Terms & Conditions

1. Definitions and Service Provider

1.1. Service Provider
The owner and operator of the Compabase platform is Content Writer Spółka z ograniczoną odpowiedzialnością, with its registered office in Poznań (61-846), ul. Strzelecka 29A/39, Poland, NIP: 7792567297, REGON: 527809297, KRS: 0001088645, hereinafter referred to as the "Provider".

1.2. Platform
The website available at compabase.com and its subdomains, through which the Provider offers access to structured corporate intelligence and financial datasets.

1.3. User
A legal person, organizational unit, or natural person acting in the course of business activity, purchasing data for professional or commercial purposes.

1.4. B2B Nature of Service
The Platform is intended exclusively for business users. The service is not offered to consumers.

1.5. Dataset / Export
A structured file (e.g., CSV, XLS, or similar) generated based on User-defined criteria and delivered electronically.

1.6. Account and Portal
Platform features available to registered Users after logging in, including browsing entity profiles, a watchlist of observed entities, access to the application programming interface (API), the AI assistant, and management of an entity profile. Use of some features does not require an account; use of portal features requires logging in.

1.7. AI Assistant
A feature provided on the Platform based on artificial intelligence (AI) models, enabling questions in natural language about the economic data available in the service and presenting answers and visualizations based on them.

2. Nature of the Service

2.1. Public Corporate Data
Compabase is a data intelligence tool that aggregates, structures, and processes corporate and financial data originating from official public registers, including in particular:

• National Court Register (KRS);
• Financial statements filed in public repositories;
• the VAT taxpayer list (the "white list") maintained by the Minister of Finance.

The Platform covers registered companies (KRS). The principles for presenting and publishing personal data of individuals (including owners of sole proprietorships) are set out in the Privacy Policy.

Personal data that may appear on the Platform or in datasets (e.g., names of management board members or representatives) are processed solely in connection with their publicly disclosed corporate functions and only to the extent such data have been made publicly available in official registers by law. In line with the data minimization principle, the Provider does not present the PESEL number or the full date of birth of individuals, but only—where necessary to distinguish persons with identical data—the approximate age calculated from the year of birth.

2.2. Functional Scope
The Platform enables Users to:

• search entities based on defined criteria;
• preview result volume and browse entity profiles;
• purchase and download structured datasets;
• maintain a portal account and use portal features (including the watchlist, API access, and the AI assistant);
• independently update and correct data presented on an entity's profile (see § 2.5).

2.3. Data Processing and Transformation
The Platform performs automated extraction, normalization, and transformation of publicly available records.

Certain indicators, including but not limited to EBITDA, growth metrics, and financial stability indicators, may be:

• derived;
• estimated;
• calculated;
• algorithmically interpreted.

Such indicators are analytical representations of publicly available financial information and do not constitute credit scores, risk ratings, or legally binding evaluations.

The Platform does not engage in automated decision-making within the meaning of Article 22 GDPR and does not produce legal effects concerning individuals.

2.4. Informational Character
The Platform provides informational and analytical data only. It does not provide legal, financial, investment, compliance, or credit advice.

2.5. Self-Service Update and Profile Claim
The Platform enables persons authorized to represent an entity or connected to it to independently supplement, update, and correct selected data presented on the entity's profile (e.g., business description, logo, contact details).

The feature can be used after logging in and confirming authority (claiming the profile) or—without creating an account—in one-time edit mode. In both cases, confirming control over the entity's business email address (domain verification) is required.

A person using this feature represents that they are authorized to act on behalf of or for the benefit of the entity and that the data submitted is true, current, and does not infringe third-party rights. The Provider may verify, moderate, restrict, or remove data submitted in this way, and may suspend access to the feature in the event of misuse. Data submitted by the User constitutes a supplementary layer of information and does not modify the content of official public registers.

