Benventario

Terms of use

Translation for information only. The Spanish version is binding.

General terms and conditions of Benventario Cloud · Last updated: 29 October 2026

3.1 Scope and parties

  1. These terms govern the use of Benventario via benventario.app ("the service") between SAS Delimonde, 21400 Châtillon-sur-Seine, France ("we") and the customer.
  2. The service is aimed exclusively at businesses (coffee mills, cooperatives, exporters). Consumers cannot conclude the contract.
  3. Terms of the customer that deviate from these apply only if we accept them in writing.

3.2 Services

  1. Benventario is software for the inventory and processes of coffee mills: reception, drying, processing, hulling, dispatches, quality, staff, producer portal and documentation for the EUDR. The scope is as described on the website at the time of subscription.
  2. Each customer receives its own instance at <name>.benventario.app. We operate the servers, backups and updates.
  3. We develop the service continuously. Features may change provided that the essentials are preserved (recording, evaluating and exporting one's own data).

3.3 Free trial

  1. The trial is free of charge and limited to 50 receptions. Sample data do not count. Afterwards the data can still be viewed and exported, but no new receptions can be recorded.
  2. During the trial we do not guarantee availability. We may delete, after prior notice, trial instances with no sign-in for more than 90 days.
  3. The trial becomes a paid contract only if the customer expressly subscribes.

3.4 Registration and access

  1. Registration data must be correct. The person registering must be authorised to represent the customer.
  2. The customer keeps passwords, PINs, passkeys and the encryption recovery sheet secret, and creates the users and permissions for its people itself. It is responsible for whatever is done with its access credentials.
  3. In the event of suspected abuse we may temporarily block an access and will inform the customer.

3.5 Prices, payment and term

  1. Payment is per coffee year (harvest: twelve months from the start configured in the instance; by default according to the country, e.g. 1 October in Central America, 1 April in Brazil and Peru) according to the package subscribed, in US dollars (USD). The packages depend on the quantity of green coffee per harvest (calculated with the coffee mill's conversion factors): Small up to 3,000 quintals of green coffee (qq), 290 USD; Medium up to 10,000 qq, 690 USD; Large up to 30,000 qq, 1,490 USD; above that, as well as installation on the customer's own server, on quotation. The price list on benventario.app in force at the time of subscription applies, plus VAT where applicable. If the customer exceeds the quantity of its package, the corresponding package applies from the following harvest.
  2. Payment is by credit card: on subscription the full price of the current coffee year is charged, and thereafter, at the start of each coffee year, automatically to the registered card. Customers who subscribe no more than 60 days before the start of a coffee year pay only at that start; the preceding weeks are included. The invoice is sent by email. If the customer changes the start of the coffee year during the contract, the billing date remains unchanged until we adjust it at the customer's request. If a charge fails and is not settled within 30 days, we may put the instance on "pause": it can still be viewed and exported, but no new operations can be recorded.
  3. The contract runs for one coffee year and is renewed for another unless cancelled one month before the start of the next coffee year. We notify the amount and the charge by email 30 days before renewal.
  4. The right of both parties to terminate the contract for good cause remains unaffected.

3.6 Customer data

  1. All data recorded by the customer belong to it. It can export them at any time in Excel and GeoJSON.
  2. The customer is responsible for the lawfulness of its data, in particular those of its producers and workers. It informs them in accordance with the data protection legislation applicable to it.
  3. We process that data only on behalf of the customer. The data processing agreement in Annex A (Art. 28 GDPR) applies.
  4. When the contract ends, the customer can export its data for a further 30 days. We then delete the instance and, 30 days later, the backups.

3.7 On-device encryption

If the customer activates on-device encryption, only the customer holds the key. We cannot read or recover the encrypted data. If the key is lost (no device with the key, no recovery sheet), that data is permanently lost.

3.8 Availability and support

  1. We strive for the highest possible availability, but do not guarantee any specific level, in particular during announced maintenance and in the event of failures beyond our control (internet, data centre, force majeure). The app stores operations on the device when there is no connection and sends them later.
  2. Support by email and WhatsApp in Spanish, Portuguese and German. We normally reply within one business day.

3.9 No legal, tax or employment advice

Benventario helps with recording and calculating, but does not replace professional advice. This applies in particular to payrolls (INSS, employment law), settlements with producers and due diligence statements under the EU Deforestation Regulation (EUDR). The customer reviews the results before using them; responsibility for statements to authorities and buyers remains with the customer.

3.10 Liability

  1. We are liable without limitation in cases of intent and gross negligence, as well as for personal injury.
  2. In cases of slight negligence we are not liable, except for breach of essential contractual obligations; in that case liability is limited to the foreseeable damage typical of the contract, up to a maximum of the amount paid in the last 12 months.
  3. We are liable for loss of profit and for loss of data that regular exports by the customer would have prevented only in cases of intent and gross negligence.

3.11 Right of use

For the term of the contract, the customer receives the non-transferable right to use the service for its business. The software, the design and the Benventario brand remain our property. Copying, reverse engineering or reselling them is not permitted.

3.12 Changes to these terms

We notify changes by email at least 6 weeks in advance. If the customer does not object before they take effect, they are deemed accepted; we point this out in the notification. If the customer objects, either party may cancel with effect from the date the changes take effect.

