These Terms of Service ("Terms") are a legal agreement between you and Cybentis Oy (Business ID: 3593125-1), a company registered in Finland, doing business as Grain ("we," "us," or "our"). They govern your access to and use of the Grain analytics platform at grainql.com and all related services (the "Services").
By creating an account or using the Services, you agree to these Terms. If you do not agree, do not use the Services.
If you are using the Services on behalf of an organization, you represent that you have authority to bind that organization to these Terms.
Contact: legal@grainql.com
1. The Services#
Grain is a privacy-first web analytics platform. The Services include:
- Website analytics tracking (page views, events, conversions, funnels)
- Heatmaps and session replay
- AI-powered analytics and insights
- Dashboard, reporting, and data export tools
- APIs and integrations
Our primary analytics services are designed to run in the European Union. Some support, billing, communications, security, and AI-related components may involve approved third-party providers in other jurisdictions, as described in our Privacy Policy and DPA.
We may modify, update, or discontinue features of the Services at any time. We will provide reasonable notice of material changes that affect your use of the Services.
2. Account registration#
To use the Services, you must create an account. You agree to:
- Provide accurate and complete registration information
- Keep your account credentials confidential
- Notify us immediately if you suspect unauthorized access to your account
- Be responsible for all activity under your account
You must be at least 18 years old to create an account.
We may suspend or terminate accounts that violate these Terms, remain inactive for an extended period, or are used for fraudulent purposes.
3. Subscriptions and payment#
3.1 Plans and pricing#
The Services are offered under subscription plans as described on our pricing page. We may offer free tiers, trials, or promotional pricing at our discretion.
3.2 Billing#
- Subscriptions are billed in advance on a monthly or annual basis, depending on your selected plan
- All prices are in US dollars unless otherwise stated
- Applicable taxes will be added where required by law
- Payments are processed securely by Stripe
3.3 Renewal and cancellation#
- Subscriptions renew automatically at the end of each billing period
- You may cancel your subscription at any time from your account settings
- Cancellation takes effect at the end of the current billing period — you retain access until then
- We do not provide refunds for partial billing periods, except where required by law
3.4 Price changes#
We may adjust pricing with at least 30 days' notice before the start of your next billing cycle. Continued use of the Services after a price change constitutes acceptance of the new pricing.
3.5 Marketplace and lifetime deal purchases#
If you purchased access to the Services through a third-party marketplace (e.g., AppSumo), the following applies:
- Your purchase is additionally governed by the marketplace's terms and refund policies
- Refund requests should be directed to the marketplace through which you purchased
- Feature scope and usage limits may differ from standard subscription plans as described in the applicable deal terms
- We reserve the right to modify feature allocations for marketplace plans with reasonable notice, provided core functionality is maintained
- These Terms apply to your use of the Services regardless of the purchase channel
4. Your data#
4.1 Ownership#
You retain all rights to the data you submit to or collect through the Services ("Your Data"). We do not claim ownership of Your Data.
4.2 License to us#
You grant us a limited, non-exclusive license to process Your Data solely to provide and improve the Services. This license terminates when you delete Your Data or close your account.
4.3 Data processing#
Our processing of personal data is governed by our Privacy Policy and, where applicable, our Data Processing Addendum. If there is a conflict between these Terms and the DPA regarding data processing, the DPA prevails.
4.4 Data export and portability#
You may request exports of Your Data through the dashboard, available APIs, or our support processes, depending on the type of data involved. We may require reasonable verification before fulfilling an export or deletion request. Data remains subject to our retention and deletion policies, including scheduled deletion jobs and any legally required retention.
