Legal

Terms and Conditions

Last updated: 22 October 2026 · Version 2.2 · Replaces version 2.1 of 16 October 2026, version 2.0 of 26 September 2026 and the terms of 12 May 2026 issued by CBS Systems d.o.o. Agreements already signed with CBS Systems d.o.o. are not affected.

These Terms govern your use of the sightpulse.ai website and your use of the SightPulse platform, including when you obtain it through Microsoft Marketplace. SightPulse is offered to businesses only.

1. Who we are

The website and the SightPulse platform are offered by SightPulse AG, a company limited by shares under Swiss law, registered in the commercial register of the Canton of Zug under UID CHE-344.951.907, with its registered office at Dammstrasse 19, 6300 Zug, Switzerland (“SightPulse“, “we“, “us“).

SightPulse AG is a majority-owned subsidiary of CBS Systems d.o.o., Karađorđeva 43, 11000 Belgrade, Serbia (founded 2007). CBS Systems develops, operates and supports the SightPulse platform for us as our principal subcontractor, under an information security management system certified to ISO/IEC 27001:2022 and a quality management system certified to ISO 9001:2015 by TÜV NORD CERT GmbH (certificates no. 44 121 26430130 and 44 100 26430130, valid until 2 September 2029). SightPulse AG remains fully responsible to you for the work of its subcontractors.

2. How these Terms fit together

Part A applies to everyone who uses the website. Part B applies to the SightPulse platform when a customer obtains it (a) through a Microsoft Marketplace offer published by SightPulse AG, or (b) under an order form, proposal or agreement that incorporates these Terms by reference. Part C applies in addition to Part B when a customer uses the SightPulse Demo plan.

Our Microsoft Marketplace offers are published with these Terms as the publisher’s own terms and conditions. The text shown in Microsoft Marketplace summarises and incorporates these Terms; if it conflicts with these Terms, these Terms apply. The Standard Contract for Microsoft Marketplace does not apply unless a private offer expressly says so.

If documents conflict, the following order applies, highest first:

1. a written agreement signed by you and SightPulse AG (for example a master subscription agreement, statement of work or a signed data processing agreement);
2. the Data Processing Agreement (“DPA”), for everything that concerns personal data;
3. the terms attached to a private offer you have accepted in Microsoft Marketplace, or an order form you have signed (“Order“);
4. Part C of these Terms, for the Demo plan;
5. Part B of these Terms;
6. Part A of these Terms.

Your purchase of Azure infrastructure and the Microsoft Marketplace transaction itself (invoicing and payment) are governed by your agreements with Microsoft. We are not a party to them.

Business use only. The website and the platform are intended for companies and professionals acting in the course of their business. They are not offered to consumers. By accepting these Terms on behalf of an organisation, you confirm that you are authorised to bind it.

3. Definitions

Part A: Website terms

A1. Using the Website

By accessing the Website you agree to Part A. If you do not agree, please do not use the Website. You must be at least 18 years old and use the Website for business purposes.

A2. Content and intellectual property

All content on the Website, including text, graphics, diagrams, videos, logos and software, is owned by SightPulse AG, its Affiliates or its licensors and is protected by intellectual property laws. “SightPulse” and the SightPulse logo are trade names and marks of SightPulse AG or its Affiliates. You may view and print pages for your internal evaluation of our services. Any other use requires our prior written consent.

A3. Acceptable use

You must not:

• scrape, crawl or systematically extract Website content, or use it to train machine-learning models, without our written consent;
• probe, scan or test the vulnerability of the Website or systems we operate, or attempt to bypass any security or authentication measure, except under the responsible disclosure process below;
• introduce malware, overload the Website or interfere with its operation;
• use the Website in breach of applicable law or to infringe the rights of others.

Responsible disclosure. If you believe you have found a security vulnerability in the Website or the Platform, please report it to security@sightpulse.ai and give us reasonable time to fix it before any disclosure. We will not pursue good-faith researchers who follow this process and do not access, change or retain data that is not theirs. This applies to the Website and to systems we operate; Platform deployments run in our customers’ own tenants and may be tested only with that customer’s authorisation.

