These Terms of Service (“Terms”) are the agreement between the Operator of Betty and the individual or entity accessing the service (“the Customer”, “you”). By creating an account, accepting an invitation, or using the service, the Customer accepts these Terms. A Customer who does not accept them must not use the service.
The Privacy Policy and the Data Processing Addendum form part of these Terms and are incorporated into them by reference. If the Customer processes personal data of third parties in Betty, the Data Processing Addendum applies without a separate signature.
1. Who provides the service
1.1. Betty is operated by the entity identified at the top of this document, under the heading “Identification of the Operator” (“the Operator”, “we”, “us”), a company in the process of incorporation. That identification — the Operator’s name, its general contact address, its address for privacy matters, and the address of the CRM source code — forms part of these Terms.
1.2. While incorporation is in progress, the Operator acts through its promoters, who are answerable for compliance with these Terms under the law governing companies in formation at the place of incorporation.
1.3. Once the company is registered, its full name, legal form, registered office, and registration number will be those recorded in the commercial or companies register in which it is entered. Those particulars will be incorporated into these Terms from the date of registration and published on this page. The Customer may request them at any time by writing to the general contact address.
1.4. Any communication sent to the general contact address shown in that identification is effective against the Operator. For privacy and data processing matters, the applicable address is the privacy address shown in the same identification.
2. Definitions
- Service: the Betty CRM accessible over the web, the MCP connector that allows Betty to be used from an artificial intelligence client, the public betty.management site, and the associated transactional emails.
- Customer Data: the information the Customer and its Authorised Users enter, upload, or generate in the Service, including records of people, companies, opportunities, notes, tasks, and attachments.
- Authorised User: a person to whom the Customer grants access to its workspace.
- Workspace: the isolated environment within the Service in which Customer Data resides.
- MCP connector: the interface based on the Model Context Protocol through which an artificial intelligence client, with OAuth authorisation granted by the Customer, can query the Workspace and propose changes to it.
- Customer’s AI Provider: the third party that provides the Customer with the artificial intelligence service from which it uses the MCP connector, for example OpenAI or Anthropic.
- Data Processing Addendum: the agreement published at
/en/dpa, which governs the processing of personal data contained in Customer Data.
3. Who may use the service
3.1. The Service is intended for professionals, sole traders, and businesses, for purposes related to their activity. It is not intended for minors; no account may be created on behalf of a minor, and data about minors must not be entered into the Service.
3.2. Anyone accepting these Terms on behalf of an entity represents that they have authority to bind it. In that case, “the Customer” means the entity.
3.3. If the Customer uses the Service for purposes outside its trade, business, or profession, it is a consumer, and clause 20 applies together with the mandatory consumer protection rules of its place of habitual residence. No provision of these Terms excludes or limits those rules.
4. What the service is, and what it is not
4.1. Betty is a business relationship assistant. It keeps a record of people, companies, conversations, and opportunities, retrieves the context of what has been recorded, and proposes next steps.
4.2. Betty proposes; the Customer decides. Actions with external effect — sending a message, for example — require confirmation by the Customer or an Authorised User. The Service does not carry out actions affecting third parties on its own initiative.
4.3. What Betty can recall depends on what the Customer records and on the sources the Customer connects and authorises. Without authorised sources, Betty does not consult them.
4.4. Betty’s answers are generated from Customer Data and may be incomplete or incorrect. The Customer must not treat them as legal, tax, financial, medical, or any other professional advice, and must verify the information before making decisions based on it.
4.5. The Service does not take automated decisions that produce legal effects concerning a person or similarly significantly affect them.
5. Free beta, invitations, and paid plans
5.1. On the effective date of these Terms, the Service is provided as a beta, free of charge, and by invitation of the Operator only. The Operator decides whom to invite and may withdraw an unused invitation.
5.2. The beta may include features that are incomplete or subject to change. No service level commitment is offered during the beta.
5.3. The Operator intends to offer paid plans. No use of the Service creates a payment obligation for the Customer unless the price and conditions have first been communicated to it and expressly accepted by it. A Customer who does not accept a paid plan may continue using the Service on the free terms then available, or terminate its account and export its data under clause 13.
5.4. The Operator may end the beta on thirty (30) calendar days’ notice by email to the account address. The Customer will retain the ability to export its Customer Data during that period and for thirty (30) days thereafter.
