Terms and Conditions of the InvoiceOcean MCP Service
These Terms and Conditions (the “Terms”) set out the rules for using the InvoiceOcean MCP Service, which enables the Client’s Account on the Website to be connected to an AI Assistant chosen by the Client (effective from 7 August 2026).
§ 1 DEFINITIONS
- The terms used in these Terms shall have the following meanings:
- AI Assistant – an artificial intelligence model (a large language model, LLM) or a program based on such a model, supplied by the LLM Provider, with which the Client may connect their Account via the MCP Service. Reference on the Website or in the Knowledge Base to the names of specific AI Assistants is for information purposes only and does not indicate any affiliation of the Service Provider with their providers, nor any recommendation or assurance of compatibility or availability;
- Authorization – the authorization granted by the Account Owner, in the manner described in § 3 of these Terms, entitling the indicated AI Assistant to read Data via the MCP server. The Authorization constitutes the Client’s instruction as to the manner of using the Website and, to the extent that the Data includes Personal Data entrusted to the Service Provider by the Client, a documented instruction of the controller within the meaning of Article 28(3)(a) GDPR;
- Knowledge Base – the collection of help articles concerning the Website and the services provided through it, published at: https://help.invoiceocean.com;
- Data – information gathered in the Client’s Account which may be read and made available to the AI Assistant via the MCP Service, including the information referred to in § 5.2 of these Terms. Data may include Personal Data, confidential information, and information constituting a trade secret of the Client or a third party;
- Personal Data – personal data within the meaning of Article 4(1) GDPR forming part of the Data, in particular data of the Client’s contacts who are natural persons and data of natural persons referred to in the content of documents gathered in the Account;
- LLM Provider – a third party supplying the AI Assistant and providing related services under separate terms, conditions or agreements binding it directly with the Client. The LLM Provider does not act on behalf of the Service Provider and is not an entity to which the Service Provider entrusts or sub-entrusts the processing of Personal Data;
- Client – the entity that has concluded the Agreement with the Service Provider within the meaning of the Terms and Conditions;
- MCP – Model Context Protocol – an open communication standard enabling AI Assistants to connect with external data sources and tools;
- Terms – these Terms and Conditions of the InvoiceOcean MCP Service, constituting Additional Terms and Conditions within the meaning of the Terms and Conditions;
- Data Processing Terms – the Personal Data Processing Terms and Conditions, available at: https://invoiceocean.com/data-processing;
- Terms and Conditions – the Terms and Conditions of InvoiceOcean.com available at: https://invoiceocean.com/terms-of-service;
- GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation);
- Agreement – the agreement for the provision of services by electronic means concluded between the Client and the Service Provider under the terms set out in the Terms and Conditions;
- MCP Service or Service – the functionality of the Website provided to the Client under the Agreement, on the terms set out in these Terms, consisting of making an MCP server available, enabling the Account to be connected with the chosen AI Assistant and the reading of Data by that AI Assistant;
- Service Provider – Fakturownia sp. z o. o. with its registered office in Warsaw, Poland, ul. Juliana Smulikowskiego 6/8, 00-389 Warsaw, entered in the register of entrepreneurs kept by the District Court for the capital city of Warsaw in Warsaw, XII Commercial Division of the National Court Register, under KRS no.: 0000572426, NIP (Tax ID): 5213704420, REGON: 362333847, share capital: PLN 110,000, being the owner and administrator of the Website and the operator of the MCP Service. Contact with the Service Provider is possible at the e-mail address: info@invoiceocean.com;
- Account Owner – the User to whom the role of Account owner has been assigned on the Website;
- u.ś.u.d.e. – the Polish Act of 18 July 2002 on the provision of services by electronic means (Journal of Laws of the Republic of Poland 2020.344, as amended).
- Capitalised terms not defined in point 1 above (in particular: Account, Subscription, User, Role, Website, Additional Terms and Conditions, Consumer, Subscription Plan, Price List, Technical Interruption) shall have the meaning assigned to them in the Terms and Conditions.
