Legal & policies

Legal notice

HuffleLab Sàrl is a Swiss limited liability company with enterprise identification number CHE-423.645.552. Its postal address is Case postale 663, Avenue du Général-Guisan 4, 1800 Vevey 1, Switzerland. HuffleLab is not currently registered for Swiss VAT and does not charge Swiss VAT.

HuffleLab develops and supplies Fusion Toolkit, including its command-line tools, SQL Studio and locally installed AI Administrator skill. Fusion Toolkit is an independent product. HuffleLab is not affiliated with, endorsed by or sponsored by Oracle Corporation. Oracle and related marks belong to their respective owners.

Send legal, privacy and product enquiries through the contact form below.

Business terms

These terms form the agreement between HuffleLab Sàrl (“HuffleLab”, “we”) and the company or other organisation obtaining or using Fusion Toolkit (“Customer”, “you”). They apply to trials, accounts, purchases, downloads, licences, updates and support.

1. Business authority and acceptance

Fusion Toolkit is offered for business and professional use, not consumer use. By creating an account, accepting these terms at checkout, downloading, installing or using the Toolkit, you confirm that you have authority to bind the Customer. If mandatory law treats you as a consumer despite that statement, rights that cannot lawfully be waived remain unaffected.

2. Licence and permitted use

For the applicable trial or paid term, HuffleLab grants the Customer a limited, non-exclusive, non-transferable and non-sublicensable licence to install and use the supplied Toolkit on infrastructure controlled by the Customer for its internal business operations. A Customer may allow its personnel and contractors to use the Toolkit on its behalf, provided the Customer remains responsible for their compliance.

You must not resell, rent, sublicense, publish or redistribute the Toolkit or licence key; remove proprietary notices; bypass licence or access controls; use the Toolkit unlawfully; or reverse engineer, decompile or disassemble it except to the limited extent a mandatory law expressly permits. You are responsible for protecting account credentials, licence keys, local configuration and backups.

3. Trials, subscriptions, renewal and cancellation

• A free trial ends automatically at the stated expiry. It does not create a charge or convert automatically into a paid plan.
• Paid subscriptions are billed in advance for the monthly or annual period selected in the order and renew for the same period until cancelled.
• You may cancel through the billing portal before the next renewal. Access and included support continue until the end of the paid period; cancellation does not retrospectively refund that period.
• Fees already paid are non-refundable except where the order says otherwise or mandatory law requires a refund. We will honour any non-waivable cancellation, withdrawal or refund right.
• Prices, currency, plan scope and taxes are those shown at checkout. HuffleLab currently does not charge Swiss VAT. The Customer remains responsible for any applicable self-assessed, withholding or similar taxes.

Documentation-led Self-Service and Toolkit + Support have the inclusions shown on the pricing and checkout pages. Model-provider accounts, usage, credentials and provider support are never included. We may change future renewal pricing or plan scope on reasonable advance notice; you may cancel before the change takes effect.

4. Intellectual property and feedback

HuffleLab and its licensors retain all rights in the Toolkit, documentation, website, trademarks and updates. No ownership transfers to the Customer. If you provide suggestions or feedback, HuffleLab may use them without restriction or payment, without identifying you publicly.

5. Oracle, third-party services and AI-assisted use

The Toolkit interacts with systems and APIs selected by the Customer, including Oracle Cloud. Availability and compatibility may change when those third parties change their services. The Customer is responsible for its Oracle licences, provider contracts, lawful instructions, access rights and data.

Fusion Toolkit is fully local. It does not send commands, credentials, prompts, output, ERP records, telemetry or other operational data to HuffleLab. AI Administrator works directly from the Customer’s environment with a model provider selected and controlled by the Customer; HuffleLab does not host or proxy the model connection and never receives that traffic. Model output may be incomplete or incorrect. The Customer must review proposed actions, use least-privilege access, keep human confirmation enabled where appropriate, and comply with the chosen provider’s terms and privacy settings.