3.13 Governing law, competent court and language

  1. French law applies, excluding the United Nations Convention on Contracts for the International Sale of Goods and the conflict-of-laws rules.
  2. The competent court is the Tribunal de commerce de Dijon.
  3. The Spanish version is binding; the translations into English, French, Portuguese and German serve to facilitate understanding.
  4. If a provision is invalid, the remainder remains valid.

Annex A – Data processing agreement

Pursuant to Art. 28 of the General Data Protection Regulation (GDPR) · Forms part of the Terms of use of Benventario Cloud

Parties: the customer subscribing to Benventario Cloud, as controller ("the Customer"), and SAS Delimonde, c/o Grandoro France, Avenue Noël Navoizat, 21400 Châtillon-sur-Seine, France, as processor ("we").

1. Subject matter and duration

  1. We operate for the Customer its own Benventario instance at <name>.benventario.app. In doing so we process personal data that the Customer records in it, solely on behalf of and in accordance with the instructions of the Customer.
  2. This agreement applies for as long as the Benventario Cloud contract lasts (including during the free trial) and until the data have been deleted in accordance with clause 10.

2. Nature, purpose and data

3. Instructions

  1. We process the data only in accordance with the Customer's documented instructions. The instructions are this agreement, the terms of use and what the Customer configures in the instance. Other instructions are given by email.
  2. If we consider an instruction to infringe data protection legislation, we inform the Customer without delay.
  3. If the law requires us to carry out different processing (e.g. a court order), we inform the Customer beforehand, unless the law prohibits this.

4. Confidentiality

Persons working for us who have access to the data are bound by confidentiality. Support access to the data of an instance only works if the Customer authorises it for a limited time, and it is logged.

5. Security

We apply the technical and organisational measures set out in Appendix 1 (Art. 32 GDPR). We may improve them; we do not lower the level of protection.

6. Sub-processors

  1. The Customer authorises the following sub-processors:
Sub-processorServiceLocationSafeguard
The Constant Company, LLC (Vultr), West Palm Beach, USAServer and data centreMiami, USAStandard contractual clauses (Module 3)
Hetzner Online GmbH, Gunzenhausen, GermanyExternal backup, encrypted onlyGermanyWithin the EU
Google Ireland Limited, Dublin, IrelandSupport email, only if the Customer sends us data by emailEU / USAEU–US Data Privacy Framework
  1. We give notice by email of new sub-processors or changes at least 30 days in advance. The Customer may object on justified data protection grounds; if we do not find a solution, the Customer may cancel the contract with effect from the date of the change.
  2. We impose on each sub-processor the same data protection obligations as in this agreement.
  3. The following are not sub-processors: Stripe (itself the controller for payment data), Cloudflare and Let's Encrypt (names and certificates only, no access to content), the browsers' push services (they only receive end-to-end encrypted content) and Open-Meteo (only the coffee mill's coordinates).

7. Transfers to third countries

  1. The data are hosted in the USA (Vultr). The transfer is based on the standard contractual clauses of the European Commission (Decision 2021/914, Module 3) between us and Vultr.
  2. If the Customer is located outside the European Economic Area, the standard contractual clauses, Module 4 (processor to controller), which are incorporated by reference, apply to the return of the data to the Customer.

8. Data subjects' rights

We assist the Customer in responding to requests for access, rectification, erasure, restriction, portability and objection. The Customer can do most of this itself in the instance (edit, deactivate, export to Excel). If a data subject contacts us, we refer them to the Customer and inform the Customer without delay.

9. Personal data breaches

We inform the Customer without undue delay, and where possible within 48 hours of becoming aware of it, of any security breach affecting the data in its instance, together with the information we have on its nature, scope, likely consequences and the measures taken. Notification to the authority and to the data subjects is the Customer's responsibility; we assist the Customer.

10. End of the contract: return and deletion

  1. When the contract ends, the Customer can export its data for 30 days (Excel and GeoJSON).
  2. We then delete the instance and, 30 days later, the last backups, unless the law requires us to retain them. We keep a deleted trial instance for a further 30 days as an archive.
  3. On request we confirm the deletion in writing.

11. Audits

  1. We make available to the Customer the information necessary to demonstrate compliance with this agreement.
  2. The Customer, or an auditor bound by confidentiality who is not one of our competitors, may carry out an audit with 30 days' notice, at most once a year, during business hours and at its own expense. Audits of Vultr and Hetzner are replaced by their certifications and documentation.

12. Further assistance

We assist the Customer, to a reasonable extent, with impact assessments (Art. 35 GDPR) and prior consultations with the authority (Art. 36 GDPR). Assistance beyond the usual may be invoiced as agreed in advance.

13. On-device encryption

If the Customer activates on-device encryption, the protected fields (names and contact details, ID card numbers, staff photos, plot coordinates) are encrypted before they reach our server. We cannot read or recover them. The Customer keeps the recovery sheet.

14. Liability and order of precedence

  1. Liability is governed by Art. 82 GDPR and otherwise by clause 3.10 of the terms of use.
  2. In the event of conflict in matters of data protection, this agreement takes precedence over the terms of use. French law and the court specified in clause 3.13 apply.

Appendix 1 – Technical and organisational measures