Terms of Service
These Terms of Service (the "Terms") govern your access to and use of the Torienta Org Health Scanner service (the "Service"), operated by Ayoub Khayati, a private individual residing in Denmark ("Torienta," "we," "us," or "our"). By creating an account, connecting a Salesforce organization, or otherwise using the Service, you agree to be bound by these Terms.
If you do not agree to these Terms, do not access or use the Service.
1. The Service
Torienta provides an automated Salesforce organisation audit tool. After you connect a Salesforce organisation via OAuth, the Service reads schema metadata and aggregate counts and computes an org-health score, categorised findings, and prioritised remediation guidance. The Service never writes data back to your Salesforce organisation. The default scan reads only schema metadata and aggregate counts (never the values inside your records); any reading of record values occurs solely through Optional Capabilities you explicitly enable (see Section 6 and the Privacy Notice).
The exact scope of data read is governed by capability grants you make via the Service's consent UI and described in the Privacy Notice.
2. Eligibility
To use the Service you must:
a. Be at least 18 years of age.
b. Have authority to bind any Salesforce organisation you connect (if connecting an organisation belonging to your employer, you must have your employer's authorisation).
c. Not be barred from receiving the Service under the laws of Denmark, the European Union, or your country of residence.
d. Not be a competitor of the Service using access to evaluate or replicate the Service.
By accepting these Terms you represent and warrant the above.
3. Account creation
You create an account by signing up via passwordless email authentication. You are responsible for:
a. Providing accurate contact information.
b. Maintaining the security of the email address linked to your account.
c. All activity occurring under your account.
You may close your account at any time via the in-app Disconnect + Account Deletion flow OR by emailing info@torienta.com. Account closure triggers hard-deletion of associated Personal Data within 24 hours.
4. Beta / Early-Access status
The Service is currently offered in Early Access. You acknowledge and accept that:
a. The Service is provided "as is" and without warranty of any kind, express or implied.
b. No Service Level Agreement (SLA) applies. Uptime, performance, and feature availability are best-effort.
c. Features may be added, modified, or removed without notice.
d. The Service is currently free of charge. Future commercial terms (pricing, billing) will be communicated to you in advance via in-app banner + email at least 30 days before taking effect; you will have the option to discontinue use rather than accept paid terms.
e. Findings, scores, and recommendations are informational only and not professional advice. You retain full discretion and responsibility for any change you make to your Salesforce organisation based on Service output.
5. Acceptable use
You agree not to:
a. Reverse-engineer, decompile, disassemble, or attempt to derive the source code of the Service.
b. Scrape, crawl, or extract data from the Service in bulk except as permitted by export features.
c. Use the Service to violate any law or regulation, infringe any intellectual property right, or transmit malware.
d. Probe, scan, or test the vulnerability of any Service system except per the responsible disclosure process at /.well-known/security.txt.
e. Bypass authentication, rate-limiting, or other access controls.
f. Use the Service to compete with the Service, train any machine-learning model on Service output, or build a substitute service.
g. Misrepresent your authority to connect a Salesforce organisation you do not own or operate.
Violation may result in immediate account suspension or termination per Section 13.
6. Salesforce integration scope
a. The Service connects to your Salesforce organisation via standard OAuth 2.0. Salesforce offers no read-only OAuth scope, so the Service requests the api scope (the minimum that can read schema) and never requests full. The Service uses that access read-only for the default scan and never writes back. No managed package or "Connected App with full access" is required.
b. You authorise the Service to read the data described in the Privacy Notice (Salesforce data access) and constrained by capability grants per Section 1.
c. You may revoke the Service's access to your Salesforce organisation at any time via Salesforce Setup → Connected Apps OAuth Usage → Revoke, OR via the Service's in-app Disconnect flow. Revocation triggers hard-deletion within 24 hours.
d. The Service is not affiliated with, endorsed by, or sponsored by Salesforce, Inc. "Salesforce" is a trademark of Salesforce, Inc.