2.6. AI Assistant
The Platform provides an artificial intelligence (AI) assistant that answers questions about the economic data available in the service. Operating principles:

• the assistant is powered by models provided by third-party providers; the Provider does not train, fine-tune, or build its own AI models based on User data, query content, or Platform data;
• the assistant accesses data exclusively through tools defined by the Provider (an MCP-type interface) constituting predefined, read-only database queries that incorporate the restrictions on personal data described in the Privacy Policy;
• answers generated by the assistant are solely informational and auxiliary, may contain inaccuracies, and do not constitute advice; they do not constitute automated decision-making within the meaning of Article 22 GDPR;
• using the AI assistant contrary to § 7.4, in particular for mass, automated extraction of data from the Platform, is prohibited.

2.7. Confidentiality and Security of the AI Assistant
Access to the history of interactions with the AI assistant is limited to authorized persons and used solely for security, abuse detection, quality control, and the establishment or defense of claims (need-to-know basis). The content of interactions is treated as confidential, is not used to train AI models, is not disclosed to third parties except as required by law or necessary to enforce these Terms, and is stored only for the period necessary for the above purposes. Details of the processing of interaction content are set out in the Privacy Policy.

The AI assistant is not intended for entering information subject to confidentiality obligations (e.g., trade secrets or information covered by non-disclosure agreements) or personal data of third parties beyond the data available on the Platform. The User should not enter such information into the assistant and is responsible for the content it directs to it.

2.8. Availability of the Platform and API; Maintenance Windows
The Provider makes reasonable efforts to keep the Platform and the application programming interface (API) continuously available; however, unless a separate agreement provides otherwise, it does not guarantee uninterrupted or error-free availability and does not provide any specific service level (SLA).

The Provider may introduce planned maintenance windows (including for maintenance, updates, or infrastructure changes) and may experience unplanned interruptions resulting from technical causes or causes beyond its control (including failures of third-party providers or force majeure). Where possible, the Provider will give advance notice of material planned interruptions.

Temporary unavailability of the Platform or the API due to the above circumstances does not constitute improper performance of the contract and does not give rise to claims for damages, subject to the last sentence of § 9.2 and any separately agreed SLA terms.

3. Data Accuracy and Historical Information

3.1. Source-Based Data
All data originates from public registers and official filings. The Provider does not create primary corporate or financial records.

3.2. Automated Extraction
Financial and corporate data are processed automatically and may contain inaccuracies resulting from:

• extraction errors;
• inconsistencies in filings;
• formatting of source documents;
• algorithmic interpretation.

3.3. No Guarantee
The data is provided "as is" and "as available." The Provider does not guarantee:

• accuracy;
• completeness;
• timeliness;
• fitness for a specific purpose.

3.4. Historical Records
The Platform may retain and display historical corporate information, including data relating to dissolved, bankrupt, or liquidated entities, where such data originates from official public registers.

Retention of historical records serves the legitimate interest of maintaining transparency and continuity of economic information.

The Provider does not remove historical data solely due to the dissolution of an entity if such data remains part of official public records.

3.5. No Reliance for Critical Decisions
The User acknowledges that the data should not be the sole basis for:

• investment decisions;
• credit assessments;
• legal determinations;
• procurement decisions.

Independent verification is recommended.

4. Purchase Model and Delivery

4.1. One-Time Access
The service is provided as a one-time paid export of data generated based on User-defined filters.

4.2. Account Optional
The purchase and delivery of a single data export do not require account registration—delivery is executed via email or secure download. Use of portal features (including the watchlist, API access, the AI assistant, and entity profile management) requires registration and logging in.

4.3. Payment
Payments are processed via external payment providers (e.g., Stripe). The Provider does not store payment credentials.

4.4. Delivery
The dataset is delivered electronically after payment confirmation.

4.5. Refunds
Given the digital nature of the generated datasets, the User consents to the performance of the service before the expiry of the withdrawal period, thereby forfeiting that right. The User further declares that the agreement has a professional character for them, arising in particular from the subject matter of their business activity, and that consumer protection laws do not apply to them.

5. User Responsibilities

5.1. Legal Compliance
The User is solely responsible for ensuring that their use of the data complies with all applicable laws and regulations, including data protection, competition, and electronic communications laws.

