Terms of service

In these terms, the following expressions have the following meanings:

Application

FlowSentinel, the hosted security governance application for HubSpot portals operated by Six & Flow, including its marketing site, console, APIs and related documentation.

Customer

The organisation on whose behalf the Application is installed, connected or accessed, including its authorised users.

Customer Data

All data retrieved from, or transmitted to, the Customer's HubSpot portals through the Application, including user, team, permission, property and object metadata.

Customer Personal Data

Personal Data processed by Six & Flow on behalf of the Customer in connection with the Services.

Data Protection Law

All applicable data protection and privacy legislation, regulation and guidance, including Regulation (EU) 2016/679 (the GDPR), the UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003, together with any guidance or codes of practice issued by a Data Protection Regulator.

Data Protection Regulator

The Information Commissioner's Office and any other supervisory authority with jurisdiction over either party.

Fees

The subscription fees payable for the Services as set out in an Order or on the published pricing page at the time of purchase.

HubSpot

HubSpot, Inc. and the HubSpot platform, APIs and portals with which the Application integrates.

Intellectual Property Rights

All patents, rights to inventions, copyright and related rights, trade marks, business and domain names, rights in computer software, database rights, rights in confidential information and all other intellectual property rights, whether registered or unregistered, anywhere in the world.

Order

A subscription order, proposal or online purchase confirming the plan, portal count and Fees for the Services.

Services

The hosted access to the Application and the features included in the Customer's plan, including portal connection, synchronisation, drift detection, security alerts, audit trail, property hygiene and user provisioning.

Six & Flow

Six & Flow Ltd, a company incorporated in England and Wales with company number 09465254, whose registered office is at Second Floor, Barton Arcade, Deansgate, Manchester, M3 2BH.

2.1 This agreement takes effect when the Customer first installs the Application, connects a HubSpot portal or accepts an Order, whichever is earlier. It continues for the initial subscription term stated in the Order or, for monthly plans, on a rolling monthly basis.

2.2 At the end of the initial term, the subscription renews for successive periods of the same length unless either party gives written notice of non-renewal before the renewal date.

2.3 A trial period, where offered, is provided free of charge and may be ended by either party at any time before conversion to a paid plan.

3.1 Six & Flow grants the Customer a non-exclusive, non-transferable right to access and use the Application during the subscription term, solely for the Customer's internal business purposes and for the number of connected portals included in its plan.

3.2 The Application operates as an integration with HubSpot. The scope, frequency and results of the Services depend on the data, endpoints and permissions that HubSpot makes available for the Customer's HubSpot subscription tier. Where HubSpot restricts an endpoint by tier, the affected feature is shown as unavailable in the Application rather than reported as an error, and no refund is due for limitations imposed by HubSpot's own tiering.

3.3 Six & Flow will provide the Services with reasonable skill and care and will use commercially reasonable efforts to keep the Application available, subject to planned maintenance and events beyond its reasonable control.

3.4 Six & Flow may improve or modify the Application from time to time, provided no change materially reduces the functionality of the Customer's plan during a paid term.

4.1 The Customer warrants that:

• it is duly authorised to enter into this agreement;
• it holds the rights and permissions needed to connect each HubSpot portal it connects to the Application, and is authorised to allow the Application to read and, where the plan includes provisioning, write user, team and permission data in those portals;
• each person it invites to the console is authorised to act on its behalf, and it is responsible for their use of the Application;
• the information it provides is accurate and kept up to date.

4.2 The Customer must not:

• share account credentials or permit access by anyone other than its authorised users;
• attempt to probe, scan, reverse engineer or interfere with the Application except as permitted by law;
• use the Application to process data it has no lawful right to process, or in breach of HubSpot's own terms of service;
• resell, sublicense or provide the Services to any third party without written consent.

4.3 The Customer is responsible for actions it instructs the Application to perform in HubSpot, including user provisioning, offboarding and record reassignment. The Application records these actions in its audit trail; execution of an instruction remains the Customer's decision.

