Terms of service

These terms apply between Number Studios SL, trading as Nexau (“we” or the “Provider”), and the company or professional that contracts Kanesh (“you” or the “Customer”). Provider details:

• Company: Number Studios SL, trading as Nexau.
• Tax ID (NIF): B-14938864.
• Registered office: C/ Doce de Octubre 1, 2º 2, 14001 Córdoba, España.
• Contact email: info@nexau.es.

Kanesh is provided exclusively to businesses and professionals that contract it for their trade, business or profession. It is not offered to consumers. By contracting, the Customer confirms it acts within that activity, and whoever accepts these terms on its behalf confirms they have authority to do so. If a person who legally qualifies as a consumer nevertheless contracts, the rights that consumer law grants them on a mandatory basis will apply and prevail over any clause of these terms that contradicts them.

These terms are accepted by signing or accepting an Order, or by using the service. Together with the Order and the data processing agreement they form a single contract. If the Order contradicts these terms on a point, the Order prevails on that point; on data protection, the data processing agreement prevails.

• Service or platform: the Kanesh software, accessed online, with the features included in the Customer's plan.
• Order: the proposal, order form or sign-up form accepted by the Customer, setting out the plan, price, onboarding services and any specific terms.
• Users: the people the Customer gives access to its workspace.
• End customers: the people the Customer talks to through the service.
• Customer Content: the data, messages, knowledge, templates, rules and other content that the Customer or its end customers enter into or generate in the service.
• Conversation: a thread with one contact, on any channel, opened by an inbound message or a reply to a campaign. It stays one conversation until 24 hours pass without activity, and counts once whether the AI, a person or both handle it. Filtered spam, system messages and campaign sends nobody replied to don't count.
• Channel consumption: what third parties charge for using a channel, such as Meta's fees for WhatsApp messages or a telecom operator's voice minutes.
• Prepaid balance: the amount the Customer tops up in advance to pay for channel consumption.

Kanesh is customer conversation software for e-commerce brands: a shared inbox for the channels the Customer connects, an AI agent that answers from its knowledge and store data, campaigns and flows, and analytics. The features available are those of the contracted plan, as set out in the Order.

We improve the service continuously, so its features may change. We will not materially reduce the core features of the Customer's plan during the contracted period without notifying it in advance.

Some channels depend on third parties and on the country: for example, the availability of phone numbers or Meta's approvals for WhatsApp and Instagram. Features we present as beta or trial are provided as they are, may change or be withdrawn, and are not covered by the commitments in these terms.

We set up the Customer's workspace during onboarding. The Customer appoints at least one administrator, invites its Users and assigns each one a role. The number of Users included depends on the plan.

The Customer is responsible for its Users complying with these terms, for keeping their credentials secret and for everything done with them. It must tell us without delay if it suspects unauthorised access. Registration details must be accurate and kept up to date.

Plans, their prices and the conversations included are those published on the pricing page or set out in the Order. Prices exclude VAT and other applicable taxes, which are added to the invoice.

• Billing period: annual or monthly, as set out in the Order. Monthly billing without an annual commitment has a higher price, shown on the pricing page. Unless the Order says otherwise, fees are invoiced in advance at the start of each period.
• Extra conversations: if the included conversations are exceeded, each extra conversation is charged at the plan's rate or the rate in the Order. If the Customer moves up a plan within the same billing cycle, that excess is not charged.
• Soft limits: we alert the Customer at 80% and 100% of its included conversations. Reaching the limit does not switch off the AI or cut off the service.
• Channel consumption: is not part of the plan. It is paid from the prepaid balance and passed through at cost, plus any surcharge stated in the Order (for example, on WhatsApp marketing templates). Balance top-ups are invoiced with applicable taxes. If the balance doesn't cover a charge, we may hold the sends or calls that need it until the balance is topped up.
• Onboarding and success services: guided onboarding, the success service and any other professional services are provided and invoiced as set out in the Order.

