Terms of Service
Last updated 6 May 2026. By creating an account or using Yoetz.ai you agree to these terms.
1. Definitions
"Service" means the Yoetz.ai platform, web dashboard, APIs, exports and reports. "Customer" means the legal entity that has accepted these terms. "Tenant" means an HR platform instance (Workday, SAP SuccessFactors, Oracle HCM and similar) that the Customer connects to the Service. "Configuration Data" means metadata describing the structure of a Tenant — security groups, business processes, integrations, calculated fields, role assignments and similar — explicitly excluding any personal data of workers, candidates, dependents, payroll records, compensation amounts or PII.
2. Service description
Yoetz.ai provides automated, read-only Configuration Data analysis of supported HR platform tenants. Output is delivered as written reports, downloadable PDF/CSV exports, signed share links and a web dashboard. Yoetz.ai never writes to a Customer Tenant and never instructs the Tenant to perform actions on workers, payroll or business processes.
3. Authorisation & acceptable use
Customer represents and warrants that it owns each connected Tenant, or that it has received explicit written authorisation from the Tenant owner to scan it. Connecting or scanning a Tenant without authorisation is a material breach and grounds for immediate suspension, termination, forfeiture of fees paid, and reporting to the relevant Tenant owner. Customer further agrees not to: (a) reverse engineer the Service, (b) attempt to bypass DPA, rate limit, or authentication controls, (c) use the Service to attack, probe or stress test any system other than its own authorised Tenants, (d) resell raw Service output as a competing product without a separate written agreement.
4. Account types & honest representation
Yoetz.ai offers separate plans for Internal HR Teams and Consulting Firms. Plans are priced based on the type of buyer and the number of distinct Tenants scanned. Misrepresenting account type, the number of underlying clients, or sharing one seat across multiple consulting engagements is grounds for immediate suspension. Yoetz.ai may, with 7 days' notice, audit Tenant counts and back-bill the difference between the paid plan and the correct plan, plus a 25% administration fee.
5. Data Processing Agreement (DPA)
Before any Tenant can be connected or any scan can be started, Customer must sign Yoetz.ai's Data Processing Agreement via the in-product flow. The DPA is incorporated into and forms part of these terms. Yoetz.ai acts solely as a processor with respect to Configuration Data and never as a controller. Database triggers enforce DPA acceptance — connections and scans are blocked at the database layer if the DPA is not on file.
6. Credentials & security controls
All credentials submitted by Customer are encrypted at rest using AES-256-GCM with per-installation keys, transmitted using TLS 1.3, never logged in plaintext, never displayed back in the dashboard after save, and stored only in a separate, RLS-protected credential store. Customer remains responsible for: (a) provisioning a dedicated Integration System User (or equivalent) with the minimum read-only permissions specified in the connection guides, (b) rotating that ISU's credentials on its own schedule, (c) revoking the ISU at the Tenant level when disconnecting. Disconnecting a Tenant in the Yoetz.ai dashboard immediately deletes the encrypted credentials.
7. AI processing
Executive summaries, AI readiness assessments and remediation explanations are generated by third-party large-language-model providers (currently Anthropic Claude and Google Gemini, via the Lovable AI Gateway). Only de-identified Configuration Data and finding metadata are sent to these providers. No worker PII is ever transmitted to an AI provider. Customer Configuration Data is not used by Yoetz.ai or its subprocessors to train models.
8. API access & rate limits
Programmatic API access is governed by per-plan rate limits published in the documentation. Yoetz.ai may throttle, queue or temporarily suspend access that exceeds limits or that materially impacts Service availability. Yoetz.ai will provide reasonable notice of breaking API changes and maintain at least one prior major version for 6 months.
9. Fees, billing & refunds
Subscriptions are billed in advance, in the currency shown at checkout, via Stripe. One-time scan unlocks are non-refundable once the report is downloaded or the share link is opened. Annual subscriptions are non-refundable mid-term except where required by law. Late payments accrue interest at the lower of 1.5%/month or the maximum permitted rate. Yoetz.ai may suspend the Service for accounts more than 14 days past due.
10. Cancellation & data retention
Customer may cancel at any time from the in-product Billing page; the Service remains available until the end of the paid period and will not auto-renew. After cancellation, Configuration Data, scan results and exports are retained for 90 days then permanently deleted. Customer may export all of its data at any time before the 90-day window closes.
11. Confidentiality
Each party will protect the other's Confidential Information with at least the same care it uses for its own (and in no case less than reasonable care) and will use it only to perform under these terms. Configuration Data is Customer Confidential Information. Yoetz.ai's pricing, product roadmap and security architecture are Yoetz.ai Confidential Information.
12. Service availability
Yoetz.ai targets 99.5% monthly uptime for the dashboard and scan execution layer, excluding scheduled maintenance and Tenant-side outages. The sole remedy for missed targets is service credit equal to a pro-rata refund of the affected month, capped at one month's subscription fee.
13. Warranty disclaimer
THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, OR THAT FINDINGS WILL DETECT EVERY POSSIBLE MISCONFIGURATION. CUSTOMER REMAINS RESPONSIBLE FOR ALL DECISIONS MADE BASED ON SERVICE OUTPUT.
14. Limitation of liability
TO THE MAXIMUM EXTENT PERMITTED BY LAW, NEITHER PARTY WILL BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY OR PUNITIVE DAMAGES, OR FOR LOST PROFITS, REVENUE, DATA, GOODWILL OR BUSINESS INTERRUPTION, EVEN IF ADVISED OF THE POSSIBILITY. EACH PARTY'S AGGREGATE LIABILITY UNDER THESE TERMS IS LIMITED TO THE FEES ACTUALLY PAID BY CUSTOMER TO YOETZ.AI IN THE 12 MONTHS IMMEDIATELY PRECEDING THE EVENT GIVING RISE TO LIABILITY. NOTHING IN THIS SECTION LIMITS LIABILITY FOR FRAUD, WILFUL MISCONDUCT, OR LIABILITY THAT CANNOT BE LIMITED BY LAW.
15. Indemnification
Customer will defend, indemnify and hold harmless Yoetz.ai from any third-party claim arising from: (a) Customer's connection of a Tenant it was not authorised to scan, (b) Customer's misuse of the Service in violation of section 3, or (c) Customer's violation of applicable law in connection with the Service. Yoetz.ai will defend, indemnify and hold harmless Customer from any third-party claim alleging that the Service, used as permitted, infringes that third party's intellectual property rights, subject to the cap in section 14.
16. Suspension & termination
Yoetz.ai may suspend or terminate the Service immediately for: material breach of these terms, non-payment more than 14 days overdue, suspected unauthorised scanning, or activity that threatens the security or stability of the Service. Either party may terminate for convenience at the end of the then-current billing period.
17. Changes to these terms
Yoetz.ai may update these terms with at least 30 days' notice via email and an in-product banner. If Customer does not accept the updated terms, its sole remedy is to cancel before the new terms take effect; continued use after the effective date constitutes acceptance.
18. Governing law & venue
These terms are governed by the laws of England and Wales, without regard to conflict-of-law principles. Each party consents to the exclusive jurisdiction of the courts of London, England, except that either party may seek injunctive relief in any court of competent jurisdiction to protect its intellectual property or Confidential Information.
19. Entire agreement
These terms, together with the DPA and any order form, constitute the entire agreement between the parties and supersede all prior agreements regarding the Service. If any provision is found unenforceable, the remainder remains in full force.
20. Contact
Questions about these terms? Email legal@yoetz.ai.