Terms of service

These terms govern the use of Vorenq (the “Service”), operated by MomentumQ GmbH, Leutschenbachstrasse 95, 8050 Zürich, Switzerland (“we”, “us”). By using the Service you accept these terms. Last updated: 23 September 2026.

1. The service

Vorenq is a platform on which configurable AI agents (“AI employees”) carry out work you assign and, where you connect third-party tools, act in those tools on your behalf. The Service is provided on an “as available” basis and may evolve over time.

Optional workflows support accounting preparation and review, Swiss company operations, campaigns, company playbooks, software fixes and data work. Their availability depends on your connected services, permissions, configuration and provider capabilities. An accounting pack, formation checklist or VAT handover is not a professional audit, company registration or statutory filing. A payment file is not a released or settled payment; an accepted provider request or code merge is not proof of completion or deployment. Required external actions and qualified reviews remain yours to complete and verify.

2. Account & eligibility

You must provide accurate account details, keep your credentials confidential, and be authorised to bind the organisation you act for. You are responsible for all activity under your workspace. The Service is offered only to businesses and other organisations for their professional or commercial activity, not to consumers for personal or household use.

3. Your responsibility for the agents’ actions

You direct the agents and decide which tools they may use and which actions they may take. By default, consequential actions — moving money, messaging customers, writing financial records, signing — pause for your explicit approval. For eligible actions, an owner may give a scoped standing permission or configure the existing workspace approval settings; a matching action can then run without a new approval click. The scope, limits, expiry and non-overridable controls still apply. Creating a workflow or saving a procedure does not itself grant permission. You remain responsible for the briefs you give, the tools you connect, the actions you approve, and the use of any output. AI output can be incomplete or incorrect — review it before relying on it.

4. Acceptable use

You must not use the Service unlawfully, to infringe others’ rights, to send spam or unsolicited bulk messages, to process data you are not entitled to process, or to attempt to circumvent its security or guardrails. You must comply with the terms of any third-party tool you connect.

Campaign permissions authorize the agent to act for you; they are not consent from a recipient. Before marketing outreach, establish the required recipient consent or applicable legal exception, identify the sender and provide a simple, free way to object. Honor objections across campaigns and channels. A public contact address, an AI fit assessment or a saved prospect record does not establish permission to send. You must also provide any required privacy information to contacts whose data you collect indirectly.

5. Third-party tools & AI providers

Connectors and AI model providers are operated by third parties under their own terms; we are not responsible for their availability or actions. When you connect a tool, you authorise the Service to access it with the credentials you provide, for the actions you enable. Some providers restrict or prohibit sharing API keys or tokens with third-party services, or require their own sign-in flow — where a provider requires this, the Service offers only that sign-in path. By supplying a credential (including for a custom connector you define), you confirm that the provider’s terms and your role at the account permit granting this access.

6. Fees & prepaid credits

Where a paid plan applies, the subscription fee and billing cycle are those stated when you subscribe, and usage is charged at the usage rates set out in the next paragraph; AI and connector usage may incur model-provider costs. MomentumQ GmbH is not registered for Swiss VAT (Art. 10 MWSTG); no VAT is charged, so fees stated on the pricing page are final, and non-refundable except as required by law. Paid plans renew automatically for successive one-month periods until you cancel; cancellation takes effect at the end of the current paid month, and that month’s fee is not refunded.

Usage of the Service is paid from a prepaid credit balance. One credit is worth CHF 1, and that value never changes, including for credits you have already purchased. Usage is charged in credits at our usage rates: the provider’s published standard price for the model, tool and region that serve the usage (temporary introductory discounts are not passed on), converted to CHF at the exchange rate we apply, plus our margin — for usage on a provider key of your own, our margin only. A change in a provider’s price applies to usage from when it takes effect; a change to our margin or to that exchange rate is a change to fees under Section 14. Your plan’s included credits are added to your balance each month and roll over for twelve months: included credits still unused twelve months after they were added expire without compensation, and the product shows the date and amount beforehand. Included credits added before 22 September 2026 are not subject to this expiry. Usage is drawn from included credits first, oldest first. Credits you purchase remain available and roll over while your subscription is active. Credits are a prepayment for Service usage only: they cannot be exchanged for cash, carry no interest and are non-refundable, save where mandatory law requires otherwise or these terms expressly provide for a refund (Sections 12(d) and 14). Any remaining balance — included or purchased — lapses without compensation when your subscription ends or your workspace is deleted, subject to the same exceptions.

Concluding a subscription online (Art. 3 para. 1 lit. s UWG). The technical steps are: (1) you choose a plan on the pricing page or in your workspace’s billing panel; (2) you are taken to the hosted checkout page of our payment processor, Stripe, where you enter your billing details and payment method and can review and correct every entry before you press the button that confirms the order; (3) pressing that button places a binding order for the plan shown, at the price and billing cycle shown; (4) you receive an electronic confirmation without delay — the payment receipt and invoice by e-mail from our payment processor, and the active plan in your workspace’s billing panel. The contract language is the language you chose in the product; these terms can be retrieved at any time at /terms and saved or printed.

