Legal Centre

Operator and scope

These legal documents govern use of 2aapjes (the “Platform”, “we”, “us” or “our”), operated by PTHM. They apply to visitors, registered users, paying customers and people accessing websites published using the Platform, where relevant.

For questions about these documents, contact us before using the Platform. The version applicable to a transaction is the version presented when the relevant agreement was concluded, subject to valid subsequent changes.

Terms of Service

1. The service

2aapjes provides browser-based website creation tools, including a visual editor, content management, publishing on Platform-controlled URLs, file uploads and website exports where enabled. Features, limits and technical requirements are described in the Platform interface and may evolve over time. We do not promise that any website will attract visitors, produce revenue, meet particular business goals or be accepted by third-party services.

Our service is a self-service technical tool. We do not act as your legal adviser, publisher, merchant of record for your website visitors, data protection officer or content moderator for every item you create. You remain responsible for deciding how to operate your website lawfully.

2. Eligibility and account security

Individuals must be at least 18 years old or otherwise have the legal capacity and necessary parental or guardian consent to enter into the agreement. A person registering on behalf of a business warrants that they have authority to bind that business. You must provide accurate details, keep them up to date, safeguard your credentials and notify us promptly of suspected compromise.

You must not sell or transfer an account without our prior written consent, use false identities, create accounts to evade enforcement, share credentials in ways that compromise security, or access another user's account without permission. You are responsible for activities you authorize through your account, without prejudice to legal rules on unauthorized access and our own security obligations.

3. Contract formation and access

Registration creates an account but does not itself confer paid-feature access. A paid annual licence begins only after the payment has been successfully confirmed and recorded. We may reasonably reject or reverse orders involving fraud, payment errors, sanctions, security threats or unlawful activity, subject to statutory obligations and any refund rights.

4. Annual licence and renewal

The standard licence price is €99 for one year, subject to the final price, applicable taxes, and any valid discount clearly displayed at checkout. Before you confirm payment, the checkout must identify the total payable price, the service duration and any applicable taxes. No automatic renewal or recurring card charge occurs under the currently offered prepaid annual model.

You can voluntarily buy another year. When renewal is completed before the current expiry date, the additional year is calculated from the existing expiry date; otherwise it starts from the successful renewal date. Access may be delayed briefly while payment confirmation is processed. Promotions and vouchers may have disclosed conditions and do not guarantee future pricing.

We may change future licence prices, but price changes do not retrospectively alter an already paid annual period. Any material change to the purchased service will be handled in accordance with applicable law.

5. Payment processing and disputes

Payments are processed by Stripe and its applicable payment partners. We do not intend to store complete payment card numbers on our own application servers. Payment authorization, anti-fraud checks and cardholder verification may be handled by the payment provider. Do not submit stolen payment details or initiate knowingly false payment disputes.

If a payment is reversed, refunded or determined to be fraudulent, we may adjust the corresponding licence entitlement after verifying the circumstances and giving any notice required by law. A disputed charge does not remove your statutory rights to contest a payment or seek a lawful remedy.

6. Consumer withdrawal rights and refunds

If you are a consumer concluding a distance contract, you generally have a statutory 14-day withdrawal period unless a lawful exception applies. Because this Platform provides an ongoing digital service, immediate access does not automatically eliminate withdrawal rights. Where applicable, you may expressly request performance during the withdrawal period; if you later withdraw, a proportionate amount for services already supplied may be payable only where the legal requirements are met.

Any loss of withdrawal rights for particular digital content requires the legally prescribed prior express consent and acknowledgement and, where required, confirmation on a durable medium. We will not assume that acceptance of these Terms alone is sufficient to waive withdrawal rights. To withdraw, email info@pthm.nl with a clear statement identifying the relevant purchase; no special form is required. Statutory refund deadlines and payment-method rules apply.

If the service is defective or does not conform to the agreement, you may be entitled to repair, restoration, a price reduction, termination, a refund or other remedies under applicable consumer law. Our voluntary goodwill decisions do not limit those rights.

