, or intentionally use the service in a way reasonably likely to harm 3 Steps Data or its users.
You must not use the service to facilitate unlawful content or conduct.
20. Security
3 Steps Data uses reasonable technical and organisational measures designed to protect Customer Content and the service.
No online system can guarantee absolute protection against every threat, failure, interruption, defect or loss.
You are responsible for choosing appropriate permissions, protecting credentials and verification information, and maintaining any independent records, backups or continuity arrangements required by your own circumstances or obligations.
21. Service monitoring
3 Steps Data monitors infrastructure and service health to maintain security, availability, reliability and abuse prevention.
We do not monitor Data Connections for advertising or commercial behavioural profiling.
We do not use activity inside Data Connections to create another commercial product.
22. Service availability and maintenance
We aim to provide a reliable service but do not guarantee uninterrupted or error-free availability.
The service may occasionally be unavailable because of maintenance, upgrades, faults, telecommunications failures, hosting failures, security events, third-party outages or circumstances outside our reasonable control.
We may perform maintenance, deploy updates, respond to security events or temporarily restrict functionality where reasonably necessary to protect or maintain the service.
Where practicable, we will seek to minimise material disruption.
Any specific service-level commitment applies only where expressly agreed in writing.
23. Data Vault regions
You choose the Data Vault region from those available through the service.
Available regions may change.
The selected region determines where Customer Content in the Data Vault is stored, subject to any disaster-recovery configuration selected by the Data Vault operator.
24. Disaster recovery
Optional disaster-recovery protection may be available for a Data Vault.
Where enabled, the Data Vault owner chooses the available disaster-recovery region.
Disaster-recovery copies retain the same underlying individual encryption and security model.
Disaster-recovery protection includes Customer Content and authorised participant uploads contained within the Data Vault.
Disaster-recovery copies are deleted automatically within one month after deletion of the associated Data Vault unless deleted earlier.
Disabling disaster-recovery protection causes the associated disaster-recovery copies to be deleted.
Disaster recovery is intended to support recovery of the Data Vault service following failure or loss.
It is not a substitute for independent archival, evidentiary, regulatory or business-continuity obligations you may have.
25. Data Vault deletion and end of service
You are responsible for retaining or exporting any Customer Content you need before deleting a Data Vault or allowing access to end.
Following expiry, termination or deletion, Customer Content may be deleted in accordance with the service’s deletion processes and Privacy Policy.
3 Steps Data is not required to retain Customer Content indefinitely after the relevant service has ended.
26. Third-party services
The website or service may link to, rely upon or interoperate with independent third-party providers.
These may include payment, infrastructure, website, communications or other technology providers.
3 Steps Data is not responsible for the independent operation, availability, security, accuracy, content, privacy practices or contractual terms of a third-party service outside our control.
Your use of a third-party service may be governed by separate terms between you and that provider.
27. Privacy
Our handling of personal information is described in our Privacy Policy.
The 3 Steps Data platform does not store customer account, identity or billing personal information as part of the Data Vault service.
You remain responsible for privacy and data-protection obligations that apply to Customer Content you place in a Data Vault or make available through a Data Connection.
28. Intellectual property
3 Steps Data and its licensors retain intellectual-property rights in the service, software, website, documentation, designs, branding and materials provided by us.
These Terms do not transfer ownership of those rights to you.
During an active subscription, we give you a limited, non-exclusive and non-transferable right to use the service in accordance with these Terms.
You retain ownership of your own branding.
Where the service allows you to brand a Data Connection, you are responsible for ensuring that you have the right to use any trade mark, logo or other material you provide.
29. No advertising or commercial exploitation of your relationships
3 Steps Data does not operate an advertising business around your Data Vault or Data Connections.
We do not sell Customer Content.
We do not use Data Connections to create commercial behavioural profiles.
We do not harvest customer, supplier, adviser or partner relationships to create another commercial product.
You pay us for the service.
We provide the service.
30. Feedback
If you voluntarily provide feedback or suggestions relating to the service, we may use that feedback to improve 3 Steps Data.
Providing feedback does not transfer ownership of your Customer Content or confidential information to 3 Steps Data.
31. Suspension
We may temporarily suspend access where reasonably necessary because of a material security threat, suspected unlawful activity, significant misuse, non-payment, a legal requirement or a material breach of these Terms.
Where circumstances permit, we will provide notice and a reasonable opportunity to address the issue.
Immediate action may be necessary where delay would materially increase legal, security or operational risk.
We will seek to restore access when the reason for suspension has been resolved.
32. Termination by 3 Steps Data
We may terminate a subscription for a material breach of these Terms that is not remedied within a reasonable period after notice.
We may terminate immediately where a breach cannot reasonably be remedied or where continued provision of the service would be unlawful or create a serious security risk.
If we discontinue the service for reasons unrelated to your breach, we will provide reasonable advance notice where practicable and deal with any unused prepaid subscription period in accordance with applicable law.
33. No professional advice
3 Steps Data is a technology service.
Nothing provided through the website or service constitutes legal, regulatory, compliance, cybersecurity, accounting, financial, professional or other advice.
You remain responsible for determining whether your use of the service, any Customer Content and any communication received through a Data Connection is appropriate for your circumstances.