7. Intellectual property

The Service, its software and marks remain ours. The content and deliverables you and your agents create remain yours; you grant us only the limited rights needed to operate the Service for you. You are responsible for ensuring you hold the rights to the content you process.

8. Warranties & disclaimer

To the extent permitted by law, the Service is provided “as is” without warranties of any kind, including fitness for a particular purpose or that output is accurate, lawful or uninterrupted. The Service does not provide legal, tax, financial or medical advice, and output is no substitute for such advice; it is not intended for critical or high-risk decisions without qualified human review.

9. Limitation of liability

To the extent permitted by law, we are not liable for indirect or consequential damages, lost profits or data, and our total liability for any claim is limited to the fees you paid for the Service in the 12 months before the event giving rise to the claim. Liability for unlawful intent or gross negligence remains unaffected.

10. Term & termination

You may stop using the Service and delete your workspace at any time. We may suspend or terminate access for a material breach of these terms or where required by law. On termination, your data is handled as described in the privacy policy.

11. Data protection

Our processing of personal data is described in the privacy policy, which forms part of these terms.

12. Data processing on your behalf

Where your agents process personal data of your customers, employees or contacts — in connected tools or in content you provide — you are the controller and we act as your processor (Art. 9 revDSG; Art. 28 GDPR where it applies). The subject-matter and duration of the processing are your use of the Service; its nature and purpose are the automated tasks you and your agents run; the personal data and the categories of data subjects are those contained in the content and connected tools you choose. For that processing we: (a) process the data only to run the tasks you or your agents initiate and on your documented instructions — including as to any transfer of personal data outside Switzerland/the EEA, which you instruct through your choice of model providers, connectors and data-residency policy — including the providers the platform uses for supporting tasks, as described in section 4 of the privacy policy, which you can confine to the providers of your employees’ own models with the provider setting on the Security page; where the law compels us to process or disclose your data (for example on the demand of an authority), we will inform you first unless the law prohibits it; (b) bind everyone we authorise to process the data to confidentiality; (c) apply the technical and organisational measures listed in the annex to this section; (d) engage only the sub-processors listed in the privacy policy, give you at least 30 days’ notice before adding or replacing one and — if you object on reasonable data-protection grounds and we cannot resolve it — let you terminate the affected part of the Service under Section 10 with a pro-rata refund of unused prepaid credits attributable to it; we bind each sub-processor by written contract or its data-processing terms to data-protection and security obligations that protect your data at least to the standard of this section, and we remain responsible to you for its performance; where a sub-processor is in a state not listed in Annex 1 DSV (for the USA: a recipient not certified under the Swiss-US Data Privacy Framework), the transfer rests on the Standard Contractual Clauses recognised by the FDPIC, with the Swiss amendments; we give that notice by e-mail to your workspace’s owners and in the app, stating the date from which the change takes effect, and a newly added AI model provider does not process your workspace’s data before that date unless an owner accepts the updated list earlier in the app; the only exception to these safeguards are the optional China-region providers identified in the privacy policy, whose standard terms permit them to use content to improve their own services and which are not bound by such clauses — they are reachable only after you enable the China region, and enabling it is your instruction to disclose data to them on your own basis under Art. 17 revDSG; (e) assist you, so far as reasonable and taking into account the nature of the processing and the information available to us, with data-subject requests, with your data protection impact assessment and any prior consultation of the authority (Art. 22–23 revDSG / Art. 35–36 GDPR), and with your security and breach-notification duties; (f) notify you without undue delay, and in any event within 48 hours of becoming aware of it, of a personal-data breach affecting your data, with the information listed in Art. 15 para. 1 DSV as far as it is known, supplemented as it becomes available; (g) at the end of the services, at your choice, return your personal data to you in a commonly used electronic format and/or delete it — deleting your workspace removes the active workspace records immediately, with file erasure, access revocation and restricted cleanup retention as described in the privacy policy — subject to statutory retention duties; (h) make available the information reasonably needed to demonstrate compliance with this section and allow for and contribute to audits, including inspections, by you or an independent auditor you mandate and who is bound to confidentiality, on at least 30 days’ notice and at most once in any 12-month period (or after a breach affecting your data), which we may satisfy by supplying our current security documentation or an independent audit report where one exists; and (i) inform you without undue delay if, in our reasonable opinion, an instruction you give infringes applicable data-protection law, in which case we may pause the affected processing until you confirm or withdraw it; (j) if you are bound by professional secrecy (for example under Art. 321 of the Swiss Criminal Code, Art. 730b of the Code of Obligations or Art. 62 revDSG), act as your auxiliary: everyone we authorise to access your content is bound to secrecy in writing and instructed on Art. 62 para. 2 revDSG and Art. 321 of the Swiss Criminal Code, and accesses your content only to provide support you request or to keep the Service secure; whether your secrecy permits disclosure to the model providers you enable, and whether you need your clients’ consent for it, remains your decision — the provider setting in section 4 of the privacy policy lets you keep every step with the providers you chose; and (k) where you use the Service as a processor for your own client (for example as a fiduciary), you confirm that your client has approved our engagement and the sub-processors listed in the privacy policy, and you pass on our notices under (d). This section is the data processing agreement between you and us; the annex below forms part of it.

