Terms of Use

1. About these terms

These Terms of Use (the “Terms”) govern your use of Kyllo — the website at kyllo.app, the web application, our iOS app, the partner API and the MCP server (together, the “service”). The service is provided by AppCabinet LTD, a company registered in England and Wales under company number 15498413, whose registered office is at 1st Floor, 124 Cleveland Street, London W1T 6PG, United Kingdom (“we”, “us”, “our”).

“Customer” or “you” means the business that holds an account, and, where the context requires, each person who signs in on its behalf (a “member”). By accepting an invitation, signing in or using the service, you agree to these Terms and to our Privacy Policy. If you accept on behalf of a business, you confirm that you are authorised to bind it.

If we have signed a separate written agreement with you, that agreement prevails over these Terms where they conflict.

2. Who may use the service

• The service is designed for businesses, sole traders and professionals, for use in their trade or profession. You must be at least 18 years old.
• Access is by invitation. We may decline any request for access without giving a reason.
• You may not use the service if you, or the business you act for, are the subject of sanctions imposed by the United Nations, the European Union, the United Kingdom or the United States, or are located, established or ordinarily resident in a country or territory subject to comprehensive sanctions. Where sanctions law prohibits it — including the Russia (Sanctions) (EU Exit) Regulations 2019 and the Republic of Belarus (Sanctions) (EU Exit) Regulations 2019 in the United Kingdom, and, where they apply, Article 5n of Council Regulation (EU) No 833/2014 and its Belarusian counterpart — we do not provide the service to the government of the Russian Federation or of Belarus, or to legal persons, entities or bodies established in either country. You confirm that none of these restrictions applies to you, and you will tell us promptly if that changes.

3. Accounts and access

• You sign in with one-time links sent to your email address, or with a passkey. Anyone who can read your email can sign in as you, so keep your email account secure, and tell us at once at [email protected] if you suspect someone else has accessed your account.
• Each member needs their own account. Do not share sign-in links or devices with registered passkeys.
• You decide who belongs to your company and what role they have, and you are responsible for what your members do in the service. When someone leaves your business, ask us or your administrator to remove them.
• Our platform administrators can access accounts to provide the service, support you and keep it secure, subject to the confidentiality obligations in section 15.
• Keep your account details accurate, including the company details that print on your invoices.

4. Free trial

• Each new customer may use the service free of charge for 30 days from the day its account is created (the “trial”). The trial includes every feature.
• We do not ask for payment details for the trial, and nothing is charged when it ends. The trial does not turn into a paid subscription unless you ask for one.
• Before the trial ends, we will contact you to ask whether you want to subscribe. If you do not subscribe by the end of the trial, your access ends and section 17 applies, so you can still subscribe or take your data with you.
• We offer one trial per business. We may extend a trial at our discretion, or end it early if these Terms are breached.
• During the trial the service is provided “as is”, without the commitments that apply to a paid subscription; the limits on our liability in section 19 apply.

5. Subscriptions, fees and payment

• Plans. Subscriptions are offered for a monthly or a yearly period. Each includes every feature, with no limits on clients or invoices. The fee, its currency and the period are those in the offer we send you or on our invoice.
• Invoicing in advance. We invoice each period in advance, at its start. Payment is due by the date on the invoice, normally 14 days from its date, by bank transfer or another method we agree with you. We do not take card payments or debit your account automatically.
• Taxes. Fees exclude value added tax and similar taxes, which we add where the law requires. Where the reverse-charge mechanism applies, you account for the tax. You are responsible for any bank charges on your side of a transfer.
• Late payment. If an invoice is unpaid 14 days after its due date, we will remind you. If it is still unpaid 14 days after the reminder, we may suspend your access until it is paid, and charge statutory interest and compensation on business debts under the Late Payment of Commercial Debts (Interest) Act 1998, or the equivalent law where you are. Suspension does not delete your data; section 16 describes what happens if non-payment continues.
• Price changes. We may change our fees by telling you at least 30 days before the start of the period in which the new fee applies. The change never affects a period you have already been invoiced for. If you do not accept it, you may cancel before the new fee applies.
• Changing plan. You may move from monthly to yearly, or yearly to monthly, from the start of your next period by telling us before it begins.