- These Terms supplement the Terms and Conditions with respect to the MCP Service. In the event of any discrepancy between these Terms and the Terms and Conditions on matters relating to the MCP Service, the provisions of these Terms shall prevail, unless the Terms and Conditions grant the Client broader rights.
§ 2 GENERAL PROVISIONS
- These Terms set out the terms and rules for the use of the MCP Service, which enables the Client to connect the Account with the chosen AI Assistant and to obtain, through it, information based on Data (e.g. on invoices, contacts and settlements), without the need to log in to the Website’s panel.
- These Terms are the terms and conditions referred to in Article 8(1)(1) of the u.ś.u.d.e. and constitute Additional Terms and Conditions within the meaning of the Terms and Conditions. The provisions of these Terms set out, in particular, the method of activating the MCP Service, the conditions for using the Service, the rules for transferring Data to the chosen AI Assistant, the rights and obligations of the Client and the Service Provider, the rules of liability related to the use of the MCP Service, the rules for terminating the use of the Service, and information of a technical and organisational nature.
- The Service Provider shall make these Terms available free of charge, prior to the start of use of the MCP Service, via the Website, in a manner enabling their content to be reproduced and recorded by means of the ICT system used by the Client. Upon the Client’s request, the Service Provider shall provide the Client with the Terms in their current wording by e-mail to the contact address indicated by the Client.
- Clients may access these Terms at any time via the Website and may download and print them.
- Use of the MCP Service is voluntary. Before performing an Authorization, the Client is obliged to familiarise themselves with these Terms. Performing an Authorization constitutes acceptance of the content of these Terms and an undertaking to comply with them. Not using the MCP Service does not affect the scope of the other services provided by the Service Provider under the Agreement.
- The Service Provider is not a provider of the AI Assistant, does not provide services relating to its operation, and does not act as an intermediary in their provision. Use of the AI Assistant is governed by a separate legal relationship between the Client and the LLM Provider and is at the Client’s own cost. The Service Provider is not a party to that legal relationship and bears no liability for its performance.
- Before performing an Authorization, the Client is obliged to familiarise themselves with the terms of use of the chosen AI Assistant and to verify its privacy settings, in particular the extent to which the LLM Provider may retain the Data transferred to it or use it for its own purposes, including model training. The consequences of such verification and the Client’s obligations as a personal data controller are set out in § 7 of these Terms.
- The Service Provider’s making available of the technical possibility of connecting the Account with a given AI Assistant does not constitute a recommendation of that AI Assistant or of the LLM Provider, confirmation that the LLM Provider’s services comply with law, the Client’s requirements or the regulations applicable to the Client’s business, or confirmation that the manner in which the LLM Provider processes Data is appropriate for the Client’s purposes, nature of business or obligations.
- The Service Provider has no influence over how the AI Assistant operates, its availability, the scope of its functions, its terms of use, or changes introduced by the LLM Provider. The Service Provider does not guarantee the compatibility of the MCP Service with a given AI Assistant, nor its continued compatibility in the event of changes made by the LLM Provider.
- The Service Provider is not a provider or deployer of an artificial intelligence system within the meaning of Regulation (EU) 2024/1689 of the European Parliament and of the Council of 13 June 2024, in relation to the AI Assistant. Within the MCP Service, the Service Provider makes available solely an interface enabling the reading of Data by the AI Assistant chosen and authorized by the Client.
- The MCP Service is auxiliary and informational in nature. Responses and content generated by the AI Assistant do not constitute accounting documents, do not replace the Data gathered in the Client’s Account, and do not constitute accounting, tax, legal or financial advice.
- Detailed technical information concerning the operation of the MCP Service, its activation, supported AI Assistants and troubleshooting of common issues may be published on the Website or in the Knowledge Base. Such information is auxiliary in nature and may not change the scope of the Client’s rights or obligations set out in these Terms.
§ 3 ACTIVATION OF THE MCP SERVICE
- In order to use the MCP Service, one must be a registered Client of the Website, i.e. have an Account on it. Use of the Service requires compliance with the technical conditions and security measures referred to in the Terms and Conditions.