6. Updates, support and availability

During an active entitlement, HuffleLab may provide corrections, security updates and improvements. We may alter or discontinue features when reasonably necessary for security, law, third-party changes or product development. Direct support is provided only where the selected plan includes it and covers product installation, configuration and troubleshooting—not custom development, Oracle consulting or third-party provider support.

7. Warranty and liability

To the maximum extent permitted by law, the Toolkit and website are provided “as is” and “as available”. HuffleLab does not promise uninterrupted or error-free operation, a particular business result, or continued compatibility with every third-party service. The Customer is responsible for testing commands, reviewing output, protecting production systems and maintaining recovery procedures.

To the maximum extent permitted by law, HuffleLab is not liable for indirect, incidental, special or consequential loss, loss of profit, revenue, data, opportunity or business interruption. HuffleLab’s aggregate liability arising from the agreement is limited to the fees the Customer paid for Fusion Toolkit in the 12 months before the event giving rise to the claim.

8. Suspension and termination

You may stop using the Toolkit at any time and may cancel a subscription as described above. HuffleLab may suspend access for non-payment, security risk or material breach, and may terminate for an uncured material breach after reasonable notice where cure is possible. When the licence or agreement ends, use must stop and distributed copies and keys must be deleted, except for records lawfully retained. Payment obligations, intellectual-property provisions, liability limits and provisions intended by their nature to survive remain in effect.

9. Changes, law and courts

We may update these terms for legal, security or product reasons. We will identify the effective date and give reasonable notice of material changes affecting an active paid term. Continued use after the change takes effect constitutes acceptance; if you do not agree, stop using the Toolkit and cancel before renewal.

Swiss law governs the agreement, excluding its conflict-of-laws rules. The courts at HuffleLab’s registered office in Vevey, Canton of Vaud, have jurisdiction, subject to any venue or protection that mandatory law requires.

Privacy notice

HuffleLab Sàrl is the controller responsible for the personal data described here. This notice follows the transparency principles of the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU and UK General Data Protection Regulations.

Website processing and the local Toolkit are different

Data we receive

• Account and company data: name, business email, company, login details, account status and preferences.
• Licence and support records: licence type and validity, activation and download records, support entitlement, tickets, correspondence and troubleshooting information you choose to provide.
• Billing data: billing name, company, address, tax identifier if supplied, order and invoice details, and Stripe customer, subscription, payment and invoice references. HuffleLab does not receive or store complete payment-card numbers.
• Security and technical records: IP address, browser and device information, timestamps, requested URLs, authentication and account events, fraud signals, and server or application logs.
• Consent-based analytics: pages viewed, referrer, approximate region, device/browser characteristics and analytics identifiers, but only after the visitor opts in.

We obtain this data from you, your organisation, the device and browser used to access the site, and service providers such as Stripe when they confirm a transaction or subscription event.

Why we use it

Accounts and licences	To register users, issue and validate licences, provide downloads and perform the contract.
Orders and billing	To take payment, administer subscriptions, prevent duplicate fulfilment, keep accounting evidence and meet legal obligations.
Support	To answer requests, confirm entitlement, diagnose issues and perform included support.
Security	To protect accounts and systems, prevent abuse and fraud, investigate incidents and maintain reliable services.
Analytics	To understand opted-in website use and improve content, based on consent.
Legal operations	To establish or defend claims, enforce agreements and respond to lawful authorities.

Under EU or UK GDPR, the corresponding legal bases are performance of a contract, compliance with legal obligations, HuffleLab’s legitimate interests in secure and effective B2B operations, and consent for optional analytics. Where we rely on legitimate interests, we balance them against the individual’s rights. Data required to create an account, provide a licence or complete an order is contractual; without it we may be unable to provide that service.