6. Accounts and security
6.1. Using the Service requires an account with a name, an email address, and a password. The password is stored using a cryptographic hash function; the Operator does not know it and cannot recover it.
6.2. The Customer is responsible for the confidentiality of its account credentials and those of its Authorised Users, for the roles and permissions it assigns them, and for the activity carried out from them.
6.3. The Customer must notify us without delay of any unauthorised use of an account in its Workspace of which it becomes aware.
6.4. The Customer is responsible for ensuring that the Authorised Users it invites comply with these Terms.
7. Acceptable use
The Customer undertakes not to use the Service, and not to allow it to be used, to:
- enter, store, or disseminate unlawful content, or content that infringes third-party rights, including intellectual property, image, and data protection rights;
- send unsolicited commercial communications in breach of applicable electronic commerce or data protection rules, or build contact lists obtained by mass extraction of third-party data without a legal basis;
- attempt to access other customers’ workspaces, accounts, or data, or circumvent the Service’s access controls, usage limits, or security measures;
- subject the Service to penetration testing, vulnerability scanning, reverse engineering of the infrastructure, or automated loads that degrade its operation, except with the Operator’s prior written authorisation;
- introduce malicious code or files capable of harming the Service or its users;
- use the Service to make decisions about people in areas requiring specific safeguards, such as the granting of credit, employment, education, healthcare, insurance, or access to essential services;
- enter into the Service special categories of personal data — health, ethnic origin, political opinions, religious beliefs, trade union membership, sex life or sexual orientation, genetic or biometric data — or data relating to criminal convictions and offences, unless the Customer has a valid legal basis and the additional safeguards required by the rules applicable to it;
- resell, sublicense, or provide the Service as its own service to third parties without a written agreement with the Operator.
The Operator does not generally monitor Customer Data and has no obligation to do so.
8. The Customer’s responsibility for its data
8.1. The Customer decides what information it enters into the Service and for what purpose. In respect of personal data contained in Customer Data, the Customer acts as controller and the Operator as processor, on the terms of the Data Processing Addendum.
8.2. It is the Customer’s responsibility to have a valid legal basis for that processing, to inform data subjects where required, to handle their rights, to keep the data accurate and up to date, and to comply with any registration, notification, or impact assessment obligation imposed on it by the rules applicable to it.
8.3. The Customer must keep its own copies of information critical to its activity. The Operator’s backup measures described in the Data Processing Addendum protect the continuity of the Service; they do not replace the Customer’s own backups.
9. Ownership of data and licence to operate
9.1. Customer Data belongs to the Customer. These Terms transfer no ownership of it to the Operator.
9.2. The Customer grants the Operator a non-exclusive, worldwide, royalty-free, limited, and revocable licence to host, copy, transmit, store, index, display, and process Customer Data for the sole purpose of providing, maintaining, and protecting the Service and of carrying out the Customer’s instructions, including delivering data to the artificial intelligence client the Customer has authorised by OAuth. The licence extends to the subprocessors listed in the Data Processing Addendum, to the same extent.
9.3. The licence ends when Customer Data is deleted under clause 13 and the Data Processing Addendum.
9.4. The Operator does not use Customer Data to train its own or third-party artificial intelligence models, does not use it for advertising, does not sell it, and does not transfer it to third parties for their own use. The only exceptions are disclosures required by a legal obligation or by a decision of a competent authority, in which case the Operator will inform the Customer unless the law prohibits it.
9.5. The Customer may send us suggestions about the Service. The Operator may use them without restriction and without consideration; suggestions must not contain the Customer’s confidential information or third-party personal data.
10. The Customer’s AI providers and the MCP connector
10.1. The MCP connector allows the Customer to use Betty from its own artificial intelligence client. The connection is activated only when the Customer expressly authorises it by OAuth, choosing the scope of access.
10.2. The relationship between the Customer and its AI Provider is direct and separate from the Operator. That provider supplies its service to the Customer under its own terms and its own privacy policy, which the Customer must review. The Operator is not a party to that contract, does not control how the provider processes the information it receives or how long it retains it, and is not answerable for its operation, pricing, availability, or changes.
10.3. The Operator does not send Workspace data to an AI Provider on its own initiative. Data leaves for the Customer’s artificial intelligence client when the Customer, or an Authorised User, submits a query through a connection the Customer has authorised.
