Terms of Use

These Terms of Use ("Terms") govern access to and use of the sherlock.blue service (the "Service"), published by Alexandre GORSKI EI, a French sole proprietor (entrepreneur individuel, micro-entreprise), registered under SIREN number 911 947 786, registered office 2 Boulevard de Strasbourg, 31000 Toulouse, France ("sherlock.blue"). Contact: contact@sherlock.blue.

They apply to any person holding an account (the "Client") and, on multi-seat plans, to the people it invites (the "Members", Article 2.3). The commercial terms of subscriptions are governed by the Terms of Sale. Creating an account constitutes acceptance of these Terms.

2.1 Eligibility. The Service is reserved for professionals: any natural or legal person acting within their trade, business, craft, liberal or agricultural activity, including freelancers and sole proprietors. It is not intended for consumers. When the Client is a legal entity, the person who creates the account declares that they have the authority to bind it.

The Service is not offered, including in its free version, in countries and territories subject to international sanctions or restrictions, in particular Iran, North Korea, Syria, Russia, Belarus and the occupied regions of Ukraine. By using the Service, the Client declares that they are not located, established or resident in any of these countries or territories, and that they do not appear on any sanctions list of the European Union, the United Nations or the United States. sherlock.blue may suspend or close without notice any account that does not comply with this clause.

2.2 Credentials. The Client provides accurate and up-to-date information. It is solely responsible for the confidentiality of its credentials and API key, for the permissions it grants to its agents, and for any activity carried out from its account or by the agents it connects. It notifies sherlock.blue without delay of any unauthorised use.

2.3 Members. When the subscribed plan includes several seats, the Client may form a team by inviting other people (the "Members"), with a member or viewer role. Each Member creates their own account and accepts these Terms; that account is attached to the Client's and does not exist outside it: removal by the Client deletes it. The obligations of Article 2.2 apply to each Member for their own account. The Client is answerable for the use of the Service by its Members. Only the Client subscribes to, changes or cancels the subscription.

The Service provides the Client's AI agents (Claude, ChatGPT, Cursor or any client compatible with the MCP protocol), operated by the Client, with a framework for sales prospecting: a method (framing, qualification and proof rules, handed to the agent when it opens a search), an organisation (projects, searches, sessions, hand-over notes, exclusions) and a memory (deduplicated prospects, contact details backed by a proof, a stage per prospect). A web application lets the Client see, validate, correct and export.

The Service performs no web search, collects no data from the internet, sends no message and operates no agent. Searches, reading and actions are carried out by the Client's own agents and tools. sherlock.blue uses no artificial intelligence model to process the Client's data. The Service is neither an extraction tool nor a sending tool.

4.1 Control. The Client chooses, configures, connects and operates its own agents. It remains responsible for each of their actions, including those carried out through the MCP connection to the Service, as if it had carried them out itself.

4.2 Safeguards. It is the Client's responsibility to put in place and maintain the necessary safeguards: permissions granted to the agent, sources it is allowed to consult, prevention of any unauthorised access, circumvention of protection or abusive collection.

4.3 Sources. The Client ensures that the consultation of sources and the collection of information by its agents comply with the terms of use of those sources and with applicable law, in particular regarding personal data protection and commercial prospecting.

4.4 Consumption. The Client's agents and tools are provided by third parties with which sherlock.blue has no contractual relationship. Their consumption and costs (tokens, APIs, subscriptions) are borne and monitored by the Client. sherlock.blue has neither access to nor control over them.

4.5 Results. The Service records what the agent reports, with the proof it provides. Data produced by an agent may contain errors, approximations or omissions. It is provided as is, without any warranty of accuracy or completeness, and the Client validates it before any use.

4.6 Compatibility. sherlock.blue strives to keep the Service compatible with the main MCP clients, but is not liable for the evolutions, limitations or unavailability of those clients, which are beyond its control.

5.1 Ownership. The Client remains the owner of all the data it records in the Service, directly or through its agents: projects, objectives, rules, searches, notes, prospects, proofs, exclusions, tags and custom fields (the "Data").

