1. Who these terms are between

The Service is provided by Heplon UG (haftungsbeschränkt) i.G., Kolonnenstraße 8, 10827 Berlin, Germany ("Heplon", "we", "us"). Full provider details are in our legal notice.

"You" means the company or other organisation on whose behalf the Service is used. If you use the Service in connection with your job, these Terms bind your employer, not you personally. The Service is offered to businesses only. It is not offered to consumers.

2. How you accept these terms

You accept these Terms in any of the following ways:

By ticking a box or clicking a button that says you accept them.
By signing or otherwise agreeing to an order form that refers to them.
By using the Service.

However you accept, these Terms then bind you and us as a contract. Where you also sign an order form, that order form and these Terms apply together.

If you accept these Terms on behalf of an organisation, you confirm that you are authorised to bind that organisation. If you are not, do not accept them and do not use the Service.

3. Free access

We offer a free tier of the Service ("Free Access"). It runs for 30 days from the day we give you access, and we may extend it, once or repeatedly, by notice to you in writing, including by email.

Free Access is provided for evaluation purposes. Because it is provided free of charge, the following reduced commitments apply:

We make no promises about availability, uptime, performance, or response times.
Support is offered on a best-effort basis only.
We may change the scope, features, or usage limits of Free Access at any time.
We may end Free Access at any time, for any reason, and with immediate effect.
For Free Access, our liability is limited to intent and gross negligence. See section 16.

When Free Access ends, your access to the Service stops. Free Access does not convert into a paid plan or any other continuing arrangement, whether automatically, by expiry, or by continued use, and neither of us owes the other any fee, notice period, or compensation. Any further use of the Service requires a separate agreement.

4. Paid plans and order forms

Paid use of the Service is agreed in an order form. The order form sets the scope, the number of seats or other usage limits, the price, the billing period, and the contract term.

These Terms apply to every order form unless the order form says otherwise. Where an order form and these Terms conflict, your order form prevails.

Fees are exclusive of VAT and other applicable taxes. Invoices are payable within 30 days of the invoice date unless the order form says otherwise.

5. Your account

You are responsible for your account and for all activity under it, including managing who has access, removing users who leave, and keeping credentials secure. You will use strong authentication and enforce multi-factor authentication where available.

Notify us without undue delay at security@heplon.com if you believe an account has been compromised.

6. What you may not do

You may not:

Use the Service unlawfully, or in a way that breaks the rights of anyone else.
Resell, sublicense, or provide the Service to anyone outside your organisation.
Reverse engineer, decompile, or try to extract the source code or model weights behind the Service, except where the law says you may.
Use the Service to build a competing product.
Deliberately overload the Service, work around usage limits, or interfere with its security.
Feed the Service data you have no right to share with us.

You must not include secrets, credentials, or API keys in the prompts, chat, or other content you ask the Service to process. This does not cover the credentials you enter while connecting Heplon to your systems, or secrets the Service reads from those systems while carrying out the actions you have configured.

7. Connecting your systems

The Service connects to your repositories, cloud accounts, CI systems, chat tools, and other parts of your platform. You designate which systems to connect and the scope of the automated actions the Service may take in them. When you set up a connection, you instruct us to access that system, and you warrant that you are entitled to give us that access.

You control the scope. Heplon acts with the permissions of the role you configure and can only reach what that role can reach.

You stay responsible for the systems you connect. That includes the access you grant, your own backups and recovery, and your own change control and release processes.

Where Heplon works alongside third-party services, those services are governed by their own terms and privacy policies. We are not responsible for how they behave or whether they stay available.

8. Where the service runs

We run the Service for you as a managed service on Amazon Web Services, within the European Union.

AI processing happens through managed inference with providers that operate within the European Union. Those providers are named in our data processing agreement. Your data is not sent to any model provider outside that list.

Your data is encrypted in transit and at rest. The technical and organisational measures we apply, and the subprocessors we use, are listed in our data processing agreement.

9. Your data and who owns it

You keep ownership of everything you put into the Service and everything we read from your connected systems, including your source code, configuration, telemetry, and documents ("Customer Data"). Nothing here transfers any of it to us.

You grant us a limited, non-exclusive licence to host, copy, process, and display Customer Data purely to run the Service for you, to support you, and to keep the Service secure. That licence ends when your access ends.

We do not sell Customer Data or disclose it for advertising purposes.

We may create and use anonymised data about how the Service is used to operate, secure, and improve it, and we may share that data without restriction. Such data does not identify you and does not contain Customer Data.

We keep all rights in the Service, including in every improvement to it. If you send us feedback, you grant us a perpetual, irrevocable, worldwide, royalty-free right to use it to develop and improve the Service, with no obligation to credit or pay you.

10. AI output and your responsibility for it

The Service uses artificial intelligence and other automated methods to analyse your platform and generate output for you, such as reviews, answers, and proposed changes ("Output"). Output may be incomplete, outdated, or incorrect.