- Use of the MCP Service further requires the Client to have an active account with the chosen LLM Provider and an application or other software supporting the AI Assistant, remote MCP servers, and secure authorization under the OAuth 2.1 standard. Obtaining and maintaining the foregoing is at the Client’s own cost and risk.
- Only the Account Owner may perform an Authorization. An Authorization performed by the Account Owner shall have direct effect for the Client.
- Authorization is performed by indicating, in the software referred to in point 2, the individual MCP server address applicable to the Client’s Account, and approving access in a web browser. Approving access requires prior login to the Website and confirmation of consent on a screen which shows, in each case, the name of the application being connected and the scope of functions it is requesting. Authorization does not require passwords or API tokens to be provided to the AI Assistant.
- Upon Authorization, the MCP Service is activated under the Agreement, on the terms set out in these Terms. The Authorization remains valid until it expires, is revoked, or is blocked on the terms referred to in § 10.7 of these Terms.
- The Account Owner may refuse to grant Authorization by selecting the “Deny” option or an equivalent option, closing the Authorization screen, or interrupting the Authorization process. In such a case, no connection between the Account and the given AI Assistant will be established.
- Authorization is assigned to a single, specific Account. If the Client has more than one Account, Authorization is performed separately for each of them. Authorization granted for one Account does not entitle the reading of Data gathered on another Account.
- The Service Provider makes available, on the Account, a list of active Authorizations, in accordance with § 11.6 of these Terms.
- Authorization covers solely the scope of functions presented on the consent screen at the time it is performed. Extending the scope of functions covered by the Authorization requires the Account Owner to perform a new Authorization.
- Authorization expires upon deletion of the Account or termination of the Agreement with the Client.
- The Service Provider records information concerning queries directed to the MCP server under an Authorization, to the extent necessary to ensure the security and proper functioning of the Website, error diagnostics, detection of irregularities, and documentation of the performance of the Client’s instruction. The recorded information may include, in particular, the type of MCP Service function invoked, the arguments and parameters of the query, information concerning the Authorization, the Account and the session, and technical information on the course and outcome of the query’s execution. Data returned to the AI Assistant in response to a query is not additionally retained by the Service Provider within the MCP Service. Detailed information on the processing of personal data in connection with the recording of queries is set out in the Privacy Policy.
- Detailed instructions for activating the MCP Service are available in the Knowledge Base at: https://help.invoiceocean.com/integration-with-ai-assistants-mcp-claude-chatgpt-and-others-ai and on the Website at: https://invoiceocean.com/mcp.
§ 4 CHARGES
- The MCP Service is made available to the Client under their Subscription Plan, at no additional charge to the Service Provider.
- The Service Provider reserves the right, in the future, to make access to the MCP Service or its individual functions conditional on a chosen Subscription Plan, to introduce limits on the use of the Service, and to introduce charges for the Service or its individual functions. Information on the above will be published on the Website or in the Price List in each case, and changes will be introduced in the manner applicable to amendments to these Terms, referred to in § 12.2.
- The introduction of charges for the Service or its individual functions requires the Client’s express acceptance. The absence of such acceptance shall result solely in the expiry of access to the MCP Service or the relevant functions as of the date the change takes effect, and shall not give rise to any payment obligation on the part of the Client.
- The Service Provider is entitled to discontinue provision of the MCP Service or its individual functions, in particular in the event of discontinuation of the Service’s development, technological, legal or organisational changes preventing or substantially impeding its provision, or the inability to ensure its secure operation. Unless necessary for reasons of security or stability of the Website, prevention of abuse, performance of a legal obligation, or protection of the rights of the Service Provider, Clients or third parties, the Service Provider will inform Clients of the discontinuation of the MCP Service at least 7 days in advance, via the Website or by e-mail sent to the address assigned to the Account. Discontinuation of the MCP Service does not affect the amount of fees for the Subscription Plan nor the scope of other services provided under the Agreement. This point is without prejudice to the Client’s other rights under the Terms and Conditions.