5.2. Independent Use
The User determines independently how the data is used, including for research, analytics, commercial activities, or internal systems.

5.3. Marketing and Outreach Restrictions
The exported datasets may contain personal data disclosed in public registers in connection with corporate functions.

The User shall not:

• use exported data for unsolicited mass marketing communications;
• create bulk mailing lists for automated outreach in violation of applicable electronic communications or data protection laws;
• resell or redistribute personal data as a standalone dataset;
• create publicly accessible mirrors of the exported data.

Any downstream processing remains the sole responsibility of the User acting as an independent controller.

The User acknowledges that publicly available data does not imply unrestricted freedom of use.

5.4. Data Controller Role
Where the User exports and further processes personal or corporate data, the User acts as an independent controller and is responsible for the lawfulness of such further processing.

This allocation of roles does not release the Provider from its responsibility for the lawfulness of the collection and making available of the data carried out by it. The Provider remains the controller in respect of the processing it carries out on the Platform (in accordance with the principles described in the Privacy Policy and the legitimate interest assessment conducted), while the User becomes an independent controller solely in respect of the processing it carries out on its own after downloading the data.

6. Personal Data and Public Records

6.1. Scope
Datasets may include personal data contained in public registers, such as:

• names of management board members;
• supervisory board members;
• company representatives disclosed in official filings.

Such data are processed solely in connection with their public corporate roles.

6.2. Legal Basis
The Provider processes such data on the basis of legitimate interest in providing structured access to publicly available corporate information.

The Provider has conducted a legitimate interest assessment to ensure proportionality and balance of interests.

Individuals whose personal data appear in the Platform may exercise their rights in accordance with the Privacy Policy.

6.3. Further Processing
The User is responsible for assessing the legality of any further processing of such data.

6.4. Data Minimization
The Provider limits the scope of personal data presented. In particular, it does not make available the PESEL number or the full date of birth of individuals—neither in the Platform interface nor via the API or in data exports—presenting, where necessary, only the approximate age calculated from the year of birth. Personal data of individuals is presented only in relation to entities towards which the information obligation under Article 14 GDPR has been fulfilled, in accordance with the principles described in the Privacy Policy.

6.5. Protection of the Entity's Email Address
The entity's public email address disclosed in the register is hidden from non-logged-in users and made available only to logged-in Users. This measure constitutes an additional security safeguard that limits the automated harvesting of addresses and counters abuse. Making the address available does not constitute consent to contact; the User is independently responsible for having a legal basis and the required consents for any communication, including marketing (see § 5.3).

7. Intellectual Property and Trademarks

7.1. Platform IP
The Platform architecture, data processing methods, and algorithms are the intellectual property of the Provider.

7.2. Logos and Trademarks
Company names, logos, and trademarks displayed on the Platform remain the property of their respective owners.

Logos may be displayed using data provided by third-party branding data providers.

Their display serves identification and informational purposes only and does not imply affiliation, endorsement, or partnership.

7.3. Permitted Use
The User may use exported datasets internally and for legitimate business purposes.

7.4. Prohibited Activities
Without written consent, the User may not:

• scrape the Platform;
• use bots, scripts, or automated tools to access or extract data from the Platform;
• use the Platform in a manner that exceeds reasonable usage patterns or attempts to circumvent technical limitations, including rate limiting or usage quotas;
• resell raw datasets;
• create competing databases;
• redistribute data at scale;
• provide public mirrors of the datasets.

7.5. Enforcement and Penalties
In the event of a breach of Section 7.4, including unauthorized scraping, automated data extraction, or systematic use of the Platform, the Provider reserves the right to:

• immediately block access to the Platform;
• suspend or terminate service delivery without refund;
• pursue claims for damages.

In addition, the User agrees to pay a contractual penalty of EUR 5,000 per breach; a breach means each individual instance of: unauthorized access, automated request, or action aimed at extracting data. This does not exclude the Provider's right to claim additional damages exceeding the contractual penalty to the extent permitted by law.