4.5 Analytics data responsibility#
You are responsible for your use of the Grain tracking script on your websites. This includes:
- Ensuring you have a lawful basis to collect analytics data from your website visitors
- Providing appropriate privacy disclosures on your website
- Configuring session replay and heatmap features in compliance with applicable privacy laws
- Not using the Services to collect sensitive personal data (e.g., health data, financial account numbers) unless you have a lawful basis and appropriate safeguards
5. Acceptable use#
You agree not to:
- Use the Services to violate any law or regulation
- Attempt to gain unauthorized access to the Services or other users' accounts
- Reverse engineer, decompile, or disassemble any part of the Services
- Use the Services to build a competing product
- Circumvent usage limits, rate limits, or security measures
- Resell or redistribute the Services without our written consent
- Use automated means (bots, scrapers) to access the Services, except through our documented APIs
- Upload malicious code or interfere with the operation of the Services
- Use the Services to track individuals without a lawful basis or in violation of their privacy rights
- Send unsolicited communications using data obtained through the Services
We may suspend or terminate your access if you violate these restrictions.
6. Intellectual property#
6.1 Our IP#
The Services, including all software, designs, documentation, and branding, are owned by Cybentis Oy or its licensors. These Terms do not grant you any rights to our intellectual property except the limited right to use the Services as described here.
6.2 Feedback#
If you provide suggestions, ideas, or feedback about the Services, you grant us a non-exclusive, royalty-free, perpetual license to use that feedback to improve the Services. We are not obligated to implement any feedback.
6.3 Tracking script#
We grant you a non-exclusive, revocable license to install and use the Grain tracking script on your websites solely in connection with the Services. This license terminates when your subscription ends or these Terms are terminated.
7. AI features#
The Services may include AI-powered features such as automated insights, natural-language querying, AI-generated suggestions, digests, findings, and reports (collectively, "AI Features").
7.1 General#
- AI Features are provided for informational purposes and may not always be accurate
- AI Features use third-party inference providers (see our Privacy Policy for the current list). Groq is the primary provider; Google Cloud AI is used for advanced features
- We do not guarantee specific outcomes from AI Features
- You are responsible for reviewing and validating AI-generated outputs before acting on them
- You agree not to use AI Features to generate content that is illegal, harmful, or misleading
7.2 Conversation history#
By default, your AI conversations (messages, tool results, and AI responses) are automatically saved to enable conversation history, digest generation, and continuity across sessions. Conversation data is stored on Supabase (EU region). You can delete individual conversations or your full chat history at any time from your dashboard. You can also disable automatic persistence in your account settings.
7.3 Ownership of AI-generated content#
AI-generated insights, findings, reports, and other outputs derived from Your Data belong to you. We do not claim ownership of AI outputs generated from Your Data. However, AI outputs may not be unique — similar inputs from other customers may produce similar outputs. We make no representation that AI outputs are original or proprietary to you.
7.4 Bring Your Own Key (BYOK)#
You may optionally configure your own API keys for third-party AI providers (e.g., OpenAI, Google, Anthropic). When you use BYOK, your prompts and analytics context are routed through Grain to the provider under your own API key and account. You are responsible for compliance with that provider's terms of service and acceptable use policies. Grain acts as a technical pass-through and is not liable for the third-party provider's processing of your data.
7.5 AI data retention#
AI conversation data is retained for the duration of your account unless you delete it earlier. Upon account termination, AI conversation data is deleted within 90 days, subject to backup rotation. AI inference providers receive data via API only and do not retain your data beyond their published API data retention policies.
8. Service availability#
We aim for high availability but do not guarantee uninterrupted access. We may need to perform maintenance, which we will announce in advance when possible.
We are not liable for service interruptions caused by:
- Scheduled or emergency maintenance
- Events beyond our reasonable control (force majeure)
- Third-party service outages
- Your internet connection or equipment
Our current uptime status is available at our status page.
9. Disclaimer of warranties#
The Services are provided "as is" and "as available." To the maximum extent permitted by law, we disclaim all warranties, express or implied, including implied warranties of merchantability, fitness for a particular purpose, and non-infringement.