7. Consumer withdrawal model statement

“I hereby notify PTHM that I withdraw from my contract for the 2aapjes annual licence, ordered on [date], under the account email [email]. Name: [name]. Address: [address, if necessary]. Date: [date].” Send this statement to info@pthm.nl.

8. Publishing, expiry and website exports

Published websites are accessible only while the applicable account has Platform access, the website remains published and we have not restricted it for a lawful reason. When a regular user's licence expires, website editing and publishing functions are restricted and hosted websites are taken offline. Renewal normally restores previously published websites automatically if their data still exists and they have not otherwise been unpublished, blocked or deleted.

Expiry alone does not immediately delete saved projects, but we do not promise indefinite storage. Data may later be deleted under the disclosed retention policy, after appropriate notice where required. You should maintain independent backups and export important work before expiry. ZIP exports are supplied as generated files and may require your own hosting, maintenance, security updates, licences and configuration. An independently hosted export is not disabled merely because a Platform licence expires.

Platform-hosted URLs, subdomains, infrastructure, templates and service marks remain subject to our rights and operational controls. We may change or retire a technical feature or hosting endpoint when reasonably necessary, with legally required notice and remedies.

9. Your content and intellectual property

You retain the rights you lawfully hold in original text, images, designs and other materials you upload. You grant us a non-exclusive, worldwide, royalty-free licence, limited to what is reasonably necessary to host, store, reproduce, transmit, display, back up, secure and technically process that material to provide and maintain the service, comply with law and enforce these Terms. This licence ends when the material is deleted, subject to lawful retention and backup cycles.

You warrant that you have the rights, permissions, notices and lawful basis needed for all uploaded materials, third-party scripts, fonts, photographs, trademarks and personal data. You must not assume that content available on the internet is free to reuse. Any templates, editor components and software owned or licensed by us remain our or our licensors' property; your subscription grants only the limited use rights necessary for the service.

You must not remove proprietary notices, resell access to the Platform itself, reverse engineer protected components except as permitted by mandatory law, or claim ownership of our brand, platform source code or third-party licensed assets.

10. Your website's legal compliance

As the operator of your own website, you are responsible for required business identification, privacy notices, cookie consent, intellectual property permissions, accessibility obligations where applicable, consumer information, advertising disclosures, tax compliance and lawful collection of visitor data. You must not falsely present your website as endorsed, certified or operated by 2aapjes.

When you decide the purposes and means of collecting personal data through your website, you will ordinarily act as an independent controller under the GDPR. Where we process that data solely on your behalf as a processor, a separate data processing agreement may be required before such processing begins. Do not use the Platform to collect sensitive personal data or payment card details unless the necessary contractual, technical and legal safeguards are expressly supported.

11. Third-party materials and integrations

Stripe, Pexels, Google Fonts and other integrations may be subject to independent terms, licences, availability and privacy practices. Images obtained through Pexels remain subject to their applicable licence and usage restrictions. You must review restrictions on identifiable persons, brands and sensitive uses. We do not guarantee that a third-party asset is suitable for every purpose or that a third-party provider will remain available.

12. Security, service changes and maintenance

We implement reasonable technical and organizational measures appropriate to the service and its risks, but no internet-connected system is completely secure or continuously available. Maintenance, updates, third-party outages, attacks and force majeure may interrupt service. We may apply urgent security changes without advance notice where reasonably necessary.

Users must keep exported websites, custom scripts, connected domains and independent hosting environments secure. Do not treat our export tool as an ongoing maintenance or cybersecurity service for external hosting.

13. Suspension, restrictions and termination

We may remove or disable specific content, restrict publication, suspend functions or terminate accounts where reasonably necessary to address unlawful content, credible harm, intellectual property violations, fraud, security threats, repeated breaches, payment failure or binding legal orders. We aim to use proportionate measures, considering severity, context and recurrence, and provide reasons and opportunities to contest decisions where required by law.