Recipients and international transfers

We disclose only what is needed to service providers supporting website hosting, security, backups, email and support; Stripe for checkout, billing and fraud prevention; WPMU DEV/Incsub and Matomo-related services for consented website analytics; professional advisers; and public authorities where law requires. We do not sell personal data.

These recipients may process data in Switzerland, the EEA, the United Kingdom, the United States and other countries identified in their current service notices. Where the destination does not provide legally recognised adequate protection, we use applicable contractual safeguards, such as recognised standard contractual clauses and Swiss or UK supplements, together with appropriate technical and organisational measures. Contact us for information about safeguards relevant to your data.

How long we keep it

• Accounting, invoice and transaction evidence: ten years, in line with Swiss record-keeping obligations.
• Accounts, subscriptions and licences: while active and afterward for the period needed to handle renewals, disputes, security, limitation periods and legal obligations.
• Support records: while the request is active and afterward as reasonably needed to preserve the solution history, manage disputes and improve support.
• Security logs: for the period needed to detect and investigate abuse, ordinarily no longer than 12 months unless an incident or legal claim requires longer preservation.
• Analytics data: no longer than 13 months, subject to the configured analytics service and earlier deletion or de-identification where practicable after consent is withdrawn.

We delete or anonymise data when the relevant purpose and retention need end. Backups expire on protected rotation schedules.

Your choices and rights

Subject to applicable law, you may ask whether we process your personal data and request access, correction, deletion, restriction, objection or a portable copy. You may withdraw analytics consent at any time through the cookie settings without affecting earlier lawful processing.

We may need to verify identity and may retain data where law or overriding legitimate grounds require it. Automated checks may prevent duplicate trials or active subscriptions; contact us if you want a person to review the result. We do not otherwise use solely automated decisions that produce legal or similarly significant effects.

You may complain to the Swiss Federal Data Protection and Information Commissioner. If EU or UK law applies, you may also contact the supervisory authority where you live or work, including the UK Information Commissioner’s Office.

Security and updates

We use access controls, encryption in transit, restricted credentials, backups, monitoring and service-provider controls appropriate to the nature of the data. No internet service can guarantee absolute security. We update this notice when processing changes materially and show the new version and effective date at the top of this page.

Cookies and similar technologies

Cookies are small identifiers stored by a browser. Some are necessary for the website, account and checkout to work. Analytics storage is optional and must remain off until the visitor opts in through the owner-managed consent banner.

Necessary storage

• WordPress login and security: session-test, authenticated-session and security cookies such as wordpress_test_cookie, wordpress_logged_in_* and wordpress_sec_*. They normally last for the session, two days, or up to 14 days when “Remember me” is selected.
• Account preferences: WordPress preference cookies such as wp-settings-*, which may last up to one year for signed-in users.
• Forms and checkout: Forminator, anti-forgery, transaction-state and Stripe security/fraud-prevention storage used to submit forms and complete a requested payment. Duration ranges from the session to the period Stripe needs for security and fraud prevention.
• Hosting and protection: short-lived routing, caching, load-balancing and abuse-prevention identifiers used by WordPress and WPMU DEV hosting.

Necessary storage is not controlled by the optional-consent switch. Blocking it in the browser may prevent sign-in, forms or checkout from working.

Optional WPMU DEV and Matomo analytics

After opt-in, WPMU DEV/Matomo analytics may use identifiers such as Matomo _pk_id* (up to 13 months) and _pk_ses* (about 30 minutes), or equivalent storage disclosed in the consent panel. The resulting events help us understand page use and improve navigation and content. We do not use analytics storage before consent.

You can reject analytics as clearly as you can accept it, continue using the site with necessary storage only, and later change or withdraw your choice through the cookie-settings control in the site footer. Browser deletion also clears stored choices and identifiers.

Contact enquiry

Use this form for legal, privacy, billing or product enquiries. For a data-protection request, choose “General Inquiry” and describe the request in the message.

When contacting us, please do not send Oracle credentials, private keys, complete payment-card data, or unredacted ERP records.