5.2 Warranties. The Client warrants that the Data was collected lawfully, that it has a legal basis to process and use it for prospecting purposes, and that it does not infringe any third-party right.

5.3 Licence. The Client grants sherlock.blue, for the duration of the contract, a non-exclusive licence to host, reproduce, normalise, deduplicate and display the Data, for the sole purpose of providing the Service. sherlock.blue does not transmit the Data to any artificial intelligence model, does not use it to train any system, and neither sells nor shares it.

5.4 Prospects' rights. The Client handles objection, access and erasure requests from the persons appearing in its Data. To that end, the Service provides a "do not contact" flag, which blocks any re-registration of the prospect on the Client's account, as well as per-search exclusions.

5.5 Responsibility. The Client is solely responsible for the Data and for the use it makes of it, in particular for the messages it sends to prospects by its own means.

It is prohibited to use the Service to:

• record data obtained through intrusion, circumvention of technical protection measures, breach of the terms of use of a third-party site or service, or any other unlawful means;
• prospect in breach of applicable law, in particular without the consent required for individuals, by ignoring an objection or an opt-out list, or in a way that harasses a person;
• use data from the Service to send unsolicited bulk messages (spam), or messages that do not clearly identify their sender or do not offer a simple way to opt out;
• use data from the Service for automated calls or telemarketing;
• build files concerning special categories of data (origin, opinions, health, sexual orientation, etc.) or aimed at discriminating;
• carry out or promote an illegal activity, or an activity among the categories prohibited by sherlock.blue's payment provider (Stripe's prohibited and restricted businesses);
• share or transfer one's credentials or API key, circumvent quotas or rate limiting, or query the Service abusively or in an automated way beyond the use intended by the MCP tools;
• extract, copy or reproduce the Service, its tools or its method to build a competing service, or disrupt its operation.

In the event of a breach, sherlock.blue may suspend or terminate the account under the conditions of Article 9.

Use of the Service is bounded by the limits of the subscribed plan (prospects tracked, prospects created per month, projects, seats), defined in the Terms of Sale and on the Pricing page, and by a per-account rate limit intended to prevent abuse. Duplicates and exclusions are not counted. When a limit is reached, the Service refuses the operation concerned and says so; read access to the Data is maintained. When the number of Members exceeds the plan's seats, the Members become read-only.

sherlock.blue strives to keep the Service continuously available, as a best-efforts obligation. sherlock.blue guarantees no availability rate and may temporarily interrupt the Service for maintenance, striving to limit its duration and impact. The Service relies on third-party infrastructure (in particular Cloudflare) for which sherlock.blue is not liable.

sherlock.blue may evolve the Service, its MCP tools and its default method. sherlock.blue strives to announce in the application any evolution that changes the behaviour of the tools in an incompatible way.

9.1 Suspension. sherlock.blue may suspend all or part of the access to the Service, after notice except in urgent cases:

• in the event of a breach of these Terms or of the Terms of Sale;
• in the event of detected abusive use (abnormal volumes, circumvention of limits, automated activity outside the intended use);
• in the event of conduct liable to harm the Service, its other users, third parties or sherlock.blue's reputation;
• at the request of an authority or of a provider essential to the Service (in particular the payment provider);
• in the event of payment default, under the conditions set out in the Terms of Sale.

9.2 Termination. In the event of a serious or repeated breach, sherlock.blue may terminate the account without notice. sherlock.blue may also end the Service for a Client, without having to give reasons, subject to 30 days' notice sent by email, just as the Client may terminate at any time under the conditions of the Terms of Sale. The paid and unused subscription period is then refunded.

The Service, its platform, its MCP tools, its default method, its design, its trademarks and its developments remain the exclusive property of sherlock.blue. Subscribing grants the Client a non-exclusive, non-transferable right to use the Service, for itself and its Members, for the duration of the contract. Any unauthorised reproduction, extraction or reuse is prohibited. The rules the Client writes itself in its projects and searches belong to the Client.

