Vega ACMS Terms of Service

Version of November 1, 2026.

1. Who these terms are for

These terms govern the Vega ACMS panel at acms.cloud and the Vega Pass and Vega Access apps (the "Service"). The Service is provided by Vega Security ("we").

  • Part A applies to everyone.
  • Part B applies to the organization that subscribes for its buildings (the "Customer"), such as a manager, owner or syndicate.
  • Part C applies to tenants and other people who use an app or credential given by a Customer.
  • Part D sets out how we handle personal information for a Customer.

2. Language

The French version of these terms is given first. The parties have expressly asked that the contract and related documents be available in English as well. Where the law requires it, the French version prevails.

Les parties ont expressément demandé que le contrat et les documents qui s'y rattachent soient également offerts en anglais.

Part A: Everyone

3. What the Service is, and is not

The Service helps manage who can open which doors, and keeps a history of door events.

It is not an alarm, a monitoring service, a guard, or a life-safety or fire system. It does not watch doors, call for help or tell anyone about a break-in. It does not process camera footage.

4. No guarantee that a door will open or stay locked

We do not guarantee that the Service or any door will be available at all times, or that it will always work as set.

A door may fail to open, fail to lock or act on outdated settings because of a power or battery failure, a network or internet outage, a hardware fault, a problem at a supplier, an update or an installation error. Do not rely on the Service as the only way to get in or out of a place, or to protect people or property.

5. When doors or the internet are offline

  • Locks keep working on the credentials stored in them when the internet is down.
  • That includes credentials that were removed while the door was offline. A door acts on what it last received.
  • While a door or our Service is unreachable, changes, remote opening, schedules sent from the panel and notifications may not work or may be delayed.
  • History can arrive late or be incomplete. An event may be missing if a device fails before sending it.
  • Opening by Bluetooth depends on your phone, the app and the lock.

6. Lost or stolen fobs, cards and phones

Report a loss to the building manager at once. Until the fob or card is marked lost and every door has received the change, it can still open doors.

Removal is sent to each door separately, and it depends on that door's connection. A door that is connected usually gets the change quickly. A door that is offline or refuses the change keeps accepting the fob until it gets it; we keep retrying. There is no promised time.

The panel shows the state of each door. The Customer must check that removal has finished and, if a door stays pending, deal with it on site or take other measures, such as removing the fob directly at the door or posting a guard.

If you lose a phone with the app, tell the building manager and change your password from another device.

7. Fobs and cards can be copied

Fobs and cards identified by their chip number (UID) can be cloned. The system recognizes such a fob by that number alone, with no secret key. Anyone who can read the number, even briefly and with inexpensive tools, may be able to make a copy that opens the same doors. The system may not be able to tell a copy from the original, and the history will show the original's holder even if a copy was used.

So a door event shows that a fob with that number was used, and not who was holding it.

These fobs offer convenience, not high security. Consider extra measures for sensitive doors.

8. Accounts and security

  • Keep your sign-in details and your phone secure. Do not share an account. Each person needs their own.
  • Use two-factor sign-in where it is offered. Customers should require it for staff.
  • Tell us or your manager at once if you suspect misuse.
  • You are responsible for what is done through your account, unless it results from our fault or you could not reasonably have prevented it.
  • Sign-in codes sent by email are only as safe as your mailbox.

9. Acceptable use

Do not:

  • open a door or use a credential without authority;
  • copy a fob or card without the Customer's authority;
  • track or harass anyone with door history;
  • break into, overload or probe the Service without our written permission;
  • reverse-engineer it, except where the law allows;
  • use it in breach of the law.

We may suspend access where it is needed to protect people, doors or data. Where we reasonably can, we warn first. Suspending an account does not by itself remove credentials stored at a door.

10. Suppliers and changes

The Service works with products from other companies, including TTLock locks and gateways and UniFi Access door equipment. We do not control them, and they may change or stop working with the Service. Their own terms may apply.

We may change the Service over time. We will give reasonable notice of a change that seriously reduces it.

11. Our liability

Nothing in these terms limits liability that the law does not allow us to limit. In Quebec, this means that we cannot exclude or limit liability for bodily or moral injury, or for material injury caused by our intentional or gross fault.

We are not liable for loss caused by superior force, such as a power or telecommunications outage beyond our control.

Consumers. If you are a consumer, nothing in these terms removes rights you have under the Consumer Protection Act or other mandatory law. Any clause that the law makes inapplicable to you does not apply to you.

Part B has further limits for Customers.

12. Changing these terms

We may update these terms. We will give at least 30 days' written notice of a change to Customers and to account holders, stating the new text, the old text where relevant, and the date it applies. If you do not accept a change, you may stop using the Service and, if you are a Customer or consumer with a right to do so, end your contract before it applies, without penalty. For consumers, changes apply only where the Consumer Protection Act allows them.

