Terms of Service

The Service is intended for businesses and professional use. It is not offered to consumers. Mandatory consumer protection law applies only to the extent it cannot lawfully be excluded.

In these Terms:

• A "user account" is the personal login of one individual. It belongs to that person and can be a member of several organizations.
• An "organization" is a separate workspace in the Service, created by a user. Each organization has its own data (such as clients, quotes and orders), its own members and their roles, and its own subscription. Each organization is subscribed to and billed separately, and its data is not visible to other organizations.
• A "member" is a user account that has been added to an organization. Members with the owner or admin role manage the organization's members, settings and billing.
• The "Customer" is the company or other legal entity on whose behalf an organization is used. The Customer is responsible for its organizations, including how its members use the Service. If you create an organization for your own business, that business is the Customer.

You must provide accurate information and keep it up to date. You are responsible for keeping your login credentials, API keys and MCP access keys secret, and for all activity that happens under your user account or organization.

Tell us without delay at [email protected] if you suspect unauthorized access to your user account or organization.

• Paid plans are billed per organization, in advance, monthly or annually, as selected at checkout. The price, included users and features of each plan are shown on our website and in the Service at the time of purchase.
• Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders. Paddle handles payments, invoices, sales taxes and the processing of refunds, and can answer questions about charges and receipts. Support for the Service itself is provided by us. Paddle's Buyer Terms (paddle.com/legal/buyer-terms) apply to the purchase transaction in addition to these Terms.
• Prices are shown excluding VAT and other applicable taxes, which Paddle calculates and adds at checkout.
• A new organization starts with a free one-month trial of the Team plan, limited to one trial per person. No payment details are needed, and nothing is charged when the trial ends. The organization then becomes read-only until someone subscribes. Ending the trial does not delete any data; section 5 explains how long an organization without a subscription is kept. If you subscribe during the trial, the trial ends and your paid plan starts immediately.
• Subscriptions renew automatically at the end of each billing period until cancelled.
• Upgrades and added users take effect immediately and are charged pro rata for the remainder of the current period. Downgrades take effect at the start of the next billing period. Downgrading never deletes data; anything above the new plan's limits remains readable, but you cannot add more of it.
• We may change prices by giving at least 30 days' notice by email or in the Service. A price change applies from your next billing period after the notice period. If you do not accept the change, you can cancel before it takes effect.

If a payment fails, your organization keeps full access for a 7-day grace period while payment is retried. If the payment is still outstanding after the grace period, the organization becomes read-only: you can still view and export your data, but you cannot create or change it until payment is made.

An organization owner or admin can cancel the subscription at any time from the billing settings of the Service. Cancellation takes effect at the end of the current billing period, and you keep full access until then. Payments already made are not refunded, except as described in our Refund Policy.

After the subscription ends, the organization remains available in read-only mode so that you can export your data. If an organization has had no active subscription for 12 consecutive months, we may delete it and its data after notifying its owners by email at least 30 days in advance. You can also ask us to delete an organization or account at any time.

• All data that you or your members enter into or upload to the Service ("Customer Data") belongs to the Customer. You grant us a limited right to host, process, copy and display Customer Data solely to provide, secure and support the Service for you.
• You can export your Customer Data at any time, including while your organization is read-only.
• You are responsible for the lawfulness of Customer Data and for having the rights and legal bases needed to store it in the Service, including any personal data about your clients and their contacts.
• We do not sell Customer Data, use it for advertising, or use it to train AI models.

To the extent Customer Data contains personal data, the Customer is the controller and we are the processor under the EU General Data Protection Regulation (GDPR). This section forms the data processing agreement required by Article 28 GDPR. The subject matter and duration of the processing are the provision of the Service for the term of the subscription. The purpose is to store and process CRM records. The data subjects are mainly the Customer's own users and the contact persons of the Customer's clients and prospects. The data types are mainly names, contact details, job titles, business correspondence and notes. We:

