PLATFORM TERMS OF SERVICE (SaaS)

Last updated: 09/03/2026

Introduction & Acceptance of Terms

These Terms of Service ("Terms") govern access to and use of the Siesta AI platform (the "Platform") and related services (the "Services") provided by Siesta AI, s.r.o., a company incorporated under the laws of the Czech Republic, with its registered seat at Bruselská 266/14, Vinohrady, 120 00 Praha 2, Company ID No. 23855312.

These Terms constitute a legally binding agreement between the Provider and the legal entity or organization accessing or using the Platform (the "Customer").

By:

• creating an account,

• clicking to accept these Terms,

• purchasing a subscription,

• or otherwise accessing or using the Platform,

the Customer confirms that it has read, understood, and agrees to be bound by these Terms.

If an individual accepts these Terms on behalf of a legal entity, such individual represents and warrants that they are authorized to bind that entity to this agreement.

If the Customer enters into a separate written agreement with the Provider governing the use of the Platform (including Enterprise or Private Deployment agreements), such agreement shall prevail over these Terms in the event of any conflict.

If the Customer does not agree to these Terms, the Customer must not access or use the Platform.

Definitions

For the purposes of these Terms, the following capitalized terms shall have the meanings set forth below:

• "Affiliate" means any entity that directly or indirectly controls, is controlled by, or is under common control with a party.

• "Agreement" means these Terms of Service, together with any applicable Order, subscription plan, Data Processing Addendum (DPA), or separate written agreement between the Provider and the Customer.

• "Account Data" means information provided by the Customer in connection with account registration, administration, billing, or support, including contact details and organizational information.

• "Admin User" means a User designated by the Customer with administrative privileges to manage the Organization, Users, permissions, and billing settings.

• "Customer" means the legal entity entering into this Agreement and using the Platform.

• "Customer Content" means all data, documents, files, prompts, inputs, text, audio, metadata, or other materials submitted, uploaded, transmitted, or otherwise made available to the Platform by or on behalf of the Customer or its Users.

• "Data Processing Addendum" or "DPA" means the data processing agreement governing the Provider's role as a processor of Customer Content under applicable data protection laws.

• "Organization" means the Customer's workspace or tenant within the Platform under which Users operate.

• "Platform" means the Siesta AI software-as-a-service solution, including its user interface, APIs, integrations, AI orchestration components, and related infrastructure.

• "Services" means the functionalities, features, AI assistants, integrations, and related services provided through the Platform.

• "Subprocessor" means any third-party service provider engaged by the Provider to support the provision of the Services, including infrastructure or AI model providers.

• "Subscription Term" means the period during which the Customer is authorized to access and use the Services under a purchased plan.

• "User" means an individual authorized by the Customer to access and use the Platform under the Customer's Organization.

• "AI Output" means any response, content, or result generated by the Platform using artificial intelligence models in response to Customer Content or User inputs.

Scope of Services

The Provider grants the Customer access to the Platform and related Services on a subscription basis during the applicable Subscription Term.

Provision of the Platform

The Platform is provided as a cloud-based Software-as-a-Service (SaaS) solution. The Services enable the Customer to:

• create and manage AI-powered assistants,

• connect internal data sources and third-party tools,

• process Customer Content through AI models,

• generate AI Outputs based on User inputs and configured workflows.

The Platform operates on infrastructure managed by the Provider or its Subprocessors.

Unless explicitly agreed otherwise in writing, the Services do not include on-premise deployment, custom development, or dedicated infrastructure.

Third-Party AI Models and Integrations

The Platform may utilize third-party AI model providers and infrastructure providers.

The Provider reserves the right to:

• select, replace, or update underlying AI models,

• modify integrations,

• improve or evolve system architecture,

provided that such changes do not materially degrade the core functionality of the Services.

The Customer acknowledges that certain features depend on third-party providers, and availability or performance may be affected by such providers.

Service Modifications

The Provider may update, modify, enhance, or discontinue features of the Platform at its discretion. Material changes that significantly affect paid functionality will be communicated to the Customer where reasonably practicable.

Beta and Experimental Features

From time to time, the Provider may offer beta, preview, or experimental features.

