HelmsteadHelmstead

Terms of service

Version
1.1
Effective date
Choose version
All legal docs
Table of contents

We’re Suverenum Inc., Helmstead’s provider.

“You” or “Customer” means either:

  • A company or other organization that agrees to these terms with us.
  • An individual who agrees to them for their own trade, business, or profession.

An individual Customer must be 18 or over. Helmstead is for business use only, not for personal, family, or household use.

These terms cover Helmstead software as a service: treasury and accounting workbooks, connected data, and AI assistance included in your plan or selected in your contract. Onboarding, migration, consulting, and other work need separate agreement.

These terms apply to you in one of two ways:

  • Online. At checkout, you accept by ticking a box. The box starts unticked and sits next to links to the exact versions of these terms, our Plan terms, and our Data processing addendum (DPA). For a company or other organization, the person who ticks the box must be authorized to bind it. If you’re an individual Customer, you tick it yourself, buying for your own business. We call the person who accepts for you your “buyer of record.”
  • By contract. Your “Customer Agreement” is a contract individually negotiated with us, including agreed orders and changes. These terms apply through it only if it expressly adopts them and identifies the agreed version.

Browsing, signing in, an invitation, or connection permission alone never makes anyone the Customer.

Only someone authorized to bind you may buy services or agree to or change your contract. User access or agreement does not give that authority.

A standard plan is a Team plan bought at the prices on our pricing page. This includes a first month on the Welcome offer. On a standard plan, the Plan terms set:

  • Plans, prices, billing, renewal, and tax.
  • Cancellation and refunds.
  • Support.
  • Liability limits, governing law, and how disputes are handled.

Under a Customer Agreement, your contract sets:

  • Prices, billing, subscription length, and renewal.
  • Pilots, trials, cancellation, and refunds.
  • Support response times and uptime commitments.
  • Liability limits, governing law, and how disputes are handled.
  • Any warranties, remedies, and indemnities (cover for specified claims or losses).

A data processing addendum (DPA) covers data handling. It applies once we both agree to it: when you accept our standard DPA at checkout, or when we both agree on a DPA with its required schedules completed. Mentioning a draft is not agreement.

If documents conflict, this order applies:

  1. Mandatory law and mandatory data-transfer requirements override contract terms and source-service rules.
  2. An agreed DPA controls the matters it covers.
  3. A signed Customer Agreement, including its orders, controls over the Plan terms and these terms.
  4. The Plan terms control over these terms.

The checkout summary records what you bought, such as your plan, package, and price. It doesn’t add to or change any terms.

Your contract, a DPA, the Plan terms, these terms, and instructions from you or a user cannot override the source service’s data rules. Those rules also cover copies and derivatives.

You own the account and choose its users, including employees, contractors, external accountants, people from affiliates, and client-work collaborators. Accounting firms may use Helmstead for clients.

All access must respect plan or contract limits, actual permissions, and data rights. This includes authorized automation and software connections through APIs or Model Context Protocol (MCP) clients, which are allowed where supported.

Before using Helmstead, each user must receive the applicable usage rules and privacy information and expressly agree with us to the rules for their own use.

On a standard plan, those rules are the User terms below. Under a Customer Agreement, they must match your agreed version and applicable negotiated changes. They cover access and permitted use, credential and data security, rights and permissions, confidentiality, and applicable AI and connected-service rules.

If you’re an individual Customer, you’re also a user. Accepting these terms for your business and accepting the User terms are separate steps.

User agreement creates no personal subscription, obligation to pay your fees, company-wide guarantee, or other commercial commitment.

Invitations, sign-in, connection permission, or browsing alone aren’t agreement. Privacy acknowledgment is not blanket consent. Company authorization cannot replace required individual consent. Source permissions and consent to specific uses remain separate.

This section applies to everyone who uses a workspace on a standard plan. If a Customer Agreement covers the workspace, the user rules it adopts apply instead.

In this section, “you” means you as an individual user. “The Customer” means the organization or individual whose workspace you use.

Before you first use Helmstead, you agree with us to these rules. Agreeing doesn’t make you the Customer, start a subscription, or make you responsible for the Customer’s fees. Signing in or agreeing to these User terms never counts as the Customer accepting these Terms of service.

When you use Helmstead, you must:

  • Use only the access you’re given. Work only in the workspaces, data, and connections the Customer and each source service allow you to use, and only for the Customer’s work.
  • Don’t misuse Helmstead. Don’t break the law, infringe others’ rights, bypass access controls or limits, introduce malicious software, or disrupt Helmstead.
  • Keep your access secure. Protect your sign-in details and devices, don’t share your account, and tell a workspace admin or us right away if you think someone else used it.
  • Keep information confidential. Treat Customer Content and other confidential information as confidential, and use it only for the Customer’s work.
  • Review AI outputs. Check outputs, calculations, and proposed changes before relying on them, as described in AI and connected services.
  • Respect connected services. Connect only sources you’re allowed to connect, and follow their rules. Permission to connect a mailbox, files, or another source is separate from these rules, and you can withdraw it.

