AiAiAI terms of service

1. Parties

AiAiAI is provided by OÜ Kratikaitse (registry code 17470678, Estonia; Kratikaitse) to the organisation that creates a workspace in AiAiAI (the Customer). It is for businesses and public bodies, not consumers.

The person creating the workspace confirms they may represent the Customer. These terms take effect when that person accepts them; the version, the time and the person are recorded in the workspace. The data processing agreement and the plan price stated on the invoice or quote are an integral part of these terms.

2. What the service is, and what it is not

AiAiAI is a working tool for the Customer to agree how AI is used at work and to keep track of it: a list of AI tools with responsible people, risks and decisions, rules for staff, and quarterly reviews. It is not legal advice: its EU AI Act notes are rule-based orientation, and the final assessment of obligations is made by the Customer or its legal adviser. It is not certification or conformity assessment and does not demonstrate conformity with any standard or law. The Customer makes, and is responsible for, decisions such as accepting risks and approving tools.

3. Accounts

Users log in with a one-time email link, so the Customer keeps its users' mailboxes secure. The Customer assigns roles in the workspace, is responsible for its users' actions, and tells us without delay at tehisaru@ai3.ee if it suspects unauthorised access.

4. Customer data and confidentiality

• Data entered into the workspace belongs to the Customer. Kratikaitse uses it only to provide the service, under the data processing agreement, and does not sell it or use it to train AI models.
• The Customer does not enter special categories of personal data (such as health data), or data it has no legal basis to process.
• The Customer can get its data in machine-readable form under section 7 of the data processing agreement.
• Each party keeps confidential the other's business secrets and any information received through the service. Customer data is always confidential.

5. Acceptable use

The Customer and its users must not use the service unlawfully or in breach of anyone's rights, try to access other workspaces' data, bypass security measures, disrupt the service with load, or resell or share access outside the Customer unless separately agreed.

To report a vulnerability, write to tehisaru@ai3.ee. We respond to good-faith reports and will not take action against the reporter, provided they did not access other people's data or disrupt the service.

6. Plans and fees

• Snapshot is free. The prices and content of the paid plans, Foundation and Ongoing, are stated on the quote or invoice.
• Paid plans are billed 12 months in advance, the payment term is 14 days, and the plan activates once payment is received. Prices exclude VAT where applicable.
• Plans do not renew automatically: we send a new invoice before the period ends. If it is not paid, the workspace moves to the free plan at the end of the period; data is kept, but paid views and features are locked.
• Fees paid are not refunded. The unused part of the period is refunded only where Kratikaitse terminates without good reason, or where the Customer terminates because of a material change (section 9).

7. Availability

Kratikaitse keeps the service running with due care but does not guarantee any specific availability (there is no SLA). We try to announce maintenance in advance. Faults are handled on business days; there is no 24/7 on-call.

8. Intellectual property

The service, its code, texts, list of basic controls and templates belong to Kratikaitse. The Customer may freely use the outputs created from its workspace (the staff rules, the customer summary, printed and saved copies) in its business, including sharing them with its customers, auditors and authorities. Kratikaitse may use feedback about the service to improve it, free of charge.

9. Changes

Kratikaitse may change the service and these terms. We tell workspace owners about significant changes by email at least 30 days in advance. If the Customer does not accept a change, it may terminate before the change takes effect.

10. Liability

• The service is provided as is. Kratikaitse is not liable for the Customer's decisions or their consequences, including compliance and risk decisions made on the basis of the service's output.
• Kratikaitse is not liable for indirect loss or lost profit.
• Kratikaitse's total liability is limited to the fees the Customer paid for the service in the 12 months before the loss arose, and is never less than EUR 100.
• These limits do not apply to intentional breach or gross negligence.

11. Term and termination

• The agreement runs indefinitely. The Customer may terminate at any time by writing to tehisaru@ai3.ee; Kratikaitse may terminate with 30 days' notice.
• Kratikaitse may suspend access immediately if the Customer materially breaches section 5 or endangers the security of the service.
• We may delete a free-plan workspace nobody has logged in to for 12 months, after at least 30 days' notice by email.
• When the agreement ends, data is handled under section 7 of the data processing agreement.

12. Governing law

These terms are governed by Estonian law. We try to settle disputes by negotiation; if that fails, they are settled in Harju County Court. If the Estonian and English texts differ, the Estonian text prevails.