Legal
Terms of Service
1. Agreement, parties and definitions
These Terms of Service (“Terms”) are a binding agreement between Parity Development LLC, an Arizona limited liability company (“we”, “us”, “Provider”), and the organization that signs up for or uses the Service (“Customer”, “you”).
The Service is offered under the brand name HostedBI. The brand name may change; a change of brand name does not change the parties or these Terms.
The person accepting these Terms on Customer’s behalf confirms they have authority to bind Customer. These Terms incorporate the Acceptable Use Policy (“AUP”), the Data Processing Agreement (“DPA”), the Privacy Policy, and any order form, quote or online plan selection (“Order”). If they conflict, the order of precedence is: a signed Order, then the DPA (for personal data), then these Terms, then the AUP.
Definitions
| Term | Meaning |
|---|---|
| Service | Our hosted analytics portal and scheduled report delivery service, including client portals at <slug>.hostedbi.app, any custom domain we configure for you, email delivery, and related support. |
| Portal | Your branded, web-based site where Authorized Users sign in to view reports. |
| Customer Content | Power BI files (PBIX) and reports you upload or publish, the data inside them, files you upload, branding assets, and anything else you or your users submit to the Service. |
| Customer Data | Customer Content plus personal data about your users and recipients that we process to provide the Service. |
| Authorized User | A person you invite who has a Portal login (for example Client Owner, Client Admin, Report Manager or Viewer). |
| Email-Only Recipient | A person your administrators add to receive scheduled report emails who has no Portal login. |
| Plan | The subscription tier you select (for example Portal or Deliver plans), with the limits and features listed on our pricing page or Order. |
| Underlying Engine | Microsoft Power BI and Microsoft Fabric, which we use to store, refresh and render reports. |
| Usage Data | Records of how the Service is used, such as sign-ins, report views, deliveries and administrative changes. |
2. The Service
2.1 What we provide. The Service is a branded analytics portal and report delivery platform. You upload or publish reports built in Microsoft Power BI Desktop. We host them, refresh their data on a schedule, show them to your Authorized Users in your Portal, and email scheduled report exports to the recipients you choose. Viewers do not need their own Power BI license or Microsoft account to use the Portal.
2.2 Our platform’s value. The Service includes our Portal, white-label branding, user, group, folder and report permissions, row-level security mapping, scheduled email delivery, a data source credential wizard, report version history, usage analytics, and an activity log.
2.3 Underlying Engine. The Service uses Microsoft Power BI and Microsoft Fabric as its underlying engine. The Service is designed to work with reports built for Power BI. HostedBI is not affiliated with, endorsed by or sponsored by Microsoft. Microsoft, Power BI and Fabric are trademarks of the Microsoft group of companies. You buy an analytics service from us, not Microsoft products, licenses or computing resources.
2.4 Changes to the Service. We may improve or change the Service. We will not materially reduce the core features of your current Plan during a paid term without notice of at least 30 days. If such a change harms you, you may cancel and receive a pro-rated refund of prepaid fees for the unused period.
2.5 Service levels. We aim to keep the Service available during US business hours, roughly 6 a.m. Eastern to 8 p.m. Pacific on weekdays. Reports may take a short time to load outside those hours while resources start. This is a goal, not a commitment. We do not offer a service-level agreement, uptime guarantee or service credits unless a signed Order says so.
3. Accounts, users and roles
3.1 Your organization. Each Customer has one organization in the Service, with exactly one Client Owner. The Client Owner holds billing and plan authority and cannot be removed without transferring ownership to another Authorized User.
3.2 Inviting users. Your administrators invite Authorized Users by email and assign roles (Client Admin, Report Manager or Viewer). You are responsible for who you invite, the roles and report access you grant, and the row-level security roles you map to each person. You must remove access promptly when someone leaves your organization.
3.3 Security of accounts. Each Authorized User must keep their sign-in details confidential. Two-step sign-in (authenticator app) is required for Client Owners, Client Admins and our staff, and optional for other users. You are responsible for activity under your accounts, except activity caused by our breach of these Terms. Tell us promptly at [email protected] if you suspect unauthorized access.
3.4 Email-Only Recipients. Your administrators may add Email-Only Recipients on Plans that include them. You are responsible for having a lawful basis and the recipient’s expectation to send them reports. Every scheduled email includes an unsubscribe link, and we honor unsubscribes.