10.4. That authorisation constitutes a documented instruction from the Customer for the purposes of the Data Processing Addendum. The Customer is responsible for ensuring that the disclosure is lawful under the rules applicable to it, including, where relevant, the international transfer mechanism in its relationship with the provider.
10.5. The Customer may revoke the OAuth authorisation at any time from its account. Revocation prevents further access; it does not reach information the provider has already received and retained under its own terms.
11. Intellectual property and open source components
11.1. The Service, its interface, the “Betty” brand, the “betty.” wordmark, the betty.management domain, and the graphic and typographic elements of the identity belong to the Operator or its licensors. These Terms grant the Customer no rights over them beyond using the Service as agreed.
11.2. The Service is built on the open source CRM Twenty. Twenty’s code is distributed principally under the GNU Affero General Public License version 3 (AGPL-3.0), with an additional permission granted under section 7 of that licence, and with certain files and packages subject to the MIT licence or to a commercial licence, as stated in the project’s own licence file.
11.3. In compliance with section 13 of the AGPL-3.0, the corresponding source code of the version of the CRM deployed in the Service is publicly available at the source code address shown in the identification of the Operator at the top of this document. The open source licences covering those components prevail over these Terms in everything that concerns them.
11.4. Customer Data is not part of that code and is never published in the repository.
12. Availability, maintenance, and changes to the service
12.1. The Operator endeavours to keep the Service continuously available but does not guarantee uninterrupted or error-free availability.
12.2. The Operator may carry out maintenance. Scheduled maintenance likely to affect use of the Service will be announced with reasonable notice by email or within the Service. Urgent maintenance, for security or integrity reasons, may be carried out without notice.
12.3. The Operator may modify, add, or withdraw features. If a change substantially and unfavourably reduces features the Customer has been using, it will be notified on thirty (30) calendar days’ notice and the Customer may terminate its account free of charge before the change takes effect, with the right to export its data.
13. Suspension, termination, and data exit
13.1. The Customer may terminate its account at any time, without penalty, from within the Service or by writing to the general contact address.
13.2. The Operator may suspend access, in whole or in part, where necessary and proportionate to: (a) prevent imminent harm to the security or integrity of the Service or of other customers; (b) comply with a legal obligation or a decision of a competent authority; or (c) respond to a serious breach of clauses 7 or 8. Unless urgency or a legal rule prevents it, the Operator will give notice before suspending, state its reasons, and explain how to remedy the cause.
13.3. The Operator may terminate the agreement on thirty (30) calendar days’ notice if the Customer fails to remedy a serious breach within fifteen (15) days of a reasoned request, or with immediate effect if the use of the Service is manifestly unlawful.
13.4. Export. During the term of the agreement and for thirty (30) calendar days after its termination, the Customer may export its Customer Data in a structured, commonly used format. If access is suspended, the Operator will enable the export on the Customer’s request within that period.
13.5. Deletion. Thirty (30) calendar days after termination, the Operator deletes Customer Data from active systems. Backups containing it are overwritten in the ordinary retention cycle, which does not exceed ninety (90) calendar days from termination. Information the Operator must retain by legal obligation is excepted, limited to that purpose and for the period required.
13.6. On termination, the licences granted in clause 9.2 end once deletion is complete, and clauses 9.1, 14, 16, 17, 20, and 21 survive.
14. Confidentiality
14.1. Each party will treat the other’s non-public information to which it gains access through the Service as confidential, use it only to perform these Terms, and protect it with no less care than it applies to its own confidential information.
14.2. Information is not confidential if it is or becomes public without breach, if the receiving party already lawfully knew it or develops it independently, or if it receives it from a third party under no duty of confidence.
14.3. If a legal rule or a competent authority requires disclosure of confidential information, the party under the obligation will notify the other beforehand where the law permits, and will disclose only what is required.
14.4. This duty continues for three (3) years after termination and, in respect of Customer Data, for as long as it remains confidential.
15. Warranties
15.1. The Operator undertakes to provide the Service with the professional diligence required and in accordance with the published description, and to maintain the security measures described in the Data Processing Addendum.
