HelmsteadHelmstead

Terms of service

Version
1.0
Effective date
Choose version

You’re viewing an older version of this document

View current version
All legal docs
Table of contents

We’re Suverenum Inc., Helmstead’s provider.

“You” or “Customer” means the company or other legal entity contracting with us. Individuals, including unincorporated sole traders, can only be authorized users, not Customers.

These terms cover Helmstead software as a service: treasury and accounting workbooks, connected data, and AI assistance selected in your contract. Onboarding, migration, consulting, and other work need separate agreement.

Your “Customer Agreement” is your individually negotiated contract with us, including agreed orders and changes. These terms apply to your company only if that contract expressly adopts them and identifies the agreed version.

Only someone authorized to bind you may buy services or agree to or change your contract. User access or agreement does not give that authority.

Your contract sets:

  • Prices, billing, subscription length, and renewal.
  • Pilots, trials, cancellation, and refunds.
  • Support response times and uptime commitments.
  • Liability limits, governing law, and how disputes are handled.
  • Any warranties, remedies, and indemnities (cover for specified claims or losses).

A data processing addendum (DPA) covers data handling. It applies only after both sides agree it with required schedules completed. Mentioning a draft is not agreement.

  1. Mandatory law and mandatory data-transfer requirements override contract terms and source-service rules.
  2. An agreed DPA controls the matters it covers.
  3. Your negotiated contract controls other conflicts with these terms.

Your contract, a DPA, these terms, and instructions from you or a user cannot override the source service’s data rules. Those rules also cover copies and derivatives.

Your company owns the account and chooses its users, including employees, contractors, external accountants, people from affiliates, and client-work collaborators. Accounting firms may use Helmstead for clients.

All access must respect contract limits, actual permissions, and data rights. This includes authorized automation and software connections through APIs or Model Context Protocol (MCP) clients, which are allowed where supported.

Before using Helmstead, each user must receive the applicable usage rules and privacy information and expressly agree with us to the rules for their own use.

These rules must match your agreed version and applicable negotiated changes. They cover access and permitted use, credential and data security, rights and permissions, confidentiality, and applicable AI and connected-service rules.

User agreement creates no personal subscription, obligation to pay your fees, company-wide guarantee, or other commercial commitment.

Invitations, sign-in, connection permission, or browsing alone aren’t agreement. Privacy acknowledgment is not blanket consent. Company authorization cannot replace required individual consent. Source permissions and consent to specific uses remain separate.

You are responsible for your users following these terms and must:

  • Have the rights and legal grounds for your content, connections, and instructions.
  • Give required notices and obtain permissions, including client authorization where needed.
  • Provide only information relevant to the agreed work and keep account details accurate.
  • Protect the access credentials and devices you control.
  • Arrange removal of access when authorization ends and promptly report suspected unauthorized use to us.

You and your users must not:

  • Break the law or infringe others’ rights.
  • Bypass access controls or agreed limits, or access data without permission.
  • Introduce malicious software or disrupt Helmstead.

Your content stays yours

“Customer Content” covers information supplied or connected by or for you and anything created from it, including:

  • Financial and employment records, files, and metadata.
  • Workbooks, versions, edit history, conversations, prompts and other inputs, retrieved information, and tool results.
  • Outputs, including AI answers, and copies used to run or recover work.

You keep your rights in Customer Content. Between us, we transfer to you any rights we hold in outputs made for you. This excludes our software and others’ rights. We don’t promise copyright protection or unique or exclusive outputs. Similarity never permits disclosure of your content.

How we may use your content

You allow us to handle Customer Content only as needed for the agreed service and its support, security, and troubleshooting, following your documented lawful instructions. Legally required processing must still meet applicable safeguards.

We won’t sell Customer Content or use it for:

  • Advertising.
  • Model training or fine-tuning, or general product or model improvement.
  • Evaluation or benchmarking across customers.

We must require providers handling your content to follow these limits. Content protections and source rules still apply when Customer Content appears in feedback, is combined or anonymized, or is labeled “usage data.”

People may access content only as needed for an authorized task, not for routine review. Providers may keep or review it only within processing terms agreed with you and source rules.

Our Privacy policy explains how we handle personal information. It grants no extra content rights and does not replace an agreed DPA. We will put legally required processing terms in place.

You and we must protect each other’s confidential information with reasonable care and use it only for our agreed relationship. This covers clearly confidential information, labeled or not, and all Customer Content, including non-personal business information.

Both sides may share it only with people who need it for permitted work and owe confidentiality, or as law requires. For required disclosures, notify the other side beforehand when lawful and share only what is required.

These duties continue while information remains confidential. We will maintain appropriate safeguards and meet agreed security obligations.

AI can be wrong or incomplete. You and your users must review outputs, calculations, and proposed changes before relying on them for financial work or decisions affecting people. Use appropriate professional judgment and oversight.

Agreeing here does not approve every later automated action. Connections depend on source permissions and your relationship with the provider. Outages or changes can affect them. Our agreed service and integration obligations still apply.

Source providers supply services to you; subprocessors handle content for us. The same company may fill both roles. We remain responsible for delegated work under our agreements and law.

The Privacy policy explains the data rules for each source:

Suspension, cancellation, and termination follow your contract and applicable law. Returning, exporting, deleting, or keeping content follows that contract, any agreed DPA, and mandatory law, including applicable EU provider-switching rules.

We and our providers must stop processing and delete data when source rules require it, including copies and derivatives. History, return, or backup periods cannot delay those duties or restart prohibited use. Remaining copies stay protected.

We need prior permission to use your name or logo publicly, and separate permission for case studies.

Changes follow your contract’s agreed process. Web updates alone don’t change contracts or permit new uses of Customer Content.

Your contract’s notice arrangements take priority.

Our address is Suverenum Inc., 2261 Market Street STE 77991, San Francisco, CA, 94114 US.