A4. Information only

Website content describes our company and services in general terms. It is not an offer, and it is not legal, financial or commercial advice. Prices shown on the Website or in Microsoft Marketplace are indicative list prices; the binding price is the one in an accepted Private Offer or signed Order. Results described in case studies depend on each client’s data, market and execution and are not a promise of similar results.

A5. Third-party links

The Website may link to third-party websites or services, including Microsoft Marketplace and social networks. We do not control them and are not responsible for their content, availability or privacy practices.

A6. Availability

We may change, suspend or discontinue any part of the Website at any time. We do not guarantee that the Website will be uninterrupted or error-free.

A7. Liability for the Website

The Website is provided free of charge and “as is”. To the extent permitted by law, we exclude all liability arising from your use of the Website. Nothing in these Terms excludes or limits liability for unlawful intent or gross negligence, or any other liability that cannot be excluded under mandatory law.

A8. Privacy

Our Privacy Policy explains how we handle personal data collected through the Website and in our business relationships.

Part B: SightPulse Platform Terms

B1. The Platform and how it is deployed

The Platform is deployed as an Azure Managed Application into the Customer Tenant, in the Azure region the Customer selects at deployment. Platform resources sit in a Managed Resource Group in the Customer’s subscription. The Platform connects to Customer data sources in place, such as data warehouses, lakehouses and operational systems, and does not require the Customer to move its data outside its own Azure subscription.

Every Tier includes the Analyst and the SightPulse domain agents. The Tier determines the data the Platform processes, the modelling scope, the refresh cadence and the support level, as described in the Plan and confirmed in the Private Offer or Order.

Azure infrastructure consumed by the Platform is billed to the Customer by Microsoft under the Customer’s Azure agreement and is not included in our fees.

B2. Plans, indicative prices and private offers

• Indicative list prices. The prices of our public Microsoft Marketplace Plans are indicative list prices per market and month.
• Private offer first. Every paid subscription is confirmed in a Private Offer or Order following a Data Complexity Assessment. The price in the Private Offer may be higher or lower than the list price, and it is the binding price. We recommend that customers contact us at sales@sightpulse.ai before deploying a paid Plan.
• Activation. We provide data onboarding, processing of Customer Data, model operation and production use only after Activation under an accepted Private Offer or Order. Until then, a deployment of a paid Plan is limited to the Platform without Customer Data, and we have no obligation to provide services beyond that.
• Deployment without a private offer. If a Customer deploys a paid Plan without an accepted Private Offer, Microsoft charges the Plan’s list price under the Customer’s Marketplace terms. The Customer may delete the deployment at any time to stop further charges. On request, we will offer a Private Offer for the assessed scope and cooperate with Microsoft on any refund available under Microsoft’s Marketplace policies. Refunds are decided by Microsoft.
• Scope and price changes. The Tier and price change only when the Customer requests or approves a change of scope, such as a new data source, model family, market or domain. Scope is reviewed with the Customer quarterly, and agreed changes take effect at the next quarter boundary through a re-issued Private Offer or amended Order.
• End of a private offer. When the price period of a Private Offer ends, Microsoft applies the Plan’s list price unless a new Private Offer has been accepted. We issue renewal Private Offers before the end date.
• Extensions. Specific datasets, specialised models, additional agents, data complexity uplifts and integration into activation systems are agreed and priced in the Private Offer or Order.

B3. Licence

Subject to payment of the applicable fees and compliance with these Terms, we grant the Customer a non-exclusive, non-transferable, non-sublicensable right, for the subscription term, to use the Platform for its internal business purposes through its Authorised Users, and, where the Order says so, through its Affiliates. All rights not expressly granted are reserved.

B4. Restrictions

The Customer must not, and must not allow others to: (a) copy, modify or create derivative works of the Platform except as the Documentation allows; (b) decompile, disassemble or reverse engineer the Platform, except to the extent mandatory law permits; (c) remove, bypass or tamper with the Managed Resource Group’s deny assignments, licence checks or activation controls; (d) resell, rent or provide the Platform to third parties as a service; (e) use the Platform to build a competing product; or (f) use the Platform in breach of applicable law, including data protection, export control and sanctions law.