Such features:

• are provided "as is",

• may contain errors,

• may be modified or discontinued at any time,

• are not subject to service level commitments unless explicitly agreed.

User Accounts & Access

Account Registration

Access to the Platform requires the creation of an account within an Organization.

The Customer shall ensure that all information provided during registration is accurate, complete, and kept up to date.

Each Organization must designate at least one Admin User responsible for managing Users, roles, permissions, and billing settings.

Responsibility for Users

The Customer is fully responsible for:

• all Users authorized under its Organization,

• all activities conducted through its accounts,

• ensuring that Users comply with these Terms.

Any act or omission by a User shall be deemed an act or omission of the Customer.

Credentials and Security

The Customer and its Users are responsible for maintaining the confidentiality of login credentials and authentication mechanisms.

The Customer shall:

• implement appropriate internal access controls,

• promptly notify the Provider of any unauthorized access or suspected security incident,

• ensure that access is limited to authorized individuals only.

The Provider shall not be liable for any loss or damage arising from unauthorized use of accounts resulting from the Customer's failure to secure credentials.

Single Sign-On (SSO)

Where Single Sign-On (SSO) or identity federation is used, the Customer is responsible for:

• proper configuration of identity provider settings,

• management of user provisioning and deprovisioning,

• maintaining security policies (including multi-factor authentication where applicable).

The Provider is not responsible for security incidents arising from misconfiguration or failure of the Customer's identity systems.

Prohibited Account Sharing

User accounts are personal and may not be shared between individuals.

The Customer shall not:

• permit multiple individuals to use a single User account,

• resell or transfer access credentials,

• provide access to unauthorized third parties.

The Provider reserves the right to suspend accounts that violate this provision.

Acceptable Use Policy

The Customer and its Users shall use the Platform only in compliance with applicable laws and these Terms.

The Customer shall not, and shall ensure that its Users do not:

Unlawful or Harmful Content

• use the Platform to generate, store, or distribute content that is unlawful, fraudulent, defamatory, obscene, abusive, or otherwise harmful;

• generate or distribute content that promotes violence, discrimination, or illegal activities;

• use the Platform to create deceptive or misleading content intended to harm individuals or organizations.

Infringement of Rights

• upload or process Customer Content without having the necessary legal rights or authorizations;

• infringe or misappropriate intellectual property rights, trade secrets, privacy rights, or other rights of third parties;

• use the Platform in violation of data protection or confidentiality obligations.

AI Misuse

• use the Platform to develop, test, or deploy malware or malicious code;

• attempt to generate harmful code, exploit vulnerabilities, or bypass safeguards;

• create deepfake content intended to impersonate individuals without authorization;

• use the Platform for political manipulation, coordinated inauthentic behavior, or deceptive influence campaigns;

• attempt to manipulate or exploit the AI models in a manner inconsistent with their intended purpose;

• use automated scripts or bots to systematically extract data from the public-facing chat interface.

The Customer acknowledges that certain restrictions may also arise from third-party AI model providers, and agrees to comply with such applicable usage policies.

Security Violations

The Customer shall not:

• attempt to gain unauthorized access to the Platform, infrastructure, or other Customer environments;

• probe, scan, or test the vulnerability of the Platform without authorization;

• interfere with or disrupt the integrity or performance of the Services;

• attempt to bypass authentication, access controls, or rate limits.

Reverse Engineering and Competitive Use

The Customer shall not:

• reverse engineer, decompile, disassemble, or otherwise attempt to derive the source code of the Platform;

• use the Platform to build a competing product or service;

• systematically extract, scrape, or harvest data from the Platform;

• use the Services for benchmarking or competitive analysis without written consent.

Enforcement

The Provider reserves the right to:

• investigate suspected violations of this Section;

• suspend or restrict access to the Platform;

• terminate the Agreement in case of material breach.

The Provider may take such action immediately where reasonably necessary to protect the security, integrity, or lawful operation of the Platform.

Customer Content

Ownership of Customer Content

The Customer retains all rights, title, and interest in and to Customer Content.

Nothing in this Agreement transfers ownership of Customer Content to the Provider.

