Terms of service

Last updated 16 October 2026

These terms govern the use of Hedda, the HR and resource planning service provided by VNTRS Consulting AB, company registration number 559070-8417, S:t Eriksgatan 63 B, 112 34 Stockholm, Sweden ("we", "us"). Hedda is a service for businesses. The company or organisation that signs up for Hedda is the "customer". The people the customer gives access are "users". The customer's own space in Hedda, with its users and data, is its "company account".

1. Agreement

The customer accepts these terms by accepting an order or offer that refers to them, by signing an agreement with us, or by giving its users access to Hedda after receiving these terms. If you accept them on behalf of an organisation, you confirm that you have the authority to bind it. The agreement consists of any separate agreement or order the customer has signed with us, the data processing agreement, and these terms. If they conflict, they apply in that order, except that the data processing agreement always takes precedence on the processing of personal data. The agreement replaces everything the parties have said or written about its subject before it.

2. The service

Hedda helps the customer manage employees, staffing, time, absence, compensation, feedback and related work. It includes a web app, a public API and an MCP server. We continuously develop Hedda and may add, change or remove features. We will not materially reduce the core functionality of a paid subscription during its term without notice. We aim to keep Hedda available at all times, but unless otherwise agreed in writing we do not guarantee a specific level of availability. Planned maintenance is carried out with as little disruption as possible.

3. Accounts and users

• The customer decides who is invited to its company account and which roles and permissions they have, and is responsible for removing users who should no longer have access.
• Users sign in with a verified email address through a supported sign-in provider. Users must keep their credentials and API keys confidential.
• The customer is responsible for all activity in its company account and must tell us promptly at hej@hedda.app if it suspects unauthorised access.

4. Customer data

The customer owns all data it and its users put into Hedda ("customer data"), except bug reports and suggestions sent to us with the "Send feedback" button, which we handle as controller under our privacy policy. For personal data in customer data, the customer is the controller and we are the processor. We process it under our data processing agreement (DPA), which forms part of these terms. Our privacy policy describes how we handle personal data.

The customer is responsible for having a legal basis for the data it stores in Hedda and for informing its employees. We use customer data only to provide, secure and support the service. We do not sell it or use it for advertising.

The customer can export its data at any time through the API and the MCP server. On request, we also provide a complete export of its data in a machine-readable format.

5. Acceptable use

The customer and its users may not:

• use Hedda in breach of law or third-party rights, or to store content they have no right to store;
• try to access other customers' data or bypass security, permission or rate limits;
• upload malicious code, or overload or disrupt the service;
• copy, resell or reverse engineer Hedda, except as mandatory law permits.

We may suspend access that threatens the security or operation of the service. We tell the customer as soon as possible, and restore access when the problem is resolved.

6. Fees and payment

Fees are stated in the customer's order. They are invoiced in advance and payable within 30 days of the invoice date. Prices are exclusive of VAT. Unless the order says otherwise, we may change prices with at least 30 days' written notice, with effect from the next billing period. Overdue payments accrue interest under the Swedish Interest Act (räntelagen), and after a reminder we may suspend access until the invoice is paid.

7. Third-party integrations

The customer can connect Hedda to other services, such as Fortnox or Slack, and authorise AI assistants and other applications to use the API or the MCP server on its users' behalf. When it does, it instructs us to exchange data with those services. Its use of them is governed by its own agreement with each provider. We are not responsible for third-party services or for changes they make that affect an integration.

8. Intellectual property

We own Hedda, including its software, design and documentation. The customer receives a non-exclusive, non-transferable right to use Hedda for its internal business during the subscription. If the customer or its users give us feedback or suggestions, we may use them freely to improve Hedda, without obligation.

9. Confidentiality

"Confidential information" is non-public information that one party discloses to the other and that is marked as confidential or that a reasonable person would understand to be confidential. It includes customer data, and our non-public pricing, product and security information.

Each party keeps the other party's confidential information confidential and uses it only to fulfil the agreement. A party may share it only with its employees, advisors and subcontractors who need it for that purpose and are bound by similar obligations. This does not apply to information that:

• is or becomes public through no fault of the receiving party;
• the receiving party already had, or developed independently;
• the receiving party received lawfully from a third party without a duty of confidentiality;
• a party must disclose by law or by order of an authority.

The obligation continues for three years after the agreement ends. It continues for customer data for as long as we hold it.

10. Publicity

We may name the customer and show its logo in our lists of customers. The customer can ask us to stop at any time at hej@hedda.app. Anything more, such as a case study, a quote or a press release, requires the customer's consent in writing. Email is enough.

11. Warranties and liability

We provide Hedda with professional care, but "as is" and without any warranty that it is free from errors or suitable for a particular purpose, except as expressly stated in these terms. Hedda supports the customer's HR and payroll processes. The customer remains responsible for checking salaries, tax and other figures before using them.

Neither party is liable for indirect or consequential loss, such as lost profit or lost revenue. For lost or corrupted data, liability is limited to the cost of restoring it from backups or the customer's own records. Each party's total liability under the agreement is limited to the fees paid or payable by the customer for Hedda in the 12 months before the event giving rise to the claim. These limitations do not apply to gross negligence, wilful misconduct, or an intentional breach of section 9. Liability for breaches of data protection law is also governed by the DPA.

The customer compensates us for claims from third parties and for fines imposed on us that arise from customer data the customer had no right to store or have processed, or from instructions it gave us in breach of law.

A party that wants to claim compensation must notify the other party in writing within 90 days of discovering, or when it should have discovered, the circumstance behind the claim, and no later than 12 months after it occurred. Otherwise the right to compensation is lost.

Neither party is liable for failures caused by circumstances beyond its reasonable control (force majeure).

12. Term and termination

Unless otherwise agreed, the subscription runs month to month. The customer may terminate it with effect from the end of the current billing period. We may terminate it with at least three months' notice, with effect from the end of a billing period. Either party may terminate the agreement immediately if the other party materially breaches it and does not remedy the breach within 30 days of written notice, or if the other party becomes insolvent, enters bankruptcy, company reorganisation or liquidation, or stops its payments.

The customer can export its data for 30 days after the agreement ends. After that we delete the customer's company account and its data, as described in the DPA and the privacy policy, including how long copies can remain in backups. Sections that by their nature should survive termination, such as confidentiality and liability, continue to apply.

13. Changes to these terms

We may update these terms. We notify customers of material changes at least 30 days before they take effect. A customer that does not accept the change may terminate the agreement before it takes effect. A customer that keeps using Hedda after that date accepts the change.

14. Subcontractors and assignment

We may use subcontractors to provide Hedda, and remain responsible for their work. Subcontractors that process personal data are listed in the DPA. Neither party may transfer the agreement without the other party's written consent. We may, however, transfer it to a company in the same group as us, or to a buyer of the business that runs Hedda, if we tell the customer.

15. Governing law and disputes

These terms are governed by Swedish law. Disputes are settled by Swedish courts, with the Stockholm District Court (Stockholms tingsrätt) as the court of first instance.

16. Notices and contact

We send notices under the agreement by email to the contact the customer has given us, and the customer sends notices to hej@hedda.app. A notice is received when it is sent, unless the sender learns that it did not arrive.

VNTRS Consulting AB, S:t Eriksgatan 63 B, 112 34 Stockholm, hej@hedda.app.