6. Renewal, cancellation and refunds

• Renewal. Your subscription continues for successive periods of the same length unless you or we cancel it. Because payment is manual, each renewal is confirmed by our invoice for the new period. For a yearly subscription we will remind you at least 30 days before it renews.
• Cancelling. You can cancel at any time by writing to [email protected] from an email address of a member of your company with the manager role, or by any other written notice to us. We will confirm the cancellation in writing.
• When it takes effect. A cancellation takes effect at the end of the period you have already paid for. You keep full access until then, and we will not invoice you again. To avoid being invoiced for a new period, cancel before it starts; if we have already issued an invoice for a period that has not yet started, we will cancel that invoice.
• Refunds. Fees for a period that has started are not refundable, in whole or in part, except: (a) if we end your subscription for reasons other than your breach, or stop providing the service, we refund the prepaid fees for the unused part of the period, calculated pro rata; (b) if you end it under section 16 because of our material breach, or because you reject a material change to these Terms under section 21, we refund the same; and (c) where the law requires a refund.
• If you are a consumer. The service is offered to businesses. If, despite this, consumer protection law applies to you, nothing in these Terms limits your statutory rights. In particular, if you are a consumer in the European Union or the United Kingdom, you may withdraw from a paid subscription within 14 days of its start without giving a reason; if you ask us to start it during that time, you pay for the days it was provided before you withdrew.
• Cancellation by us. We may decide not to renew your subscription by telling you at least 30 days before the end of the current period.

7. Early access and changes to the service

The service is in early access and evolves continually. We may add, change or remove features. If we remove or materially reduce a feature you rely on during a paid period, we will tell you in advance where reasonably possible, and you may cancel with a pro-rata refund of the unused period.

We aim to keep the service available at all times, but we do not promise uninterrupted or error-free operation and offer no service-level guarantee. We may interrupt it for maintenance, preferably at quiet times and with notice for planned work.

8. Your data

Everything you or your members put into the service — clients, invoices, payments, CRM records, documents, leads and settings (“Customer Data”) — remains yours. You give us a limited, non-exclusive licence to host, copy, process, transmit and display Customer Data only as needed to provide, secure and support the service for you, and as you instruct (for example, when you send an invoice). We do not sell Customer Data or use it for our own purposes, including advertising or training AI models.

We may use aggregated, anonymous information about how the service is used (for example, the number of invoices issued) that does not identify you, your clients or any person, to operate and improve it.

9. Data processing terms

Where Customer Data includes personal data, you are its controller and we are your processor, and this section forms the data processing agreement between us under Article 28 of the EU or UK General Data Protection Regulation and comparable laws. You can ask us for a signed copy. We will:

1. process Customer Data only on your documented instructions — these Terms and your use and configuration of the service are those instructions — unless the law requires otherwise, in which case we will tell you first unless the law forbids it;
2. ensure that everyone we authorise to process it is bound by confidentiality;
3. take appropriate technical and organisational security measures, as described in our Privacy Policy;
4. use the sub-processors listed in our Privacy Policy, under written terms that protect the data at least as well as these; we will tell you at least 30 days before adding or replacing one, and if you object on reasonable data protection grounds and we cannot address the objection, you may cancel with a pro-rata refund of the unused period;
5. transfer Customer Data outside the European Economic Area only with the safeguards the law requires, such as Standard Contractual Clauses;
6. help you, taking into account the nature of the processing, to answer requests from people exercising their data protection rights, and to meet your obligations on security, breach notification, impact assessments and consultation with authorities;
7. notify you without undue delay, and in any case within 72 hours, after becoming aware of a personal data breach affecting Customer Data, with the information you need to meet your own obligations;
8. at the end of the service, delete or return Customer Data as set out in section 17, unless the law requires us to keep it;
9. make available the information needed to show we meet these obligations, and allow for and contribute to audits, including inspections, by you or an auditor you appoint, on reasonable notice, at your cost, no more than once a year unless there has been a breach or an authority requires it.

The subject matter is the provision of the service; the duration is the term of your account plus the deletion period in section 17; the nature and purpose is hosting, storing, organising, transmitting and displaying data so you can manage clients, invoices and CRM records; the types of data and categories of people are those you choose to record, described in section 3.4 of our Privacy Policy.

