Last Updated: 2026-06-29
These Terms of Service ("Agreement") are entered into between Sentaro AB, org. no. 559350-3120, with its registered address at Birger Jarlsgatan 57, 113 56 Stockholm, Sweden ("Sentaro", "we", "us"), and the entity or person accepting this Agreement ("Customer", "you").
This Agreement governs access to and use of Sentaro's software and services, including our email security plugins for Google Workspace and Microsoft 365 and related platform components, documentation, and support (collectively, the "Services").
Order of Precedence
If the Customer executes Order Form(s) referencing this Agreement, each is incorporated. On conflict, the order is: (1) Order Form, (2) Data Processing Agreement, (3) this Agreement, unless a document expressly states otherwise.
1. Definitions
1.1 "Authorized User" means an individual authorized by the Customer to access the Services.
1.2 "Customer Data" means data submitted to or processed by the Services by or on behalf of the Customer, including email metadata and content to the extent the Customer configures the Services to process it.
1.3 "Derived Data", "Pseudonymized Data", "Anonymized Data", "Global Model" and "Third-Party AI" have the meanings given in the DPA.
1.4 "Documentation", "Aggregated/Anonymized Data", "DPA" and "Applicable Law" retain their meaning from the published Terms.
2. Acceptance; Authority; Eligibility
By accessing or using the Services, or executing an Order Form, the Customer agrees to this Agreement. A person accepting on behalf of an entity represents they have authority to bind it.
3. Provision of Services; Subscription; Support
3.1 Right to access. Subject to this Agreement and the Order Form, Sentaro grants the Customer a limited, non-exclusive, non-transferable, non-sublicensable right for Authorized Users to access the Services for the Customer's internal business purposes during the subscription term.
3.2 Hosting. The Services are hosted on Microsoft Azure or comparable infrastructure used by Sentaro or its subprocessors.
3.3 Support. Sentaro provides support as described in the Order Form or support policy.
3.4 Changes. Sentaro may update the Services, and will not materially reduce core functionality during a paid term except for security, legal or abuse-prevention reasons.
4. Customer Responsibilities
4.1 The Customer is responsible for all activity under its accounts and for credential and admin security.
4.2 The Customer is responsible for its Microsoft 365 / Google Workspace tenancy and permissions, configuring the Services, and ensuring they meet its requirements.
4.3 The Customer represents it has all rights and lawful bases necessary to provide Customer Data for Processing as contemplated by this Agreement and the DPA.
5. Acceptable Use; Restrictions
The Customer will not, directly or indirectly: (a) reverse engineer the Services; (b) copy, modify, create derivative works of, or resell the Services except as expressly permitted under a reseller arrangement with Sentaro; (c) use the Services to build a competing product; (d) disrupt the integrity or security of the Services; (e) transmit malware; or (f) use the Services in violation of Applicable Law or third-party rights.
Suspension. Sentaro may suspend access where required by law, to prevent material harm, or on uncured material breach after notice.
6. Data Protection; Privacy; Security
6.1 DPA. To the extent Sentaro Processes personal data on the Customer's behalf, the DPA is incorporated by reference and governs such Processing.
6.2 Security program. Sentaro maintains technical and organizational measures designed to protect the confidentiality, integrity and availability of the Services and Customer Data, including encryption in transit and at rest.
7. Customer Data; Model Development; AI Training
7.1 Ownership of Customer Data. The Customer retains all right, title and interest in Customer Data.
7.2 Processing to provide the Services. The Customer instructs Sentaro to Process Customer Data as necessary to provide, secure and support the Services, including analyzing email signals to detect phishing, impersonation, BEC, malware and related threats.
7.3 Model development and Global Model. The Customer instructs and agrees that Sentaro may generate Derived Data and Anonymized Data from Customer Data and use it to develop, train, test, improve and operate its detection models, including a Global Model that is trained on data derived from multiple customers and made available to all customers, and for threat research, in accordance with DPA Section 7.
7.4 Third-Party AI. A limited volume of Customer Data may be analyzed by Third-Party AI (for example Anthropic Claude) solely to identify threat signals. Third-party providers do not train on Customer Data and do not retain it beyond the processing.
7.5 No reproduction. The Global Model is designed and tested not to reproduce one customer's raw email content to another customer in readable form.
