Terms of Use

Last updated: March 2026. These terms govern access to and use of the SENAITE Cloud hosting service operated by RIDING BYTES GmbH (“we”, “us”).

1. Subject Matter

SENAITE Cloud is a managed hosting service. We provide dedicated Docker-based infrastructure on which a SENAITE LIMS instance is deployed, operated, and maintained on behalf of the customer (“you”). SENAITE is open-source software licensed under the GNU General Public License v2 (GPL-2.0). Hosting fees cover infrastructure, administration, and support only — not any licensing fee for SENAITE itself.

2. Service Description

Each subscription includes:

• A dedicated SENAITE instance running in a Docker container on Hetzner infrastructure in the EU.
• Automated daily backups retained for at least 7 days.
• Managed updates to SENAITE core packages and system dependencies.
• TLS termination via reverse proxy; instance accessible over HTTPS only.
• Email-based support response according to the selected plan.

3. Account and Access

You are responsible for keeping your access credentials confidential. You must not share credentials with unauthorized parties. You must notify us immediately if you suspect unauthorized access to your instance.

You must not use the service to store or process data for which you do not hold the necessary legal basis, including patient data without a valid data processing agreement in place (see Section 7).

4. Acceptable Use

The service must not be used to:

• Violate applicable law, including data protection regulations.
• Perform security testing or penetration testing against infrastructure you do not own without our prior written consent.
• Consume resources in a manner that materially degrades service for other customers (e.g., uncontrolled scripts generating excessive load).

5. Availability and SLA

We target high availability but do not guarantee 100% uptime. Scheduled maintenance windows are announced at least 24 hours in advance. Emergency maintenance may occur without prior notice. An explicit SLA with defined uptime commitments and remedies is available on request as part of an Enterprise subscription.

6. Subscription and Payment

Subscriptions are billed monthly in advance. Invoices are issued in EUR. Prices exclude VAT where applicable. Payment is processed via Stripe. Subscriptions renew automatically unless cancelled in writing at least 14 days before the next billing date.

In case of late payment we reserve the right to suspend the service after a written reminder with a 7-day grace period.

7. Data Protection and Data Processing Agreement

When you store personal data (including patient or laboratory data) in your SENAITE instance, we act as a data processor under GDPR Article 28. A Data Processing Agreement (DPA) is required before personal data may be stored. Please contact info@ridingbytes.com to obtain and sign the DPA.

Our processing activities are described in the Privacy Policy.

8. Data Ownership and Portability

All data you store in your SENAITE instance remains your property. Upon request or upon termination of the subscription, we provide a full data export (ZODB FileStorage + blobstorage or a PostgreSQL dump where applicable) within 10 business days. Data is deleted from our infrastructure within 30 days after export delivery or subscription end, whichever is later.

9. Limitation of Liability

Our liability is limited to cases of intent and gross negligence. We are not liable for indirect damages, loss of profit, or data loss caused by events outside our control. Our total liability per incident is capped at the total fees paid in the three months preceding the incident.

10. Termination

Either party may terminate the subscription with 30 days’ written notice. We may terminate immediately in case of material breach of these terms, non-payment after the grace period, or if continued service would violate applicable law.

11. Governing Law and Jurisdiction

These terms are governed by German law. The exclusive place of jurisdiction for all disputes arising from this contract is the registered seat of RIDING BYTES GmbH, unless mandatory statutory provisions provide otherwise.

12. Changes to These Terms

We may update these terms. Existing customers will be notified by email at least 30 days before changes take effect. Continued use of the service after that date constitutes acceptance.