Terms of service

These terms govern your use of SaaS Monitor as hosted at saas-monitor.com (the service), provided by Lumy.Media SAS (we, us). By creating an account, you accept them. If you create it for a company, you accept them on its behalf and confirm you may.

The service is meant for professionals: founders and teams following their own business.

SaaS Monitor’s source code is open source under the MIT license. The license covers the code, these terms cover the service we run: they don’t restrict your rights under the license, and don’t apply to instances you or others host.

The service is in public beta and free of charge. Features may change or be removed, and the service may be interrupted, for maintenance or otherwise, without notice.

If we introduce paid plans, we will announce them at least 30 days in advance, and nothing will be charged without your explicit agreement. The open-source version stays free to run on your own server.

• Give accurate information, and keep your password to yourself.
• You are responsible for what happens under your account and, in the workspaces you own or administer, for the people you invite. An invitation link only works for the email address it names, which the service doesn’t verify: share it with that person only, and revoke the links you no longer need.
• Tell us at hello@lumy.bzh if you think someone else is using your account.

Only connect Stripe accounts you are authorized to access. We recommend a restricted key with the read permissions the service lists, plus, for instant updates, the permission to manage webhook endpoints. With your key, the service reads the data it needs and manages the one webhook endpoint it creates. It changes nothing else in your Stripe account.

You are responsible for the key you give us. You can revoke it in Stripe at any time, and disconnecting the account in the dashboard deletes it from the service.

SaaS Monitor is not affiliated with Stripe. Stripe’s terms keep applying to your Stripe account.

Anyone with a screen’s link can see the screen, without signing in, and follow it in the SaaS Monitor app, with its notifications. You decide what each screen shows, where it is displayed and who gets its link. Customer names and email addresses are hidden unless you turn them on, a screen can ask for a password, and regenerating its link revokes the old one.

You are responsible for what your screens show and say, including the phrases you write for their voice, and for having the right to show your customers’ names or email addresses where you put them: an office, a shop window, a video.

You agree not to:

• use the service against the law or the rights of others;
• connect a Stripe account without the authorization of its owner;
• try to reach workspaces, screens or data that aren’t yours, or to get around the service’s security. Report vulnerabilities privately instead, as our security policy explains;
• overload the service, for example with automated requests beyond what screens and the dashboard make;
• resell the hosted service, or offer it to others as your own;
• make screens show or say anything unlawful, hateful or misleading.

Your Stripe accounts hold personal data about your customers: their names, email addresses, countries and Stripe identifiers, and the details of their subscriptions and payments. For this data, you are the controller and we are your processor, within the meaning of article 28 of the GDPR. This section is our agreement on it.

• Instructions. We process it only to provide the service as your settings direct: importing it, computing your metrics, showing it on your dashboard and screens, and in the notifications of the devices that follow them. Your settings are your documented instructions.
• Duration. As long as the Stripe account stays connected.
• Confidentiality. Only people bound to confidentiality, who need it to run the service, can access it.
• Security. We apply the measures described in the privacy policy.
• Subprocessors. You authorize those listed in the privacy policy. We announce any change there, and by email before a new one receives your customers’ data, so that you can object. Each is bound by data protection obligations equivalent to these.
• Assistance. We help you answer your customers’ requests and meet your own obligations (security, impact assessments, breach notifications), as far as the information we hold allows.
• Breaches. We notify you without undue delay after becoming aware of a breach affecting this data.
• End. Disconnecting a Stripe account or deleting its workspace deletes this data right away. It stays in your Stripe account, so nothing needs to be returned.
• Audits. We give you the information needed to show that these obligations are met. The code that handles the data is public.

Figures are computed from what Stripe returns, following Stripe’s definition of MRR, and converted between currencies with the European Central Bank’s reference rates. They may be late, incomplete or differ from Stripe’s own reports, and imports can fail. The service is not accounting, financial or tax advice: check important numbers in Stripe before relying on them.

Your data stays yours. You grant us only the right to host and process it to provide the service, and we use it for nothing else. How we handle it is described in the privacy policy.

You can stop using the service at any time: disconnect your Stripe accounts, delete your workspaces, and write to hello@lumy.bzh to have your account deleted.

We may suspend or close an account, or disable a screen, that breaches these terms or puts the service, its users or others at risk. We tell you why, beforehand when we can.

We may also end the beta or the service. We will give you at least 30 days’ notice by email, unless the law or security requires faster action.

The service is free, and provided as is and as available. As far as the law allows, we make no warranty that it will be available without interruption, free of errors, secure against every threat, or fit for a particular purpose.

As far as the law allows:

• we are not liable for indirect damage, such as lost profits, lost business, lost data or harm to reputation;
• we are not liable for decisions made on the figures the service shows, nor for what your screens show or say to others;
• our total liability for the service, which is free, is limited to 100 euros.

These limits don’t apply to gross negligence, wilful misconduct, or wherever the law forbids them.

We may update these terms as the service evolves. We tell you about significant changes by email or in the dashboard at least 30 days before they apply. If you don’t agree, you can stop using the service and delete your data before then; using it after that date means you accept the new terms.

These terms are governed by French law. Before going to court, write to us at hello@lumy.bzh: we will try to settle any disagreement amicably. Failing that, the courts of Brest, France, have exclusive jurisdiction, unless mandatory rules say otherwise.

Lumy.Media SAS, Immeuble Le Grand Large, 2e éperon, Quai de la Douane, 29200 Brest, France. hello@lumy.bzh. More in the legal notice.