The terms for using Sissel.

These Terms of Service (“Terms”) govern access to and use of Sissel, including its websites, application, browser SDK, APIs, connectors and related services (the “Service”). The Service is provided by Teklos AS, organisation number 930 284 378, registered in Norway (“Teklos”, “we”, “us” or “our”).

“Customer” means the company, organisation or sole trader that accepts these Terms, orders the Service or has an account created for it. “User” means a person authorised by Customer to use the Service. “Customer Data” means data submitted to, collected by or generated for Customer through the Service, excluding Teklos software, aggregated statistics that no longer identify Customer or a person, and Teklos operational data.

These Terms, any accepted order form or plan, and any data processing agreement (“DPA”) form the agreement. An order form prevails for its commercial terms, the DPA prevails for processing of personal data, and these Terms govern everything else.

You accept these Terms by creating an account, clicking acceptance, signing an order or using the Service. If you act for Customer, you confirm that you have authority to bind Customer. If you do not have that authority or do not agree, do not use the Service.

Sissel is offered for business and professional use, not personal or household use. Consumers may not create an account. A User must be at least 18 years old and legally able to enter into this agreement.

• Provide accurate account information and keep it current.
• Keep credentials, recovery methods, API tokens and connected-account access secure. Accounts are personal and must not be shared.
• Customer controls its Users, roles, sites, workspaces, integrations and destinations, and is responsible for their activity.
• Tell us promptly at privacy@sissel.app if an account, token or integration may have been compromised.

Customer administrators may invite or remove Users, change permissions and access Customer Data. Customer is responsible for confirming that administrators have the necessary authority.

Sissel connects consented advertising and website activity to later customer-defined outcomes, applies attribution models, provides reports and can send selected conversion events to connected services. Attribution shows what was observed and which source received credit under a model. It does not prove causation, guarantee campaign performance or replace Customer’s judgement.

During beta, features may be incomplete, change materially or be withdrawn. Unless an order expressly says otherwise, beta access has no service-level agreement, guaranteed support response or promised release date. We will use reasonable care in operating the Service and will communicate material incidents and changes as appropriate.

Customer must validate its installation, consent setup, mappings, duplicate handling, attribution model and destination payloads before relying on results or enabling live conversion delivery.

Customer is responsible for:

• its websites, notices, consent mechanism, advertising accounts, CRMs, source data, mappings, instructions and decisions made using Service output;
• obtaining all permissions and lawful bases needed to collect, import, link, analyse and deliver Customer Data through Sissel;
• configuring access according to least privilege and promptly removing Users and integrations that no longer need access;
• avoiding sensitive personal data, payment-card data, authentication secrets, children’s data and other data that the Service is not designed to process, unless we have expressly agreed the use in writing; and
• keeping independent copies of business-critical source records and exports. Sissel is an attribution service, not Customer’s system of record or sole backup.

Customer and Users must not use the Service to:

• break the law, infringe rights or process data without required authority;
• send spam, deceptive messages or unlawful advertising conversions;
• upload malware, probe for vulnerabilities, bypass access controls, disrupt the Service or access another customer’s data;
• reverse engineer the Service except where mandatory law expressly permits it, scrape it, resell access without written permission or use it to build a competing service;
• evade usage limits, create misleading attribution evidence, impersonate another person or misrepresent the source or consent status of data; or
• use Service output as the sole basis for decisions with legal or similarly significant effects on a person.

We may investigate suspected misuse and take proportionate steps to protect the Service, Customers and third parties.

As between Customer and Teklos, Customer retains all rights in Customer Data. Customer grants Teklos a non-exclusive, worldwide, limited right to host, copy, transmit, transform and otherwise process Customer Data only to provide, secure, support and maintain the Service as permitted by the agreement and Customer’s documented instructions.

Customer confirms that it and its Users have the rights, notices, consents and other lawful grounds needed for Customer Data and for the instructions given to Teklos. We do not sell Customer Data or use it to build cross-customer identity profiles. We may generate aggregated or anonymised statistics that do not identify Customer or any person, and use those statistics to operate and improve Sissel.

Each party will comply with applicable data-protection law. For account, relationship and Service-operation data, Teklos acts as controller as explained in the Privacy Policy. For personal data in Customer Data, Customer is the controller and Teklos is the processor.

Customer must not connect production personal data until the parties have an applicable DPA. The DPA describes instructions, confidentiality, security, subprocessors, international transfers, assistance, incident notification, audits and return or deletion. Customer must answer requests from people whose data it controls; Teklos will provide reasonable assistance as required by the DPA.

Teklos maintains technical and organisational measures appropriate to the Service, including encrypted transport, customer isolation, role-based access, database row-level security, audit records, encrypted credentials and person identifiers, restricted production access and backup procedures. More detail appears on the Security page and in the DPA security schedule.