10. Your responsibilities

• Lawful data. You are responsible for the lawfulness of the Customer Data you record and the instructions you give, including having a lawful basis to process your clients' data, giving them any privacy notice the law requires, and meeting any special rules for sensitive data such as identity documents.
• Invoicing and tax compliance. You are responsible for the content of your invoices and for complying with the invoicing, tax, bookkeeping and record-keeping laws that apply to you. Some countries require invoices to be issued with certified software, or reported to the tax authority in real time or in a particular electronic format (for example Portugal's certified invoicing software, Spain's Verifactu and TicketBAI, or Italy's SDI). Kyllo is not certified under any such scheme, and it is your responsibility to confirm whether the service is suitable as your system of record before you use it to issue invoices.
• Keeping your own records. Where the law requires you to keep invoices or business records for a number of years, it remains your duty to do so, including by exporting what you need before your account ends.
• Emails you send. Invoices, receipts and appointment notices you send through the service are sent on your behalf and in your name. You are responsible for their content, for having the right to send them, and for complying with the law on electronic communications.
• Payments. The service records payments you receive; it does not move money. Payments between you and your clients are a matter between you and them.

11. Acceptable use

You must not, and must not allow anyone else to:

• use the service for anything unlawful, fraudulent or deceptive, including issuing false invoices or evading tax;
• send spam or unsolicited bulk messages, or use the service to harass anyone;
• upload malware, or content that infringes anyone's rights;
• try to access another company's data, probe, scan or test the vulnerability of the service, or circumvent its security, rate limits or access controls (responsible disclosure of a vulnerability to [email protected] is welcome);
• overload the service or interfere with its operation, or access it by automated means except through the partner API, the MCP server and other interfaces we provide, within their published limits;
• copy, modify, reverse engineer or resell the service, except to the extent the law allows despite this restriction;
• use the service to build a competing product.

12. AI features and connected apps

• AI output may be wrong. Features such as Smart billing, lead extraction from email and conversation summaries use AI models to prepare drafts and suggestions. They can be inaccurate or incomplete. Smart billing prepares drafts only: a person in your company always reviews and sends an invoice, and you are responsible for any invoice you issue and any record you confirm.
• Connected apps act for you. When you connect an AI assistant or other app through our MCP server, or issue partner API keys, that app can read and change your data within the permissions you grant. Actions taken through your connections are treated as actions taken by you. You can revoke a connection at any time in Settings, and you should do so if a key or connection may have been compromised.
• Your use of a third-party assistant is also governed by your agreement with its provider. We are not responsible for what that provider does with the data the assistant receives.

13. Third-party services

The service relies on providers such as hosting, email delivery, AI model routing and push notification services, listed in our Privacy Policy. We are responsible for our choice of providers and for their performance of the processing we entrust to them, as the law requires. Links to third-party websites are provided for convenience, and we are not responsible for their content.

14. Intellectual property

We and our licensors own the service, including its software, design and documentation. Subject to these Terms and to payment of the fees, we grant you a non-exclusive, non-transferable right, for the duration of your trial or subscription, for your members to use the service for your business's internal purposes. Our name and logo may not be used without our permission.

If you give us suggestions or feedback, we may use them freely and without obligation to you.

15. Confidentiality

Each of us will keep confidential the other's non-public information received in connection with the service, use it only for the purposes of these Terms, and protect it with at least reasonable care. This does not apply to information that is or becomes public without fault of the recipient, was already known to it, is independently developed, or must be disclosed by law (in which case the recipient will give notice where lawful). Customer Data is always your confidential information.

16. Suspension and termination

• You may end your subscription as described in section 6, or end your trial at any time by telling us.
• We may suspend access, wholly or in part, immediately and without notice where necessary to prevent harm to the service or to others, to comply with the law, or if we reasonably believe your account has been compromised. We will restore access once the reason has been resolved and tell you what happened, unless the law forbids it.
• We may also suspend access for non-payment, as described in section 5.
• Either of us may terminate the subscription with immediate effect by written notice if the other materially breaches these Terms and, where the breach can be remedied, fails to remedy it within 30 days of being asked to; or if the other becomes insolvent, enters liquidation or a comparable procedure.
• We may terminate if an invoice remains unpaid 30 days after we suspended access for non-payment, after giving you a final written notice.
• Sections 8, 9 (for as long as we hold Customer Data), 10, 14, 15, 17 to 20, 22 and 23 survive termination.