3.5 Access is fail-closed. If a report uses row-level security and a user or recipient has no assigned role, the Service shows or sends nothing to that person rather than unfiltered data. You remain responsible for designing your reports’ security roles correctly.
3.6 Our staff access. Our authorized staff may access your organization to provide support, troubleshoot, or upload reports on your behalf. Staff actions are recorded in your organization’s activity log, visible to your administrators. Staff sign-in requires two-step verification.
4. Acceptable use
4.1 AUP. You and your users must follow the Acceptable Use Policy.
4.2 No protected health information. You must not upload, publish, refresh into, or send through the Service any protected health information (PHI) as defined under HIPAA, or other health data regulated as sensitive. We do not sign business associate agreements. The Service is not designed for PHI, and any PHI in Customer Content is there in breach of these Terms. You also must not use the Service for the other sensitive data listed in AUP Section 2.2.
4.3 Restrictions. You must not resell or sublicense the Service except as an Order allows; reverse engineer it; use it to build a competing product; bypass plan limits, security or row-level security; or access other customers’ data.
4.4 Plan limits. Plans limit things like the number of viewers, reports, model size, refreshes and subscriptions. We enforce limits at upload and through periodic checks. If you exceed a limit, we will notify you and may ask you to upgrade or reduce usage within 14 days before restricting the excess.
5. Plans, fees and payment
5.1 Fees. You pay the fees for your Plan and any add-ons shown on our pricing page or your Order. Fees are for the analytics service (viewers, reports, refresh frequency, subscriptions and features), not for any Microsoft product or computing resource. Prices are in US dollars.
5.2 Billing and payment processor. We bill through our payment processor, Stripe. A valid payment method (card or ACH bank debit) is required at signup. Monthly Plans are billed in advance each month. Annual Plans are billed in advance for the year; where we agree to invoice you, invoices are due within 10 days and must be paid before the service period starts. You authorize us and Stripe to charge your payment method for recurring fees until you cancel. Invoices and receipts are sent to the billing contacts you list.
5.3 Trial. We may offer a free trial for the length stated on the signup page or in the promotion. If the offer collects a payment method and says the trial converts to a paid Plan, the trial converts automatically at its end unless you cancel before then, and we will email you at least 3 days before the first charge. Otherwise the trial ends without charge, and you can choose a Plan to continue. Trial features may be limited and are provided as-is.
5.4 Discounts and promotions. Founding-customer, annual, renewal-bridge and other discounts apply only as stated in the Order or coupon terms, including any end date. When a discount ends, the then-current price for your Plan applies. Promotional and founding-customer discounts are applied as Stripe coupons or promotion codes. The duration and conditions shown at checkout or in your Order control, including whether the discount continues after a Plan change.
5.5 Price changes. We may change prices for future terms with at least 30 days’ notice. Changes take effect at your next renewal.
5.6 Plan changes. Upgrades take effect immediately and are pro-rated. Downgrades take effect at the next billing period. If your usage exceeds the lower Plan’s limits, you should reduce usage to the new limits before the downgrade takes effect. If you have not, we keep all your data but block new additions above the new limits (such as reports or users), and may archive the excess (hidden, not deleted) until you reduce usage or upgrade. We will never silently delete your data because of a downgrade. On downgrade to a Plan without row-level security, reports with security roles stop displaying and sending rather than showing unfiltered data.
5.7 Taxes. Fees exclude taxes. You pay applicable sales, use, VAT and similar taxes, other than taxes on our income. We do not currently charge sales tax on the Service. If tax becomes due, we will calculate and collect it through Stripe and show it on your invoice.
5.8 Late or failed payment. If a payment fails, we and Stripe will retry it. If it remains unpaid:
- we notify your billing contacts and give a grace period of 14 days;
- the Portal may then show a banner and become read-only;
- after 16 more days we may suspend the Service;
- if fees are still unpaid after 30 days of suspension, we may terminate under Section 9 and delete Customer Data under Section 10.
We do not charge late fees or interest.
5.9 Refunds. Fees are non-refundable. We do not give refunds or credits for partial periods or unused features, users or reports, except as required by law. Refunds stated elsewhere in these Terms (Sections 2.4, 9.3 and 12.3) apply regardless.
