Terms of use

1. Who we are and who these terms apply to

These terms govern the use of Doconda (the API, the dashboard, the SDK, the MCP server, artifacts and the editor plugin), provided by Koncept Services BCO, S.L. (“Doconda”, “we”). They apply to the organization that creates an account (“the customer”) and to the people who use it on its behalf. Doconda is a service for businesses and professionals: it is not aimed at consumers.

By creating an account or using the service, the customer accepts these terms.

2. The service

• Document API: create, review, edit and read Word, PowerPoint, Excel and PDF documents, and create artifacts (web pages with their own database), as described in the current documentation.
• Editor plugin: a software component to edit Word, PowerPoint and Excel in the browser, within the domains the customer specifies.

We may improve or change the service. If a change significantly removes a feature, we will give reasonable notice, except for security or legal reasons.

3. Account and API keys

The customer is responsible for what is done with its account and API keys, for keeping them secret and for revoking them if they leak. The organization's owners manage members, billing and settings.

4. Price and payment

• API: you pay per delivered document from a prepaid balance, at the prices published on the website and the dashboard at the time of the request. Documents that fail are not charged. The balance does not expire [to confirm: balance expiry and refunds] and does not earn interest.
• Editor plugin: purchased on one of these plans, at the VAT-inclusive price shown in the dashboard before payment: monthly or yearly, which renew each period until the customer cancels them, or one-time, which grants a licence with no expiry date. Each organization's first monthly or yearly subscription starts with a 7-day free trial: if the customer cancels before it ends, nothing is charged; otherwise, the first period is charged when the trial ends. Cancellation takes effect at the end of the paid period or the trial. If a payment fails, the plugin keeps working for 7 days; after that it stops opening.
• Payments are processed by Stripe. API prices exclude VAT unless stated otherwise.
• We may change prices with at least 30 days' notice; changes do not affect balance already paid or the current month.

5. Acceptable use

The customer will not use the service for:

• illegal content, content that infringes third-party rights, or to deceive or defraud;
• trying to access other customers' data, bypassing limits or the plugin licence, or attacking the service;
• reselling the service or the plugin as its own, or using the plugin outside the domains of its licence;
• copying, decompiling or modifying the plugin, except as permitted by law.

We may suspend access, with notice where possible, in the event of a serious breach or a security risk.

6. Customer content

The customer keeps all rights to what it sends (text, files, images, artifact data) and to the documents generated from it. It grants us permission only to process it in order to provide the service. We do not use customer content to train artificial intelligence models.

If that content includes personal data, Doconda acts as processor under section 14.

7. Artificial intelligence output

Some operations use AI models. Their output may contain errors or omissions: the customer must review it before using it, and is responsible for how it is used. Each document's report flags what Doconda detects (for example, figures that were not in the request), but does not guarantee to find everything.

8. Availability and support

We work to keep the service available and secure, but we do not guarantee uninterrupted operation unless a service level agreement (SLA) is agreed in writing.

9. Liability

To the extent permitted by law, Doconda is not liable for indirect damages or loss of profit, and its total liability in each 12-month period is limited to what the customer has paid in that period. This limitation does not apply to wilful misconduct or to anything the law does not allow to be limited.

10. Term and termination

The customer may stop using the service and cancel the plugin at any time. We may terminate the agreement with 30 days' notice, or immediately in the event of a serious breach. After termination, we will delete the content as set out in the privacy policy and section 14. [to confirm: refund of unused balance on termination]

11. Changes to these terms

We may update these terms. If a change is significant, we will give at least 30 days' notice by email or in the dashboard; continuing to use the service afterwards means accepting it.

12. Law and jurisdiction

These terms are governed by Spanish law. For any dispute, the parties submit to the courts and tribunals that are competent under the applicable law.

13. Editor plugin licence

Doconda grants the customer, while its subscription is active, a non-exclusive, non-transferable licence to use the editor plugin on the domains of its licence, within its own products.

• The plugin is delivered compiled and obfuscated, through a personal installation link. The source code is not provided.
• Each copy carries a mark that identifies the organization that downloaded it. Removing or altering it is a breach of this licence.
• The customer may not: copy it or distribute it to third parties; decompile, deobfuscate or reverse engineer it, except as permitted by law; remove, bypass or alter the licence check; or use it outside its domains or in products that let third parties edit documents outside the customer's own service.
• When the subscription ends, the licence ends: the customer will stop using the plugin and delete its copies. The plugin stops opening within an hour.
• Doconda may check compliance with this licence, for example through the plugin's usage logs, and claim damages for unauthorized use.

14. Data processing agreement (art. 28 GDPR)

For the personal data the customer includes in requests, files and artifacts, the customer is the controller and Doconda the processor. Doconda:

1. Processes it only to provide the service and following the customer's instructions (these terms, its settings and its API requests); never for its own purposes or to train AI models.
2. Ensures that anyone who accesses it is bound by confidentiality and accesses only what is necessary.
3. Applies appropriate security measures: encryption in transit and at rest, isolation by organization and project, each project in its region, API keys stored only as a hash, and the option to store nothing (store: false). [backups, access logging and incident response]
4. Uses the providers in the privacy policy, with equivalent obligations, and gives 30 days' notice before changing them; the customer may object and, if there is no solution, terminate the agreement.
5. Helps the customer respond to data subjects' requests and, where applicable, before the authority.
6. Notifies the customer of any breach affecting its data without undue delay and within a maximum of [48] hours.
7. Deletes the data when the agreement ends within a maximum of [30] days, unless legally required to keep it; before that, the customer can download it with the API.
8. Applies appropriate safeguards (adequacy decision or standard contractual clauses) if the data is processed outside the European Economic Area, for example in US-region projects.
9. Gives the customer the information needed to demonstrate compliance and allows reasonable audits, with prior notice and at the customer's expense.