13. Courts

Consumers and people who live in Quebec keep their right to sue in the courts of their home district, and no clause here requires them to use arbitration or prevents them from joining a class action.

14. Contact

You can reach us through the contact form on our website.

Part B: Customers

15. Plans and fees

Plans and fees are set out in a written quote or order. These terms do not state any prices.

Locks, gateways, on-site installation, network cabling and PoE switches are not included unless the order says so.

16. Your responsibilities

You are responsible for:

  • installing and maintaining doors, locks, power, batteries and networks;
  • keeping safe ways out and a backup way in at every door, and meeting fire, building and safety codes;
  • deciding who gets access, entering accurate data and removing access promptly;
  • your staff, their roles and how they use the Service;
  • checking pending removals, as described in section 6;
  • telling people about the system and meeting your own privacy duties (Part D);
  • your tenants and your agreements with them, including leases and condominium rules.

17. Support and service levels

There is no service level commitment unless a written order says so.

18. Your data

Your data stays yours. You may export your door and card records to CSV or Excel while your contract is in force. You give us the right to use your data only to provide the Service, as Part D describes.

We own the Service and its software. Your subscription gives you a right to use them during the term, for your buildings, and nothing more.

19. Warranty

We will provide the Service with reasonable skill and care. Apart from that and from any warranty the law does not allow us to exclude, the Service is provided as is, with no warranty that it will be uninterrupted, error-free or fit for a particular purpose.

20. Limits on liability to Customers

To the extent the law allows and subject to section 11:

  • we are not liable for loss of profit or revenue, loss of use, indirect loss, or loss from theft, intrusion or property damage that the Service did not cause;
  • we are not liable for loss that results from a copied credential, a delay in removal described in section 6, or your failure to act on a pending status;

These limits reflect the fees and the security limits described in these terms. You should keep your own insurance.

21. Indemnity

You will compensate us for third-party claims that result from data you entered without authority, from your failure to give notice or obtain consent, or from your breach of section 16, except to the extent that we caused the loss.

22. Term and ending the contract

The term and renewal are set out in your order.

Either party may end the contract if the other commits a serious breach and does not fix it within 30 days of written notice.

When it ends: export your data before access to the panel ends; we then destroy it as Part D says. Remove credentials and reconfigure doors before access to the panel ends: doors may continue to act on stored credentials after that date.

Part C: Tenants and other app users

23. Your relationship with us

You receive access through your building manager. Your lease, condominium rules and access rights are between you and the Customer. The Customer decides your doors and can change or remove your access at any time; for questions, go to the Customer first.

24. The apps

We give you a personal, revocable right to use the apps on your own devices, for doors you are authorized to use. Turning off Bluetooth, location or notifications may limit what the app can do. Your phone's battery and signal are your responsibility: keep your fob or another way in.

Apple and Google are not parties to these terms and are not responsible for the apps.

25. Your privacy

See the Vega ACMS Privacy Policy for what is recorded about you, including door history, and for your rights.

Part D: Personal information we handle for Customers

26. Roles and instructions

As Customer, you are responsible for the personal information of your tenants and staff. We act as your service provider under this written mandate, and we follow your instructions and the settings you choose. We will tell you if we believe an instruction breaks the law.

27. What we promise

We will:

  • use the information only to carry out this contract, and not for our own purposes;
  • limit access to people who need it and who are bound to confidentiality;
  • apply the safeguards described in the Privacy Policy, keep them reasonable for the sensitivity of the information, and not reduce them materially;
  • notify your person in charge of the protection of personal information without delay of any violation or attempted violation of these obligations, and of any confidentiality incident affecting your data;
  • allow your person in charge to carry out any verification relating to confidentiality requirements, on reasonable notice;
  • not keep the information after the contract ends, apart from the backup period and legal holds in section 30.

28. What you do

You will:

  • appoint your own person in charge and publish their title and contact details;
  • give people notice and get any consent the law requires, including for minors under 14;
  • tell us if your buildings need a different retention period, which we agree with you separately;
  • answer access, correction and portability requests. We will give reasonable help and pass on any request we receive;
  • carry out the privacy impact assessments your projects require. We will give you information about our suppliers for this purpose;
  • assess incidents, keep your register and notify the Commission d'accès à l'information and affected people where required. We will give you what we have.

29. Suppliers and transfers

You allow us to use the suppliers listed in the Privacy Policy. We will bind them in writing to protections no weaker than these, and give you notice of new ones so that you can object for a good reason.

Some suppliers may handle data outside Quebec or Canada. TTLock's cloud may be one. Do not use TTLock doors if your own assessment does not allow that transfer.

30. Retention and end of contract

Information about door events is kept for exactly 365 days (one year) on every plan, then deleted. Any change to this period is agreed separately with the Customer. After the contract ends, we destroy your data in the live system, and it leaves backups as they rotate, up to about 6 months later.