15.2. Beyond the foregoing, and to the extent applicable law permits, the Service is provided “as is” and the Operator gives no other warranties, express or implied, as to fitness for a particular purpose, freedom from error, accuracy of the results generated by Betty, or continuity of the Service.
15.3. Mandatory limit. Clause 15.2 does not apply to Customers who are consumers and, generally, does not exclude or limit statutory guarantees or conformity rights that the Customer has on a mandatory basis — among others, those arising from Directive (EU) 2019/770 on contracts for the supply of digital content and digital services and its national implementation in the European Union and the European Economic Area, and those under the consumer protection rules of Latin American countries and of the United States that apply.
16. Limitation of liability
16.1. The Operator’s total liability to the Customer for all claims arising from these Terms will not exceed the greater of: (a) the amounts actually paid by the Customer to the Operator for the Service in the twelve (12) months before the event giving rise to the claim; or (b) five hundred euros (EUR 500). While the Service is provided free of charge, paragraph (b) applies.
16.2. The Operator is not liable for loss of profit, loss of business opportunity, reputational harm, or indirect or consequential loss, nor for loss or alteration of data that the Operator could not have prevented with the measures described in the Data Processing Addendum.
16.3. What is not limited. Clauses 16.1 and 16.2 do not apply, and do not limit the Operator’s liability, in cases of: wilful misconduct or gross negligence; harm to life, bodily integrity, or health; infringement of the Customer’s rights as a consumer where the mandatory rules of its habitual residence do not permit limitation; liability for damage arising from breach of Regulation (EU) 2016/679 or of equivalent applicable data protection law; or any other case in which applicable law prohibits limitation.
16.4. The Operator is not liable for the acts or omissions of the Customer’s AI Providers or of other third parties engaged by the Customer.
16.5. Claims must be brought within the limitation period set by applicable law.
17. Indemnity
17.1. The Customer will hold the Operator harmless against third-party claims, including those of data subjects and data protection authorities, and against the resulting damages, penalties, and reasonable defence costs, where they arise from: (a) the content of Customer Data or the absence of a legal basis for processing it; (b) use of the Service in breach of clauses 7 or 8; or (c) the Customer’s instructions, where the Operator had warned of their possible unlawfulness and the Customer confirmed them.
17.2. The Operator will notify the Customer of the claim without delay, allow it to lead the defence where the law permits, and cooperate reasonably at the Customer’s cost. The Operator will not settle without the Customer’s consent.
17.3. This indemnity does not apply to the extent the loss results from the Operator’s own breach, and does not apply to Customers who are consumers beyond what the mandatory rules of their habitual residence permit.
18. Notices about content and point of contact
18.1. Anyone who considers that content hosted in the Service is unlawful may notify the general contact address, stating as precisely as possible the location of the content, the reasons for the notice, and their contact details.
18.2. The Operator will acknowledge receipt, examine the notice diligently, in a non-arbitrary and objective manner, and communicate its decision and the available means of redress to the notifying party and, where appropriate, to the Customer concerned. This clause addresses the notice and action mechanism provided for in Regulation (EU) 2022/2065 (Digital Services Act) to the extent it applies to the Service.
18.3. The same address is the single point of contact for communications from competent authorities and from recipients of the Service.
19. Changes to these Terms
19.1. The Operator may amend these Terms for objective reasons: changes in the Service, in prices under clause 5.3, in applicable law, or in the Operator’s organisation.
19.2. Amendments will be communicated on thirty (30) calendar days’ notice by email to the account address and by notice within the Service, stating what changes and from when. The previous version will remain accessible.
19.3. A Customer who does not accept an amendment may terminate its account free of charge before the effective date, with the right to export its data under clause 13.4. Using the Service after that date constitutes acceptance of the new version.
19.4. Amendments required by a rule of immediate application or necessary to correct a security risk may take effect without that notice period; in that case they will be communicated as soon as possible.
20. Governing law and disputes
20.1. Prior complaint. Before starting proceedings, the Customer may write to the general contact address. The Operator will reply within thirty (30) calendar days at the latest. This step is voluntary and does not prevent or delay the exercise of any action.
20.2. General rule. These Terms are governed by the law of the place of the Operator’s registered office as recorded in its commercial or companies register, and the courts of that place have non-exclusive jurisdiction.