Annex to section 12 — technical and organisational measures. Access: sign-in with salted password hashes, optional two-factor sign-in, re-confirmation of the password for sensitive actions, sessions that end after 12 hours without activity and at the latest after 48 hours, workspace roles, and owner-only destructive actions. Separation: every read and write is scoped to its workspace. Encryption: TLS in transit; connector credentials and keys encrypted with AES-256-GCM under a key derived per workspace and decrypted only at the moment of use; the database, file storage and backups are encrypted at rest by their providers. Integrity and control of processing: an approval guardrail pauses consequential agent actions for a human by default; payment caps, the block on irreversible deletions and the credential-leak block hold in every mode; outsider-written content is fenced as data and escalates approvals; writes to connected tools are read back and verified. Logging: a workspace audit trail of human and agent actions; operator actions are recorded in a platform audit trail. Availability: nightly full backups kept for 30 nights, a documented restore procedure for the whole service that has been rehearsed, monitoring of errors and of backup freshness. Data minimisation and deletion: retention limits per record type, pseudonymised abuse counters, workspace deletion with file erasure and provider revocation. Personnel and sub-processors: confidentiality undertakings, access limited to named administrators, sub-processors bound as described in (d). Incidents: a documented breach procedure with notification to you under (f) and to the FDPIC under Art. 24 revDSG. We review these measures when the processing changes and at least once a year.

13. AI transparency

Vorenq is an AI system: you interact with AI agents and their work is AI-generated. The product discloses this — conversations are visibly agent-led and deliverables are attributable to the agent that produced them. When your agents write to people outside your company, the platform itself places a notice at the start of the message stating that it was written by an AI agent on behalf of your company (at the end of a public social-media post) — on every outbound channel that carries text the agent wrote; internal team channels, machine-to-machine endpoints and notifications a provider composes from its own template are excepted, and where a channel cannot carry the notice (for example a pre-approved WhatsApp template or a custom connector) the agent is instructed to state it — and marks e-mails sent through a connected mailbox or e-mail service with a machine-readable header; images and videos your agents generate carry machine-readable metadata identifying them as AI-generated. As the provider of this AI system under Art. 50(1) and (2) of Regulation (EU) 2024/1689 (applicable since 2 August 2026) we cannot let these disclosures be switched off, and you must not remove or obscure them. If you publish or pass on AI-generated output yourself, disclosure duties of your own may apply — in particular labelling deep fakes and AI-generated text published to inform the public (Art. 50(4)) — and meeting them is your responsibility; the built-in approvals, audit trail and provenance help you do so. You must not use the Service for practices prohibited by Art. 5 EU AI Act (such as manipulative techniques or social scoring), nor to depict a real, identifiable person without that person’s consent. The Service may prepare recruitment correspondence and summarise applications against criteria you set; it does not rank, filter or reject applicants, evaluate employees’ performance or behaviour, or assess the creditworthiness of natural persons, and you must not use it to (high-risk uses under Annex III). In the recruitment workflow every message to an applicant is held for your decision in every mode — standing rules, trust grants and monitor mode cannot waive it; you owe applicants the information under Art. 19 and 21 revDSG and must return or delete a declined applicant’s dossier unless the applicant consented to its retention (Art. 328b CO).

14. Changes

We may update these terms. We will give you at least 30 days’ notice of material changes by email or in the product before they take effect. If you do not accept a material change, you may terminate your subscription and delete your workspace before it takes effect, and we then refund your unused purchased credits (usage counts against included credits first, as set out in Section 6). Continued use after that date is acceptance of the updated terms. A change to fees — including our margin and the exchange rate referred to in Section 6 — applies only from the start of your first billing cycle that begins after it takes effect, and never changes the CHF value of credits you have already purchased. Non-material changes (for example clarifications or new optional features), changes required by law or by an authority, and changes that only extend your rights or our obligations take effect when published.

15. Governing law & jurisdiction

These terms are governed by Swiss law, excluding its conflict-of-laws rules and the CISG. The exclusive place of jurisdiction is Zürich, Switzerland, subject to mandatory law. If a provision is invalid, the remainder stays in force.