Terms of Service

1. The Services and these Terms

Sidcom AB (“Sidcom”, “we”) operates an MCP integration platform that lets AI assistants work against third- party business systems such as Fortnox. These Terms of Service (“Terms”) cover everything we operate: the MCP integration servers, product portals and other services we make available from time to time, including those on sidcom.app and sidcom.ai subdomains such as fortnox.sidcom.app and fortnox.sidcom.ai, and the products sold through them (collectively, the “Services”). We may add, change, or remove services, integrations and features at any time.

The Services are sold to businesses and are not intended for consumers. We contract on that basis.

1.1 Acceptance. You accept these Terms by continuing on the Sidcom sign-in page — whether by continuing with Google, continuing with Microsoft, or requesting a sign-in link by email. Acceptance occurs at that point, before any connection to a business system is established.

1.2 Authority. By accepting these Terms you represent that you do so on behalf of, and with authority to bind, the organisation for which the account is created. “Customer” in these Terms and in the Data Processing Agreement means that organisation.

2. Accounts and access

Some products require a Sidcom account. You sign in with your email address or an identity provider we support. An account belongs to an organisation: whoever creates it becomes its owner, and owners can invite members, assign licences, and manage the subscription.

You are responsible for who you admit to your organisation and for what they do with the access it grants. Removing a member ends their access to the organisation’s connected companies immediately.

You connect the Services through your own AI client and authorise access through each provider’s own sign-in flow, such as Fortnox OAuth, or with credentials that provider issues you. We never store your Fortnox password. You are responsible for keeping your client configuration secure and for holding the valid licences each connected provider requires. Do not share your MCP tokens.

3. Using the Services

You agree not to use the Services for any unlawful purpose, to circumvent rate limits, access controls, or entitlement checks, to reverse-engineer or extract source code or non-public data from the Services, to transmit malware, or to impersonate others or misrepresent your authority to access an account.

Fair use. Where a product is offered with an unlimited number of connected companies or without metered usage, it is provided for normal, interactive business use. We do not meter ordinary work. If an organisation’s usage falls far outside normal patterns in a way that risks degrading the Services — for example sustained automated bulk traffic across a very large number of companies — we will contact you to agree on an arrangement that fits, and we may apply reasonable technical limits where the Services would otherwise be affected.

File uploads. The Services can transfer files to a connected provider, either fetched from a URL you designate or sent to a single-use upload address created for your session. Uploads are limited to 15 MB per file, and we may reject or further limit uploads at our discretion. Upload addresses are single-use and expire after a short period; you must keep them confidential, since anyone holding a valid address can use it until it expires. You are responsible for having the necessary rights to any content you upload or direct us to fetch.

AI-initiated actions. You are responsible for the behaviour of the AI client you connect. Writes to Fortnox require your approval, and you are responsible for actions you authorise. Sidcom is not liable for AI-initiated actions you approve.

4. Ownership and your data

Our platform. Sidcom owns the Services, including the software, interfaces and documentation, and all intellectual property rights in them. Nothing in these Terms transfers any of those rights to you, and you may use the Services only as these Terms allow. Where you give us feedback about the Services, we may use it freely and without obligation to you.

Your data. You retain ownership of your business data. You grant Sidcom a limited, non-exclusive licence to transmit and process that data, and to retrieve files from locations you designate and deliver them to the connected provider, solely to carry out the API calls you authorise. The platform is transit infrastructure — it is not a backup or storage service for your accounting data. How that data is handled in data-protection terms is set out in clause 5.

5. Data protection

Where we process personal data on your behalf in providing the Services, you are the controller and we are your processor. That processing is governed by our Data Processing Agreement, which is incorporated into these Terms by reference and takes effect when you accept these Terms under clause 1.1. No signature is required.

Where we process personal data for our own purposes, we act as an independent controller rather than as your processor. Our Privacy Policy describes that processing.

If these Terms and the DPA conflict on the processing of personal data, the DPA prevails.

6. Third-party services

Connected providers such as Fortnox, and AI clients such as Claude, ChatGPT, and Microsoft Copilot, operate under their own terms. Sidcom assumes no responsibility for the availability, accuracy, pricing, or conduct of third-party services. Sidcom is built by Sidcom AB and is not affiliated with, or endorsed by, any third party, such as Fortnox, Anthropic, OpenAI or Microsoft.

7. Fees, licences, and payment

How you are billed depends on how the product was sold to you. Where a product is sold through a marketplace, such as the Fortnox Marketplace, that marketplace states the price, bills you, and handles payment under its own terms. A licence bought through a marketplace covers a single connected company unless that marketplace’s listing states otherwise; connecting further companies requires a licence for each. Any trial or billing rule a marketplace applies is theirs to set and to change; we neither control nor guarantee it.

Where you buy from us directly, we bill you by card through our payment provider or by invoice, as agreed with you. A licence bought from us can cover more than one connected company; its scope is stated in the

product description. Prices are stated or agreed before you buy and are exclusive of VAT unless stated otherwise. Any later change to what you pay is shown to you before you confirm it.