B5. Customer responsibilities

The Customer is responsible for: (a) maintaining the Customer Tenant and the Azure subscription, including its identity, network and access policies; (b) ensuring it has the rights, notices, consents and legal bases needed to make Customer Data available to the Platform, including under licences from third-party data providers such as syndicated market data and research agencies; (c) where the Customer uses the Platform on individual-level consumer data, including linking or matching consumer records across its own sources, determining the lawfulness of that processing and carrying out any data protection impact assessment required by law, with our reasonable assistance under the DPA; (d) the acts of its Authorised Users and the security of their credentials; and (e) reviewing Outputs before relying on them for business decisions.

B6. Customer Data and Outputs

• Ownership. As between the parties, the Customer owns all Customer Data and all Outputs. We claim no ownership of either.
• Our use. We process Customer Data only to provide, secure, support and maintain the Platform for the Customer, on the Customer’s documented instructions and as set out in the DPA. Where Customer Data includes personal data, the Customer acts as controller, SightPulse AG as processor and CBS Systems d.o.o. as our sub-processor.
• Personal data scope. The Private Offer or Order states whether personal data in the Customer’s datasets is part of the scope. If it is not, the Customer connects only datasets without personal data, and the only personal data we normally process is the account and activity data of Authorised Users. The DPA applies to all personal data we process for the Customer, including personal data found in connected datasets. Bringing personal data into scope can change the data protection set-up, effort, timeline and fees, which the parties agree in writing.
• No cross-customer use. We do not use Customer Data or Outputs to train, fine-tune or improve models used for any other customer, and we do not allow third-party AI providers to use them for training.
• Data location. Customer Data remains in the Customer Tenant, in the Azure region the Customer selects, unless the Private Offer or Order selects, or the Customer instructs us in writing, processing outside the tenant, for example for a defined project. In that case we process the data in a dedicated EU Processing Environment: virtual servers in Germany operated for the Customer by CBS Systems d.o.o. Customer Data is not stored in Serbia; our engineers in Serbia work on it by remote access, with personal data pseudonymised by default where the use case allows, as set out in the DPA. The EU Processing Environment requires additional set-up, operation and lead time. The resulting fees and the effect on the project timeline are set in the Private Offer or Order. Data in the EU Processing Environment and any other copy is handled under the same security controls and deleted when the project ends, and in any case within 30 days after the end of the agreement.
• Our IP. We and our licensors retain all rights in the Platform, including its models, algorithms, domain content, methods and know-how, and in improvements we make to them. We may use operational telemetry about the Platform (such as health, performance, error and usage metrics) to operate and improve it, provided it contains no Customer Data content. Where telemetry includes identifiers of Authorised Users, we use it only to operate, secure and support the Platform for the Customer, under the DPA; we use only aggregated or de-identified telemetry to improve the Platform.
• Feedback. We may freely use suggestions the Customer gives us about the Platform, without identifying the Customer.

B7. Publisher access to the deployment

As publisher of the Azure Managed Application, our designated operations personnel can be granted access to the Managed Resource Group to deploy updates, monitor health and resolve incidents. The Customer chooses one of two access modes where the Plan offers both:

In both modes, access is limited to the Managed Resource Group, requires multi-factor authentication, and control-plane operations are recorded in the Azure Activity Log of the Customer’s subscription. Personal data in Customer Data is processed in pseudonymised form by default, wherever the use case allows. Our personnel view direct identifiers, such as names or email addresses, only where needed to debug, provide support or resolve an incident. We have no access to Customer resources outside the Managed Resource Group unless the Customer grants it explicitly.

B8. AI components

The Platform’s analytical results are produced by statistical and machine-learning models working on Customer Data. Language models are used to interpret requests, select and orchestrate the analyses the agents run, and explain results in natural language; they do not generate the numerical results. To do this, agents pass the language model the data a task needs, which can include Customer Data such as analysis results or customer-level sales from loyalty or e-commerce data, pseudonymised where the use case allows. Outputs are traceable to the underlying data, and the Platform flags where results are inferred rather than observed or where input data is insufficient.