- The Service Provider’s rights referred to in points 2 and 4 do not affect its right to introduce technical limits referred to in § 5.6, nor to block access to the Service on the terms set out in § 10.7 of these Terms.
- The costs of using the AI Assistant, in particular subscription fees or charges for tokens used, are borne by the Client and are settled directly between the Client and the LLM Provider. The Service Provider is not an intermediary in such settlements and bears no liability for their amount, including the amount of charges resulting from the number or scope of queries directed by the Client to the AI Assistant.
§ 5 SCOPE OF THE MCP SERVICE
- The MCP Service allows the AI Assistant solely to read Data. The AI Assistant may not, via the Service, create, modify or delete any Data gathered in the Client’s Account, subject to § 8 of these Terms.
- The scope of Data that may be read by the AI Assistant under the MCP Service includes:
- sales and purchase documents – information relating to invoices and other accounting documents issued or imported under the Account, comprising: document identifier, document number, document type, payment status, issue date, due date, payment date, buyer name, contact identifier, net amount, gross amount, amount paid, currency, and designation of the document as revenue- or cost-related;
- the Client’s contact data – information comprising: contact identifier, name, abbreviation, contact type, company name, first and last name, Tax Identification Number together with its type, e-mail address, phone number, mobile phone number, website address, address (street, number, postal code, city, country), the contact’s bank name and bank account number, the content of the “notes” field, external identifier (external_id), department, category, number of related invoices, and creation and last-update dates;
- settlements with the Client’s contacts – aggregated information regarding settlements with a given contact, comprising: contact identifier, its name and Tax Identification Number, number of invoices, total amount invoiced, total amount paid, and total amount outstanding, grouped by currency and for the indicated date range.
- Reading of Data is carried out using tools made available on the MCP server, enabling Data to be searched according to criteria indicated in the Knowledge Base, in particular by document number, contact, payment status, document type, and date range.
- The MCP Service does not include the reading of Data other than that indicated in point 2. Extending the scope of Data that may be read requires an amendment to these Terms in the manner referred to in § 12.2, and the performance of a new Authorization by the Account Owner in accordance with § 3.9.
- The current scope of functions available under the MCP Service is presented on the consent screen at the time of Authorization in each case, and is described in the Knowledge Base.
- Queries by the AI Assistant are executed with an execution time limit. The Service Provider may introduce additional technical limits, in particular limits on the number or frequency of queries or the volume of Data read, where justified by the need to protect the stability, performance, security or proper functioning of the Website. The introduction of technical limits does not require an amendment to these Terms. Information on applicable limits is published in the Knowledge Base.
- If the limit referred to in point 6 is exceeded, a query may not be executed, its execution may be delayed, or the scope of returned results may be limited. To the extent technically possible, the Client will receive information on the reason for the non-execution or limitation of the query.
- Which Data will be read under the Service depends on the content of the queries directed by the Client to the AI Assistant and on how the AI Assistant itself operates, over which the Service Provider has no influence. The Service Provider does not verify the content of queries or the purpose for which the Client uses the MCP Service, and does not decide on the scope of Data read in individual queries.
- Data read under the MCP Service may include information constituting a trade secret, confidential information, as well as Personal Data and information subject to professional secrecy which the Client is obliged to maintain under separate provisions. The assessment of whether it is permissible to make such information available to the AI Assistant is for the Client to determine.
§ 6 MAKING DATA AVAILABLE TO THE AI ASSISTANT
- Performing the Authorization referred to in § 3 of these Terms constitutes the Client’s instruction to make Data available to the AI Assistant via the MCP Service, to the extent set out in § 5.2. The Data is made available at the Client’s initiative, on the Client’s instruction, and solely in the performance of queries directed by the Client to the AI Assistant.
- The Service Provider does not make Data available to the AI Assistant on its own initiative or for its own purposes. The Service Provider does not transfer Data to the LLM Provider in bulk, automatically, or beyond the performance of the queries referred to in point 1.