• process personal data only on the Customer's documented instructions, which consist of these Terms and the Customer's use and configuration of the Service, unless EU or Finnish law requires otherwise;
• ensure that persons authorized to process the data are bound by confidentiality;
• implement appropriate technical and organizational security measures, including encryption in transit, database-level separation between organizations, hashed passwords and access keys, and access restricted to what is needed to operate the Service;
• use the sub-processors listed in our Privacy Policy. The Customer gives general authorization for them. We will announce any intended addition or replacement at least 14 days in advance, and the Customer may object on reasonable grounds; if we cannot accommodate the objection, the Customer may terminate the affected subscription. We impose data protection obligations on sub-processors equivalent to these;
• assist the Customer, taking into account the nature of the processing, in responding to data subject requests and in meeting its obligations regarding security, breach notification and data protection impact assessments;
• notify the Customer without undue delay after becoming aware of a personal data breach affecting Customer Data;
• at the end of the service, and after the export period described in section 5, delete the Customer Data, unless law requires us to retain it; and
• make available the information necessary to demonstrate compliance with this section, and allow for and contribute to audits reasonably requested by the Customer, at the Customer's cost and with reasonable advance notice.

Customers that need a separately signed data processing agreement can request one at [email protected].

You must not, and must not allow anyone else to:

• use the Service in breach of law, or to store or send unlawful, infringing or malicious content;
• attempt to access another organization's data, probe or circumvent the Service's security or tenant isolation, or reverse engineer the Service except where law expressly permits it;
• place unreasonable load on the Service, including through automated scraping or load testing without our written consent;
• use public-facing features such as the external RFQ intake form to send spam or collect data unlawfully; or
• resell or sublicense the Service to third parties without our written consent.

If you discover a security vulnerability, please report it to [email protected] rather than exploiting it.

The MCP interface is off by default. If you create an access key or authorize an AI assistant or other third-party service to access your organization, you choose that provider and control what it can read. The data it retrieves is then processed under that provider's own terms, and we are not responsible for third-party services.

• We aim to keep the Service available and secure, but we do not guarantee uninterrupted or error-free operation. We may carry out maintenance, where possible outside normal Finnish business hours.
• Support is provided by email at [email protected] in English or Finnish, on a reasonable-efforts basis.
• We develop the Service continuously and may add, change or remove features. We will not materially reduce the core functionality of your plan during a billing period you have already paid for.

We and our licensors own all rights to the Service, including its software, design and documentation. You receive a non-exclusive, non-transferable right to use the Service for your internal business purposes during your subscription. If you give us feedback or suggestions, we may use them without obligation to you.

• We may suspend access, in whole or in part, if it is reasonably necessary to prevent a security risk, a breach of these Terms or unlawful use. We will notify you and limit the suspension to what is necessary.
• We may terminate the Service for an organization for material breach of these Terms that is not remedied within 14 days of our notice, or immediately for serious or repeated breaches.
• We may also terminate the Service for any other reason with at least 30 days' notice. In that case we refund prepaid fees for the unused period, pro rata.
• Sections 5 (data after termination), 6, 11, 13, 14 and 16 survive termination.

Except as expressly stated in these Terms, the Service is provided "as is" and "as available". To the extent permitted by law, we give no other warranties, express or implied, including of merchantability, fitness for a particular purpose or non-infringement. You are responsible for keeping your own copies of business-critical data using the export features.

• Neither party is liable for indirect or consequential loss, including loss of profit, revenue, business or goodwill, or for the cost of reconstructing lost data.
• Our total liability arising from or relating to the Service is limited to the fees the Customer paid for the Service during the 12 months before the event giving rise to the claim.
• These limitations do not apply to damage caused intentionally or through gross negligence, or where they are otherwise not permitted by law.

We may update these Terms. We will notify organization owners of material changes to the Customer's detriment by email or in the Service at least 30 days before they take effect. Other changes, such as those required by law and clarifications, take effect when published. Continuing to use the Service after changes take effect constitutes acceptance of them. If you do not accept the changes, you may cancel your subscription; in that case the previous Terms continue to apply to you until the end of the billing period you have already paid for.

These Terms are governed by the laws of Finland, excluding its choice-of-law rules. The parties will first try to resolve disputes through negotiation. If that fails, disputes are settled in the district court of our domicile in Finland.

Tmi Peltokorpi Patrik (business ID 3589265-1), Salmenhaantie 28 A, 67300 Kokkola, Finland

[email protected]