20.3. Until registration is public. Until the Operator’s registration is public and has been published under clause 1.3, the Customer may in any event bring proceedings before the courts of its own domicile, and the Operator may sue the Customer only before the courts of the Customer’s domicile. The rule in clause 20.2 will not be relied on against the Customer in respect of events before that publication.
20.4. Consumers in the European Union and the European Economic Area. Clause 20.2 does not deprive a consumer of the protection of the mandatory rules of their country of habitual residence, under Article 6 of Regulation (EC) 593/2008 (Rome I). Under Articles 17 to 19 of Regulation (EU) 1215/2012 (Brussels I bis), a consumer may sue in the courts of their own domicile or in those of the Operator’s domicile, and may be sued only in the courts of their own domicile.
20.5. Alternative dispute resolution. The Operator is not a member of any alternative dispute resolution body. A consumer resident in the European Union or the European Economic Area may approach the competent alternative dispute resolution entity in their country under Directive 2013/11/EU, and may go to court in any event. The European online dispute resolution platform ceased to operate on 20 July 2025 under Regulation (EU) 2024/3228.
20.6. United Kingdom. A consumer resident in the United Kingdom retains the mandatory rights granted by UK consumer protection legislation and may bring proceedings before the courts of their domicile.
20.7. United States. A Customer resident in the United States may bring proceedings before the courts with jurisdiction over its place of residence or establishment. These Terms impose no mandatory arbitration and no waiver of participation in class actions, and do not limit rights granted to the Customer on a mandatory basis by federal or state law.
20.8. Latin America. A consumer resident in Colombia, Mexico, Brazil, Argentina, Chile, Peru, or another country in the region fully retains the rights, time limits, and fora granted to them on a mandatory basis by their consumer protection and personal data protection rules, including the Colombian Consumer Statute (Ley 1480 de 2011), the Mexican Federal Consumer Protection Law, the Brazilian Consumer Defence Code (Lei 8.078/1990), the Argentine Consumer Protection Law (Ley 24.240) and Articles 1092 to 1122 of the Civil and Commercial Code, Chilean Ley 19.496, and the Peruvian Consumer Protection and Defence Code (Ley 29571). No provision of these Terms will be construed as a waiver of those rights, including the ability to complain to the consumer protection authority of their country.
20.9. The United Nations Convention on Contracts for the International Sale of Goods does not apply.
21. General provisions
21.1. Assignment. The Customer may not assign its contractual position without the Operator’s written consent. The Operator may assign it to the company resulting from its incorporation or to a successor in its business, on thirty (30) calendar days’ notice to the Customer; the Customer may terminate its account free of charge before the assignment takes effect.
21.2. Subcontracting. The Operator may use suppliers to provide the Service and is answerable for their conduct on the terms of these Terms and of the Data Processing Addendum.
21.3. Entire agreement and precedence. These Terms, together with the Privacy Policy and the Data Processing Addendum, constitute the entire agreement between the parties regarding the Service. In the event of conflict concerning the processing of personal data, the Data Processing Addendum prevails; otherwise, these Terms prevail. This clause does not limit liability for statements made fraudulently.
21.4. Severability. If a provision is void or unenforceable, the remainder stays in force and the affected provision will be construed in the way closest to its purpose that the law permits.
21.5. Waiver. Tolerating a breach does not waive the right to enforce it later.
21.6. Force majeure. Neither party is liable for failure to perform caused by events beyond its reasonable control, provided it gives notice without delay and takes reasonable steps to limit the effects. This clause does not excuse payment obligations already due or obligations concerning data protection.
21.7. Notices. Notices to the Customer are sent to the email address of its account and are deemed received on the business day after dispatch. Notices to the Operator are sent to the general contact address.
21.8. Language. These Terms are published in Spanish and English. Each version is authentic in its own language. In the event of discrepancy, the Spanish version prevails, except where a mandatory consumer protection rule requires the version in the language in which the Customer contracted to prevail.
21.9. Relationship of the parties. These Terms create no partnership, agency, franchise, or employment relationship between the parties.
22. Contact
The Operator’s name, its general contact address, its address for privacy matters, and the address of the CRM source code are shown in the identification of the Operator at the top of this document, and repeated at the end for convenience.
For questions about these Terms, about the beta, or about terminating an account, write to the general contact address. To exercise privacy rights and for matters relating to the Data Processing Addendum, write to the privacy address.