7. Your data; your responsibility
a. You retain all right, title, and interest in your Salesforce organisation data. We claim no ownership over your data.
b. You are solely responsible for the legality, accuracy, and content of data in your Salesforce organisation. We do not validate, edit, or curate that data.
c. You are solely responsible for ensuring your authority to share that data with the Service, including obtaining any consents required from your data subjects.
d. To the extent your Salesforce organisation contains Personal Data subject to GDPR, the Data Processing Agreement supplements these Terms and governs processing carried out on your behalf.
e. You are responsible for maintaining your own backups of your Salesforce organisation and for ensuring you are authorised to connect it. You connect at your own risk.
8. Intellectual property
a. The Service, including all software, designs, content, brand, and documentation, is owned by Torienta and protected by Danish, European, and international intellectual-property law.
b. Findings, scores, and reports computed about your Salesforce organisation are owned by you and licensed back to Torienta for the limited purpose of operating the Service.
c. Aggregated and anonymised insights (in which no individual customer is identifiable) may be used by Torienta for product improvement and external communication. Cross-customer benchmarking is gated on ADR amendment + customer notice per Privacy Notice (How we use it).
d. You grant Torienta a worldwide, non-exclusive, royalty-free licence to use any feedback you submit via the Service or otherwise for the purpose of improving the Service. We will not identify you as the source without your consent.
e. No AI/ML training on your data. Torienta does not use your Salesforce metadata, schema, record values, or scan results — nor any aggregated insight derived from them — to train, fine-tune, or develop any machine-learning or large-language model, whether directly or via a third-party AI service. Any AI-assisted feature Torienta may introduce operates only on derived, non-identifying artifacts.
9. Privacy
Our processing of Personal Data is governed by the Privacy Notice and, where you act as a data controller of records in your Salesforce organisation, by the Data Processing Agreement. Both documents are incorporated into these Terms by reference.
10. DPA incorporation
If and to the extent you transfer Personal Data to the Service as a data controller, the Data Processing Agreement applies to that transfer and supplements these Terms. Click-through acceptance of these Terms constitutes execution of the DPA. A counter-signable copy is available on request to info@torienta.com.
11. Confidentiality
Each party agrees to keep confidential any non-public information disclosed by the other party in connection with the Service, except as required by law or to enforce rights under these Terms. The confidentiality obligation survives termination of the Service.
12. Disclaimers
a. The Service is provided "as is" and "as available". To the maximum extent permitted by Danish law, Torienta disclaims all warranties, express or implied, including warranties of merchantability, fitness for a particular purpose, non-infringement, and uninterrupted operation.
b. Torienta does not warrant that Service output is accurate, complete, current, or suitable for any particular use.
c. Torienta does not provide professional advisory services. Service output is not Salesforce administration advice, security advice, or legal advice.
d. Some jurisdictions do not allow the exclusion of certain warranties. To the extent your jurisdiction overrides these disclaimers, the disclaimers apply to the maximum extent permitted.
e. No reliance; verify before acting. Service output is automated, may contain errors, and must be independently verified before you act on it. You are solely responsible for any change you make to your Salesforce organisation. Torienta is not liable for any loss arising from changes you make in reliance on Service output — including data loss from deleting or modifying fields, records, or automations.
f. Third-party dependencies. The Service depends on Salesforce APIs and third-party infrastructure outside Torienta's control. Torienta is not liable for unavailability, errors, delays, or data issues originating with Salesforce or other third parties.