We do not warrant that:
- The Services will meet your specific requirements
- The Services will be uninterrupted, timely, or error-free
- Analytics data will be 100% accurate or complete
- AI-generated insights will be correct
10. Limitation of liability#
To the maximum extent permitted by applicable law:
- We are not liable for any indirect, incidental, special, consequential, or punitive damages, including loss of profits, data, or business opportunities
- Our total liability for any claim arising from or related to these Terms or the Services is limited to the amount you paid us in the 12 months preceding the claim
- These limitations apply regardless of the theory of liability (contract, tort, strict liability, or otherwise)
These limitations do not apply to: liability that cannot be excluded by law, including liability for gross negligence or willful misconduct under Finnish law.
11. Indemnification#
You agree to indemnify and hold us harmless from claims, damages, and expenses (including reasonable legal fees) arising from:
- Your violation of these Terms
- Your use of the Services in violation of applicable law
- Your violation of third-party rights
- Data collected through your use of the Grain tracking script
12. Term and termination#
12.1 Term#
These Terms are effective when you create an account and remain in effect until terminated.
12.2 Termination by you#
You may close your account at any time from your account settings or by contacting us. Active subscriptions will continue until the end of the current billing period.
12.3 Termination by us#
We may terminate or suspend your account if:
- You materially breach these Terms
- You fail to pay fees when due
- Your use of the Services poses a security risk
- We are required to do so by law
- We discontinue the Services (with at least 90 days' notice)
12.4 Effect of termination#
Upon termination:
- Your right to use the Services ends immediately (or at the end of your billing period, as applicable)
- We will process any pending verified export or deletion requests in accordance with our Privacy Policy, DPA, and retention procedures
- Your Data will then be deleted or anonymized in accordance with our retention policy and applicable law
- Sections of these Terms that by their nature should survive (e.g., IP, liability, dispute resolution) will remain in effect
13. Dispute resolution#
13.1 Informal resolution#
Before filing a formal claim, you agree to contact us at legal@grainql.com and attempt to resolve the dispute informally for at least 30 days.
13.2 Governing law#
These Terms are governed by the laws of Finland, without regard to conflict of law principles.
13.3 Jurisdiction#
Any disputes that cannot be resolved informally shall be submitted to the exclusive jurisdiction of the courts of Helsinki, Finland.
13.4 EU consumers#
If you are a consumer in the European Union, nothing in these Terms affects your rights under mandatory consumer protection laws of your country of residence. You may also use the EU Online Dispute Resolution platform at ec.europa.eu/odr.
14. General provisions#
14.1 Entire agreement#
These Terms, together with our Privacy Policy, any applicable DPA, SLA, and any marketplace or order form terms, constitute the entire agreement between you and us regarding the Services.
14.2 Assignment#
We may assign these Terms in connection with a merger, acquisition, or sale of assets. You may not assign your rights under these Terms without our written consent.
14.3 Severability#
If any provision of these Terms is found unenforceable, the remaining provisions remain in full effect.
14.4 Waiver#
Our failure to enforce any provision of these Terms does not constitute a waiver of that provision.
14.5 Notices#
We may send notices to the email address associated with your account. You are responsible for keeping your email address current. Notices to us should be sent to legal@grainql.com.
14.6 Force majeure#
We are not liable for failures or delays caused by circumstances beyond our reasonable control, including natural disasters, war, terrorism, pandemics, government actions, or widespread internet or infrastructure failures.
15. Changes to these Terms#
We may update these Terms from time to time. We will notify you of material changes at least 30 days before they take effect, via email or in-app notification.
Continued use of the Services after the effective date constitutes acceptance of the updated Terms. If you do not agree to the changes, you may close your account before they take effect.
16. Contact#
Cybentis Oy (doing business as Grain) Business ID: 3593125-1 PL 157, 00101, Helsinki, Finland Phone: +358 41 725 0110
- Legal inquiries: legal@grainql.com
- General support: support@grainql.com
- Website: grainql.com