In urgent situations, such as child sexual abuse material, credible threats of violence, malware distribution or serious account compromise, immediate restrictions may be necessary. Where legally required, we will provide a statement of reasons and access to appropriate complaint or redress mechanisms. Termination does not cancel accrued obligations or statutory rights.

14. User cancellation and deletion

You may stop using the Platform at any time. Deleting an account may permanently remove websites and stored projects after applicable verification and retention steps. Cancellation does not automatically generate a refund for an already supplied prepaid service, except where law or a specific offer provides otherwise. Please export important data before requesting deletion.

15. Warranties, responsibility and liability

We provide the service with reasonable care and skill and comply with mandatory obligations for digital services. We do not guarantee uninterrupted uptime, search-engine ranking, third-party compatibility, commercial outcomes or freedom from all vulnerabilities. Nothing in these Terms excludes liability for intent, deliberate recklessness, fraud, personal injury where exclusion is prohibited, or any other liability that cannot lawfully be excluded.

For business customers, to the extent legally permitted, our aggregate contractual liability for ordinary direct loss is limited to the fees paid by that customer for the affected service during the preceding 12 months, except where such limitation is unreasonable or legally invalid. To the extent permitted by law, we are not responsible for indirect or consequential business losses such as lost profits, lost opportunities or loss of goodwill. These business-to-business limitations do not override mandatory consumer protections.

You are responsible for claims arising from content you unlawfully upload or publish, your unauthorized conduct and your infringement of third-party rights. Business customers agree, to the extent legally permissible, to reimburse reasonable losses and costs caused by their proven breach, subject to applicable causation, mitigation and fairness requirements. This is not an unlimited indemnity and does not apply to our own wrongdoing.

16. Notices, updates and governing law

We may update these documents for legal, technical, security or operational reasons. Where a change materially affects an existing paid agreement, we will provide notice and any termination or other rights required by law. Dutch law governs these Terms, without depriving consumers of mandatory protections under the law of their habitual residence. Disputes will be handled by courts competent under applicable procedural and consumer law; we do not require consumers to litigate in a court that the law does not permit us to impose.

If a clause is invalid, the remaining provisions continue insofar as legally possible. Failure to enforce a provision once does not automatically waive future enforcement. These Terms do not create an employment, agency or partnership relationship.

Acceptable Use Policy

Our website-building tools may not be used to create, store, publish, link to or facilitate the categories of content or conduct below. Restrictions apply to hosted sites, uploaded files, custom code, accounts and attempted circumvention. We assess reports in context and apply applicable law.

17. Prohibited content and conduct

• Sexual and pornographic content: pornography, sexually explicit commercial services, sexual exploitation, non-consensual intimate imagery, sexualized depictions of minors, grooming or trafficking. Any child sexual abuse material is strictly prohibited and may be reported to competent authorities.
• Violence and exploitation: credible threats, incitement to violence, terrorist recruitment or propaganda, trafficking, exploitation, instructions facilitating serious violent crime, or glorification of abuse where unlawful.
• Hate and harassment: unlawful discriminatory incitement, targeted threats, stalking, doxxing, bullying, extortion and abusive impersonation.
• Fraud and deception: phishing, credential theft, identity fraud, fake storefronts, investment scams, misleading payment requests, counterfeit offers and impersonation of public bodies or trusted organizations.
• Cyber abuse: malware, ransomware, spyware, botnets, credential stuffing, unauthorized penetration testing, denial-of-service attacks, exploit delivery, spam infrastructure or malicious redirects.
• Unlawful or regulated commerce: illegal drugs, illicit weapons, counterfeit products, stolen goods, trafficking, unlawful gambling, or regulated products and services offered without required authorizations.
• Intellectual property abuse: copyright infringement, trademark misuse, pirated software, unauthorized distribution of protected works and circumvention of technical protection measures.
• Privacy abuse: publishing private personal information without a lawful basis, unlawful surveillance, unauthorized collection of credentials, unlawful tracking or exposing confidential records.
• Dangerous or unlawful misinformation: fraudulent professional credentials, deceptive medical or financial claims, illegal advertising and other misrepresentations that violate applicable law.
• Platform misuse: bypassing usage limits, scraping without authorization, resource exhaustion, automated account creation, evasion of suspensions, unauthorized access or interference with other users.

