Terms of Service

Status: baseline platform terms for product use. Customer-specific commercial terms, signed contracts, invoices, and DPA documents are separate from this notice.

Scope

These terms apply to operators and customer administrators who access the platform. The product model is `Organization -> Project -> Application`. Organizations administer projects, install applications, configure public runtime behavior, and control the customer content they provide.

Accounts and access

Operators must use accurate account information, keep credentials secure, and make sure that organization members have appropriate authorization. Invitations, roles, assignments, and audit records are used to protect organization and project access.

You must not share access credentials, bypass authentication or authorization controls, interfere with audit or security controls, or use another organization's data without authorization.

Customer data and configuration

The customer organization remains responsible for the content, knowledge sources, public application identity, privacy contact paths, disclaimers, retention choices, allowed embed origins, and application behavior it configures. Hefti Web Solutions processes customer-controlled content and public runtime data according to the customer's instructions and the implemented platform controls.

Do not configure an application to collect or process sensitive, high-risk, or regulated data unless the required legal, risk, provider, notice, and runtime controls have been separately approved.

Acceptable use

The platform must not be used for unlawful content, deceptive applications, credential abuse, security testing without permission, spam, harassment, malware, or attempts to overload or disrupt the service.

The public chatbot baseline is website navigation over customer-approved public sources. It must not be presented as medical diagnosis, therapy, triage, emergency support, patient intake, legal or financial advice, HR eligibility, or an automated decision system with legal or similarly significant effect unless a separate approved scope exists.

Providers and service operation

The platform uses approved providers to operate hosting, storage, backups, email where configured, and AI capabilities. Provider use is documented in the privacy, subprocessor, security, and AI-provider notices.

Service availability may depend on hosting, network, provider, maintenance, or customer configuration factors. Hefti Web Solutions may suspend access or runtime publication where needed to protect the platform, comply with law, prevent abuse, or address a material security or privacy risk.

Contract priority

If a signed customer agreement, DPA, or order form applies, that document takes priority over this general platform notice for commercial terms, fees, liability, governing law, and customer-specific commitments. This notice explains the baseline product terms and does not replace signed customer documents.