Invoices are paid by the means and within the terms set out in the Order. If a payment is late, we may claim the late-payment interest provided in Spain's Law 3/2004 and, after giving the Customer at least 15 days' notice, suspend the service until it is paid.

We may change prices for subsequent periods by notifying the Customer at least 30 days before renewal. Changes don't affect the current period already paid. Channel consumption follows each third party's rates as they stand at any time.

The Customer agrees to:

• comply with the terms and policies of the channels it connects, in particular the WhatsApp Business and Meta commerce policies, and those of Instagram, Messenger and its email provider;
• have a valid legal basis for processing its end customers' data and, where the law requires it, their prior consent, in particular to send commercial or marketing communications (article 21 of Spain's LSSI-CE and equivalent rules in the destination country) and to message on WhatsApp anyone who hasn't opted in;
• inform its end customers about the processing of their data and, if it enables voice, about call recording where applicable, and keep evidence of consents;
• ensure that Customer Content is lawful, that it has the right to use it, and that its information about products, prices and policies is correct and up to date;
• comply with the laws that apply to its business, including data protection, e-commerce, consumer and artificial intelligence rules.

The Customer is the controller of its end customers' data, and we process that data on its behalf under the data processing agreement.

Kanesh may not be used to:

• send spam or unsolicited bulk messages;
• impersonate anyone or mislead recipients about who is sending the message;
• distribute malware, unlawful content, non-consensual sexual content or hate speech;
• breach the policies of Meta or any other connected channel, including using the AI agent as a general-purpose chatbot not tied to a specific business, which Meta prohibits;
• process special categories of personal data, except where essential, lawful and the Customer has put the necessary safeguards in place;
• decompile or reverse engineer the service, resell or give access to third parties, send mass automated requests outside the API, or try to bypass its limits or security.

If a use breaches this clause or puts the service, other customers or third parties at risk, we may suspend the affected access. We will notify the Customer first unless urgency or the law prevents it, and restore access once the issue is resolved.

The AI agent drafts replies from the knowledge, rules and store data the Customer connects and configures. How it works is explained on How our AI works.

• AI-generated replies may be inaccurate or incomplete. We apply controls to reduce that risk, but we don't guarantee that every reply is correct.
• The Customer decides whether to use the AI, on which channels and with which rules, and configures when a conversation is handed to a person. Its team can step into any conversation.
• Messages sent from Kanesh, whether written by a person or by the AI, are sent in the Customer's name, and the Customer is responsible for them towards its end customers and third parties.
• The Customer must review the AI's configuration, knowledge and results with the care appropriate to its business, especially on sensitive topics such as prices, promotions or return policies.

Kanesh connects to services the Customer chooses, such as Meta (WhatsApp, Instagram and Messenger), Shopify, Klaviyo, its email provider and telecom operators. Use of those services is governed by their own terms, which the Customer accepts with them, and their fees are the Customer's responsibility.

We are not responsible for those third parties' availability, policy changes, approval or blocking decisions (for example on templates, numbers or accounts) or fees. If a third-party change limits a feature, we will do what is reasonable to offer an alternative or adapt the service.

The service, its software, design and documentation, and the Kanesh and Nexau names and logos belong to Number Studios SL or its licensors. While the contract is in force, we grant the Customer a non-exclusive, non-transferable right to use the service for its business, under these terms and the Order.

Customer Content belongs to the Customer. The Customer authorises us to process it only as needed to provide, maintain and support the service, under these terms and the data processing agreement.

We may use aggregated, anonymised data about the use of the service, which doesn't identify the Customer or any person, to maintain and improve it. If the Customer gives us suggestions, we may use them freely, with no obligation to compensate.

Each party will keep secret the non-public information it receives from the other, use it only to perform the contract and protect it with at least the care it uses for its own. Information is not confidential if it was already public, was already lawfully known to the receiving party, or must be disclosed by law or at the request of an authority, in which case the other party will be told if the law allows.

This obligation lasts for the term of the contract and for three years after it ends.