We may also restrict otherwise lawful material where its use of our hosting is incompatible with this clearly disclosed policy, subject to contractual obligations, applicable fundamental rights and relevant platform regulation. The Platform is not intended for adult-content hosting, even where particular adult content may be lawful.

18. No guarantee of pre-screening

We do not promise to review every user-generated page before publication. Users remain primarily responsible for their material. We may use reports, proportionate automated signals and manual review to identify violations. We will not knowingly maintain unlawful material after receiving a sufficiently substantiated notice where applicable law requires action.

19. Report illegal or harmful content

Send reports to info@pthm.com. Include the exact website URL, the material concerned, why it is allegedly unlawful or violates this policy, relevant evidence, and a way to contact you. Do not email illegal imagery; provide a URL or safe description instead. We may request additional information to assess a report.

We will assess notices objectively and in a timely, diligent, non-arbitrary manner where required, and may remove content, restrict access, preserve necessary evidence, notify the affected user or refer serious matters to competent authorities when legally appropriate. Where applicable under the EU Digital Services Act, affected users may receive a statement of reasons and access to required complaint and redress procedures. We do not promise a specific statutory mechanism unless the Platform falls within the relevant legal category.

20. Repeat violations and appeals

Repeated or serious violations may lead to stronger restrictions or permanent termination. Users may contest moderation decisions by contacting info@pthm.com and supplying their account details and reasons for reconsideration. We will review appeals fairly, without guaranteeing reversal. Deliberately abusive notices may themselves violate this policy.

Privacy Notice

PTHM is the controller of personal data processed for Platform accounts, billing, support, security and operation of our own website, unless we expressly state otherwise. For personal data that customers independently collect through their published websites, the customer may be the controller and our role depends on the actual processing arrangement.

21. Personal data we process

• Account data: name, email, account identifiers, hashed passwords, role, registration and verification details.
• Subscription and transaction data: licence dates, payment status, Stripe session and transaction identifiers, paid amounts and billing details necessary for accounting.
• Website and project data: project names, website pages, uploaded files, content, published HTML/CSS/JavaScript, exports and timestamps.
• Technical and security data: IP address, browser and device information, server logs, authentication events, error records and suspicious activity signals where collected.
• Communications: emails, support requests, abuse reports, complaints and relevant correspondence.
• Visitor data: limited technical information generated when visitors access Platform-hosted websites; additional personal data collected by a customer's website is primarily governed by that customer's own privacy notice.

22. Purposes and GDPR legal bases

• Contract performance (Art. 6(1)(b)): registering accounts, authenticating users, providing the editor, hosting projects, administering licences and responding to service requests.
• Legal obligation (Art. 6(1)(c)): accounting, tax recordkeeping, compliance with lawful requests and applicable consumer obligations.
• Legitimate interests (Art. 6(1)(f)): securing systems, preventing fraud, investigating abuse, defending legal claims, maintaining service quality and troubleshooting, balanced against individual rights.
• Consent (Art. 6(1)(a)): optional non-essential cookies, analytics or marketing where consent is required. Consent can be withdrawn without affecting prior lawful processing.

We do not intentionally request special-category data under GDPR Article 9 for ordinary Platform accounts. Do not upload such data unless necessary, lawful and supported by an appropriate agreement and safeguards.

23. Retention and deletion

We keep account and project data while the account is active and as reasonably necessary to provide the service. Following account closure or prolonged inactivity, we may delete account and project content after applicable notices and retention periods. Our current target review period for inactive accounts is 12 months; this is not a promise of deletion on that exact day and must reflect our implemented deletion processes.