7.6. Use of the AI Assistant
It is prohibited to attempt to circumvent, disable, or manipulate the Platform's safeguards, including the safeguards, mechanisms, and instructions of the AI assistant — in particular, attempts to disclose, obtain, or alter its system instructions, configuration, or source data, as well as attempts to manipulate its behavior (including so-called prompt injection or jailbreaking).

7.7. Enforcement — Detailed Provisions

7.7.1. Immediate Sanctions
In the event of a breach of Section 7.4 or Section 7.6, including unauthorized scraping, automated data extraction, systematic or repeated access to the Platform, or an attempt to circumvent, disable, or manipulate safeguards (including those of the AI assistant), the Provider reserves the right to:

• immediately block access to the Platform without prior notice;
• suspend or terminate service delivery without refund;
• pursue claims for damages.

7.7.2. Contractual Penalty per Incident
In the event of a culpable breach of Section 7.4 or Section 7.6, the User agrees to pay a contractual penalty of EUR 5,000 for each incident of breach. A single incident is understood as one continuous action or campaign of the same kind (e.g., one scraping session, one series of automated requests, or one attempt to circumvent safeguards)—regardless of the number of individual requests, queries, or operations comprising that action. The contractual penalty constitutes liquidated damages, is subject to reduction under generally applicable law, and the Provider asserts it with due regard to the principle of proportionality.

7.7.3. Supplementary Damages
Payment of the contractual penalty does not exclude the Provider's right to claim damages exceeding its amount under generally applicable law where the actual damage exceeds the amount of the penalty.

7.8. Evidentiary Measures and Abuse Detection
To detect and document breaches referred to in Sections 7.4–7.6, the Provider applies, in particular, the following measures, the use of which as evidence the User acknowledges and accepts:

• recording and storing the history of interactions with the AI assistant (the content of queries and responses, and technical metadata), which may serve as evidence of attempts to circumvent or manipulate safeguards;
• introducing into the data made available immaterial identifying markers that do not affect its usability (so-called watermarks or canary/trap data). The presence of such markers in third-party datasets or services constitutes evidence that the data was obtained from the Platform in breach of these Terms.

7.9. Database Protection (sui generis right)
The Platform and the structured datasets compiled within it constitute a database within the meaning of the Polish Act of 27 July 2001 on the protection of databases and of Directive 96/9/EC, and are subject to legal protection. As the maker of the database, the Provider holds the exclusive right to extract and re-utilize the whole or a substantial part—evaluated qualitatively or quantitatively—of that database.

Without the Provider's prior written consent, the extraction or re-utilization of a substantial part of the database is prohibited, as is the repeated and systematic extraction or re-utilization of insubstantial parts where this conflicts with a normal exploitation of the database or unreasonably prejudices the Provider's legitimate interests. Independently of the sui generis right, the Platform and its components may be protected by copyright and other intellectual property rights.

8. Data Corrections

8.1. Reporting Inaccuracies
Third-party entities may report inaccuracies in data.

8.2. Correction of Data
The Provider may correct or update datasets where errors are confirmed.

8.3. Previously Delivered Exports
The Provider is not obliged to retroactively update previously delivered exports.

9. Limitation of Liability

9.1. Informational Tool
The Platform is a data aggregation and analytics tool only.

9.2. Exclusion of Liability
To the maximum extent permitted by law, the Provider is not liable for business losses, lost profits, reputational damage, decisions made based on the data, or indirect or consequential damages.

The above exclusions and limitations of liability do not apply to: (a) damage caused intentionally; (b) liability that cannot be excluded or limited under mandatory provisions of law, including liability under personal-data-protection legislation and for personal injury.

9.3. Financial Cap
Subject to the last sentence of Section 9.2, the Provider's total liability arising from or in connection with the use of the Platform is limited:

• in respect of paid data exports—to the amount paid by the User for the specific dataset giving rise to the claim;
• in respect of paid services provided on a continuous basis—to the total fees paid by the User in the 12 months preceding the event giving rise to the damage;
• in other cases, including in respect of free account features—to the amount of EUR 1,000.