Customer remains responsible for secure configuration, User devices, credentials, source systems and connected services. Each party will notify the other without undue delay after discovering a security incident that materially affects the other party or Customer Data, using the agreed incident route.

Customer may connect third-party services such as a CRM, advertising account, identity provider or automation destination. Customer authorises Teklos to exchange Customer Data with those services within the scopes and routes Customer configures. Customer is responsible for having authority to connect each account and for the receiving service’s settings.

Third-party services are governed by their own terms and privacy notices. Teklos does not control and is not responsible for their availability, changes, data use or acts, except to the extent Teklos appoints one as its own subprocessor under the DPA. Removing an integration stops new access by Sissel but does not automatically delete data already sent to or retained by the third party.

Google sign-in and Google Ads

Google sign-in lets a User authenticate with a Google account. Connecting Google Ads is a separate authorisation by a User with the necessary account and workspace permissions. Customer instructs Sissel to import the selected advertising account’s campaign and performance data, associate recorded clicks with campaigns, and provide attribution and reporting. When Customer configures conversion feedback, Sissel may read and create the selected Google Ads conversion actions.

The Google Ads permission (adwords) covers reporting and conversion-action configuration. The Data Manager permission (datamanager) allows Sissel to send Customer’s selected first-party conversion events to Google. Granting these permissions does not itself enable live conversion delivery. Customer must configure the destination account, conversion actions and delivery mode, and is responsible for event accuracy, required notices, consent and compliance with Google’s applicable advertising and customer-data policies. Hashed matching identifiers are still personal data.

Sissel’s use and transfer of information received from Google APIs is subject to the Google API Services User Data Policy, including Limited Use. Those restrictions apply even where these Terms otherwise permit processing aggregated data or a transfer to a successor. Our Google privacy disclosure explains the data accessed, uploads to Google, security, retention, revocation and deletion. Google’s Terms of Service and the terms for the Google products Customer uses also apply to those products.

Customer may disconnect Google Ads in Integrations, change conversion delivery to “Not sent”, or revoke Sissel’s access in Google Account settings. Disconnecting stops new access and delivery and removes the stored connection credentials. It does not automatically delete Sissel’s imported reporting history or retract conversions already received by Google. Data deletion follows the Privacy Policy and applicable DPA.

The beta is free unless Customer accepts an order or plan that states a fee. We will not charge Customer merely because future pricing is announced. Any paid plan, billing period, usage allowance, currency and payment due date will be shown before Customer accepts it.

Unless an order says otherwise, fees are exclusive of VAT and other applicable taxes, non-refundable except where these Terms require a refund, and payable within 14 days of invoice. Customer must raise a good-faith invoice dispute before the due date and pay undisputed amounts on time. We may charge statutory late-payment interest and reasonable collection costs.

Teklos and its licensors own the Service, software, designs, documentation, trademarks and all improvements, excluding Customer Data. Subject to the agreement, Teklos grants Customer a limited, non-exclusive, non-transferable and revocable right for its Users to access and use the Service for Customer’s internal business purposes during the agreement.

If you give feedback or suggestions, Teklos may use them without restriction or payment, provided we do not identify you publicly as the source without permission. No rights are granted except those expressly stated.

Each party may receive non-public information that a reasonable person would understand to be confidential. The receiving party will protect it with reasonable care, use it only for the agreement and disclose it only to personnel and providers who need it and are bound by confidentiality.

Confidential information does not include information that the receiving party can show was already lawfully known, becomes public without breach, is received lawfully from another source or is independently developed. A party may disclose information when law requires it, after giving advance notice where legally permitted. Customer Data is Customer’s confidential information.

We may perform maintenance, fix security issues and change the Service. We will try to give reasonable notice of planned changes that materially reduce core functionality. Emergency maintenance, legal requirements and third-party changes may require action without advance notice.

General support is provided by email on a reasonable-efforts basis during beta. An SLA, response time, recovery target, dedicated support or specific feature commitment applies only if stated in an accepted order.

We may suspend affected access where reasonably necessary to prevent a security threat, unlawful use, material harm to the Service or another customer, or where undisputed fees remain overdue after notice. We may also suspend if Customer materially breaches these Terms and does not cure the breach within a reasonable period stated in our notice.

Where practical, we will give notice, limit the suspension to the affected part and restore access promptly after the cause is resolved. We may act immediately where delay would create material risk or expose us to legal liability.

The agreement starts when Customer first accepts these Terms and continues until terminated. During a free beta, either party may terminate at any time by written notice. Paid commitments continue for the period in the order and can be terminated as stated there.