- Data read by the AI Assistant is transferred to the LLM Provider and processed by it under the terms set out in the legal relationship between the LLM Provider and the Client. The Service Provider has no control over how the LLM Provider uses Data once it has been made available — depending on the terms and privacy settings of the given AI Assistant, the Data may in particular be retained by the LLM Provider, made available to its sub-processors, transferred outside the European Economic Area, or used for model training.
- Before performing an Authorization, the Client is obliged to verify the terms of use of the chosen AI Assistant and its privacy settings, in particular to the extent referred to in the second sentence of point 3, and to assess whether they meet the requirements arising from applicable law and the Client’s obligations to third parties. The Client performs this obligation independently. The Service Provider does not verify the terms or settings of the AI Assistant chosen by the Client and bears no liability for their content or any changes to them.
- The Client represents and warrants that:
- it holds the rights allowing it to make Data available to the AI Assistant and the LLM Provider, and that such disclosure does not infringe the rights of third parties, including intellectual property rights, trade secrets, professional secrecy or other legally protected secrecy which the Client is obliged to maintain;
- to the extent the Data includes Personal Data, its disclosure has a proper legal basis for processing, on the terms set out in § 7 of these Terms;
- to the extent the Client processes Data as a processor on behalf of third parties, it has obtained the controller’s required consent to further sub-processing and has met the other requirements arising from Article 28 GDPR.
- The Client bears sole responsibility for the choice of AI Assistant, the scope and content of queries directed to it, and the consequences of making Data available to the LLM Provider.
- Content generated by the AI Assistant based on Data does not originate from the Service Provider, is not verified by it, and may contain errors, inaccuracies, or incomplete information. It is the Client’s obligation to verify, in each case, the responses and content generated by the AI Assistant for their consistency with the Data, in particular before taking any decisions or actions based on them, especially of an accounting, tax, payment or debt-collection nature.
§ 7 PROTECTION OF PERSONAL DATA
- The reading of Personal Data by the AI Assistant and its transfer to the LLM Provider constitute disclosure of personal data within the meaning of Article 4(2) GDPR. The LLM Provider is a recipient of personal data within the meaning of Article 4(9) GDPR.
- The Service Provider’s roles in connection with the provision of the MCP Service are as follows:
- with respect to Personal Data entrusted to the Service Provider by the Client under the Data Processing Terms, in particular data of the Client’s contacts and of natural persons referred to in documents gathered in the Account — the Service Provider acts as processor, and the Client remains the controller of that data;
- with respect to the personal data of a Client who is a natural person, and the personal data of Users, processed in connection with the activation of the MCP Service, the performance of Authorization, and the recording of queries — the Service Provider acts as controller.
- To the extent referred to in point 2(a), the Authorization constitutes a documented instruction of the controller within the meaning of Article 28(3)(a) GDPR, covering the disclosure of Personal Data to the AI Assistant to the extent set out in § 5.2 of these Terms, in performance of queries directed by the Client. The Service Provider processes Personal Data solely within the limits of that instruction. The Data Processing Terms shall apply, as appropriate, to the processing of Personal Data under the MCP Service.
- The Service Provider does not assess whether it is permissible to disclose Personal Data to the AI Assistant chosen by the Client. The Service Provider’s right under the last sentence of Article 28(3) GDPR remains unaffected.
- The LLM Provider is not a processor or sub-processor acting on the instructions of the Service Provider. The Service Provider does not entrust or sub-entrust the LLM Provider with the processing of Personal Data, does not conclude a data processing agreement with it, and bears no liability for the processing of Personal Data by the LLM Provider. The choice of LLM Provider and the shaping of the legal relationship with it, including the conclusion of a data processing agreement where required, is solely the Client’s responsibility.
- The transfer of Personal Data outside the European Economic Area, where it occurs as a result of the Client’s use of the AI Assistant, takes place on the Client’s instruction and at the Client’s responsibility. The Service Provider does not ensure, verify or guarantee the legal basis for such transfer, in particular an adequacy decision, standard contractual clauses, or other safeguards referred to in Chapter V GDPR.