5.10 Disputes about charges. Tell us at [email protected] within 60 days of a charge you dispute. Please contact us before filing a chargeback so we can resolve it.
6. Customer Data
6.1 You own your data. As between the parties, you own Customer Content and Customer Data. You grant us a non-exclusive, worldwide license to host, copy, process, render, transmit and display it only as needed to provide, secure and support the Service, and as the DPA describes.
6.2 Your responsibilities. You confirm that you have the rights and permissions needed for us to process Customer Content, including data your reports pull from third-party systems. You are responsible for the accuracy of your data and reports, and for decisions made using them. The Service reports on your data; it does not keep books or provide financial, legal or other professional advice.
6.3 Personal data. Our processing of personal data in Customer Data is governed by the DPA, in which you are the controller and we are the processor.
6.4 Where data is stored. We host the Service and store Customer Data in the United States, in Microsoft Azure’s Central US region, including the Underlying Engine resources that hold your reports. Some subprocessors listed in the DPA may process limited data, such as billing details or email delivery metadata, in other locations.
6.5 Report versions. We keep every version of each PBIX file you upload, so an earlier version can be restored on request. Versions are deleted with your organization (Section 10) or under a retention schedule we publish. We do not currently prune old versions during your subscription.
6.6 Treat reports as sensitive. PBIX files contain data. We store them privately, encrypted at rest, in storage separated by your organization’s ID, and access them only to provide the Service.
7. Data source credentials
7.1 How credentials are handled. To refresh your reports, you enter sign-in details for your data sources (such as a database login or an API key) in our credential wizard. We pass those credentials directly to the Underlying Engine (Microsoft Power BI), which stores them encrypted. We do not store data source credentials in our database, logs or activity records, and we do not show them again after entry.
7.2 Use dedicated, least-privilege accounts. We strongly recommend a dedicated, read-only reporting account for each data source. You are responsible for the accounts and permissions you provide and for revoking them when no longer needed.
7.3 Network access. Report refreshes connect to your data sources from Microsoft’s published Power BI network address ranges, not from a fixed IP address of ours. We do not promise a fixed IP address unless an Order says so.
7.4 Third-party sources. Your data sources (and their availability, terms and changes) are outside our control. A source that changes its connector, authentication or API may stop refreshing until you update it.
8. Email delivery, usage data and logging
8.1 Scheduled emails. Subscription emails are sent from our sending domain with your organization’s name as the sender and your chosen contact as reply-to. They contain report exports (for example PDF and an inline image), which may include Customer Data. You are responsible for choosing recipients and for the content of reports you send. Each email has a one-click unsubscribe link; once a recipient unsubscribes we stop sending them that subscription.
8.2 Activity log. We record administrative and security events in your organization’s activity log, including sign-ins, invitations, role and access changes, uploads, refreshes, deliveries and report views. Your administrators can view and export this log. Actions taken by our staff on your behalf are labeled as such.
8.3 Usage Data. We collect Usage Data to operate, secure, bill for and improve the Service, and to show you usage analytics. We may use aggregated, de-identified Usage Data that does not identify you or any person to improve and price the Service.
8.4 Alerts. We send failure alerts (for example, a failed scheduled refresh or delivery) to your Client Owners and Client Admins and may copy our own staff.
8.5 Feedback. If you send us suggestions, we may use them without obligation to you.
9. Term and termination
9.1 Term. These Terms start when you accept them and continue while you have a Plan. Plans renew automatically for successive periods of the same length unless either party cancels before the renewal date.
9.2 Cancellation by you. The Client Owner may cancel at any time by using the billing portal or by emailing [email protected]. Cancellation takes effect at the end of the current paid period unless we agree otherwise. No refund is due for the rest of the period (Section 5.9).
9.3 Termination for breach. Either party may terminate if the other materially breaches these Terms and does not cure the breach within 30 days of written notice. If you terminate for our uncured breach, we refund prepaid fees for the unused period.
9.4 Suspension. We may suspend access immediately, in whole or in part, if needed to prevent harm to the Service or others, to respond to a security incident, for non-payment under Section 5.8, or for a serious AUP violation (including PHI in Customer Content). We will tell you why and restore access once the issue is resolved.