The monetary cap does not apply to the cases of liability referred to in the last sentence of Section 9.2.

10. Indemnification

10.1. Indemnification by the User
The User agrees to indemnify and hold the Provider harmless against third-party claims arising from:

• unlawful use of the data;
• regulatory violations;
• misuse of exported datasets;
• breach of applicable law.

10.2. Provider's Undertaking
The Provider represents that it is entitled to make the data available through the Platform. If a well-founded third-party claim is brought against the User alleging that the mere making available of a dataset by the Provider through the Platform infringes that party's copyright or database rights, the Provider will—provided that it is promptly notified of the claim and allowed to conduct the defense—assume the defense against such claim or indemnify the User in this respect.

The undertaking referred to in § 10.2 does not cover claims arising from the User's use of the data in a manner inconsistent with these Terms or with the law, or from the modification of the data or its combination with other sources.

11. Complaints

11.1. Submitting a Complaint
The User may submit complaints regarding the operation of the Platform or the services delivered—in particular an empty or corrupted export file, lack of API access, a payment error, or other technical defects—electronically to [email protected].

11.2. Content of a Complaint
A complaint should include contact details, a description of the problem, the date it occurred, and—where applicable—the order or transaction number. Where necessary, the Provider may request supplementary information needed to handle the complaint.

11.3. Time for Handling
The Provider handles complaints without undue delay, no later than within 14 days of receipt (or of receipt of supplementary information), and informs the User of the outcome at the email address provided.

11.4. Outcome of an Upheld Complaint
If a complaint regarding a defective export (e.g., an empty or corrupted file) is upheld, the Provider will make the correct export available again or—where this is not possible—refund the fee paid for the relevant dataset.

12. Termination and Account Deletion

12.1. One-Time Export
A contract for a one-time data export is performed upon delivery of the export.

12.2. Account Contract and Its Termination
A contract for maintaining a portal account is concluded for an indefinite period. The User may terminate this contract and delete the account at any time and without giving reasons—via account settings or by a request to [email protected].

12.3. Effects of Account Deletion
Deleting the account ends the provision of portal features. Data associated with the account is deleted or anonymized in accordance with the principles and periods set out in the Privacy Policy, subject to data that the Provider is required or entitled to retain under the law (including accounting records) or for the establishment or defense of claims.

12.4. Termination by the Provider
The Provider may terminate the account contract or suspend access to portal features for important reasons, in particular in the event of a breach of Section 7.4, with due regard to proportionality. Where possible, the Provider gives the User prior notice, unless the security of the Platform or the law prevents this.

12.5. Surviving Provisions
Termination does not affect the parties' acquired rights or provisions that by their nature should survive (including intellectual property, data use restrictions, and limitation of liability).

13. Final Provisions

13.1. Governing Law
These Terms are governed by Polish law.

13.2. Changes to the Terms
The Provider may update these Terms to reflect legal, operational, or technological changes, on the following terms:

• changes affecting features provided on a continuous basis (including account maintenance and API access) take effect no earlier than 14 days after registered Users are informed; we notify of material changes in advance—by email to the address associated with the account or via a notice in the portal;
• if the User does not accept the changes, they may terminate the account contract before the changes take effect in accordance with Section 12; continued use of the Platform after the changes take effect constitutes their acceptance;
• changes do not apply retroactively to data exports ordered or delivered before they take effect—the version of the Terms in force at the time of the order applies to such orders;
• changes resulting directly from mandatory provisions of law or necessary for the security of the Platform may take effect within a shorter period where required by law or by protection against abuse.

13.3. Severability
If any provision of these Terms is or becomes invalid or unenforceable, the remaining provisions remain in force. The invalid provision shall be replaced by a valid provision that comes closest to its economic purpose.

13.4. Language Versions
These Terms are provided in Polish, German, and English. In the event of any discrepancy between the language versions, the Polish version prevails.

13.5. Jurisdiction
Disputes shall be resolved by courts competent for the Provider's registered office, unless mandatory provisions provide otherwise.