Terms of service

• Order Form — the document we sign with you that sets pricing, plan, and term.
• Customer Data — anything you upload or connect through the Service.
• Authorised User — a person you invite under your subscription.
• DPA — the Data Processing Addendum incorporated by reference.

You must be at least 18, acting in a business capacity, and capable of forming a binding contract under your local law. By signing in or accepting an Order Form you confirm you have authority to bind your organisation. Internal staff accounts are subject to mandatory two-factor authentication.

Plans are described on our pricing page and the executed Order Form. Fees are payable in advance per the chosen billing cycle (monthly or annual). Czech VAT applies unless you provide a valid EU VAT-ID and we can apply the reverse-charge mechanism. Invoices are issued through Superfaktura and delivered by email; payment terms are 14 days net unless otherwise stated on the Order Form.

We may revise pricing for renewal terms with at least 30 days’ notice before the renewal date. Current-term prices are locked.

You retain all rights, title and interest in Customer Data. We act strictly as a processor for the personal data subset (see the DPA). We may use aggregated, de-identified, statistical data derived from service operation to improve the product, provided it cannot be re-identified to you or to a natural person.

You agree not to:

• use the Service to violate any law, IP right, or third-party agreement;
• attempt to access another tenant’s data, or to circumvent tenant isolation;
• reverse-engineer, decompile, or extract the source code beyond what Czech law expressly permits;
• resell or sublicense the Service without a written agreement;
• upload malware, run load tests without prior coordination, or otherwise impair service availability.

We may suspend access for material breach of this section with as much notice as is reasonable in the circumstances. Repeated breaches are grounds for termination.

The Service enforces per-endpoint rate limits (currently 60 requests per minute for anonymous traffic, 1 200 per minute per authenticated user, lower scopes for auth endpoints). Ingestion against third-party platforms is bounded by those platforms’ quotas. Sustained patterns that materially exceed average usage may be throttled; we reach out before suspension.

We grant you a worldwide, non-exclusive, non-transferable right to access and use the Service during the subscription term, solely for your own internal business purposes. All Service IP — code, design, trademarks, and documentation — remains ours or our licensors’.

Each party will protect the other’s non-public information with at least the same care it uses for its own (and no less than reasonable care). The obligation survives termination for 3 years. Customer Data is always treated as Customer’s confidential information.

We warrant that the Service will be operated with reasonable skill and care and substantially in accordance with the documentation. Except as expressly stated, the Service is provided “as is” — we disclaim all other warranties to the maximum extent permitted by applicable law, including implied warranties of merchantability, fitness for a particular purpose, and non-infringement.

We target 99.5% monthly uptime for the production API. Scheduled maintenance is announced at least 24 hours in advance and excluded from the calculation. Emergency security patching is excluded. If we miss the target in a calendar month, eligible customers may request a service credit equal to 5% of the prorated monthly fee per percentage point missed, up to 25% of that month’s fee. Service credits are the sole remedy for SLA breaches.

To the maximum extent permitted by law: our total aggregate liability under or in connection with these Terms is capped at the fees paid by you in the 12 months preceding the event giving rise to the claim. We are not liable for indirect, incidental, or consequential losses, or for data delivered (or not delivered) by third-party platforms (Google, Meta, Microsoft, …). Nothing in this clause limits liability for death, personal injury caused by negligence, fraud, or any other liability that cannot be excluded by law.

The subscription term is stated on the Order Form. Either party may terminate for material breach not cured within 30 days of written notice. We may suspend or terminate immediately for repeated breach of Section 5 (Acceptable Use) or non-payment beyond 30 days. On termination, your access ceases; we retain Customer Data for 30 days to allow export, then delete it per the DPA.

We may update these Terms with at least 30 days’ advance notice by email and in-product banner. Material commercial changes (pricing, term length, key obligations) require positive opt-in for existing customers. Editorial fixes do not require notice.

Notices to us: legal@advisio.cz. Notices to you: the admin email on your account. Either party may update notice addresses with 5 days’ notice.

These Terms are governed by the laws of the Czech Republic, without regard to conflict-of-laws rules. Disputes are resolved exclusively by the courts of Prague, Czech Republic. The CISG is excluded.

• Entire agreement. Order Form + these Terms + DPA + Privacy Policy = the entire agreement; they supersede prior discussions.
• Assignment. Neither party may assign without consent, except to a successor in interest as part of a corporate transaction.
• Severability. If a clause is unenforceable, the rest stays in force.
• Force majeure. Neither party is liable for events outside reasonable control (network outages, third-party API blackouts, regulator-mandated takedowns).
• No third-party beneficiaries.