The Client indemnifies and holds sherlock.blue harmless against any third-party claim, action or award (including reasonable defence costs) arising from the Data, from the actions of its agents, from the Client's breach of these Terms, or from its use of the Service in violation of the law or of third-party rights.

The processing of the Client's and its Members' personal data is described in the Privacy Policy.

As regards the personal data contained in the Data (in particular prospects), the Client acts as controller and sherlock.blue as processor, in accordance with the "Data Processing Agreement" annex to these Terms, which forms an integral part of them.

Payment data is collected and processed by Stripe, payment service provider, acting as a separate controller, in accordance with its privacy policy.

Termination of subscriptions is governed by the Terms of Sale. The Client may request the deletion of its account, and any Member that of theirs, at contact@sherlock.blue; deletion is carried out within one month at most. Deleting the Client's account deletes its Data and its Members' accounts; only aggregated, anonymous statistics are kept. Removal of a Member by the Client deletes that Member's account.

sherlock.blue may amend these Terms. Any substantial change is notified to the Client at least 15 days before it takes effect. Continued use of the Service after that date constitutes acceptance.

These Terms are governed by French law, whatever the Client's country; the French version alone is authoritative. Any dispute not settled amicably within 30 days falls under the exclusive jurisdiction of the courts of Toulouse.

This agreement governs the processing, by sherlock.blue (the "Processor"), of the personal data contained in the Data on behalf of the Client (the "Controller").

1. Subject matter, nature and purpose. Hosting of the Data, normalisation of contact details, duplicate detection, tracking of each prospect's stage, provision to the Client, its Members and its agents.

2. Duration. For the whole duration of the Service contract.

3. Categories of data and data subjects. Data subjects: the prospects recorded by the Client (executives, employees, freelancers, professionals) and any person mentioned in notes or exclusions. Data: identity, job title, company, professional contact details (email, phone, website, social profiles), address, description, source, proof, tags and custom fields defined by the Client, stage and flags (do not contact, dismissed, bounced).

4. Instructions. The Processor processes the data only on the Controller's documented instructions, embodied in these Terms and in the Client's configuration of the Service (projects, rules, searches). It informs the Client if, in its view, an instruction infringes the GDPR.

5. Confidentiality and security. The Processor ensures that persons authorised to process the data are bound by a confidentiality obligation, and implements appropriate technical and organisational measures (encryption in transit, hashing of IP addresses and API keys, partitioning of data per account, role-based access control).

6. Sub-processors. The Client gives general authorisation for the use of the following sub-processor: Cloudflare, Inc. (hosting and infrastructure; the Data is stored in Western Europe). The Processor calls upon no artificial intelligence model. It informs the Client of any intended change (addition or replacement), the Client being able to object; in the event of persistent disagreement, the Client may terminate the Service. The Processor imposes on its sub-processors obligations equivalent to these.

7. Transfers outside the EU. The sub-processor may process data outside the European Union, in particular while routing it; such transfers are governed by appropriate safeguards within the meaning of Chapter V of the GDPR (in particular standard contractual clauses and, where applicable, the adequacy frameworks in force).

8. Assistance. Taking into account the nature of the processing, the Processor reasonably assists the Client in responding to data subjects' requests to exercise their rights, in particular through the "do not contact" flag and the editing and deletion of prospects in the application, and in complying with its obligations under Articles 32 to 36 of the GDPR.

9. Data breach. The Processor notifies the Client of any personal data breach without undue delay after becoming aware of it, with the information useful for any notification to the supervisory authority.

10. Fate of the data. At the end of the contract, the Processor returns or deletes, at the Client's choice, the data processed on its behalf, within a reasonable time, unless a legal obligation requires retention.

11. Documentation and audit. The Processor makes available to the Client the information necessary to demonstrate compliance with this agreement and allows, upon the Client's written request, at most once a year and at the Client's expense, a documentary audit.