Terms of service

Who this is between

SC HUT IT SOLUTIONS SRL, Strada Sfântul Apostol Andrei 117, Oradea 410333, Bihor, Romania; trade register J05/767/2022; tax identification number RO45848567 (“Hut IT Solutions”, “we”).

And the business that has been given access to HutAssets (“you”, “the customer”). Where a person uses the service through an account your business created, these terms apply to that use as well, and your business remains responsible for it.

What the service is

HutAssets is a hosted application for keeping track of equipment, the people it is issued to, the work done on it, the credentials that open it, and the customers all of that belongs to. It is provided as it stands and as it develops; features are added and occasionally changed, and anything materially reduced will be told to you before it happens.

It runs on a single server in Germany. That is a deliberate and stated limitation rather than an oversight: a reboot is downtime and a hardware failure is downtime plus a restore from the most recent backup. We do not offer a contractual uptime figure, and any business whose operations cannot absorb a few hours of unavailability should say so before relying on it, so that we can discuss what would be needed.

Accounts, and who may use them

You decide who gets an account and what they may see. Accounts are for named people; sharing one is the single fastest way to make the audit trail — which records who read which stored secret, and when — worthless to you, and it is not permitted.

You are responsible for keeping credentials safe and for removing access from people who no longer need it. The application can require a second factor of everybody, or of the roles that can act across your business or read a stored secret; we strongly recommend switching that on, and it is found under Settings → Organization.

What you may not do with it

• Store personal data you have no lawful basis to hold, or special-category data (health, biometrics, and the rest of Article 9) — the application is not designed for it and we do not hold it under conditions appropriate to it.
• Attempt to reach another business's data, or test the platform's security without asking us first. Ask: we will say yes and agree a window.
• Resell access, or use the service to provide a substantially similar service to third parties, without a written agreement covering it.
• Upload material that is unlawful, or that infringes somebody else's rights.

Your data is yours

Everything you put into HutAssets remains yours. We do not sell it, we do not use it to train anything, and we do not use it for any purpose other than running the service for you and keeping it secure. Aggregate operational figures — how much storage is in use, how many requests a day — are ours, and carry nothing that identifies a person or a customer of yours.

You can export your records from the application at any time while your account is open, in the formats the export screens offer. If you need a complete copy in a form the screens do not produce, ask and we will produce one.

What we owe you

• To run the service with reasonable skill and care, and to apply security updates promptly.
• To keep a nightly backup of the database and of uploaded documents, with a copy held away from the server, and to rehearse restoring it.
• To tell you without undue delay, and in any event within 48 hours of becoming aware, about any breach affecting your data — including what we know, what we do not yet know, and what we are doing about it.
• To give you at least 30 days' notice before adding a sub-processor, so you can object.
• To answer support requests sent to support@hutassets.com within one working day.

Fees

Fees, the billing period and any usage limits are as agreed in writing with you. Price changes take effect at the start of a renewal period and are told to you at least 60 days beforehand; if a change does not suit you, you may end the agreement at the end of the period you have already paid for.

Ending it

You may end this agreement at the end of any billing period by telling us in writing. We may end it on 60 days' notice, or immediately where the service is being used in the ways listed above, or where fees remain unpaid 30 days after being due.

When it ends, your data stays available for export for 30 days. After that it is deleted from the live system, and it leaves the backups as those backups age out — within 14 days for the database and uploaded documents. If you need a final export produced by us instead, ask within those 30 days.

Liability

Neither of us limits liability for death or personal injury caused by negligence, for fraud, or for anything else the law does not allow to be limited.

Subject to that, our total liability arising out of this agreement in any twelve-month period is limited to the fees you paid us in that period, and neither of us is liable to the other for loss of profit, loss of business or indirect loss. This figure is a starting position and can be negotiated; if your use of the service carries exposure it does not cover, say so before you sign rather than after something has gone wrong.

Law, and where disputes go

Romanian law governs this agreement, and the courts of Oradea, Bihor have jurisdiction. Before either of us goes to court we will each raise the problem in writing and give the other 30 days to put it right.

Changes to these terms

We will tell you at least 30 days before a material change takes effect. If it does not suit you, you may end the agreement at the end of the period you have already paid for, and that is a better outcome for both of us than a term nobody agreed to.