The Platform is model-agnostic. The language model endpoint for each deployment is set in the Private Offer or Order: either an endpoint the Customer provides, such as Azure OpenAI or Azure AI Foundry in its own subscription, or a model service we provide. Where the Customer provides the endpoint, or connects other AI services for the agents to use as tools or inputs, such as Microsoft Fabric data agents, Databricks Genie or other data agents, processing by those services, including where data is processed and how long it is kept, is governed by the Customer’s agreement with their provider, and data may leave the Customer Tenant to that provider. Where we provide the model service, its provider is named in the Private Offer or Order and acts as our sub-processor under the DPA, on terms that do not allow it to train models on Customer Data. Outputs can contain errors. The Customer remains responsible for decisions it takes and for appropriate human review.

B9. Updates and support

We may update the Platform to add features, fix defects and address security issues. We will not materially reduce the core functionality of the Platform during a paid subscription term. Updates are rolled out to the Managed Resource Group in line with the access mode selected in B7. Support channels, hours and any service levels are those stated in the Plan, Private Offer or Order. If none are stated, we provide commercially reasonable support by email to support@sightpulse.ai during business hours in Central European Time. See our Support page.

B10. Fees and payment

Where the Customer buys through Microsoft Marketplace, Microsoft invoices and collects the fees under the Customer’s Marketplace terms. Microsoft bills an Azure Managed Application monthly for as long as it is deployed. Where a Private Offer or Order sets a minimum term, the Customer remains liable for the fees for that term even if it deletes the deployment early, and we may invoice any remaining amount directly. Where we invoice directly, invoices are payable within 30 days of the invoice date. Fees are exclusive of VAT and other taxes, which are added where applicable. We may suspend Activation after written notice if undisputed amounts remain unpaid for more than 30 days after the due date.

B11. Confidentiality

Each party will keep the other party’s confidential information confidential, use it only to perform or exercise rights under the applicable agreement, and disclose it only to its and its Affiliates’ employees, subcontractors and advisers who need to know it and are bound by equivalent obligations. Customer Data and Outputs are the Customer’s confidential information. The Platform, its Documentation and the commercial terms of any Private Offer are our confidential information. These obligations survive for five years after termination, and indefinitely for trade secrets and Customer Data.

B12. Security and data protection

• We maintain technical and organisational security measures appropriate to the risk, described in the DPA and in the Information Security Policy of CBS Systems d.o.o.
• We notify the Customer of a personal data breach affecting Customer Data without undue delay after becoming aware of it, and within the period set out in the DPA.
• Our sub-processors are listed on our Trust & Data Protection page. We give at least 30 days’ prior notice of new sub-processors, and the Customer may object on reasonable data protection grounds as set out in the DPA.
• Where personal data is accessed from a country without an adequacy decision recognised under Swiss or EU law, including Serbia, we rely on the EU Standard Contractual Clauses, adapted for Swiss law, together with supplementary measures. This also applies to remote access to data held in the Customer Tenant or the EU Processing Environment.
• On request and under confidentiality, we provide a summary of our security controls, our transfer impact assessment summary and completed security questionnaires.

B13. Warranties

We warrant that, after Activation and during the subscription term, the Platform will perform materially in accordance with the Documentation, and that we will not knowingly introduce malicious code. If the Platform does not conform, we will, at our option, correct the non-conformity or, if we cannot do so within a reasonable time, allow the Customer to terminate the affected subscription and refund prepaid fees for the remaining term. This is the Customer’s sole remedy for breach of this warranty. Except as expressly stated, and to the extent permitted by law, the Platform is provided without further warranties, including as to fitness for a particular purpose or the commercial results of decisions based on Outputs.

B14. Intellectual property claims

We will defend the Customer against third-party claims alleging that the Platform, as provided by us, infringes that third party’s intellectual property rights, and pay damages and costs finally awarded or agreed in settlement, provided the Customer notifies us promptly, gives us control of the defence and cooperates reasonably. This does not apply to claims arising from Customer Data, third-party models or services selected by the Customer, combinations with items we did not supply, or modifications we did not make.

B15. Limitation of liability

Each party’s total liability arising out of or in connection with the Platform is limited to the fees paid or payable by the Customer for the Platform in the twelve months before the event giving rise to the claim. Neither party is liable for indirect or consequential loss, lost profit, lost revenue or loss of goodwill. These limitations do not apply to liability for unlawful intent or gross negligence, to the Customer’s payment obligations, to breach of B4, to breach of B11 other than in relation to Customer Data, or to our obligations under B14, and do not limit any liability that cannot be limited under mandatory law.