- The Service Provider applies technical and organisational measures ensuring the security of the MCP Service, in line with the requirements of Article 32 GDPR, in particular: authentication and authorization of access under the OAuth 2.1 standard, limitation of the scope of Data made available in accordance with § 5.2, restriction of access to read-only mode, technical limits, recording of queries, and the ability to revoke Authorization at any time. The Service Provider’s liability in this respect covers solely the processing of Personal Data up until it is transferred to the LLM Provider.
- Revocation or expiry of Authorization results in the cessation of making Personal Data available via the MCP Service but does not result in the automatic deletion of Data previously transferred to the LLM Provider. Deletion of such Data may be pursued by the Client directly with the LLM Provider, in accordance with the procedures it makes available. The Service Provider is not an intermediary in the handling of such requests, has no ability to bring about the deletion of Data by the LLM Provider, and bears no liability for how such requests are handled.
- The rules for the Service Provider’s processing of Personal Data referred to in point 2(b) are set out in the Privacy Policy.
§ 8 ACTIONS ON THE ACCOUNT PERFORMED BY THE AI ASSISTANT
- The Service Provider may, in the future, make available within the MCP Service functions enabling the AI Assistant to perform actions on the Client’s Account, in particular creating or modifying documents (“Additional Functions”). Until the Additional Functions are made available, the MCP Service comprises solely the reading of Data in accordance with § 5.1.
- Making the Additional Functions available requires a prior amendment to these Terms, made in the manner referred to in § 12.2, specifying in particular the type and scope of actions that may be performed via the AI Assistant. Use of the Additional Functions requires a separate, express Authorization performed by the Account Owner.
- Actions performed on the Account via the AI Assistant, within the limits of the Authorization granted, shall be treated as if performed by the Client itself. The Client bears full responsibility for such actions and their consequences, in particular for the content, accuracy and legal compliance of documents created or modified via the AI Assistant.
- The Client is obliged to verify actions performed on the Account via the AI Assistant, in particular before using created or modified documents in business transactions, disclosing them to third parties, or using them for tax settlement purposes. § 6.7 of these Terms shall apply as appropriate.
- The Client is not entitled to enter, via the AI Assistant, content of an unlawful nature into its Account.
- The Service Provider may disable or restrict the Additional Functions, including with respect to individual Accounts, where justified by the need to protect the stability, performance or security of the Website, or the integrity of data gathered in the Account. § 4.4, § 4.5 and § 10.7 of these Terms shall apply as appropriate.
§ 9 RIGHTS AND OBLIGATIONS OF THE PARTIES
- The Service Provider undertakes to exercise due diligence to ensure the proper operation of the MCP Service and its proper provision.
- The Service Provider shall use its best efforts to ensure that the Service is provided to the Client continuously and without interruption, and in accordance with the conditions described in these Terms. However, the Service Provider reserves the right to make temporary interruptions in access to the Service for maintenance, repair, update or extension purposes, where such activities require such an interruption. The Service Provider shall inform the Client of a Technical Interruption with reasonable notice, where possible given the nature and cause of the interruption.
- The availability of the MCP Service also depends on factors beyond the Service Provider’s control, in particular the availability and proper functioning of the AI Assistant and the services provided by the LLM Provider. § 2.9 of these Terms shall apply.
- In the event of a malfunction or error in the operation of the MCP Service, the Client is obliged to notify the Service Provider without delay at the e-mail address: info@invoiceocean.com.
- The Client is obliged to use the MCP Service in the manner provided for in these Terms, in accordance with generally applicable law and any instructions and documents provided to the Client by the Service Provider in connection with the use of the Service. In particular, the Client is not entitled to:
- use the Service in a manner that interferes with the proper functioning of the Website, endangers its security, or places a disproportionate burden on it relative to the manner in which the Service is used;
- use the MCP Service or data obtained through it to create, develop or offer products or services competing with the Website, or to train language models or other artificial intelligence systems for purposes other than using the Service in accordance with its intended purpose;
- use the Service in a manner that infringes third-party rights or in order to circumvent security measures, technical limits, or the scope of the granted Authorization;
- use the Service by means of malicious software;
- provide content of an unlawful nature.