10. Data export and deletion
10.1 Export. On request before or within 30 days after termination, we will provide a full export of your Customer Data as a single archive. It includes your organization’s records, a list of people (email, name, role, status), your activity log, and every stored PBIX version. It never includes password hashes or two-step sign-in secrets. Exports are free and delivered through a secure, time-limited download link.
10.2 Deletion. After that period ends, we delete your organization: the Underlying Engine resources holding your reports, your stored files, every database record of your organization (including its activity log), and the accounts of your users who have no other organization on the Service. We keep one minimal record that an organization was deleted (its random ID, the date, who requested it and why, and record counts), without names or people.
10.3 Backups. Deleted data may remain in encrypted backups and soft-deleted storage until those copies expire, within 35 days, and is not restored except for disaster recovery.
10.4 What we keep. We keep billing records, invoices and tax records as required by law, and minimal records of support, legal or security matters.
11. Confidentiality
Each party will protect the other’s non-public information with at least reasonable care, use it only for this agreement, and share it only with people who need it and are bound by similar duties. This does not apply to information that is public, already known, independently developed, or lawfully received from someone else. A party may disclose information when law requires, after giving notice where allowed.
12. Warranties and disclaimers
12.1 Our commitments. We will provide the Service in a professional manner, materially as described in our documentation, and maintain the security measures described in the DPA.
12.2 Disclaimer. Except as stated in 12.1, the Service is provided “as is”. We disclaim implied warranties of merchantability, fitness for a particular purpose and non-infringement to the extent the law allows. We do not warrant that the Service will be uninterrupted or error-free, that third-party data sources will stay available, or that the Underlying Engine will behave in a particular way.
12.3 Remedy. If the Service does not meet 12.1 and we cannot fix it within a reasonable time after notice, you may terminate the affected Plan and receive a refund of prepaid fees for the unused period.
13. Indemnities
13.1 By us. We will defend you against third-party claims that the Service (excluding Customer Content and the Underlying Engine) infringes their intellectual property, and pay resulting damages or settlements we approve.
13.2 By you. You will defend us against third-party claims arising from Customer Content, your data sources, your choice of recipients, or your breach of the AUP (including any PHI in Customer Content), and pay resulting damages or settlements you approve.
13.3 Process. The indemnified party must give prompt notice, reasonable cooperation and control of the defense.
14. Limitation of liability
14.1 Cap. Each party’s total liability under these Terms is limited to the fees paid or payable by Customer for the Service in the 12 months before the event giving rise to the claim.
14.2 Excluded damages. Neither party is liable for lost profits, revenue or data, or for indirect, incidental, special, consequential or punitive damages, even if warned of them.
14.3 Exceptions. The cap and exclusions do not apply to Customer’s payment obligations, either party’s indemnity obligations, breach of confidentiality, or gross negligence or willful misconduct.
15. General
15.1 Governing law and venue. These Terms are governed by the laws of the State of Arizona, without regard to conflict-of-laws rules. Disputes go to the state or federal courts in Maricopa County, Arizona.
15.2 Changes to these Terms. We may update these Terms by posting a new version and notifying the Client Owner at least 30 days before material changes take effect. Changes apply from your next renewal unless you agree sooner. If you object, you may cancel before they apply.
15.3 Notices. We send notices to the Client Owner’s email address. You send notices to [email protected].
15.4 Publicity. We will not use your name or logo as a customer reference without your permission.
15.5 Assignment. Neither party may assign these Terms without the other’s consent, except to a successor in a merger, acquisition or sale of substantially all its assets, with notice.
15.6 Force majeure. Neither party is liable for delays caused by events beyond its reasonable control, including outages of the Underlying Engine, cloud providers or the internet. This does not excuse payment obligations.
15.7 Subcontractors. We may use subprocessors and subcontractors, listed in the DPA, and remain responsible for their performance.
15.8 Export and sanctions. You will not use the Service in violation of US export controls or sanctions.
15.9 Entire agreement. These Terms and the documents they incorporate are the entire agreement on this subject. If a provision is unenforceable, the rest stays in effect. A waiver must be in writing. Sections that by their nature should survive termination (including 5, 6, 10, 11, 13, 14 and 15) survive.
15.10 Contact. Questions about these Terms: [email protected].