5.1 The Customer will pay the Fees for its chosen plan. Fees are exclusive of VAT, which will be added where applicable.

5.2 Subscription Fees are payable in advance for each billing period. Plan changes take effect in accordance with the billing terms shown at the point of purchase.

5.3 If payment is overdue, Six & Flow may suspend access to the Application until the outstanding amount is settled, having given reasonable notice.

6.1 Each party will comply with Data Protection Law. As between the parties, the Customer is the Controller of Customer Personal Data and Six & Flow acts as Processor when processing Customer Personal Data to provide the Services.

6.2 Six & Flow will:

• process Customer Personal Data only on the Customer's documented instructions, including as needed to provide and secure the Services;
• ensure persons authorised to process Customer Personal Data are bound by confidentiality obligations;
• implement appropriate technical and organisational measures, including encryption of access credentials at rest and role-based access controls;
• assist the Customer, so far as reasonable, with data subject requests and its own compliance obligations;
• notify the Customer without undue delay on becoming aware of a personal data breach affecting Customer Personal Data.

6.3 HubSpot OAuth tokens are stored in encrypted form and are never exposed to end users of the Application.

6.4 The Customer remains responsible for the lawfulness of the personal data held in its HubSpot portals and for having a lawful basis for Six & Flow to process it.

7.1 The Application depends on HubSpot's APIs and availability. Six & Flow is not responsible for interruptions, changes or restrictions imposed by HubSpot, including changes to API behaviour, rate limits, scopes or tier entitlements.

7.2 The Customer's use of HubSpot remains governed by its own agreement with HubSpot. Nothing in these terms transfers any responsibility for HubSpot's services to Six & Flow.

7.3 FlowSentinel is not affiliated with, endorsed by or sponsored by HubSpot, Inc.

8.1 All Intellectual Property Rights in the Application, including its software, design, documentation and branding, belong to Six & Flow or its licensors. No rights are granted other than the limited right of use in clause 3.1.

8.2 All Intellectual Property Rights in Customer Data remain with the Customer. The Customer grants Six & Flow a licence to use Customer Data only as needed to provide the Services.

Each party will keep the other's confidential information confidential, use it only for the purposes of this agreement and not disclose it to any third party except to employees, advisers or subprocessors who need to know it and are bound by equivalent obligations, or as required by law. This clause survives termination.

10.1 Nothing in these terms excludes or limits either party's liability for death or personal injury caused by negligence, fraud or fraudulent misrepresentation, or any liability that cannot be excluded by law.

10.2 Subject to clause 10.1, Six & Flow is not liable for loss of profits, revenue, goodwill, anticipated savings or data, or for indirect or consequential loss.

10.3 Subject to clauses 10.1 and 10.2, Six & Flow's total liability arising out of or in connection with this agreement in any contract year is limited to the Fees paid or payable by the Customer in that year.

10.4 The Application identifies and reports security and hygiene findings in the Customer's HubSpot portals. It does not guarantee that a portal is secure, and decisions taken in response to findings remain the Customer's responsibility.

11.1 Either party may terminate this agreement by written notice if the other commits a material breach that is not remedied within 14 days of notice, or becomes insolvent or enters administration or liquidation.

11.2 The Customer may end a monthly subscription at any time with effect from the end of the current billing period.

11.3 On termination, the Customer should disconnect its portals from the Application. Six & Flow will delete the Customer's stored access credentials and Customer Data within a reasonable period, save for records it is required by law to retain.

12.1 Neither party is liable for failure to perform caused by events beyond its reasonable control.

12.2 The Customer may not assign this agreement without Six & Flow's written consent, not to be unreasonably withheld.

12.3 If any provision of these terms is found unenforceable, the remainder continues in force.

12.4 This agreement, together with any Order, is the entire agreement between the parties and supersedes any prior arrangement relating to its subject matter.

12.5 This agreement is governed by the laws of England and Wales, and the parties submit to the exclusive jurisdiction of the courts of England and Wales.

12.6 Questions about these terms can be raised through the support page.