B16. Term and termination

The subscription runs for the term set out in the Private Offer or Order and renews as stated there. Either party may terminate for material breach that is not cured within 30 days of written notice. On termination the licence ends and the Customer may delete the Managed Application, which deletes the Managed Resource Group and the Platform resources within it. Customer Data held in the Customer’s own source systems is not affected. After termination our personnel do not access the Managed Resource Group, except at the Customer’s request to assist with deletion. We will delete any copies of Customer Data we hold within 30 days of termination, unless law requires us to keep them, and confirm deletion on request.

B17. Subcontractors

We use CBS Systems d.o.o. to develop, operate and support the Platform, and may use other subcontractors. We remain responsible for their performance and bind them to confidentiality, security and data protection obligations at least as protective as those in these Terms and the DPA.

B18. Compliance with law

Each party will comply with export control and sanctions laws applicable to it, including those of Switzerland, the European Union and the United States. The Customer will not use or make the Platform available in breach of those laws.

B19. General

Neither party may assign an agreement under these Terms without the other’s written consent, except to an Affiliate or a successor in a merger or sale of substantially all relevant assets. Neither party is liable for delay caused by events beyond its reasonable control. If a provision is invalid, the rest remains in force and the invalid provision is replaced by a valid one closest to its purpose. Notices must be in writing; email is sufficient for operational notices.

Part C: Demo plan terms

Part C applies in addition to Part B when a Customer uses the SightPulse Demo plan. If Part C conflicts with Part B, Part C applies.

1. Purpose. The Demo plan lets an invited organisation evaluate the Platform in its own Azure subscription. It is available only to the Azure subscriptions we add to the Plan’s audience.
2. Synthetic data only. The Demo plan runs on a synthetic dataset that we provide. The Customer must not load, connect or upload Customer Data, personal data or any third-party data into a Demo deployment.
3. No production use. The Demo plan may be used only for internal evaluation. Outputs from the Demo plan are illustrative and must not be used for business decisions.
4. Duration. The evaluation period is stated in our invitation and is 60 days if no period is stated. We may extend or end it by notice. At the end of the evaluation period the Customer must delete the Demo deployment.
5. Personal data. The DPA applies to the Demo plan only for the account and activity data of Authorised Users.
6. No fee. We charge no fee for the Demo plan. Azure infrastructure consumed by the Demo deployment is billed by Microsoft to the Customer under its Azure agreement.
7. Restrictions. B4 applies in full. In particular, the Customer must not reverse engineer the Platform, copy its models or methods, or use the evaluation to build or benchmark a competing product for third parties.
8. As is. The Demo plan is provided “as is”, without warranties or support commitments. B13 and B14 do not apply. To the extent permitted by law, we exclude liability for the Demo plan, except for unlawful intent or gross negligence.
9. Confidentiality. The Demo deployment, the synthetic dataset and the Documentation are our confidential information under B11.
10. Moving to a paid subscription. A paid subscription starts only with an accepted Private Offer or signed Order. The Demo deployment is not converted; the paid Plan is deployed separately.

Governing law and jurisdiction

These Terms and any agreement under them are governed by the substantive law of Switzerland, excluding its conflict-of-laws rules and the United Nations Convention on Contracts for the International Sale of Goods (CISG). The exclusive place of jurisdiction is the city of Zug, Switzerland. We may also bring claims at the Customer’s registered office.

Changes to these Terms

We may update these Terms. The “Last updated” date shows when they last changed. For active subscriptions, material changes to Part B take effect at the next renewal, or 30 days after we notify the Customer, whichever is later, unless the change is required by law. Changes do not affect a signed agreement or the terms of an accepted Private Offer.

Contact

SightPulse AG
Dammstrasse 19
6300 Zug, Switzerland

Legal and contracts: legal@sightpulse.ai
Sales and private offers: sales@sightpulse.ai
Support: support@sightpulse.ai
Security reports: security@sightpulse.ai
Privacy: privacy@sightpulse.ai
Demo requests: demo@sightpulse.ai