Either party may terminate for a material breach that is not cured within 30 days after written notice, or immediately if the breach cannot be cured, the other party becomes insolvent, or continued performance would be unlawful.

On termination, Customer’s right to use the Service ends and outstanding fees become due. On request made before termination or within 30 days after it, we will provide a reasonable standard export of available Customer Data. We then return or delete Customer Data under the DPA; absent a different written period, deletion is scheduled within 30 days, subject to legal retention and encrypted backup expiry. Customer should export anything it needs before closing the account.

Each party warrants that it has authority to enter into the agreement. Teklos warrants that it will provide the Service with reasonable skill and care and will not knowingly introduce malicious code.

Except for those express promises and to the maximum extent permitted by law, the Service is provided “as is” and “as available”. We do not warrant uninterrupted or error-free operation, that every source record will match, that a third-party service will remain compatible, or that attribution and delivery results will meet Customer’s commercial goals. Customer is responsible for reviewing output before acting on it.

Nothing in these Terms limits liability that cannot lawfully be limited, including for fraud, wilful misconduct, gross negligence, death or personal injury caused by negligence, or mandatory liability under data-protection law.

Subject to that sentence, neither party is liable for indirect or consequential loss, loss of profit, revenue, goodwill or anticipated savings, or loss or corruption of data that could reasonably have been avoided by following the agreement and maintaining appropriate source copies.

Each party’s total aggregate liability arising from the Service in any rolling 12-month period is limited to the fees paid or payable by Customer for the Service in that period. If no fee was paid or payable, the cap is NOK 10,000. Customer’s obligation to pay fees, breach of the other party’s intellectual-property rights and liability that these Terms say cannot be limited are not subject to this cap.

Customer will defend and indemnify Teklos against a third-party claim, final judgment and reasonable external cost to the extent caused by Customer Data, Customer’s unlawful instructions or Customer’s material breach of sections 5–7. Teklos will promptly notify Customer, give reasonable cooperation at Customer’s cost and allow Customer to control the defence, provided Customer may not admit fault for or impose obligations on Teklos without our consent.

Teklos will defend Customer against a third-party claim that the unmodified Service, when used as allowed, infringes that party’s intellectual-property right. Teklos may obtain continued use, modify or replace the affected part, or terminate it and refund prepaid fees for the unused period. This does not apply to Customer Data, combinations not supplied by Teklos, Customer modifications or use after notice to stop.

Neither party is liable for delay or failure caused by events outside its reasonable control, such as widespread network or cloud failure, power failure, labour dispute, natural disaster, war, government action or failure of a third-party platform that the affected party could not reasonably prevent. Payment obligations for Service already provided are not excused. The affected party will take reasonable steps to reduce the effect and resume performance.

We may update these Terms for legal, security or Service changes. We will post the new version and effective date and give reasonable advance notice of a material change by email or in the application. A material change will normally take effect at least 30 days after notice. Changes required by law or needed to address an urgent security risk may take effect sooner.

If Customer objects to a material change, it may stop using the Service and terminate before the change takes effect. Continued use after the effective date constitutes acceptance. A signed order cannot be changed by these online Terms during its committed period where the order says otherwise.

Notices

Legal notices must be sent by email to the account owner and to privacy@sissel.app. Operational notices may be given in the Service.

Assignment

Neither party may assign the agreement without the other’s consent, not to be unreasonably withheld. Either party may assign it as part of a merger, reorganisation or sale of substantially all relevant business, provided the successor assumes the agreement and is not the other party’s direct competitor.

Subcontractors

Teklos may use subcontractors to provide the Service and remains responsible for its contractual obligations. Subprocessors are handled under the DPA.

Entire agreement

The documents listed in section 1 are the entire agreement about the Service and replace prior proposals and discussions on the same subject. Neither party relies on a statement not included in them, without excluding liability for fraud.

No waiver

A delay in enforcing a right is not a waiver of that right.

Severability

If a provision is unenforceable, it will be adjusted only as much as needed and the remaining provisions continue.

Relationship

The parties are independent contractors. The agreement does not create employment, agency, partnership or a joint venture.

Survival

Provisions that by their nature should continue—including ownership, confidentiality, fees, disclaimers, liability, data return and dispute terms—survive termination.

The agreement is governed by Norwegian law, without regard to conflict-of-law rules. Before filing a claim, each party will give written notice and allow 30 days for people with authority to settle the dispute to try in good faith to resolve it.

If the dispute is not resolved, the courts of Norway have exclusive jurisdiction, with Oslo District Court (Oslo tingrett) as the agreed venue, except that either party may seek urgent interim relief in any competent court.

Questions or legal notices can be sent to privacy@sissel.app.