The Provider acquires no rights in Customer Content except as expressly required to provide the Services in accordance with this Agreement.

Role as Data Processor

With respect to Customer Content that contains personal data, the Customer acts as the Data Controller and the Provider acts solely as a Data Processor.

The Provider processes Customer Content solely:

• on documented instructions from the Customer,

• for the purpose of providing the Services,

• in accordance with the applicable Data Processing Addendum (DPA).

The Provider shall not process Customer Content for its own purposes.

No Model Training / Zero-Training Commitment

Customer Content, including prompts, documents, and AI interactions:

• is not used to train foundational AI models operated by the Provider or third parties,

• is not sold, licensed, or shared for AI training purposes,

• is not incorporated into publicly accessible datasets.

Where third-party AI model providers are used, the Provider ensures that Customer Content is processed under contractual zero-retention or equivalent data protection safeguards.

Limited Access for Support and Security

The Provider may access Customer Content only when strictly necessary to:

• provide technical support,

• investigate incidents or security events,

• comply with legal obligations,

• maintain system integrity.

Such access shall be limited in scope and subject to confidentiality obligations.

For Private or Customer-hosted deployments, access by the Provider shall occur only with the Customer's authorization.

Aggregated and Anonymized Data

The Provider may collect and use aggregated, anonymized, and non-identifiable usage metadata for:

• improving the Platform,

• developing new features,

• generating internal analytics,

• security and operational monitoring.

Under no circumstances shall such use include identifiable Customer Content.

Customer Responsibility

The Customer represents and warrants that:

• it has all necessary rights, licenses, and permissions to upload and process Customer Content;

• the processing of Customer Content through the Platform does not violate applicable laws or third-party rights;

• it complies with applicable data protection and confidentiality obligations.

The Customer remains solely responsible for the legality, accuracy, and integrity of Customer Content. The Customer is responsible for ensuring that no unnecessary sensitive personal data (PII) is uploaded to the Platform unless specifically required for the service.

AI Outputs

Subject to applicable law and third-party model restrictions, AI Outputs generated for the Customer based on Customer Content are made available to the Customer for its internal use.

The Provider does not claim ownership over AI Outputs generated specifically for the Customer.

The Customer remains responsible for evaluating and using such AI Outputs.

AI Disclaimer

Nature of Artificial Intelligence

The Platform utilizes artificial intelligence systems, including large language models and related technologies, to generate outputs based on probabilistic methods.

AI systems do not operate deterministically and may produce responses that are:

• inaccurate,

• incomplete,

• misleading,

• outdated,

• inconsistent,

• or otherwise erroneous.

While the Platform utilizes grounding techniques (RAG) to improve accuracy, the Customer acknowledges that hallucinations may still occur.

The Customer also acknowledges that AI Outputs are generated algorithmically and are not human-reviewed by the Provider.

No Professional Advice

The Platform and AI Outputs are provided for informational and productivity purposes only.

The Services do not constitute:

• legal advice,

• financial advice,

• medical advice,

• regulatory advice,

• or any other form of professional advice.

The Customer shall not rely on AI Outputs as a substitute for independent professional judgment.

Customer Responsibility for AI Outputs

The Customer is solely responsible for:

• evaluating the accuracy and appropriateness of AI Outputs,

• verifying results before use,

• making decisions based on AI Outputs,

• ensuring compliance with applicable laws when using AI Outputs.

The Provider shall not be liable for any loss, damage, liability, or regulatory consequence arising from the Customer's reliance on AI Outputs.

Third-Party Model Dependencies

The Platform may rely on third-party AI model providers.

The Provider does not guarantee:

• uninterrupted availability of specific models,

• consistency of outputs across model versions,

• long-term availability of any particular model.

The Provider reserves the right to replace or update underlying AI models at its discretion.

No Guarantee of Accuracy or Fitness

The Services and AI Outputs are provided "as is" and "as available."

To the maximum extent permitted by law, the Provider disclaims all warranties, whether express or implied, including:

• accuracy,

• reliability,

• fitness for a particular purpose,

• non-infringement.

Fees & Payment

Subscription Fees

Access to the Platform is provided on a subscription basis.