7.6 Ownership and retention. The Customer retains ownership of Customer Data. Sentaro owns the Services, Documentation, Derived Data, the Global Model and all models and improvements trained from it. Raw Customer Data is retained per DPA Section 9.1, Pseudonymized Data for up to 5 years (DPA 9.2), and Anonymized Data indefinitely (DPA 9.3).
7.7 Aggregated/Anonymized Data. Sentaro may generate and use Aggregated/Anonymized Data for operating, improving and securing the Services.
8. Third-Party Services; Integrations (Google/Microsoft)
8.1 The Services may interoperate with Microsoft 365 and Google Workspace; the Customer's use of those services is governed by its agreements with those providers.
8.2 If the Customer enables integrations, it instructs Sentaro to exchange Customer Data as necessary to enable them.
8.3 Third-party AI models. Sentaro may use Third-Party AI as subprocessors under the DPA and Sentaro's security controls, subject to the no-training and limited-retention commitments in Section 7 and DPA Section 7.
9. Fees; Taxes; Payment
9.1 Fees, term, billing and usage are set out in the Order Form. Fees are non-refundable except as stated in this Agreement or required by Applicable Law, and subject to the Refund Policy.
9.2 Fees are exclusive of taxes.
9.3 Past due amounts may accrue interest at the lower of 1.5% per month or the maximum allowed by law.
10. Intellectual Property; Feedback
10.1 Sentaro owns all IP rights in the Services, including improvements, updates and derivative works, and in Derived Data and the Global Model, except Customer Data.
10.2 If the Customer provides feedback, Sentaro may use it without restriction under a royalty-free, worldwide, irrevocable license.
11. Confidentiality
Each party protects the other's Confidential Information using reasonable care and uses it only to perform under this Agreement. Standard exclusions and compelled-disclosure provisions apply.
12. Warranties; Disclaimers
12.1 Sentaro warrants it will provide the Services in a professional and workmanlike manner during the paid term.
12.2 Except as stated, the Services are provided "as is" and "as available"; Sentaro disclaims implied warranties to the maximum extent permitted by law.
12.3 Security determinations. The Customer acknowledges that cybersecurity risk cannot be eliminated and that the Services are a detection tool; Sentaro does not guarantee that all threats will be detected or prevented.
13. Indemnification
13.1 Sentaro will defend and indemnify the Customer against third-party claims that the Services as provided infringe third-party IP rights, with standard exclusions.
13.2 The Customer will defend and indemnify Sentaro against claims arising from Customer Data or the Customer's right to provide it, or breach of Section 5.
14. Limitation of Liability
14.1 Except for indemnification, breach of Section 5, payment obligations, and breach of confidentiality (excluding Customer Data claims governed by the DPA), neither party is liable for indirect, incidental, special, consequential or punitive damages, or lost profits.
14.2 Except for those carve-outs, each party's total liability shall not exceed the fees paid or payable under the Order Form giving rise to the claim in the 12 months before the event.
15. Term; Termination
15.1 This Agreement runs for the subscription term in the Order Form.
15.2 Either party may terminate on uncured material breach within 30 days of notice (10 days for non-payment).
15.3 Effect of termination. On termination, the Customer ceases use of the Services. Sentaro returns or deletes Customer Data per DPA Section 9, provided that Anonymized Data and other data that is no longer Personal Data may be retained, and Pseudonymized Data is retained for the remainder of its 5-year period unless deletion is requested and legally required.
15.4 Survival. IP, confidentiality, disclaimers, indemnities, liability limits, retention of Derived Data, and dispute resolution survive termination.
16. Compliance; Export; Sanctions
The Customer complies with Applicable Law, including export control and sanctions laws, and will not use the Services in violation of them.
17. Publicity
Sentaro may use the Customer's name and logo in a customer list unless the Customer opts out in writing. Press releases or co-marketing require mutual written approval.
18. Dispute Resolution; Governing Law; Venue
This Agreement is governed by the laws of Sweden. Disputes will be resolved by the courts of Stockholm, Sweden, and the parties consent to exclusive jurisdiction and venue.
19. Changes to this Agreement
Sentaro may update these Terms; for material changes, Sentaro provides notice and the updated version is effective as stated; continued use constitutes acceptance.
20. Miscellaneous
Assignment, force majeure, severability, waiver, and entire-agreement provisions apply as in the published Terms. This Agreement, Order Forms and the DPA are the entire agreement regarding the Services.
21. Contact
Sentaro AB, Attn: Legal, Birger Jarlsgatan 57, 113 56 Stockholm, Sweden. Email: legal@sentaro.com.