You are responsible for reviewing Output before you merge it, deploy it, or otherwise act on it. You must not rely on the Service as the sole control over any change affecting production, security, or compliance.

We do not warrant that Output is accurate, complete, current, or fit for any particular purpose.

As between you and us, you own the Output generated for you. Because models produce similar answers to similar questions, Output is not exclusive, and comparable Output may be generated for other customers.

11. Confidentiality

Each side may receive non-public information from the other in connection with the Service, including your code and infrastructure on our side and the internal workings of the Service on yours. Each side will keep that information confidential, use it only for the purposes of this contract, and disclose it only to personnel and subcontractors who need it and who are bound by equivalent obligations.

This does not cover information that is or becomes public without a breach of these Terms, was lawfully known beforehand, is lawfully received from a third party, or was developed independently. Disclosure required by law or by a court or authority is permitted, and the other side will be told in advance where that is lawful and practical.

These obligations remain in force for three years after your access ends.

12. Data protection

Where we process personal data contained in Customer Data, we do so as a processor on your instructions, and you act as the controller. Our data processing agreement governs that processing, meets Art. 28 GDPR, and forms part of these Terms. By accepting these Terms you also accept it.

How we handle personal data collected through our website is described in our privacy policy. What our agents can access, and how we secure the Service, is described on our security page.

13. Availability, support, and changes to the service

We work to keep the Service available and to fix problems quickly, but we do not guarantee uninterrupted access unless an order form says otherwise. Maintenance, third-party outages, and factors outside our control can all interrupt it.

The Service changes over time. We may add, alter, or remove features. If we remove a feature and this materially reduces the value of a paid plan, you may terminate that plan on notice and receive a refund of fees covering the unused remainder of the term.

We may suspend access without notice if there is a security risk, unlawful use, or a serious breach of these Terms. We will restore access as soon as the reason for the suspension is resolved.

14. Term and termination

These Terms apply for as long as you use the Service. Free Access runs as described in section 3. Paid plans run for the term set in the order form.

Either side may terminate immediately for good cause. Either side may also terminate for a material breach that the other does not remedy within 30 days of being notified of it. Notice is given in writing, including by email.

When access ends, you can ask us to export your Customer Data. We will provide it in a reasonable machine-readable format if you ask within 30 days. After that we delete Customer Data from active systems within 30 days, except where the law requires us to keep it. Backups are deleted as they expire.

The sections on data ownership, confidentiality, liability, and governing law survive termination.

15. Warranties

For paid plans, we warrant that we will provide the Service with reasonable skill and care. Free Access is provided for evaluation on an as-is basis, without warranty as to availability or as to the accuracy of Output.

Beyond that, and as far as the law allows, we give no other warranties, express or implied, including any implied warranty of merchantability, fitness for a particular purpose, or non-infringement. In particular, we do not warrant that the Service will be error free, that it will find every problem in your code or platform, or that its Output will be correct.

16. Liability

Nothing in these Terms limits or excludes our liability for damage caused intentionally or by gross negligence, for injury to life, body, or health, under the German Product Liability Act, or for anything else that cannot be limited by law.

For paid plans, in cases of slight negligence we are liable only where we breach a material contractual obligation, meaning an obligation whose fulfilment is essential to performing this contract properly and on which you may reasonably rely. In that case our liability is limited to the foreseeable damage typical for a contract of this kind.

Because Free Access is provided free of charge, our liability under Free Access is limited to intent and gross negligence. The exceptions in the first paragraph of this section are unaffected.

Subject to the paragraphs above, our total aggregate liability for paid plans, arising out of or relating to these Terms, is limited to the fees you paid us in the 12 months before the event that caused the liability.

Neither side is liable for indirect or consequential loss, lost profits, lost revenue, or lost data, again subject to the paragraphs above.

The caps above do not apply to breaches of section 11 (confidentiality). Each side's aggregate liability for such breaches is limited to EUR 50,000, except for breaches caused intentionally. The same limitations apply in your favour.

17. Changes to these terms

We may update these Terms to reflect changes to the Service, to our operations, or to the law. Every version carries a version number and an effective date, and we keep earlier versions available.

For material changes we will give you at least 30 days notice in writing, to your account administrators or through the Service. If you do not accept a material change, you may terminate before it takes effect. For paid plans, we refund fees covering the unused remainder of the term.

Changes apply going forward only. Anything that happened before a new version took effect is governed by the version that applied at the time.

18. General

These Terms, together with any order form and our data processing agreement, are the entire agreement between us on this subject. Amendments must be in writing, which includes email.

If a provision turns out to be invalid, the rest stays in force. Neither side may assign this contract without the other's consent, except to a successor of its business. We may use subprocessors and subcontractors, and we stay responsible for what they do.

These Terms are governed by German law, excluding its conflict of law rules and the UN Convention on Contracts for the International Sale of Goods. The place of jurisdiction is Berlin, as far as jurisdiction can be agreed.

19. Contact

Questions about these Terms can be sent to hello@heplon.com.

Terms of Service