The applicable fees, subscription plans, and billing terms are set forth on the Provider's pricing page available at:

https://siesta.ai/pricing

or as otherwise agreed in a separate written agreement with the Customer.

Enterprise or Private deployment pricing shall be governed exclusively by the applicable signed agreement.

Billing and Payment Terms

Subscription fees may be charged on a monthly or annual basis, as selected by the Customer.

Unless otherwise agreed:

• subscriptions automatically renew for successive terms equal to the initial Subscription Term;

• fees are payable in advance;

• invoices are due within the period specified on the invoice.

The Customer is responsible for providing complete and accurate billing information.

Non-Refundable Fees

Except as expressly stated in a separate written agreement, all fees are non-refundable.

No refunds or credits shall be provided for:

• partial subscription periods,

• unused features,

• reduced usage,

• suspension due to violation of these Terms.

Price Changes

The Provider reserves the right to modify subscription fees or introduce new charges at any time.

For existing Customers:

• price changes shall apply upon renewal of the Subscription Term,

• reasonable notice shall be provided prior to such renewal where practicable.

Continued use of the Platform following a renewal constitutes acceptance of the updated pricing.

Enterprise Customers shall be subject to pricing changes only in accordance with their signed agreement.

Late Payments

If payment is not received by the due date, the Provider may:

• suspend access to the Platform,

• restrict functionality,

• charge statutory interest on late payments as permitted by applicable law.

Access may be restored upon full payment of outstanding amounts.

Confidentiality

Confidential Information

For the purposes of this Agreement, "Confidential Information" means any non-public information disclosed by one party ("Disclosing Party") to the other party ("Receiving Party"), whether in written, electronic, oral, or other form, including but not limited to:

• technical information,

• business strategies,

• product roadmaps,

• pricing information,

• security documentation,

• Customer Content,

• and any information that should reasonably be understood as confidential.

Confidential Information does not include information that:

• is or becomes publicly available without breach of this Agreement;

• was lawfully known to the Receiving Party prior to disclosure;

• is lawfully obtained from a third party without restriction;

• is independently developed without reference to the Disclosing Party's Confidential Information.

Confidentiality Obligations

The Receiving Party shall:

• use Confidential Information solely for the purpose of performing its obligations under this Agreement;

• protect Confidential Information using at least the same degree of care it uses to protect its own confidential information, and in no event less than reasonable care;

• restrict access to Confidential Information to personnel, Affiliates, and Subprocessors who have a legitimate need to know and are bound by confidentiality obligations.

Compelled Disclosure

If the Receiving Party is required by law, regulation, or court order to disclose Confidential Information, it shall:

• provide prompt notice to the Disclosing Party (where legally permitted), and

• disclose only the portion of Confidential Information legally required.

Survival

The obligations under this Section shall survive termination of this Agreement for a period of five (5) years, or longer if required by applicable law or separate agreement. Customer Content shall remain confidential for as long as it is retained by the Provider.

Disclaimer of Warranties

Except as expressly set forth in this Agreement or in a separate written agreement signed by the Provider, the Platform and Services are provided on an "as is" and "as available" basis.

To the maximum extent permitted by applicable law, the Provider expressly disclaims all warranties, representations, and conditions of any kind, whether express, implied, statutory, or otherwise, including but not limited to:

• implied warranties of merchantability,

• fitness for a particular purpose,

• non-infringement,

• uninterrupted or error-free operation,

• security or reliability,

• accuracy or completeness of AI Outputs.

The Provider does not warrant that:

• the Services will meet the Customer's requirements,

• the Platform will be uninterrupted, timely, secure, or error-free,

• defects will be corrected,

• the Services will be compatible with all third-party systems.

No oral or written information or advice provided by the Provider shall create any warranty not expressly stated in this Agreement.

Limitation of Liability

Exclusion of Certain Damages

To the maximum extent permitted by applicable law, the Provider shall not be liable for:

• indirect, incidental, consequential, special, or punitive damages;

• loss of profits, revenue, goodwill, or business opportunities;

• loss or corruption of data;

• business interruption;

• regulatory penalties arising from Customer's use of AI Outputs.