The Customer controls your access and can remove it. Our Privacy policy explains how we handle your personal information.

As the Customer, you’re responsible for your users following these terms and must:

  • Have the rights and legal grounds for your content, connections, and instructions.
  • Give required notices and obtain permissions, including client authorization where needed.
  • Provide only information relevant to the agreed work and keep account details accurate.
  • Protect the access credentials and devices you control.
  • Arrange removal of access when authorization ends and promptly report suspected unauthorized use to us.

You and your users must not:

  • Break the law or infringe others’ rights.
  • Bypass access controls or agreed limits, or access data without permission.
  • Introduce malicious software or disrupt Helmstead.

Your content stays yours

“Customer Content” covers information supplied or connected by or for you and anything created from it, including:

  • Financial and employment records, files, and metadata.
  • Workbooks, versions, edit history, conversations, prompts and other inputs, retrieved information, and tool results.
  • Outputs, including AI answers, and copies used to run or recover work.

You keep your rights in Customer Content. Between us, we transfer to you any rights we hold in outputs made for you. This excludes our software and others’ rights. We don’t promise copyright protection or unique or exclusive outputs. Similarity never permits disclosure of your content.

How we may use your content

You allow us to handle Customer Content only as needed for the agreed service and its support, security, and troubleshooting, following your documented lawful instructions. Legally required processing must still meet applicable safeguards.

We won’t sell Customer Content or use it for:

  • Advertising.
  • Model training or fine-tuning, or general product or model improvement.
  • Evaluation or benchmarking across customers.

We must require providers handling your content to follow these limits. Content protections and source rules still apply when Customer Content appears in feedback, is combined or anonymized, or is labeled “usage data.”

People may access content only as needed for an authorized task, not for routine review. Providers may keep or review it only within processing terms agreed with you and source rules.

Our Privacy policy explains how we handle personal information. It grants no extra content rights and does not replace an agreed DPA. We will put legally required processing terms in place.

You and we must protect each other’s confidential information with reasonable care and use it only for our agreed relationship. This covers clearly confidential information, labeled or not, and all Customer Content, including non-personal business information.

Both sides may share it only with people who need it for permitted work and owe confidentiality, or as law requires. For required disclosures, notify the other side beforehand when lawful and share only what is required.

These duties continue while information remains confidential. We will maintain appropriate safeguards and meet agreed security obligations.

AI can be wrong or incomplete. You and your users must review outputs, calculations, and proposed changes before relying on them for financial work or decisions affecting people. Use appropriate professional judgment and oversight.

Agreeing here does not approve every later automated action. Connections depend on source permissions and your relationship with the provider. Outages or changes can affect them. Our agreed service and integration obligations still apply.

Source providers supply services to you; subprocessors handle content for us. The same company may fill both roles. We remain responsible for delegated work under our agreements and law.

The Privacy policy explains the data rules for each source:

On a standard plan, pausing access, canceling, and ending service follow the Plan terms and applicable law. A pause never deletes your content. Canceling a plan doesn’t close your workspace, so your content stays and you can keep using any gift hours.

Under a Customer Agreement, suspension, cancellation, and termination follow your contract and applicable law.

Returning, exporting, deleting, or keeping content follows:

  • Your contract or, on a standard plan, the rule below.
  • Any agreed DPA.
  • Mandatory law, including applicable EU provider-switching rules.

On a standard plan, if your workspace closes, you have 30 days to export your content. Then we delete it as the DPA describes.

We and our providers must stop processing and delete data when source rules require it, including copies and derivatives. History, return, or backup periods cannot delay those duties or restart prohibited use. Remaining copies stay protected.

If you’re an individual Customer, you can transfer your workspace to a company or other organization, for example once you incorporate.

  • A workspace admin or your buyer of record starts the transfer in Helmstead.
  • The organization becomes the Customer once a person authorized to bind it accepts these terms, the Plan terms, and the DPA, in the versions in effect at that time. Until then, you stay the Customer.
  • Your agent hours move with the workspace. Hours can’t move any other way.
  • We record the transfer. It never changes an earlier acceptance.

A transfer completed in Helmstead counts as our consent to it.

We need prior permission to use your name or logo publicly, and separate permission for case studies.

On a standard plan, we’ll tell you about a change to these terms at least 30 days before it takes effect, by email and in Helmstead. A material change applies from your next renewal after that notice, and you can cancel before then. Changes to prices and the Plan terms follow the Plan terms.

Under a Customer Agreement, changes follow your contract’s agreed process. Web updates alone don’t change contracts.

No change to these terms, the Plan terms, or the DPA will ever permit new uses of Customer Content, on any plan, including the Welcome offer and gift hours.

Helmstead is for business use. If consumer protection law applies to you anyway, nothing in these terms limits rights that the law says can’t be waived or limited. The rest of these terms still apply.

On a standard plan, we send notices by email to your workspace admins and your buyer of record, and show them in Helmstead.

Under a Customer Agreement, your contract’s notice arrangements take priority.

Our address is Suverenum Inc., 2261 Market Street STE 77991, San Francisco, CA, 94114 US.