Financial and tax records may need to be retained for the statutory Dutch recordkeeping period, generally seven years, with longer periods for particular categories where required. Security logs and support records are retained only as long as necessary for their purposes, subject to legal holds, disputes and backup schedules. Backup copies may persist for a limited technical rotation period after primary deletion.

24. Recipients, processors and international transfers

We may share necessary data with hosting and infrastructure providers, Stripe and payment partners, email delivery providers, technical support providers, professional advisers and competent authorities when required. Access is limited by role and purpose, and we use processor agreements where legally required.

Some service providers may process data outside the European Economic Area. Where applicable, we rely on an adequacy decision, standard contractual clauses or another lawful GDPR transfer mechanism, together with supplementary safeguards when necessary. Contact us for information about relevant safeguards.

Third-party fonts, images, embedded media, scripts and integrations may cause a visitor's browser to connect directly to those providers. Customers are responsible for disclosures and consents required by the third-party technologies they add to their own websites.

25. Security and breaches

We use reasonable safeguards such as access controls, authentication protections, security updates, logging and restricted administrative access, as appropriate to risk. We investigate suspected personal data breaches and notify the competent supervisory authority and affected individuals where the GDPR requires. No security measure guarantees absolute protection.

26. Your data protection rights

Subject to the applicable conditions, you may request access, correction, erasure, restriction, portability or object to processing based on legitimate interests. You may withdraw consent at any time. You also have the right not to be subject to certain solely automated decisions with legal or similarly significant effects, where applicable. We may need to verify your identity before fulfilling a request.

Contact info@pthm.com. We generally respond within one month, subject to legally permitted extensions. You may complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or another competent supervisory authority. You may also seek a judicial remedy.

27. Children's data

The Platform is not directed to children and is intended for adult account holders. We do not knowingly solicit account registrations from children without an appropriate lawful basis or required consent. If you believe a child has provided personal information improperly, contact our privacy address.

28. Automated processing

We may use automated technical checks for fraud, security and abuse detection. We do not intend to make solely automated decisions producing legal or similarly significant effects without the safeguards required by law. Material account enforcement decisions may be reviewed through our support or appeals process.

Cookies and tracking

29. Essential technologies

We may use cookies and similar technologies needed for login sessions, CSRF protection, security, load balancing and remembering essential interface settings. Strictly necessary technologies may be used without consent where permitted, but remain subject to transparency and data protection rules.

30. Optional analytics, advertising and third parties

If we introduce non-essential analytics, personalization, advertising or similar tracking technologies, we will provide the legally required information and consent choices before setting or accessing them, where required by Dutch telecommunications and EU privacy law. Rejecting optional cookies must be as accessible as accepting them where consent is required.

Embedded third-party resources, including remotely loaded fonts and media, may transmit technical data to their providers. We should assess and disclose these connections and obtain consent where legally required. A privacy notice alone does not replace a functioning consent mechanism.

31. Managing cookies

You can use browser controls to remove or block cookies, although blocking essential session cookies may prevent sign-in or editing. Where an optional consent tool is implemented, you can change your preferences through that tool. We will not describe a consent-control link here until it is actually available in the Platform.

Contact, complaints and legal requests

For service complaints, payment issues, withdrawal requests or general questions, contact info@pthm.nl. For privacy requests use info@pthm.com; for allegedly unlawful or prohibited hosted content use info@pthm.com.

Please include your account email, the relevant order or website URL, a concise description and any supporting evidence. We will investigate and respond within a reasonable period and within any statutory deadlines. If a complaint remains unresolved, consumers retain access to competent authorities, applicable alternative dispute resolution arrangements and courts with jurisdiction under applicable law.

Last updated: 2026-10-24. This document should be reviewed whenever the Platform's functionality, payment flows, processors, retention practices or applicable laws change.

← Return to 2aapjes