For end customers' data, the Customer is the controller and Number Studios SL is the processor. The data processing agreement is part of these terms, and the list of providers is on the sub-processors page.

We process Users' and billing data as controller, as described in the privacy policy.

We make reasonable efforts to keep the service available and working properly, but we don't guarantee any specific availability percentage or that it will run without interruptions or errors. There may be downtime for maintenance, which we try to schedule at low-usage times, and because of third-party failures.

Support is provided through the channels and on the terms set out in the Order.

Except as these terms expressly state, and to the extent permitted by law, the service is provided as is, without other warranties.

Indirect damages. Neither party is liable to the other for indirect or consequential damages, such as loss of profit, revenue, business, customers or reputation, or for loss or corruption of data, except where that loss results from the Provider's breach of its security obligations under the data processing agreement.

Cap. The Provider's total liability arising from the contract, on any basis (contract, tort or otherwise), is limited to the total amount the Customer paid the Provider under the contract in the twelve months before the event giving rise to it, excluding channel consumption passed through at cost.

Exceptions. The cap and the exclusion of indirect damages do not apply:

• in cases of wilful misconduct (dolo) or gross negligence, liability for which cannot be excluded or limited (articles 1102 and 1103 of the Spanish Civil Code);
• to breaches of the data processing agreement or of data protection obligations, which are governed by that agreement's own liability regime;
• to the Customer's payment obligations, including fees, channel consumption and late-payment interest;
• to the Customer's obligation to hold the Provider harmless under this clause;
• to any liability that cannot be limited or excluded under applicable law.

Customer indemnity. The Customer will hold the Provider harmless from third-party claims, including by authorities and by the channels themselves, caused by Customer Content, by messages sent in its name or by its breach of its obligations under these terms. The Provider will notify it of the claim without delay and reasonably cooperate in its defence.

Each party must take reasonable steps to mitigate the damage it suffers.

The contract runs for the period set out in the Order, annual or monthly, and renews automatically for equal periods unless one party tells the other, before the current period ends, that it doesn't wish to renew.

Either party may terminate the contract if the other seriously breaches its obligations and doesn't remedy the breach within 30 days of written notice, or if it enters insolvency or liquidation proceedings.

When the contract ends, the right to use the service ends and amounts accrued up to that date are due. Prepaid fees are not refunded, unless the contract is terminated for our breach, because the Customer doesn't accept a significant change to these terms, or because it objects to a sub-processor and no solution is found; in those cases we will refund the pro-rata part for the unused period. Any unused prepaid balance for channel consumption will be settled as set out in the Order.

Before the contract ends, the Customer can ask us for a copy of its Customer Content in a structured, commonly used format.

After cancellation, we delete the Customer's data within 90 days, except what the law requires us to keep (for example, billing records), which is kept blocked only for the legal period.

We may amend these terms. If the change is significant, we will notify the Customer's administrator by email or in the platform at least 30 days before it applies. If the Customer doesn't agree, it may terminate the contract before that date without penalty, with a pro-rata refund of prepaid fees. Changes required by law or by a third party a channel depends on may apply sooner.

These terms, the Order and the data processing agreement are governed by Spanish law.

Because the service is contracted only between businesses and professionals, for any dispute arising from the contract the parties expressly submit to the courts of the city of Córdoba, where the Provider has its registered office, waiving any other jurisdiction that might apply.

If the Customer were a consumer, this submission will not apply to it: it may go to the courts that the law assigns to it and keeps the mandatory protections of its country of residence that apply to it.

• If a clause is void, the rest remains in force and the clause is replaced by a valid one as close as possible to it.
• Not enforcing a right at a given time doesn't waive it.
• Neither party may assign the contract without the other's consent, except to a company in its group or to a successor to its business, with written notice.
• Neither party is liable for delays or failures caused by force majeure.
• Notices are given by email: to the Provider at info@nexau.es; to the Customer at its administrator's email.
• These terms are written in Spanish, which is the version that prevails. The English version is a courtesy translation.