17. When your account ends

• When your trial or subscription ends for any reason, your members can no longer use the service, but we keep your Customer Data for 30 days. During that time you can subscribe again and carry on where you left off, or ask us for an export.
• Export. Invoice PDFs can be downloaded at any time while you have access. A complete self-service export is not available yet; until it is, we will provide on request, free of charge, an export of your Customer Data in a common machine-readable format (such as spreadsheets) together with your uploaded documents, within 30 days of the request.
• Deletion. After the 30-day period, we delete your Customer Data from our live systems within a further 30 days, and from any backups within 90 days after that, unless the law requires us to keep it. We may keep the information about you we need for our own accounting and legal obligations, as described in our Privacy Policy.
• You may ask us to delete your Customer Data sooner. Deletion cannot be undone.

18. Warranties

We will provide the service with reasonable skill and care, in line with good industry practice. Except as expressly stated in these Terms, and to the extent the law allows, the service is provided “as is” and “as available”, and we give no other warranties or conditions, express or implied, including as to merchantability, fitness for a particular purpose or non-infringement. We do not warrant that the service will meet the legal requirements of any particular country for invoicing, tax or record-keeping (see section 10), that it will be uninterrupted or error-free, or that AI output will be accurate.

19. Limitation of liability

• Nothing in these Terms limits or excludes liability that cannot lawfully be limited or excluded, including liability for death or personal injury caused by negligence, for fraud or fraudulent misrepresentation, for gross negligence or wilful misconduct, or a consumer's statutory rights.
• Subject to that, neither of us is liable for loss of profits, revenue, business, goodwill or anticipated savings, or for any indirect or consequential loss, however arising.
• Subject to that, each party's total liability arising out of or in connection with these Terms in any 12-month period is limited to the greater of the fees you paid us in the 12 months before the event giving rise to the claim and £100. This limit does not apply to your obligation to pay fees, or to either party's liability under section 20.
• You are responsible for keeping your own copies of any data you cannot afford to lose; we are not liable for loss of data that you could have avoided by exporting it when given the opportunity under section 17.

20. Indemnity

You will compensate us for claims, fines and reasonable costs brought against us by third parties, including your clients or an authority, to the extent they arise from Customer Data you recorded unlawfully, from the content of messages you sent through the service, or from your breach of section 11. We will tell you promptly of any such claim and let you take part in its defence.

21. Changes to these terms

We may change these Terms, for example to reflect changes to the service or the law. We will tell you of a material change by email or in the service at least 30 days before it takes effect, unless it is required sooner by law or relates only to new features. If you do not agree, you may cancel before the change takes effect and receive a pro-rata refund of any prepaid fees for the unused period. If you continue to use the service after that date, the new Terms apply. The date at the top shows when these Terms last changed.

22. Governing law and disputes

These Terms, and any dispute or claim arising out of or in connection with them (including non-contractual disputes or claims), are governed by the law of England and Wales. The courts of England and Wales have exclusive jurisdiction, except that either party may seek urgent relief in any competent court.

If you are a consumer, this choice of law does not deprive you of the protection of the mandatory rules of the country where you live. If you live in Scotland or Northern Ireland you may also bring proceedings there, and if you live elsewhere you may bring them in the courts where you live, where your local law gives you that right.

Before going to court, please contact us at [email protected]: we will try in good faith to resolve the matter within 30 days.

23. General

• Notices. We send notices to the email address of your company's members with the manager role, or of the person who created the account. You send notices to [email protected]. Email counts as written notice.
• Assignment. You may not transfer your rights under these Terms without our consent. We may transfer them to a successor in a merger, acquisition or sale of our business, if we give you notice and the successor continues to provide the service on these Terms.
• Force majeure. Neither of us is liable for a delay or failure caused by events beyond our reasonable control, such as natural disasters, war, failures of public networks or power, or actions of authorities, other than an obligation to pay.
• Severability. If a provision is found invalid or unenforceable, the rest remains in force, and the provision applies to the greatest extent permitted.
• Third parties. No one other than you and us has any right to enforce these Terms, whether under the Contracts (Rights of Third Parties) Act 1999 or otherwise.
• No waiver. A failure or delay in exercising a right is not a waiver of it.
• Entire agreement. These Terms, the Privacy Policy and any offer or written agreement we send you form the whole agreement between us about the service.
• Language. These Terms are also available in Russian. If the two versions differ, the English version prevails, unless your local law requires otherwise.

24. Contact

AppCabinet LTD
1st Floor
124 Cleveland Street
London W1T 6PG
United Kingdom
Email: [email protected]