34. No responsibility for reliance on Customer Content or communications
To the maximum extent permitted by law, 3 Steps Data is not responsible for loss arising because you or another person:
relied on inaccurate, incomplete, misleading, fraudulent or unlawful Customer Content;
relied on a communication received through a Data Connection;
sent information to the wrong recipient;
selected inappropriate permissions;
authorised a download;
acted or failed to act based on information supplied by another participant;
failed to verify a link using Trust Verification; or
relied on Trust Verification as proof of a person’s identity, authority or trustworthiness.
The service is infrastructure for controlled information exchange. It does not replace the judgement, verification, professional advice or due diligence appropriate to your circumstances.
35. Non-excludable rights
Nothing in these Terms excludes, restricts or modifies any guarantee, condition, warranty, right or remedy that cannot lawfully be excluded, restricted or modified, including rights that may apply under the Australian Consumer Law.
Where a provision of these Terms would otherwise have that effect, it applies only to the maximum extent permitted by law.
36. Service disclaimers
Subject to any rights that cannot lawfully be excluded, the service is provided on an “as available” basis.
To the maximum extent permitted by law, 3 Steps Data does not warrant that:
the service will be uninterrupted, continuously available or error-free;
every defect will be corrected;
the service will be immune from every security threat or failure;
Customer Content will always be available or recoverable;
another participant will act lawfully or honestly;
Customer Content provided by another participant is accurate, complete, lawful or suitable;
communications through the service are correct, genuine or appropriate; or
the service is suitable for every legal, regulatory, professional or business requirement.
37. Exclusion of indirect and consequential loss
To the maximum extent permitted by law, 3 Steps Data is not liable for any indirect, incidental, special, exemplary, punitive or consequential loss or damage, whether arising in contract, tort (including negligence), statute, equity or otherwise.
Without limiting the preceding paragraph, 3 Steps Data is not liable for:
loss of profit;
loss of revenue;
loss of business;
loss of opportunity;
loss of anticipated savings;
loss of goodwill or reputation;
loss of contracts;
business interruption;
loss arising from a decision made or not made in reliance on Customer Content or communications;
loss caused by the actions or omissions of another user or recipient;
loss resulting from information being downloaded, copied, forwarded or redistributed after leaving a Data Connection; or
consequential loss arising from loss, corruption, disclosure or unavailability of data.
This exclusion applies even if 3 Steps Data has been advised that such loss may occur, except to the extent that applicable law does not permit the exclusion.
38. Limitation of aggregate liability
To the maximum extent permitted by law and subject to section 35, the total aggregate liability of 3 Steps Data arising out of or in connection with the service, these Terms or any related claim will not exceed the total fees paid or payable by you for the affected Data Vault during the 12 months immediately preceding the event giving rise to the claim.
Where applicable law permits liability to be limited but not excluded, our liability may, at our option, be limited to supplying the relevant service again or paying the reasonable cost of having the service supplied again.
The limitations in these Terms do not apply to fraud, wilful misconduct or any liability that applicable law prohibits us from limiting.
39. Your responsibility for third-party claims
To the extent permitted by law, you are responsible for third-party claims, losses or reasonable costs arising directly from:
Customer Content that you did not have the right to use, store or disclose;
your infringement of another person’s intellectual-property, privacy, confidentiality or other rights;
your deliberate unlawful misuse of the service; or
your breach of these Terms.
You are not responsible under this section to the extent the relevant claim was caused by 3 Steps Data’s own breach, negligence or unlawful conduct.
40. Events outside our reasonable control
3 Steps Data is not liable for delay, interruption or failure to perform caused by events outside our reasonable control, including failures of telecommunications networks, cloud or hosting providers, payment providers, utilities, internet infrastructure, natural disasters, government action, industrial disputes, cyberattacks or other events that could not reasonably have been prevented by 3 Steps Data.
This section does not exclude any liability that cannot lawfully be excluded.
41. Changes to these Terms
We may update these Terms where reasonably necessary to reflect changes to the service, law, security requirements or our business.
We will not use this right to retrospectively change amounts already paid or remove accrued rights.
Where a material change affects an active subscription, we will provide reasonable notice where appropriate.
If you do not accept a material change applying to a future renewal, you may cancel your next renewal.
42. Electronic notices
We may provide service notices electronically using mechanisms available through the service or another contact method lawfully available to us.
Formal notices to 3 Steps Data may be sent to:
FLATWORLD INTEGRATION PTY LTD
ACN 617 309 789
trading as 3 Steps Data
PO BOX Q301
QUEEN VICTORIA BUILDING NSW 1230
AUSTRALIA
43. Governing law and disputes
These Terms are governed by the laws of New South Wales, Australia, subject to any mandatory rights that apply under other applicable law.
Before commencing formal proceedings, the parties should make a reasonable attempt to resolve the dispute directly and in good faith.
Nothing prevents either party from seeking urgent interlocutory or injunctive relief where appropriate.
44. General
If any provision of these Terms is unenforceable, the remaining provisions continue to operate to the extent possible.
A failure to enforce a provision on one occasion does not waive the right to enforce it later.
You may not assign a subscription or these Terms without our consent except where permitted by law.
We may assign these Terms as part of a genuine merger, restructure, sale or transfer of the 3 Steps Data business, provided that this does not materially reduce your contractual rights.
These Terms, together with the Privacy Policy and any terms expressly incorporated into them, form the agreement governing your use of the service.
45. Contact
FLATWORLD INTEGRATION PTY LTD
ACN 617 309 789
trading as 3 Steps Data
PO BOX Q301
QUEEN VICTORIA BUILDING NSW 1230
AUSTRALIA
Email: enquiries@3stepsdata.com