This exclusion applies regardless of the legal theory, whether in contract, tort, negligence, or otherwise, even if the Provider has been advised of the possibility of such damages.

Cap on Liability

To the maximum extent permitted by applicable law, the Provider's total aggregate liability arising out of or relating to this Agreement shall not exceed the total fees paid by the Customer to the Provider during the twelve (12) months preceding the event giving rise to the claim.

If the Subscription Term has been less than twelve (12) months, liability shall be limited to the total fees paid during the active Subscription Term.

AI-Specific Limitation

The Provider shall not be liable for:

• inaccuracies in AI Outputs,

• decisions made based on AI Outputs,

• use of AI Outputs in regulated environments without independent verification.

The Customer assumes full responsibility for evaluating and using AI Outputs.

Exceptions

Nothing in this Agreement shall exclude or limit liability to the extent such limitation is not permitted under applicable law, including:

• liability for willful misconduct,

• liability for death or personal injury caused by gross negligence (where applicable).

Miscellaneous

Force Majeure

The Provider shall not be liable for any delay or failure to perform its obligations under this Agreement if such delay or failure results from events beyond its reasonable control, including but not limited to:

• acts of God,

• natural disasters,

• war, terrorism, civil unrest,

• labor disputes,

• government actions,

• internet or telecommunications failures,

• cloud infrastructure outages,

• failures of third-party service providers.

Performance shall be suspended for the duration of such event.

If a force majeure event continues for more than ninety (90) consecutive days, either party may terminate the affected Services upon written notice.

Assignment

The Customer may not assign, transfer, delegate, or otherwise dispose of this Agreement, in whole or in part, without the prior written consent of the Provider.

The Provider may assign or transfer this Agreement, in whole or in part, without the Customer's consent:

• in connection with a merger, acquisition, corporate restructuring, or sale of assets,

• to an Affiliate,

• or as part of a business reorganization.

This Agreement shall be binding upon and inure to the benefit of the parties and their permitted successors and assigns.

Severability

If any provision of this Agreement is held to be invalid or unenforceable, the remaining provisions shall remain in full force and effect.

Entire Agreement

This Agreement constitutes the entire agreement between the parties and supersedes all prior agreements, communications, or understandings relating to its subject matter.

Waiver

Failure to enforce any provision shall not constitute a waiver of future enforcement.

Termination

Termination by the Customer

For subscription-based SaaS plans, the Customer may terminate the Agreement by:

• providing notice of non-renewal prior to the end of the current Subscription Term, or

• cancelling the subscription through the Platform interface (if available).

Termination shall take effect at the end of the then-current Subscription Term, unless otherwise agreed.

Enterprise or Private deployment agreements shall be terminated in accordance with the terms set forth in the applicable written agreement.

Termination or Suspension by the Provider

The Provider may suspend or terminate access to the Platform:

• in the event of material breach of these Terms;

• in case of non-payment;

• if the Customer uses the Platform in violation of applicable law;

• where necessary to protect the security, integrity, or lawful operation of the Platform.

Where reasonably practicable, the Provider shall provide notice prior to termination, except where immediate action is required.

Effect of Termination

Upon termination or expiration of the Agreement:

• the Customer's access to the Platform shall cease;

• the Customer may request export of Customer Content within a limited post-termination period;

• the Provider shall delete Customer Content after a retention period of up to thirty (30) days, unless otherwise required by law or agreed in writing.

Deletion and data handling practices are further governed by the applicable Privacy Policy and Data Processing Addendum (DPA).

For Private or Customer-hosted deployments, data remains under the control of the Customer.

Survival

The following provisions shall survive termination of this Agreement:

• Intellectual Property,

• Confidentiality,

• Limitation of Liability,

• Governing Law,

• and any other provisions that by their nature are intended to survive termination.

Governing Law & Jurisdiction

Governing Law

This Agreement shall be governed by and construed in accordance with the laws of the Czech Republic, without regard to its conflict of laws principles.

Jurisdiction

Any dispute arising out of or in connection with this Agreement shall be subject to the exclusive jurisdiction of the competent courts of the Czech Republic.