- The Client is obliged to maintain security measures appropriate to the use of the MCP Service, in particular to:
- properly secure the Account, the account with the LLM Provider, and the devices used to use the MCP Service;
- grant Authorization only to applications from trusted sources;
- promptly revoke Authorization in the event of suspected unauthorized access to the Account or to the application supporting the AI Assistant, as well as in the event of ceasing to use the given AI Assistant;
- regularly review the list of active Authorizations referred to in § 11.6;
- promptly notify the Service Provider of any suspected unauthorized use of the Authorization.
- The Client is obliged to familiarise themselves with the descriptions and instructions concerning the operation of the MCP Service and its individual functions, found on the Website and in the Knowledge Base, provided by the Service Provider or appearing during use of the Service.
- The Client’s e-mail address assigned to the Account may receive technical, system and service information concerning the operation of the MCP Service, which does not constitute commercial information within the meaning of the u.ś.u.d.e.
- The Client shall be liable for breaches of these Terms by its Users, i.e. persons it authorises to use the Service, and shall be liable for the acts and omissions of such persons as for its own acts and omissions. This applies in particular to the Account Owner performing the Authorization.
- The Client has the right to lodge a complaint regarding the MCP Service on the terms set out in the Terms and Conditions. The right to complain does not extend to the operation of the AI Assistant or to the services provided by the LLM Provider.
§ 10 LIABILITY
- The Service Provider is liable for damages arising from the provision of the MCP Service on the basis of the liability rules set out in the Terms and Conditions, taking into account the provisions of this paragraph and mandatory provisions of law.
- The Service Provider shall not be liable for damages arising from:
- the action, inaction or defective operation of the AI Assistant and of the services provided by the LLM Provider, including their unavailability, changes to their terms of use, or loss of compatibility with the MCP Service;
- the accuracy, completeness or usefulness of responses and content generated by the AI Assistant based on Data;
- decisions, actions or omissions of the Client or a third party, taken on the basis of content generated by the AI Assistant;
- the manner in which the LLM Provider uses Data after it has been made available via the Service, including its retention, disclosure to third parties, transfer outside the European Economic Area, or use for model training;
- the Client’s choice of AI Assistant and the Client’s failure to carry out the verification referred to in § 6.4;
- the Client’s failure to verify content generated by the AI Assistant, referred to in § 6.7;
- use of the MCP Service contrary to these Terms, the Terms and Conditions, the Service Provider’s instructions, applicable law, or the intended purpose of the Service;
- improper security of the Account, the account with the LLM Provider, the AI Assistant, or the device used to use the MCP Service, on the Client’s part;
- the occurrence of a Technical Interruption, as well as a permanent or temporary inability to provide the Service due to reasons for which the Service Provider is not responsible;
- the unavailability or malfunction of the internet, telecommunications systems, equipment or software beyond the Service Provider’s control;
- risks associated with the use of the internet: hacking attacks, infection of the system by computer viruses, or similar events beyond the Service Provider’s control;
- other circumstances for which the Service Provider is not responsible, referred to in the Terms and Conditions.
- Notwithstanding point 2 above, with respect to Clients who are not Consumers, the Service Provider shall be liable only for damages resulting from its culpable acts. The Service Provider’s total liability towards such a Client shall in each case be limited to the amount of the Subscription currently paid by the Client and shall cover only actual damage.
- The limitations referred to in points 2 and 3 shall not apply to damage caused intentionally by the Service Provider, nor in other cases where the exclusion or limitation of liability is impermissible under mandatory provisions of law. Points 2 and 3 do not limit the rights of a Client who is a Consumer arising from mandatory provisions of law or from the Terms and Conditions.
- This paragraph does not exclude or limit the Service Provider’s liability arising from the GDPR, in particular Article 82 GDPR.
- In the event that a third party asserts claims against the Service Provider in connection with Data being made available to the AI Assistant, or actions taken by the AI Assistant connected to the Client’s Account, a Client who is not a Consumer undertakes to satisfy such claims and to reimburse the Service Provider for reasonable costs incurred in defending against them, including the costs of legal representation. The Service Provider shall promptly notify the Client of any claim asserted, allow the Client to state its position, and shall not admit liability for the claim or enter into any settlement without the Client’s prior consent, unless necessary to protect the Service Provider’s legitimate interest.