13. Limitation of liability
a. Torienta is provided free of charge during early access. To reflect the non-commercial nature of this arrangement and Torienta's limited resources as a solo-founder operation — a legitimate basis for limiting downside exposure on an unmonetised service — and to the maximum extent permitted by Danish law, Torienta's total aggregate liability arising from or related to these Terms, the Service, or any use of the Service, whether the claim arises in contract, tort (including negligence), statute, or otherwise, shall not exceed the greater of: (i) the fees paid by you to Torienta in the 12 months preceding the event giving rise to the claim, OR (ii) one hundred euros (EUR 100).
b. Neither party is liable for indirect, incidental, consequential, special, punitive, or exemplary damages, lost profits, lost revenue, or loss of data, even if advised of the possibility.
c. The limitations of this Section 13 do not apply to: (i) liability that cannot be limited under Danish law, (ii) fraud or wilful misconduct, (iii) gross negligence, (iv) breach of confidentiality, or (v) infringement of the other party's intellectual property.
d. Time-bar for claims. To the extent permitted by Danish law, any claim arising from or related to these Terms or the Service must be brought within twelve (12) months of the event giving rise to it; thereafter it is permanently barred.
e. Sole remedy; savings. Your sole and exclusive remedy for dissatisfaction with the Service is to stop using it. If any limitation in this Section 13 is held unenforceable, Torienta's liability is limited to the minimum permitted by applicable law.
14. Indemnification
You agree to indemnify, defend, and hold harmless Torienta from any third-party claim arising from: (a) your breach of these Terms, (b) your unauthorised use of the Service, (c) your violation of any law or regulation applicable to your use of the Service (including employment, data-protection, intellectual-property, or tax law) or any third-party right, (d) any data you submitted to the Service that infringes a third-party right.
15. Termination
a. You may terminate your use of the Service at any time by closing your account per Section 3 OR by ceasing to use the Service.
b. We may suspend or terminate your access to the Service at any time, with or without cause, with or without notice, including for breach of these Terms.
c. Upon termination, your right to use the Service ceases immediately. We will delete your Personal Data within 24 hours. Sections 7, 8, 11, 12, 13, 14, 17, and 18 survive termination.
16. Controller succession
The Controller of these Terms may be succeeded, without your renewed consent and without amendment to these Terms or the Data Processing Agreement, by any Danish-registered legal entity wholly owned and controlled by Ayoub Khayati that succeeds to the Service. Permitted successor forms include Personligt Ejet Mindre Virksomhed (PMV), Enkeltmandsvirksomhed (EM), Anpartsselskab (ApS), or any future legal form serving the same controlling natural person. You will be notified of any such transition via in-app banner + email at least 14 days before it takes effect.
17. Governing law and jurisdiction
These Terms are governed by the laws of Denmark, excluding conflict-of-laws principles. The Danish courts have exclusive jurisdiction over disputes arising from these Terms, except where a mandatory consumer-protection rule of your country of residence overrides this election.
For EU-based business Customers, this election applies. For non-EU Customers, IDA Juridisk Rådgivning advice may revise this Section.
18. Changes to these Terms
We may revise these Terms from time to time. Material revisions take effect 30 days after notice via in-app banner + email; non-material revisions (typos, formatting) take effect immediately. Continued use of the Service after the effective date constitutes acceptance. If you do not accept a material revision, you may close your account before the effective date.
19. Miscellaneous
a. Entire agreement. These Terms, the Privacy Notice, and the Data Processing Agreement constitute the entire agreement between you and Torienta and supersede any prior agreement on the same subject matter.
b. Severability. If any provision of these Terms is held unenforceable, the remaining provisions remain in full force.
c. No waiver. Failure to enforce any provision does not constitute waiver of that provision.
d. Assignment. You may not assign or transfer your rights under these Terms without our prior written consent. We may assign these Terms to any legal entity succeeding to the Service per Section 16.
e. Force majeure. Neither party is liable for delay or failure caused by events beyond reasonable control (natural disaster, war, government action, internet outage, third-party-service failure).
f. No agency. No partnership, joint venture, agency, or employment relationship is created by these Terms.
g. Notices. Notices to Torienta: info@torienta.com. Notices to you: the email address on your account.
20. Contact
For questions about these Terms: info@torienta.com.
For security or vulnerability disclosure: see /.well-known/security.txt (pending publication) or security@torienta.com.
Self-drafted by founder from public templates and subject to professional legal review by IDA Juridisk Rådgivning; published under our review-after-publish policy. Not legal advice. Questions: info@torienta.com.