Price changes. We may change our prices. A new price applies from the start of the next renewal period, never during a period you have already paid for. We will tell you at least 30 days before the renewal date. If you do not accept the new price, your only remedy is to cancel before the renewal takes effect; where you bought through a marketplace, cancel under that marketplace’s terms.

The rest of this section applies to purchases made directly from us.

Renewal. Subscriptions renew automatically for the same period until cancelled. You may cancel at any time before renewal, and access continues to the end of the period you have paid for.

Payment and non-payment. Card details are handled by our payment provider and we never see or store them. Invoices are due on the terms stated on the invoice, and overdue amounts may accrue interest at the statutory rate. If a payment fails or an invoice is left unpaid, we may suspend the organisation’s access until it is settled. Your data is not deleted during suspension.

Refunds. A period that has started is not refunded, including where you cancel or reduce it part-way through. Fees already paid are otherwise non-refundable except where mandatory law requires. This does not apply where you terminate under clause 6.3 or 16.2 of the DPA; in that case we refund fees you have paid us for the unused remainder of the current period.

8. Availability and warranties

The Services are provided “as is” and “as available”, without warranty of any kind, express or implied, including merchantability, fitness for a particular purpose, and non-infringement. We aim to keep the Services running reliably but make no uptime guarantee. Maintenance, third-party outages, and unforeseen issues may cause downtime.

9. Liability

9.1 To the extent permitted by law, each party’s total liability under these Terms is limited to the greater of the fees paid or payable in the twelve months before the event giving rise to the claim, or SEK 5,000. Neither party is liable for indirect damages or lost profits.

9.2 The limitation in clause 9.1 does not apply to your obligation to pay fees, to the indemnity in clause 9.3, to liability caused by wilful misconduct or gross negligence, or to liability that cannot be limited under mandatory law.

9.3 You will indemnify Sidcom against third-party claims arising from your unlawful use of the Services, or from content you upload or direct us to fetch without holding the necessary rights, including reasonable legal costs.

10. Term and termination

You may stop using the Services at any time. Where a product was sold through a marketplace, cancel the licence under that marketplace’s terms. Where you bought directly from us, cancel the subscription in the product or by contacting us; access continues to the end of the period you have paid for. Deleting your organisation removes its account data, linked companies, and stored tokens.

We may suspend or terminate access if these Terms are breached or if continued operation poses a legal or security risk. Provisions that by their nature should survive termination — ownership, disclaimers, liability, and governing law — survive it.

11. Changes to these Terms

We may change these Terms at any time. The current version is published at sidcom.ai/terms and takes effect on the day it is published, unless we state otherwise; the effective date at the top shows when the current version took effect. If you do not accept a change, your only remedy is to stop using the Services.

Changes to the Data Processing Agreement are governed by clause 16 of the DPA itself, not by this clause.

12. General

12.1 Notices. Notices under these Terms are sent by email to the address registered on your account, and to Sidcom at hello@sidcom.ai. You are responsible for keeping your registered address current and monitored.

12.2 Assignment. You may not assign these Terms without our written consent. We may assign them to a group company, or in connection with a merger, acquisition or sale of assets.

12.3 Entire agreement. These Terms, together with the Data Processing Agreement and any order or marketplace listing, constitute the entire agreement between the parties on their subject matter.

12.4 Severability. If any provision is held invalid or unenforceable, the remaining provisions remain in force.

12.5 No waiver. A failure to enforce a provision is not a waiver of it.

13. Governing Law and Dispute Resolution

13.1 These Terms, and any dispute or claim arising out of or in connection with them, their subject matter or their formation, are governed by the substantive laws of Sweden, without regard to its conflict of law rules.

13.2 Any dispute, controversy or claim arising out of or in connection with these Terms, or the breach, termination or invalidity thereof, shall be finally settled by arbitration administered by the SCC Arbitration Institute (the “SCC”). The Rules for Expedited Arbitrations shall apply, unless the SCC in its discretion determines, taking into account the complexity of the case, the amount in dispute and other circumstances, that the Arbitration Rules shall apply. The Arbitral Tribunal shall in either case be composed of one arbitrator.

13.3 The seat of arbitration is Stockholm, Sweden.

13.4 The language of the arbitral proceedings is Swedish where the Customer is registered or resident in Sweden, and English in all other cases.

13.5 Each party bears its own costs and expenses, including legal representation, incurred in connection with the arbitration. The Costs of the Arbitration are borne by the parties in equal shares, regardless of the outcome.

13.6 Notwithstanding clause 13.2, either party may (a) bring proceedings before the Swedish general courts, or apply for an order for payment with the Swedish Enforcement Authority, for the recovery of fees due and payable under these Terms; and (b) apply to any court of competent jurisdiction for interim or conservatory measures, including injunctive relief. Recourse to a court under this clause

13.6 does not constitute a waiver of the arbitration agreement in clause 13.2, and does not affect the Arbitral Tribunal’s own power to order interim measures.

14. Contact

Questions about these Terms: hello@sidcom.ai.