- The Service Provider is entitled to temporarily block the Client’s access to the Service or to revoke Authorization where:
- the Client’s use of the MCP Service interferes with the proper functioning of the Website or places a disproportionate burden on it;
- use of the MCP Service endangers the security of the Website, the Service Provider’s data, or Clients’ data;
- the Client uses the Service in a manner inconsistent with its intended purpose, contrary to law, or contrary to these Terms;
- there is reasonable suspicion of unauthorized use of the Authorization or of unauthorized access to the Account, the AI Assistant, or the MCP Service;
- it is necessary to prevent damage to the Client, the Service Provider, other Clients, or third parties;
- circumstances arise justifying blocking access on the terms set out in the Terms and Conditions;
- it results from the need to comply with a legal obligation, decision, or request of a competent authority.
- Provided this does not endanger security, does not hinder the clarification of the incident, and is not contrary to applicable law or the request of a competent authority, the Service Provider shall inform the Client of the reason for and anticipated scope of blocking the MCP Service or revoking the Authorization. Blocking access to the MCP Service does not affect the Client’s access to the Account, nor the scope of other services provided under the Agreement, unless there are grounds for their restriction under the Terms and Conditions.
§ 11 TERMINATION OF USE OF THE SERVICE
- The Client may, at any time and without incurring any cost, revoke the Authorization granted to the AI Assistant. Revocation of Authorization is carried out:
- via the Account, in the section for managing active Authorizations, by using the “Revoke access” option for the selected application, or by performing an equivalent action made available by the Service Provider on the Website; or
- from the settings of the AI Assistant or of the Client’s account with the LLM Provider, if the LLM Provider makes available a way to effectively revoke Authorization in this manner.
- The right referred to in point 1 is available to the Client at any time, regardless of the period of use of the MCP Service, and does not limit the rights of a Client who is a Consumer arising from mandatory provisions of law or from the Terms and Conditions, including the right of withdrawal from the Agreement.
- Revocation of Authorization may relate to a selected Authorization or to all Authorizations granted under the Account. Revocation of all Authorizations is equivalent to ceasing use of the MCP Service and does not affect the Agreement or the scope of other services provided under it.
- Upon revocation or expiry of an Authorization, the Service Provider shall cease making Data available to the application to which the Authorization related, and further queries directed to the MCP server on the basis of that Authorization shall not be executed.
- Revocation or expiry of an Authorization shall have effect only for the future — it does not apply to Data previously transferred to the LLM Provider, which remains with the LLM Provider on the terms set out in the terms applicable to the relationship between the Client and the LLM Provider. The Client may pursue deletion of such Data directly with the LLM Provider, in accordance with the procedures it makes available. The Service Provider is not an intermediary in the handling of such requests, has no ability to bring about the deletion of Data by the LLM Provider, and bears no liability for how such requests are handled.
- A list of active Authorizations, together with the application name and the date the Authorization was granted, is available at any time via the Account.
- Authorization expires in the cases referred to in § 3.10 of these Terms. Termination of the Agreement, on the terms set out in the Terms and Conditions, results in the termination of use of the MCP Service and the expiry of all Authorizations granted under the Account, without the need for any additional statements.
§ 12 FINAL PROVISIONS
- In matters not regulated by these Terms, the provisions of the Terms and Conditions shall apply as appropriate, and, with respect to the processing of Personal Data entrusted to the Service Provider by the Client, the provisions of the Personal Data Processing Terms and Conditions, which form an integral part of these Terms.
- Amendments to these Terms shall be made in the manner and on the terms applicable to amendments to the Terms and Conditions, in particular subject to a minimum 7-day period for informing Clients of proposed changes prior to their effective date.
- The current content of these Terms is published at: https://invoiceocean.com/terms-mcp, in a manner that allows it to be stored (recorded) and reproduced several times in the ordinary course of business.